CN105790945B - An authentication method, device and system for realizing unique user identity authentication - Google Patents

Abstract

The invention discloses an authentication method for realizing unique identity authentication of a user. After an authentication device is connected to a mobile terminal, it authenticates with an authentication platform. After passing the authentication, it logs in the client of the authentication device on the mobile terminal, and the authentication device The unique identity authentication information and APP application information are sent to the authentication platform, so that the authentication platform determines the identity identification information shared with the APP application according to the unique identity authentication information, and sends it to the APP platform, and the APP platform issues the corresponding login information to the client to log in the APP application; the present invention also discloses an authentication device and system for realizing unique user identity authentication.

Description

An authentication method, device and system for realizing unique user identity authentication

technical field

The invention relates to network security technology, in particular to an authentication method, device and system for realizing unique user identity authentication.

Background technique

The current mobile terminal authentication system of operators mostly adopts (global) subscriber identity card (U)SIM authentication, and this authentication mode is mainly for user card authentication. Better solved the "user identity" authentication problem. However, with the advent of the era of multi-device, multi-card and multi-number users, (U)SIM card authentication can no longer solve the problem of "user identity" authentication. The web needs a whole new way of uniquely identifying users.

In addition, with the advent of the 4G era, the mobile Internet industry has entered a stage of rapid development, and various APPs installed on smart terminals (hereinafter referred to as terminals) are also continuously enriching people's work and life. Identification methods and authentication systems emerge in endlessly. Many common popular apps have a large number of users and have their own independent user identity authentication schemes. According to user usage habits, users need to memorize a large number of different personal account information. The more applications there are, the less likely users are to remember relevant user names and passwords. This not only wastes network resources, but also brings unnecessary frequent memory to users. Trouble. How to realize fast authentication under the premise of ensuring the user's personal privacy is particularly important.

The current authentication system for Internet applications cannot solve the needs of users for fast authentication. To ensure security, such as instant messaging platforms, social platforms, etc., users need to re-register or log in when users reinstall the system or change mobile phones to log in again. When the user frequently uses an application and forgets the password, the method of retrieving the password will also reduce the user experience.

Contents of the invention

In order to solve the existing technical problems, the present invention mainly provides an authentication method, device and system for realizing unique user identity authentication.

Technical scheme of the present invention is realized like this:

The present invention provides an authentication method for realizing unique identity authentication of a user, and the method includes:

After the authentication device is connected to the mobile terminal, it authenticates with the authentication platform, and after passing the authentication, logs in to the client of the authentication device on the mobile terminal;

The authentication device sends the unique identity authentication information and the information of the APP application to the authentication platform, so that the authentication platform determines the identification information shared with the APP application according to the unique identity authentication information, and sends it to the APP platform, and the APP platform issues a corresponding The login information to the client is used to log in to the APP.

In the above solution, the method further includes: the authentication device stores the device ID value assigned by the authentication platform to the authentication device, stores the signing information on the authentication platform, and sets a password through interaction with the authentication platform.

In the above solution, the authentication with the authentication platform is performed, and after the authentication is passed, logging in to the client of the authentication device on the mobile terminal includes: the authentication device receives the password input by the user, and sends a message carrying the device ID value and password to the authentication platform. The first authentication request is to receive the authentication result of the authentication platform according to the device ID value and password. When the authentication result is that the authentication is passed, search for the corresponding client in the current program of the mobile terminal. If found, log in to the client of the authentication device. If If not found, run the installation package of the client. After the installation is successful, log in to the client of the authentication device.

In the above solution, the authentication device sends the unique identity authentication information and APP application information to the authentication platform, including: the authentication device displays a prompt whether it is currently a bound mobile terminal through the mobile terminal, and when receiving a bound mobile terminal When selecting a terminal, the authentication device sends a second authentication request to the authentication platform, the second authentication request carries the device ID value and/or the current mobile terminal number, and the information of the APP application authenticated by the authentication device, and the authentication device also Encrypt the device ID value and/or current mobile terminal number, and the information of the APP application; when receiving the selection of a mobile terminal that is not bound, display a prompt whether to bind the current mobile terminal; When selecting the current mobile terminal, the authentication device obtains the IMSI number or mobile terminal number in the subscriber identity card SIM of the current mobile terminal, and sends a second authentication request to the authentication platform, and the second authentication request carries the device ID value, the IMSI number or mobile terminal number, binding indication, and information of the APP application; when receiving the selection of not binding the current mobile terminal, the authentication device sends a second authentication request to the authentication platform, and the The second authentication request carries the device ID value and the APP application information.

In the above-mentioned scheme, the method also includes:

When the authentication platform determines that the identification information shared with the corresponding APP application is the mobile terminal number according to the information of the APP application carried in the second authentication request, if the second authentication request does not carry a binding instruction and has a mobile terminal number, then send the The APP platform sends the information of the mobile terminal number and APP application;

If the second authentication request does not carry a binding indication, and there is no mobile terminal number and IMSI number, find the corresponding bound mobile terminal number in the subscription information through the carried device ID value, and send the mobile terminal number to the APP platform. Describe the mobile terminal number and APP application information;

If the second authentication request does not carry a binding instruction, and there is no mobile terminal number but an IMSI number, then use the IMSI number to search the corresponding mobile terminal number from the home subscriber server HSS, and after finding the corresponding mobile terminal number, Send the mobile terminal number and the information of the APP application to the APP platform;

If the binding instruction is carried in the second authentication request, store the carried mobile terminal number in the subscription information corresponding to the device ID value, and send the mobile terminal number and APP application information to the APP platform, or, through The IMSI number searches for the corresponding mobile terminal number from the HSS, and after finding the corresponding mobile terminal number, stores the mobile terminal number in the contract information corresponding to the device ID value, and sends the mobile terminal number and APP application information;

The APP platform finds the login information of the mobile terminal number corresponding to the APP application according to the information of the APP application, forwards the login information to the authentication platform, and the authentication platform sends the login information to the corresponding client , used to log in the APP.

In the above-mentioned scheme, the method also includes:

When the authentication platform determines that the identity information shared with the corresponding APP application is the device ID value according to the information of the APP application carried in the second authentication request, it sends the device ID value and the information of the APP application carried in the second authentication request to the APP. platform; the APP platform finds the login information corresponding to the device ID value of the APP application according to the information of the APP application, forwards the login information to the authentication platform, and the authentication platform sends the login information to The corresponding client is used for logging in the APP.

In the above solution, the APP platform includes: an operator's own APP application platform and a third-party APP application platform.

The present invention provides an authentication method for realizing unique identity authentication of a user, and the method includes:

The client of the authentication device is allowed to log in after the authentication device and the authentication platform are authenticated, and the client interface displays a list of APP applications bound to the authentication device. After receiving the message that the user clicks on the APP application in the list, confirm The mobile terminal does not have the APP installed, and the installation package of the APP is downloaded and installed through the authentication platform;

The client of the authentication device receives the login information corresponding to the APP application issued by the APP platform through the authentication platform, calls the interface of the APP application, puts the login information into the APP application, and sends the APP application to the APP application. The platform initiates a login request.

