CN107835160A - Third party's user authen method based on Quick Response Code - Google Patents

Abstract

The present invention provides a third-party user authentication method based on a two-dimensional code. The user authentication method includes: obtaining all user information of the third-party user corresponding to a third-party application, the user information including the user identification; Generate a QR code with the random ID; use the third-party application to scan the QR code to obtain the user information of the third-party user corresponding to the user ID in this authentication; when the random ID is valid, according to the user ID of the obtained user information Query the legal user list to authenticate the third-party user. The invention can effectively utilize user information among different mobile applications.

Description

Third-party user authentication method based on two-dimensional code

technical field

The present invention relates to the field of software technology, in particular to a third-party user authentication method based on a two-dimensional code, and a user login method based on a third-party application.

Background technique

With the advent of the mobile Internet era, identity authentication by means of mobile terminals is becoming more and more popular, and now there are many practical applications for QR code login, so the security and uniqueness of QR code login deserves more attention. In the prior art, there are many types of mobile application programs, and the user identity for each application program is independent, which leads to frequent user authentication and user login when users use different mobile applications, resulting in repeated input of user information and waste of information resources. .

Contents of the invention

The technical problem solved by the technical solution of the present invention is how to effectively utilize user information between different mobile applications.

In order to solve the above technical problems, the technical solution of the present invention provides a third-party user authentication method based on a two-dimensional code, including:

Obtain all user information of the third-party user corresponding to the third-party application, where the user information includes a user identifier;

Generate a QR code according to the random identification generated by the server;

Use the third-party application to scan the QR code to obtain the user information corresponding to the third-party user whose user ID is authenticated this time;

When the random identifier is valid, query the legal user list according to the user identifier of the obtained user information to authenticate the third-party user.

Optionally, the obtaining all user information of the third-party user corresponding to the third-party application includes:

Applying for a client platform based on the third-party application;

If the third-party user uses the client platform in the third-party application, he has the right to obtain the user information of the third-party user.

Optionally, the obtaining the user identifier of the third-party user corresponding to the third-party application further includes: obtaining user information of the third-party user corresponding to the third-party application based on the third-party application interface.

Optionally, the generating a two-dimensional code according to the random identifier generated by the server and the user identifier includes: generating a two-dimensional code according to the random identifier generated by the server and the user identifier during authentication.

Optionally, said generating the two-dimensional code according to the random identification generated by the server includes:

A request link to obtain said user information;

Obtain the random ID generated by the server and verify the random ID and the verification link of the user ID;

The two-dimensional code is formed based on the request link, the random identification and the verification link.

Optionally, the random identification has a predetermined time limit, and the user information includes: user profile information and a user ID, and the user profile information includes at least one of the following information: nickname, avatar, gender, address, and authority.

Optionally, when the random identifier is valid, querying the legal user list according to the user identifier of the obtained user information to authenticate the third-party user includes:

Bind the random ID with the user ID obtained in this authentication, and the random ID subscribes to the authentication-related message topic for the third-party application;

If the user identifier exists in the legal user list, upload a message of successful authentication to the server; otherwise, upload a message of failed authentication to the server.

Optionally, when the random identifier is valid, querying the legal user list according to the user identifier of the obtained user information to authenticate the third-party user includes:

Bind the random ID with the user ID obtained in this authentication, and the random ID subscribes to the authentication-related message topic for the third-party application;

If the user identifier exists in the legal user list, continue to query the login status of the third-party user based on the user identifier;

If the login status of the third-party user is not logged in, upload a message of successful authentication to the server, otherwise upload a message of failed authentication to the server.

Optionally, the third-party user authentication method based on the two-dimensional code also includes:

The third-party users are grouped based on the acquired user information and user identifiers to form the legal user list.

In order to solve the above technical problems, the technical solution of the present invention also provides a user login method based on a third-party application, including:

Generate a two-dimensional code based on a login request input by the user, the two-dimensional code is generated according to a random identifier generated by the server, and the two-dimensional code has a link requesting access to the user information of the third-party application;

Use the third-party application to scan the two-dimensional code to obtain the user information of the third-party user corresponding to the user ID in this authentication;

When the random identifier is valid, query the legal user list according to the user identifier of the obtained user information to authenticate the third-party user;

If the authentication is successful, the user logs in based on the user information of the third-party user.