In the above solution, the method further includes: the client of the authentication device records the login information corresponding to the APP application, and when the authentication device is connected to the mobile terminal and starts the APP application again, the client of the authentication device directly records the The login information is put into the APP application.

In the solution above, the method further includes: when the client of the authentication device detects that the authentication device is disconnected from the mobile terminal, clearing all operation information related to the authentication device in the mobile terminal.

The present invention provides an authentication method for realizing unique identity authentication of a user, and the method includes:

The authentication platform authenticates the authentication device connected to the mobile terminal. After the authentication is passed, the authentication platform receives the unique identity authentication information and APP application information;

The authentication platform determines the identification information shared with the APP application according to the unique identity authentication information, and sends it to the APP platform, and forwards the corresponding login information issued by the APP platform to the client of the authentication device for logging into the APP application .

In the above solution, the authentication platform for authenticating the authentication device connected to the mobile terminal includes:

The authentication platform stores the signing information of the authentication device, interacts with the authentication device to set the password of the authentication device, receives the first authentication request carrying the device ID value and password sent by the authentication device, and performs authentication on the authentication device according to the device ID value and password. certified.

In the above solution, the authentication platform receiving unique identity authentication information and APP application information includes: the authentication platform receiving a second authentication request that carries unique identity authentication information and APP application information sent by an authentication device, and the unique identity authentication information includes : The device ID value and/or mobile terminal number of the authenticated device.

In the above solution, the authentication platform determines the identification information shared with the APP application according to the unique identity authentication information, and sends it to the APP platform, and forwards the corresponding login information issued by the APP platform to the client of the authentication device, including :

When the authentication platform receives the second authentication request sent by the authentication device, and according to the APP application information carried in the second authentication request, determines that the identity information shared with the corresponding APP application is the mobile terminal number, if the second authentication request does not carry the binding Instruct and have a mobile terminal number, then send the mobile terminal number and APP application information to the APP platform;

If the second authentication request does not carry a binding indication, and there is no mobile terminal number and IMSI number, find the corresponding bound mobile terminal number in the subscription information through the carried device ID value, and send the mobile terminal number to the APP platform. Describe the mobile terminal number and APP application information;

If the second authentication request does not carry a binding instruction and does not have a mobile terminal number but has an IMSI number, use the IMSI number to search for the corresponding mobile terminal number from the HSS, and after finding the corresponding mobile terminal number, send to the The APP platform sends the information of the mobile terminal number and APP application;

If the binding instruction is carried in the second authentication request, store the carried mobile terminal number in the subscription information corresponding to the device ID value, and send the mobile terminal number and APP application information to the APP platform, or, through The IMSI number searches for the corresponding mobile terminal number from the HSS, and after finding the corresponding mobile terminal number, stores the mobile terminal number in the contract information corresponding to the device ID value, and sends the mobile terminal number and APP application information;

The APP platform finds the login information of the mobile terminal number corresponding to the APP application according to the information of the APP application, the authentication platform receives the login information sent by the APP platform, and sends the login information to the client of the authentication device end.

In the above solution, the authentication platform determines the identification information shared with the APP application according to the unique identity authentication information, and sends it to the APP platform, and forwards the corresponding login information issued by the APP platform to the client of the authentication device, including : The authentication platform sends the device ID value and APP application information carried in the second authentication request to the APP platform; the APP platform finds the login information corresponding to the device ID value of the APP application according to the information of the APP application, the authentication platform receives the login information sent by the APP platform, and sends the login information to the client side of the authenticated device.

In the above solution, the method further includes: after the authentication platform receives the application from the client for downloading the installation package of the APP application, returning the download address of the installation package of the APP application in the cloud storage to the client.

The present invention provides an authentication device, which includes: a device authentication module and an APP authentication module; wherein,

The device authentication module is used to authenticate with the authentication platform after being connected to the mobile terminal, and log in to the client of the authentication device on the mobile terminal after passing the authentication;

The APP authentication module is used to send the unique identity authentication information and APP application information to the authentication platform, so that the authentication platform determines the identity identification information shared with the APP application according to the unique identity authentication information, and sends it to the APP platform, and the APP The platform issues corresponding login information to the client for logging into the APP.

In the above solution, the device authentication module is specifically configured to receive the password input by the user, send the first authentication request carrying the device ID value and password to the authentication platform, and receive the authentication result of the device ID value and password according to the authentication platform. When the result is that the authentication is passed, search for the corresponding client in the current program of the mobile terminal. If found, log in to the client of the authentication device. If not, run the installation package of the client. After the installation is successful, log in to the client of the authentication device. .

In the above solution, the APP authentication module is specifically used to display a prompt of whether the mobile terminal is currently a bound mobile terminal through the mobile terminal, and when receiving the selection of the bound mobile terminal, send a second authentication request to the authentication platform, The second authentication request carries the device ID value and/or the current mobile terminal number, and the information of the APP application authenticated by the authentication device; when receiving the selection of a mobile terminal that is not bound, it displays whether to bind the current mobile terminal prompt, when receiving the option to bind the current mobile terminal, obtain the IMSI number or mobile terminal number in the SIM card of the current mobile terminal, and send a second authentication request to the authentication platform, and the second authentication request carries the device ID value , the IMSI number or mobile terminal number, the binding indication, and the information of the APP application; when receiving an option not to bind the current mobile terminal, send a second authentication request to the authentication platform, and the second authentication request Carry the device ID value and the information of the APP application.

The present invention provides a client, which includes: an interface module, a download module, and a login module; wherein,

The interface module is used to allow login after the authentication device and the authentication platform pass the authentication, and display a list of APP applications bound to the authentication device on the client interface;

The download module is used to determine that the mobile terminal has not installed the APP application after receiving the message that the user clicks on the APP application in the list, and download and install the installation package of the APP application through the authentication platform;

The login module is used to receive the login information corresponding to the APP application issued by the APP platform through the authentication platform, call the interface of the APP application, put the login information into the APP application, and send the APP application to the APP application by the APP application. The platform initiates a login request.

In the above solution, the client further includes: an information storage module, configured to record the login information corresponding to the APP application, and when the authentication device is connected to the mobile terminal and the APP application is started again, the login information is directly sent to the login module.

In the solution above, the client further includes: an information clearing module, configured to clear all operation information related to the authentication device in the mobile terminal when it is detected that the authentication device is disconnected from the mobile terminal.

The present invention provides an authentication platform, which includes: a first authentication module and a second authentication module; wherein,

The first authentication module is used for authenticating the authentication device connected to the mobile terminal;

The second authentication module is used to receive the unique identity authentication information and the information of the APP application, determine the identity identification information shared with the APP application according to the unique identity authentication information, and send it to the APP platform, and send the corresponding login information issued by the APP platform. The information is forwarded to the client of the authentication device for logging into the APP.

In the above solution, the authentication platform further includes: a contract information storage module, configured to store the contract information of the authentication device.

In the above solution, the first authentication module is specifically configured to interact with the authentication device to set the password of the authentication device, receive the first authentication request carrying the device ID value and password sent by the authentication device, and pair the The authentication device performs authentication.

In the above solution, the second authentication module is specifically configured to receive the second authentication request sent by the authentication device, and determine that the identification information shared with the corresponding APP application is the mobile terminal number according to the information of the APP application carried in the second authentication request. , if the second authentication request does not carry a binding indication and has a mobile terminal number, then send the mobile terminal number and APP application information to the APP platform;

If the second authentication request does not carry a binding indication, and there is no mobile terminal number and IMSI number, find the corresponding bound mobile terminal number in the subscription information through the carried device ID value, and send the mobile terminal number to the APP platform. Describe the mobile terminal number and APP application information;

If the second authentication request does not carry a binding instruction and does not have a mobile terminal number but has an IMSI number, use the IMSI number to search for the corresponding mobile terminal number from the HSS, and after finding the corresponding mobile terminal number, send to the The APP platform sends the information of the mobile terminal number and APP application;

If the binding instruction is carried in the second authentication request, store the carried mobile terminal number in the subscription information corresponding to the device ID value, and send the mobile terminal number and APP application information to the APP platform, or, through The IMSI number searches for the corresponding mobile terminal number from the HSS, and after finding the corresponding mobile terminal number, stores the mobile terminal number in the contract information corresponding to the device ID value, and sends the mobile terminal number and APP application information;

Afterwards, receiving the login information of the mobile terminal number corresponding to the APP application sent by the APP platform, and sending the login information to the client of the authentication device for the login of the APP application.

In the above solution, the second authentication module is specifically configured to receive the second authentication request sent by the authentication device, and determine the identity information shared with the corresponding APP application as the device ID value according to the information of the APP application carried in the second authentication request. , send the device ID value and APP application information carried in the second authentication request to the APP platform; receive the login information of the device ID value corresponding to the APP application sent by the APP platform, and send the login information to The client side of the authentication device is used for the login of the APP application.

In the above solution, the authentication platform further includes: a cloud storage module, which is used to store the installation package of the APP application displayed by the client, after receiving the application from the client for downloading the installation package of the APP application, the installation package of the APP application The download address in cloud storage is returned to the client.

In the above solution, the authentication platform further includes: an HSS query module, which is used to search for the corresponding mobile terminal number according to the IMSI number.

The present invention provides an authentication system for realizing unique user identity authentication, the system includes: an authentication device, a client, and an authentication platform; wherein,

The authentication device is used to authenticate with the authentication platform after connecting to the mobile terminal, log in to the client of the authentication device on the mobile terminal after the authentication is passed, and send the unique identity authentication information and APP application information to the authentication platform ;

The client is used to display a list of APP applications bound to the authentication device. After receiving the message that the user clicks on the APP application in the list, it is determined that the APP application is not installed on the mobile terminal, and the APP application is downloaded and installed through the authentication platform. The installation package of the APP application; receiving the login information corresponding to the APP application issued by the APP platform through the authentication platform; calling the interface of the APP application, putting the login information into the APP application, and the APP application Initiate a login request to the APP platform;

The authentication platform is used to authenticate the authentication device connected to the mobile terminal. After the authentication is passed, it receives the unique identity authentication information and the information of the APP application, and determines the identity identification information shared with the APP application according to the unique identity authentication information, and Send it to the APP platform, and forward the corresponding login information issued by the APP platform to the client of the authentication device.

The present invention provides an authentication method, device and system for realizing the user's unique identity authentication. After the authentication device is connected to the mobile terminal, it authenticates with the authentication platform. Identity authentication information and APP application information are sent to the authentication platform, so that the authentication platform determines the identity identification information shared with the APP application according to the unique identity authentication information, and sends it to the APP platform, and the APP platform sends the corresponding login information to The client is used to log in the APP application; in this way, the authentication between the authentication device and the authentication platform is realized, and the problem of interactive sharing of authentication information between the authentication platform and other APP platforms is successfully solved, which is a better solution It solves the problem that users need to frequently input login information when using multiple APPs, ensures the security of login information and the privacy of users, and avoids the problem that users will forget their passwords.

Description of drawings

FIG. 1 is a schematic flow diagram of an authentication method for realizing unique user identity authentication according to Embodiment 1 of the present invention;

FIG. 2 is a schematic flowchart of an authentication method for realizing unique user identity authentication in Embodiment 2 of the present invention;

FIG. 3 is a schematic flowchart of an authentication method for realizing unique user identity authentication in Embodiment 3 of the present invention;

FIG. 4 is a schematic diagram of the composition and structure of the authentication device provided by Embodiment 4 of the present invention;

FIG. 5 is a schematic diagram of the composition and structure of the client provided by Embodiment 5 of the present invention;

FIG. 6 is a schematic diagram of the composition and structure of the authentication platform provided by Embodiment 6 of the present invention;

FIG. 7 is a schematic diagram of the composition and structure of an authentication system for implementing unique user identity authentication according to Embodiment 7 of the present invention.

Detailed ways

In the embodiment of the present invention, after the authentication device is connected to the mobile terminal, it authenticates with the authentication platform. After passing the authentication, it logs in to the client of the authentication device on the mobile terminal, and the authentication device sends the unique identity authentication information and the information of the APP application Send it to the authentication platform, so that the authentication platform determines the identification information shared with the APP application according to the unique identity authentication information, and sends it to the APP platform, and the APP platform sends the corresponding login information to the client for login The APP application. Here, the authentication device may be an "and" key.

The present invention will be further described in detail below with reference to the accompanying drawings and specific embodiments.

Embodiment one

A kind of authentication method that realizes user's unique identity authentication in this embodiment, as shown in Figure 1, this method comprises the following several steps:

Step 101: the authentication device is connected to the mobile terminal;

Specifically, the authentication device can be connected to the mobile terminal through an earphone jack or a USB interface, and can also be connected to the mobile terminal through short-distance technologies such as Bluetooth and WiFi when wireless access is supported;

Here, the authentication device has hardware encryption and calculation capabilities, and can at least provide multiple operation modes such as key touch, voiceprint entry, and fingerprint recognition, and can be combined with a mobile terminal keyboard and a corresponding client to provide password input capabilities;

The authentication device has a built-in installation package of the supporting client, and the supporting client supports logging into the password input interface, supports storing user APP usage records, supports presenting a list of APP applications that have a cooperative or binding relationship with the authentication device, and other required bindings function of the operation.

Before this step, the method also includes: when the user purchases the authentication device, the authentication device stores the device ID value assigned by the authentication platform to the authentication device, and stores the signing information on the authentication platform, and the signing information includes: the user's real name, Identity information, device ID value, mobile terminal number to be bound by the user, etc. Among them, there can be multiple mobile terminal numbers. If there are multiple mobile terminal numbers, the main number needs to be specified. The authentication device also sets a password through interaction with the authentication platform. The password can be voiceprint, fingerprint, number, character, etc.;

The device ID value can be selected as an ID value in the form of a mobile phone number or a random sequence of ID values. If the ID value in the form of a mobile phone number is selected and a primary number is bound, the device ID value will become the user's secondary number. You can choose whether to receive calls or text messages from the secondary number (normal text messages must be selected by default). When the operator of the authentication platform cooperates with the APP platform of the APP application, if the user does not inform the APP platform number, the secondary number will be used as identification information shared with the APP application, which can facilitate the user to receive text messages or incoming calls sent by the APP application to the secondary number during subsequent use, such as SMS password verification and other information.