The beneficial effects of the technical solution of the present invention at least include:

The technical solution of the present invention can use the user information of the third-party application to generate a two-dimensional code on the client, use the code scanning function of the third-party application to identify the two-dimensional code information of the client, and determine whether the third-party user is verified through server-side verification. It is a legal user, so as to realize the user authentication and user login of the client based on the third-party user information, which can effectively use the user information between different mobile applications, and realize the authentication and login based on the same user information between multiple applications, which greatly saves the user's multiple The application user authentication and login time during application use improves the consistency and efficiency of user information use.

The technical solution of the present invention can further improve the security and versatility of the QR code login of the client based on the third-party application. The third-party application obtains user information by scanning the QR code, and the client requests the third-party application to log in based on the authorization of the third-party user. After the three-party user authorizes, the temporary ticket authorized by the third-party application is given to the third-party user, and the third-party user obtains the interface authority through the temporary ticket and key. The two-dimensional code information of the technical solution of the present invention includes WeChat open platform, server address, third-party The unique identifier of the user and the special identifier of the two-dimensional code, based on the above content, can be different from the traditional two-dimensional code login content of the prior art. By scanning the two-dimensional code and authorizing the use function, the effectiveness of the user information verification process can be effectively improved. , and enhance the universality of general use. In an optional solution of the technical solution of the present invention, the server side further groups all third-party users, so as to improve the accuracy of user identification.

In order to enhance the security of the present invention, the technical solution of the present invention also sets the timeliness of displaying the two-dimensional code on the client side through random identification. After a period of time, scanning the two-dimensional code will prompt that the two-dimensional code is invalid, resulting in login failure. According to the obtained unique identifier of the third-party user, the technical solution of the present invention searches and judges whether the user is in the user group allowed to log in at the server side. The technical solution of the present invention also ensures that a third-party user can log in to multiple clients at the same time, but can only log in to one client of the same type by setting the login status of the user corresponding to the verification user ID.

The process of processing the two-dimensional code record information in the technical solution of the present invention is to obtain the unique identification of the third-party user (that is, the user identification) and the special identifier of the two-dimensional code (that is, the random code) in the two-dimensional code record information. ID), and bind them together, so that the random ID can be set as the subject of third-party application subscription and publishing messages, so as to realize the real-time release and communication of authentication and login status.

Description of drawings

Other characteristics, objects and advantages of the present invention will become more apparent by reading the detailed description of non-limiting embodiments with reference to the following drawings:

Fig. 1 is a schematic flow chart of a third-party user authentication method based on a two-dimensional code provided by the technical solution of the present invention;

Fig. 2 is a schematic flow chart of a third-party user login method based on a two-dimensional code provided by the technical solution of the present invention;

Fig. 3 is a schematic flow diagram of a third-party user authentication and login method based on a two-dimensional code provided by the technical solution of the present invention;

Fig. 4 is a schematic diagram of the specific application process of the technical solution of the present invention to realize the third-party security authentication login of the two-dimensional code;

Fig. 5 is a schematic diagram of the specific application process of the server-side authentication after the code scanning of the technical solution of the present invention.

Detailed ways

In the prior art, the scan code login method is very single and relatively independent, and the authentication process between different user information is independent:

In the actual application of the user scanning the code to log in to the computer client, there are mainly two situations at this stage:

For example, a registered user of the Dajie.com mobile app can scan the code to log in to the web version of Dajie.com. In this case, the authentication and login of user information is performed within the application, and does not involve the authentication and login of user information in external applications;

Alternatively, a WeChat app registered user can scan a QR code to log in to the WeChat client; a WeChat user can scan a QR code to log in to any client, but this client only verifies whether the QR code scanning user is a legitimate WeChat user without authenticating the WeChat user Whether it is allowed to log in to this client, any WeChat user scans the QR code, and does not identify whether the WeChat user is a legitimate user of this website or this client. In this case, the user information and its information authentication process between applications are independent of each other, and there is no step flow that uses each other for the authentication process.

The above two situations are ubiquitous, lack flexibility, safety, and have potential safety hazards.

The technical solution of the present invention provides the following embodiments, and relates to a solution for client user authentication and login based on third-party users and their user information, which can realize mutual utilization of user information between application programs, and realize user information in application programs between user authentication.

In order to better clearly express the technical solution of the present invention, the present invention will be further described below in conjunction with the accompanying drawings.

Specific embodiments of the present invention will be described below in conjunction with the accompanying drawings.