Step 102: the authentication device authenticates with the authentication platform, and logs in to the client of the authentication device on the mobile terminal after passing the authentication;

Specifically, after the authentication device is connected to the mobile terminal, it receives the password input by the user, sends the first authentication request carrying the device ID value and password to the authentication platform, and receives the authentication result of the authentication platform based on the device ID value and password. When the authentication is passed, search for the corresponding client in the current program of the mobile terminal. If found, log in to the client of the authentication device. If not found, run the installation package of the built-in client of the authentication device. client. Here, the authentication device may also encrypt the device ID value and password in the first authentication request, and send the first authentication request to the authentication platform after encryption. The password input by the user may be that after the authentication device is connected to the mobile terminal, the password input window is displayed on the mobile terminal interface, and the user enters the password on the mobile terminal, or the user touches the keys provided by the authentication device, enters the voiceprint, or fingerprints. Inputting passwords in various operation modes such as identification; the login refers to logging in to the client side of the authentication device using the ID value of the authentication device.

Step 103: When starting the APP application and choosing to use the authentication device for authentication, the authentication device sends the unique identity authentication information and the information of the APP application to the authentication platform;

In this step, the unique identity authentication information includes: device ID value and/or mobile terminal number;

The authentication device can also encrypt the unique identity authentication information and the information of the APP application, and send it to the authentication platform after encryption;

The APP application includes: the APP application presented by the client and other non-client presented APP applications on the desktop; the APP application presented by the client is the APP application recorded by the client and bound to the authentication device;

Specifically, when the APP application is started and the authentication device is selected for authentication, the authentication device will display a prompt indicating whether it is currently a bound mobile terminal through the mobile terminal. Send a second authentication request, the second authentication request carries the device ID value and/or the current mobile terminal number, and the information of the APP application, and the authentication device can also check the device ID value and/or the current mobile terminal number, and the information of the APP application is encrypted; when receiving the selection of a mobile terminal that is not bound, a prompt indicating whether to bind the current mobile terminal is displayed; when receiving the selection of binding the current mobile terminal, the authentication device obtains the current The IMSI number or mobile terminal number in the SIM card of the mobile terminal sends a second authentication request to the authentication platform, and the second authentication request carries the device ID value, the IMSI number or mobile terminal number, a binding indication, and the APP application information; when receiving the selection of not binding the current mobile terminal, the authentication device sends a second authentication request to the authentication platform, and the second authentication request carries the device ID value and the information of the APP application.

Step 104: The authentication platform determines the identification information shared with the APP application according to the unique identity authentication information, and sends it to the APP platform, and the APP platform sends corresponding login information to the client for logging into the APP application;

Here, the shared identification information is identification information corresponding to the user's login information agreed upon by the authentication platform and the APP application, such as: mobile terminal number, device ID value, etc.;

Specifically, when the authentication platform determines that the identification information shared with the corresponding APP application is the mobile terminal number according to the APP application information carried in the second authentication request, if the mobile terminal number is included in the second authentication request that does not carry the binding instruction, Then send the mobile terminal number and APP application information to the APP platform; if there is no mobile terminal number and IMSI number in the second authentication request that does not carry the binding indication, then the carried device ID value is included in the subscription information Find the corresponding bound mobile terminal number, and send the mobile terminal number and APP application information to the APP platform; if there is no mobile terminal number but an IMSI number in the second authentication request that does not carry the binding indication, then pass The IMSI number searches the HSS for the corresponding mobile terminal number, and after finding the corresponding mobile terminal number, sends the mobile terminal number and APP application information to the APP platform; if the second authentication request carries a binding indication , then store the carried mobile terminal number into the subscription information corresponding to the device ID value, send the mobile terminal number and APP application information to the APP platform, or search the corresponding mobile terminal number from the HSS through the IMSI number , after finding the corresponding mobile terminal number, storing the mobile terminal number in the contract information corresponding to the device ID value, and sending the mobile terminal number and APP application information to the APP platform; then, the APP The platform finds the login information of the mobile terminal number corresponding to the APP application according to the information of the APP application, forwards the login information to the authentication platform, and the authentication platform sends the login information to the corresponding client, For the login of the APP application;

When the authentication platform determines that the identity information shared with the corresponding APP application is the device ID value according to the information of the APP application carried in the second authentication request, it sends the device ID value and the information of the APP application carried in the second authentication request to the APP. platform; the APP platform finds the login information corresponding to the device ID value of the APP application according to the information of the APP application, forwards the login information to the authentication platform, and the authentication platform sends the login information to The corresponding client is used for logging in the APP.

Here, the APP platform includes: an operator's own APP platform and a third-party APP platform.

Embodiment two

A kind of authentication method that realizes user's unique identity authentication in this embodiment, as shown in Figure 2, this method comprises the following several steps:

Step 201: The client of the authentication device is allowed to log in after the authentication device and the authentication platform pass the authentication, and the client interface displays a list of APP applications bound to the authentication device, and receives a message that the user clicks on the APP application in the list After that, it is determined that the mobile terminal has not installed the APP application, and the installation package of the APP application is downloaded and installed through the authentication platform;

Specifically, the client of the authentication device allows login after the authentication device is connected to the mobile terminal and passed the authentication with the authentication platform, and displays a list of APP applications bound to the authentication device on the client interface. After the message of the APP application, check whether the APP application is installed in the current mobile terminal, and when it is determined that the APP application is not installed, apply to the authentication platform for downloading the installation package of the APP application, and receive the return of the APP application from the authentication platform. The download address of the installation package of the APP application in the cloud storage, download and install the APP application through the download address; the list of APP applications bound to the authentication device includes the operator's own APP applications, such as: Fetion, 139 Mailbox, He Caiyun, etc. can also include third-party APP applications according to the cooperation situation, such as: WeChat, Weibo, etc. Users can check the operator's own APP application or the third-party APP that has cooperated with the operator according to their own needs Application, adding to the list, the user can also add a new APP application to the list, the new APP application needs to be pre-bound with the authentication platform and authentication equipment to share identification information, such as: mobile terminal number, device ID value, etc. .

In this step, if the client side of the authentication device determines that the mobile terminal has installed the APP application clicked by the user or determines that the user clicks the APP application not displayed on the client side, step 202 is directly performed.

Step 202: The client of the authentication device receives the login information corresponding to the APP application issued by the APP platform through the authentication platform;

Step 203: The client of the authentication device invokes the interface of the APP application, puts the login information into the APP application, and the APP application initiates a login request to the APP platform;

The method also includes: the client of the authentication device records the login information corresponding to the APP application, and when the authentication device is connected to the mobile terminal and starts the APP application again, the client of the authentication device directly puts the login information into The APP application;

In addition, when the client of the authentication device detects that the authentication device is disconnected from the mobile terminal, it clears all operation information related to the authentication device in the mobile terminal. When using it, there will be no traces of use in other people's mobile phones.

Embodiment three

A kind of authentication method of this embodiment realizes user's unique identity authentication, as shown in Figure 3, this method comprises the following several steps:

Step 301: the authentication platform authenticates the authentication device connected to the mobile terminal;

Specifically, the authentication platform stores the signing information of the user when purchasing the authentication device. The signing information includes: the user's real name, identity information, device ID value, mobile terminal number to be bound by the user, etc. Set the password of the authentication device interactively, receive the first authentication request carrying the device ID value and password sent by the authentication device, and authenticate the authentication device according to the device ID value and password.

In this step, when the device ID value and password in the first authentication request are encrypted, the authentication platform also decrypts it according to the pre-agreed encryption method.

Step 302: After passing the authentication, the authentication platform receives the unique identity authentication information and APP application information;

In this step, the unique identity authentication information includes: device ID value and/or mobile terminal number;

The authentication platform receives the second authentication request sent by the authentication device and carries unique identity authentication information and APP application information;

When the unique identity authentication information and the APP application information are encrypted, the authentication platform also decrypts them according to the pre-agreed encryption method.

Step 303: The authentication platform determines the identity information shared with the APP application according to the unique identity authentication information, and sends it to the APP platform, and forwards the corresponding login information issued by the APP platform to the client of the authentication device for logging in to the APP platform. Describe the APP application.

Here, the shared identification information is identification information corresponding to the user's login information agreed upon by the authentication platform and the APP application, such as: mobile terminal number, device ID value, etc.;

Specifically, when the authentication platform receives the second authentication request sent by the authentication device, and determines that the identification information shared with the corresponding APP application is the mobile terminal number according to the APP application information carried in the second authentication request, if the second authentication request does not include Carry a binding indication and have a mobile terminal number, then send the mobile terminal number and APP application information to the APP platform; if the second authentication request does not carry a binding indication, and there is no mobile terminal number and IMSI number, Then find the corresponding bound mobile terminal number in the subscription information through the carried device ID value, and send the mobile terminal number and APP application information to the APP platform; if the second authentication request does not carry the binding indication , and there is no mobile terminal number but an IMSI number, then use the IMSI number to search the corresponding mobile terminal number from the HSS, and after finding the corresponding mobile terminal number, send the mobile terminal number and the APP application to the APP platform information; if the second authentication request carries a binding instruction, then store the carried mobile terminal number in the contract information corresponding to the device ID value, and send the mobile terminal number and APP application information to the APP platform, Or, search the HSS for the corresponding mobile terminal number through the IMSI number, and after finding the corresponding mobile terminal number, store the mobile terminal number in the subscription information corresponding to the device ID value, and send the mobile terminal number to the APP platform. terminal number and APP application information; then, the APP platform finds the login information of the mobile terminal number corresponding to the APP application according to the APP application information, and the authentication platform receives the login information sent by the APP platform, Sending the login information to the client of the authentication device for the login of the APP application;

When the authentication platform determines that the identity information shared with the corresponding APP application is the device ID value according to the information of the APP application carried in the second authentication request, it sends the device ID value and the information of the APP application carried in the second authentication request to the APP. platform; the APP platform finds the login information corresponding to the device ID value of the APP application according to the information of the APP application, the authentication platform receives the login information sent by the APP platform, and sends the login information to The client side of the authentication device is used for the login of the APP application.

The method in this embodiment further includes: after the authentication platform receives the application from the client for downloading the installation package of the APP application, returning the download address of the installation package of the APP application in the cloud storage to the client.

Embodiment four

This embodiment provides an authentication device. As shown in FIG. 4 , the authentication device includes: a device authentication module 41 and an APP authentication module 42; wherein,

The device authentication module 41 is used for authenticating the device after it is connected to the mobile terminal, and authenticates with the authentication platform, and after the authentication is passed, logs in the client of the authentication device on the mobile terminal;

The APP authentication module 42 is used to send the unique identity authentication information and the information of the APP application to the authentication platform when starting the APP application and selecting to use the authentication device for authentication, so that the authentication platform determines the identity authentication information with the APP according to the unique identity authentication information. The identification information shared by the application is sent to the APP platform, and the APP platform sends the corresponding login information to the client for logging into the APP.

The device authentication module 41 is specifically used to receive the password input by the user, send the first authentication request carrying the device ID value and the password to the authentication platform, receive the authentication result of the authentication platform according to the device ID value and the password, and verify that the authentication result is an authentication result. When passing, search for the corresponding client in the current program of the mobile terminal. If found, log in to the client of the authentication device. If not found, run the installation package of the built-in client of the authentication device. After successful installation, log in to the client of the authentication device. end. Here, the device authentication module 41 may also encrypt the device ID value and password in the first authentication request, and send the first authentication request to the authentication platform after encryption.

The unique identity authentication information includes: device ID value and/or mobile terminal number;

The APP authentication module 42 is specifically used for when starting the APP application and selecting to use the authentication device for authentication, displaying through the mobile terminal whether it is currently a bound mobile terminal prompt, when receiving the selection of the bound mobile terminal, Send the second authentication request to the authentication platform, the second authentication request carries the device ID value and/or the current mobile terminal number and the information of the APP application, and the APP authentication module 42 can also perform the device ID value and/or Encrypt the current mobile terminal number and the information of the APP application; when receiving the selection of a mobile terminal that is not bound, display a prompt whether to bind the current mobile terminal, and when receiving the selection of binding the current mobile terminal , obtaining the IMSI number or mobile terminal number in the SIM card of the current mobile terminal, and sending a second authentication request to the authentication platform, the second authentication request carrying the device ID value, the IMSI number or mobile terminal number, binding indication, and the information of the APP application; when receiving an option not to bind the current mobile terminal, send a second authentication request to the authentication platform, the second authentication request carrying the device ID value and the information of the APP application.

Embodiment five

This embodiment implements a client, as shown in Figure 5, the client includes: an interface module 51, a download module 52, a login module 53; wherein,

The interface module 51 is used to allow login after the authentication device and the authentication platform pass the authentication, and display a list of APP applications bound to the authentication device on the client interface;

The download module 52 is used to determine that the mobile terminal does not install the APP application after receiving the message that the user clicks on the APP application in the list, and download and install the installation package of the APP application through the authentication platform;

The login module 53 is configured to receive the login information corresponding to the APP application issued by the APP platform through the authentication platform, call the interface of the APP application, put the login information into the APP application, and send the APP application to the APP application. The APP platform initiates a login request;

The client also includes: an information storage module 54, which is used to record the login information corresponding to the APP application, and when the authentication device is connected to the mobile terminal and starts the APP application again, the login information is directly sent to the login module 53;

The client also includes: an information clearing module 55, which is used to clear all operation information related to the authentication device in the mobile terminal when it is detected that the authentication device is disconnected from the mobile terminal. When using your own business, there will be no traces of use on other people's mobile phones.

Embodiment six

This embodiment also provides an authentication platform, as shown in Figure 6, the authentication platform includes: a first authentication module 61, a second authentication module 62; wherein,

The first authentication module 61 is used for authenticating the authentication device connected to the mobile terminal;

The second authentication module 62 is used to receive the unique identity authentication information and the information of the APP application, determine the identity identification information shared with the APP application according to the unique identity authentication information, and send it to the APP platform, and send the corresponding information issued by the APP platform. The login information is forwarded to the client of the authentication device for logging into the APP;

The APP application includes: the APP application presented by the client and other non-client presented APP applications on the desktop; the APP application presented by the client is the APP application recorded by the client and bound to the authentication device;

The unique identity authentication information includes: device ID value and/or mobile terminal number;

The authentication platform also includes: a subscription information storage module 63, which is used to store the subscription information of the user when purchasing the authentication device. The subscription information includes: the user's real name, identity information, device ID value, and the mobile terminal that the user needs to bind number, etc.;

The first authentication module 61 is specifically configured to interact with the authentication device to set the password of the authentication device, receive the first authentication request carrying the device ID value and password sent by the authentication device, and perform the authentication according to the device ID value and password. The device is authenticated;

The second authentication module 62 is specifically configured to receive the second authentication request sent by the authentication device, and determine that the identification information shared with the corresponding APP application is the mobile terminal number according to the information of the APP application carried in the second authentication request, if The second authentication request does not carry a binding instruction and has a mobile terminal number, then send the mobile terminal number and APP application information to the APP platform; if the second authentication request does not carry a binding instruction and does not have a mobile terminal number and IMSI number, find the corresponding bound mobile terminal number in the subscription information through the carried device ID value, and send the mobile terminal number and APP application information to the APP platform; if the second authentication request does not Carry the binding instruction and have no mobile terminal number but have an IMSI number, then use the IMSI number to search for the corresponding mobile terminal number from the HSS, and after finding the corresponding mobile terminal number, send the mobile terminal number to the APP platform number and APP application information; if the second authentication request carries a binding instruction, then store the carried mobile terminal number in the contract information corresponding to the device ID value, and send the mobile terminal number and APP to the APP platform application information, or search the corresponding mobile terminal number from the HSS through the IMSI number, and after finding the corresponding mobile terminal number, store the mobile terminal number in the subscription information corresponding to the device ID value, and send the mobile terminal number to the APP platform Send the mobile terminal number and APP application information; then, receive the login information of the mobile terminal number corresponding to the APP application sent by the APP platform, and send the login information to the client of the authentication device for The login of the APP application;

The second authentication module 62 is specifically configured to receive the second authentication request sent by the authentication device, and when determining that the identification information shared with the corresponding APP application is the device ID value according to the information of the APP application carried in the second authentication request, set Send the device ID value and APP application information carried by the second authentication request to the APP platform; receive the login information of the device ID value corresponding to the APP application sent by the APP platform, and send the login information to the authentication device The client is used for logging in the APP.

The APP platform includes: an operator's own APP application platform and a third-party APP application platform;

The authentication platform also includes: a cloud storage module 64, which is used to store the installation package of the APP application displayed by the client. After receiving the application for downloading the installation package of the APP application from the client, the installation package of the APP application is stored in the cloud storage The download address in is returned to the client;

The authentication platform also includes: an HSS query module 65, which is used to search the corresponding mobile terminal number according to the IMSI number.

Embodiment seven

In this embodiment, an authentication system for realizing unique identity authentication of a user, as shown in FIG. 7 , the system includes: an authentication device 71, a client 72, and an authentication platform 73; wherein,

The authentication device 71 is used to authenticate with the authentication platform 73 after being connected to the mobile terminal, log in the client 72 of the authentication device on the mobile terminal after the authentication is passed, and pass the unique identity authentication information and the APP application The information is sent to the authentication platform 73;

The client 72 is set on the mobile terminal and is used to display the list of APP applications bound to the authentication device 71. After receiving the message that the user clicks on the APP application in the list, it is determined that the APP application is not installed in the mobile terminal, Download and install the installation package of the APP application through the authentication platform 73; receive the login information corresponding to the APP application issued by the APP platform through the authentication platform 73; call the interface of the APP application, and put the login information into the The APP application, the APP application initiates a login request to the APP platform;

The authentication platform 73 is used to authenticate the authentication device connected to the mobile terminal. After the authentication is passed, it receives the unique identity authentication information and the information of the APP application, and determines the identification information shared with the APP application according to the unique identity authentication information. And send it to the APP platform, and forward the corresponding login information issued by the APP platform to the client 72 of the authentication device 71;

The authentication device 71 has a specific structure shown in FIG. 4 , the client 72 has a specific structure shown in FIG. 5 , and the authentication platform 73 has a specific structure shown in FIG. 6 , which will not be described again here.

Through the authentication device, client, and authentication platform provided by the embodiment of the present invention, the authentication between the authentication device and the authentication platform is realized, and the problem of interactive sharing of authentication information between the authentication platform and other APP platforms is successfully solved, preferably It solves the problem that users need to frequently input login information when using multiple APPs, and can ensure the security of login information and the privacy of users from being violated.

The above description is only a preferred embodiment of the present invention, and is not used to limit the protection scope of the present invention. Any modifications, equivalent replacements and improvements made within the spirit and principles of the present invention shall be included in the within the protection scope of the present invention.

Claims (30)

1. An authentication method for realizing unique identity authentication of a user, characterized in that the method comprises: After the authentication device is connected to the mobile terminal, it authenticates with the authentication platform, and after passing the authentication, logs in to the client of the authentication device on the mobile terminal; The authentication device sends the unique identity authentication information and APP application information to the authentication platform, so that the authentication platform determines the identity information shared with the APP application according to the unique identity authentication information, and sends it to the APP platform, and the APP platform passes the authentication platform. forwarding and sending the corresponding login information to the client for logging into the APP. 2. The authentication method according to claim 1, further comprising: the authentication device stores the device ID value assigned by the authentication platform to the authentication device, and stores the signing information on the authentication platform, and also interacts with the authentication platform to Set a password. 3. The authentication method according to claim 2, wherein said authentication with the authentication platform, after the authentication is passed, logging in to the client of the authentication device on the mobile terminal includes: the authentication device receives the password input by the user , sending the first authentication request carrying the device ID value and password to the authentication platform, receiving the authentication result from the authentication platform according to the device ID value and password, and searching for the corresponding client in the current program of the mobile terminal when the authentication result is that the authentication is passed, If found, log in to the client of the authentication device, if not found, run the installation package of the client, and log in to the client of the authentication device after the installation is successful. 4. The authentication method according to claim 1, wherein the authentication device sends the unique identity authentication information and APP application information to the authentication platform, including: the authentication device displays whether it is currently a bound mobile terminal through the mobile terminal. The prompt of the terminal, when receiving the selection of the bound mobile terminal, the authentication device sends a second authentication request to the authentication platform, the second authentication request carries the device ID value and/or the current mobile terminal number, and uses the authentication device The information of the authenticated APP application, the authentication device also encrypts the device ID value and/or the current mobile terminal number, and the information of the APP application; when receiving the selection of a mobile terminal that is not bound, it displays whether When prompted to bind the current mobile terminal, when receiving the choice of binding the current mobile terminal, the authentication device obtains the IMSI number or mobile terminal number in the subscriber identity card SIM of the current mobile terminal, and sends the first Two authentication requests, the second authentication request carries the device ID value, the IMSI number or mobile terminal number, the binding indication, and the information of the APP application; when receiving the selection of not binding the current mobile terminal, the authentication The device sends a second authentication request to the authentication platform, and the second authentication request carries the device ID value and the APP application information. 5. The authentication method according to claim 4, characterized in that the method further comprises: When the authentication platform determines that the identification information shared with the corresponding APP application is the mobile terminal number according to the information of the APP application carried in the second authentication request, if the second authentication request does not carry a binding instruction and has a mobile terminal number, then send the The APP platform sends the information of the mobile terminal number and APP application; If the second authentication request does not carry a binding indication, and there is no mobile terminal number and IMSI number, find the corresponding bound mobile terminal number in the subscription information through the carried device ID value, and send the mobile terminal number to the APP platform. Describe the mobile terminal number and APP application information; If the second authentication request does not carry a binding instruction, and there is no mobile terminal number but an IMSI number, then use the IMSI number to search the corresponding mobile terminal number from the home subscriber server HSS, and after finding the corresponding mobile terminal number, Send the mobile terminal number and the information of the APP application to the APP platform; If the binding instruction is carried in the second authentication request, store the carried mobile terminal number in the subscription information corresponding to the device ID value, and send the mobile terminal number and APP application information to the APP platform, or, through The IMSI number searches for the corresponding mobile terminal number from the HSS, and after finding the corresponding mobile terminal number, stores the mobile terminal number in the contract information corresponding to the device ID value, and sends the mobile terminal number and APP application information; The APP platform finds the login information of the mobile terminal number corresponding to the APP application according to the information of the APP application, forwards the login information to the authentication platform, and the authentication platform sends the login information to the corresponding client , used to log in the APP. 6. The authentication method according to claim 4, characterized in that the method further comprises: When the authentication platform determines that the identity information shared with the corresponding APP application is the device ID value according to the information of the APP application carried in the second authentication request, it sends the device ID value and the information of the APP application carried in the second authentication request to the APP. platform; the APP platform finds the login information corresponding to the device ID value of the APP application according to the information of the APP application, forwards the login information to the authentication platform, and the authentication platform sends the login information to The corresponding client is used for logging in the APP. 7. The authentication method according to any one of claims 1 to 6, wherein the APP platform includes: an operator's own APP application platform and a third-party APP application platform. 8. An authentication method for realizing unique identity authentication of a user, characterized in that the method comprises: The client of the authentication device is allowed to log in after the authentication device and the authentication platform are authenticated, and the client interface displays a list of APP applications bound to the authentication device. After receiving the message that the user clicks on the APP application in the list, confirm The mobile terminal does not have the APP installed, and the installation package of the APP is downloaded and installed through the authentication platform; The client of the authentication device receives the login information corresponding to the APP application issued by the APP platform through the authentication platform, calls the interface of the APP application, puts the login information into the APP application, and sends the APP application to the APP application. The platform initiates a login request. 9. The authentication method according to claim 8, further comprising: the client of the authentication device records the login information corresponding to the APP application, connects the authentication device to the mobile terminal, and restarts the APP When applying, the client of the authentication device directly puts the login information into the APP application. 10. The authentication method according to claim 8, further comprising: when the client of the authentication device detects that the authentication device is disconnected from the mobile terminal, clearing the authentication device in the mobile terminal All relevant operational information. 11. An authentication method for realizing unique identity authentication of a user, characterized in that the method comprises: The authentication platform authenticates the authentication device connected to the mobile terminal. After the authentication is passed, the authentication platform receives the unique identity authentication information and APP application information; The authentication platform determines the identification information shared with the APP application according to the unique identity authentication information, and sends it to the APP platform, and forwards the corresponding login information issued by the APP platform to the client of the authentication device for logging into the APP application . 12. The authentication method according to claim 11, wherein said authentication platform authenticates an authentication device connected to a mobile terminal comprising: The authentication platform stores the signing information of the authentication device, interacts with the authentication device to set the password of the authentication device, receives the first authentication request carrying the device ID value and password sent by the authentication device, and performs authentication on the authentication device according to the device ID value and password. certified. 13. The authentication method according to claim 11, wherein the receiving of the unique identity authentication information and APP application information by the authentication platform comprises: the authentication platform receiving the information carrying the unique identity authentication information and APP application information sent by the authentication device In the second authentication request, the unique identity authentication information includes: the device ID value of the authentication device and/or the mobile terminal number. 14. The authentication method according to claim 13, wherein the authentication platform determines the identity information shared with the APP application according to the unique identity authentication information, and sends it to the APP platform, and sends the corresponding ID information issued by the APP platform. The login information is forwarded to the client of the authenticating device, including: When the authentication platform receives the second authentication request sent by the authentication device, and according to the APP application information carried in the second authentication request, determines that the identity information shared with the corresponding APP application is the mobile terminal number, if the second authentication request does not carry the binding Instruct and have a mobile terminal number, then send the mobile terminal number and APP application information to the APP platform; If the second authentication request does not carry a binding indication, and there is no mobile terminal number and IMSI number, find the corresponding bound mobile terminal number in the subscription information through the carried device ID value, and send the mobile terminal number to the APP platform. Describe the mobile terminal number and APP application information; If the second authentication request does not carry a binding instruction and does not have a mobile terminal number but has an IMSI number, use the IMSI number to search for the corresponding mobile terminal number from the HSS, and after finding the corresponding mobile terminal number, send to the The APP platform sends the information of the mobile terminal number and APP application; If the binding instruction is carried in the second authentication request, store the carried mobile terminal number in the subscription information corresponding to the device ID value, and send the mobile terminal number and APP application information to the APP platform, or, through The IMSI number searches for the corresponding mobile terminal number from the HSS, and after finding the corresponding mobile terminal number, stores the mobile terminal number in the contract information corresponding to the device ID value, and sends the mobile terminal number and APP application information; The APP platform finds the login information of the mobile terminal number corresponding to the APP application according to the information of the APP application, the authentication platform receives the login information sent by the APP platform, and sends the login information to the client of the authentication device end. 15. The authentication method according to claim 13, wherein the authentication platform determines the identification information shared with the APP application according to the unique identity authentication information, and sends it to the APP platform, and sends the corresponding ID information issued by the APP platform. The login information is forwarded to the client of the authentication device, including: when the authentication platform determines that the identity information shared with the corresponding APP application is the device ID value according to the APP application information carried in the second authentication request, the authentication information carried in the second authentication request The information of the device ID value and the APP application is sent to the APP platform; the APP platform finds the login information of the device ID value corresponding to the APP application according to the information of the APP application, and the authentication platform receives the information sent by the APP platform. For the login information, send the login information to the client of the authentication device. 16. The authentication method according to claim 11, further comprising: after the authentication platform receives the client's application for downloading the installation package of the APP application, storing the installation package of the APP application in the cloud storage The download address is returned to the client. 17. An authentication device, characterized in that the authentication device includes: a device authentication module, an APP authentication module; wherein, The device authentication module is used to authenticate with the authentication platform after being connected to the mobile terminal, and log in to the client of the authentication device on the mobile terminal after passing the authentication; The APP authentication module is used to send the unique identity authentication information and APP application information to the authentication platform, so that the authentication platform determines the identity identification information shared with the APP application according to the unique identity authentication information, and sends it to the APP platform, and the APP The platform sends the corresponding login information to the client through forwarding by the authentication platform, and is used to log in the APP application. 18. The authentication device according to claim 17, wherein the device authentication module is specifically configured to receive the password input by the user, send the first authentication request carrying the device ID value and password to the authentication platform, and receive the authentication platform's password. According to the authentication result of the device ID value and password, when the authentication result is that the authentication is passed, search for the corresponding client in the current program of the mobile terminal, if found, log in to the client of the authentication device, if not found, run the installation of the client package, after the installation is successful, log in to the client of the authentication device. 19. The authentication device according to claim 17, wherein the APP authentication module is specifically used to display a prompt whether the mobile terminal is currently a bound mobile terminal through the mobile terminal, and when receiving a mobile terminal that is bound When selected, send a second authentication request to the authentication platform, the second authentication request carries the device ID value and/or the current mobile terminal number, and the information of the APP application that uses the authentication device authentication; When the terminal is selected, it will display a prompt whether to bind the current mobile terminal. When receiving the selection of binding the current mobile terminal, obtain the IMSI number or mobile terminal number in the SIM card of the current mobile terminal, and send the second authentication to the authentication platform request, the second authentication request carries the device ID value, the IMSI number or mobile terminal number, the binding indication, and the information of the APP application; Sending a second authentication request, where the second authentication request carries the device ID value and the APP application information. 20. A client, characterized in that the client includes: an interface module, a download module, and a login module; wherein, The interface module is used to allow login after the authentication device and the authentication platform pass the authentication, and display a list of APP applications bound to the authentication device on the client interface; The download module is used to determine that the mobile terminal has not installed the APP application after receiving the message that the user clicks on the APP application in the list, and download and install the installation package of the APP application through the authentication platform; The login module is used to receive the login information corresponding to the APP application issued by the APP platform through the authentication platform, call the interface of the APP application, put the login information into the APP application, and send the APP application to the APP application by the APP application. The platform initiates a login request. 21. The client according to claim 20, characterized in that the client further comprises: an information storage module for recording the login information corresponding to the APP application, connecting the authentication device with the mobile terminal, and restarting the APP When applying, the login information is directly sent to the login module. 22. The client according to claim 20, characterized in that, the client further comprises: an information clearing module, configured to clear the information in the mobile terminal associated with the authentication device when it is detected that the authentication device is disconnected from the mobile terminal. All relevant operational information. 23. An authentication platform, characterized in that the authentication platform includes: a first authentication module and a second authentication module; wherein, The first authentication module is used for authenticating the authentication device connected to the mobile terminal; The second authentication module is used to receive the unique identity authentication information and the information of the APP application, determine the identity identification information shared with the APP application according to the unique identity authentication information, and send it to the APP platform, and send the corresponding login information issued by the APP platform. The information is forwarded to the client of the authentication device for logging into the APP. 24. The authentication platform according to claim 23, further comprising: a contract information storage module, configured to store the contract information of the authentication device. 25. The authentication platform according to claim 23, wherein the first authentication module is specifically configured to interact with the authentication device to set the password of the authentication device, and receive the device ID value and password sent by the authentication device. The first authentication request is to authenticate the authentication device according to the device ID value and password. 26. The authentication platform according to claim 23, wherein the second authentication module is specifically configured to receive the second authentication request sent by the authentication device, and determine the information related to the APP application according to the information of the APP application carried in the second authentication request. When the identification information shared by the corresponding APP application is a mobile terminal number, if the second authentication request does not carry a binding indication and has a mobile terminal number, then send the mobile terminal number and APP application information to the APP platform; If the second authentication request does not carry a binding indication, and there is no mobile terminal number and IMSI number, find the corresponding bound mobile terminal number in the subscription information through the carried device ID value, and send the mobile terminal number to the APP platform. Describe the mobile terminal number and APP application information; If the second authentication request does not carry a binding instruction and does not have a mobile terminal number but has an IMSI number, use the IMSI number to search for the corresponding mobile terminal number from the HSS, and after finding the corresponding mobile terminal number, send to the The APP platform sends the information of the mobile terminal number and APP application; If the binding instruction is carried in the second authentication request, store the carried mobile terminal number in the subscription information corresponding to the device ID value, and send the mobile terminal number and APP application information to the APP platform, or, through The IMSI number searches for the corresponding mobile terminal number from the HSS, and after finding the corresponding mobile terminal number, stores the mobile terminal number in the contract information corresponding to the device ID value, and sends the mobile terminal number and APP application information; Afterwards, receiving the login information of the mobile terminal number corresponding to the APP application sent by the APP platform, and sending the login information to the client of the authentication device for the login of the APP application. 27. The authentication platform according to claim 23, wherein the second authentication module is specifically configured to receive the second authentication request sent by the authentication device, and determine the information related to the APP application according to the information of the APP application carried in the second authentication request. When the identification information shared by the corresponding APP application is the device ID value, send the device ID value carried in the second authentication request and the information of the APP application to the APP platform; receive the device ID value of the corresponding APP application sent by the APP platform the login information, and send the login information to the client of the authentication device for the login of the APP application. 28. The authentication platform according to claim 23, characterized in that, the authentication platform further comprises: a cloud storage module for storing the installation package of the APP application displayed by the client, and downloading the installation package of the APP application from the client After the application, the download address of the installation package of the APP application in the cloud storage module is returned to the client. 29. The authentication platform according to claim 26, characterized in that the authentication platform further comprises: an HSS query module, configured to search for the corresponding mobile terminal number according to the IMSI number. 30. An authentication system for realizing unique user identity authentication, characterized in that the system includes: an authentication device, a client, and an authentication platform; wherein, The authentication device is used to authenticate with the authentication platform after connecting to the mobile terminal, log in to the client of the authentication device on the mobile terminal after the authentication is passed, and send the unique identity authentication information and APP application information to the authentication platform ; The client is used to display a list of APP applications bound to the authentication device. After receiving the message that the user clicks on the APP application in the list, it is determined that the APP application is not installed on the mobile terminal, and the APP application is downloaded and installed through the authentication platform. The installation package of the APP application; receiving the login information corresponding to the APP application issued by the APP platform through the authentication platform; calling the interface of the APP application, putting the login information into the APP application, and the APP application Initiate a login request to the APP platform; The authentication platform is used to authenticate the authentication device connected to the mobile terminal. After the authentication is passed, it receives the unique identity authentication information and the information of the APP application, and determines the identity identification information shared with the APP application according to the unique identity authentication information, and Send it to the APP platform, and the APP platform will send the corresponding login information to the client through the forwarding of the authentication platform.