Embodiment one

A third-party user authentication method based on a two-dimensional code as shown in Figure 1 includes the following steps:

Step S100, obtaining all user information of the third-party user corresponding to the third-party application, the user information including a user ID;

Step S101, generating a two-dimensional code according to the random identification generated by the server;

Step S102, using the third-party application to scan the QR code to obtain the user information of the third-party user corresponding to the user ID in this authentication;

Step S103, when the random identifier is valid, query the legal user list according to the user identifier of the acquired user information to authenticate the third-party user.

According to step S100, the obtaining all user information of the third-party user corresponding to the third-party application includes:

Applying for a client platform based on the third-party application;

If the third-party user uses the client platform in the third-party application, he has the right to obtain the user information of the third-party user.

More specifically, the above step S100 further includes: acquiring user information corresponding to a third-party application of the third-party user based on the third-party application interface. Wherein the third-party application interface is based on the client platform in the third-party application.

In this embodiment, the user terminal may be the client that the user will actually log in to. The client and user end are the mobile end of the application, and may also be the computer end.

According to step S101, the generating a two-dimensional code according to the random identifier generated by the server and the user identifier includes: generating a two-dimensional code according to the random identifier generated by the server and the user identifier during authentication.

According to step S101, said generating the two-dimensional code according to the random identification generated by the server includes:

A request link to obtain said user information;

Obtain the random ID generated by the server and verify the random ID and the verification link of the user ID;

The two-dimensional code is formed based on the request link, the random identification and the verification link.

According to step S102, the random identification has a predetermined time limit, and the user information includes: user profile information and user identification, and the user profile information includes at least one of the following information: nickname, profile picture, gender, address, and authority.

According to step S103, the querying the legal user list according to the user identification of the obtained user information when the random identification is valid to authenticate the third-party user includes:

Bind the random ID with the user ID obtained in this authentication, and the random ID subscribes to the authentication-related message topic for the third-party application;

If the user identifier exists in the legal user list, upload a message of successful authentication to the server; otherwise, upload a message of failed authentication to the server.

In the above process steps, the legitimate user list can be obtained through another grouping step, that is, the third-party users are grouped according to all obtained user information and user identifiers to form the legitimate user list.

The grouping step can be performed in another process, or can be performed simultaneously in the above step S100.

In addition to implementing step S103 using the above implementation process, further detection of the uniqueness of the authentication user login client can be added to ensure that a user can only log in on one client to ensure the security and uniqueness of login. Therefore, in In other embodiments, according to step S03, when the random identification is valid, querying the legal user list according to the user identification of the obtained user information to authenticate the third-party user may also include the following authentication process:

Bind the random ID with the user ID obtained in this authentication, and the random ID subscribes to the authentication-related message topic for the third-party application;

If the user identifier exists in the legal user list, continue to query the login status of the third-party user based on the user identifier;

If the login status of the third-party user is not logged in, upload a message of successful authentication to the server, otherwise upload a message of failed authentication to the server.

The above message mode can be transmitted by MQTT (Message Queuing Telemetry Transport, message queue telemetry transmission) protocol, the random identifier can be realized by UUID (Universally Unique Identifier, universally unique identification code), and the user identifier can be implemented by OPENID (Universally Unique Identifier) Centered digital identity framework) implementation.

Embodiment two

A user login method based on a third-party application as shown in Figure 2 includes the following steps:

Step S200, generating a two-dimensional code based on the login request input by the user, the two-dimensional code is generated according to the random identification generated by the server, and the two-dimensional code has a link requesting access to the user information of the third-party application;

Step S201, using the third-party application to scan the two-dimensional code to obtain the user information of the third-party user corresponding to the user ID in this authentication;

Step S202, when the random identifier is valid, query the legal user list according to the user identifier of the obtained user information to authenticate the third-party user;

Step S203, if the authentication is successful, the user logs in based on the user information of the third-party user.

For the specific implementation process of the relevant process steps in this embodiment, reference may be made to Embodiment 1, which will not be repeated here.

Embodiment three

A user authentication method based on a third-party application as shown in Figure 3, the third-party application shown is a WeChat program, which performs authentication based on WeChat scanning to achieve user login, including the following steps:

Step S300, open the client, use webservice to connect to the server, and open the channel between the server and the client.

In step S301, the connected server generates a unique random number (that is, the random ID in the above-mentioned embodiment), and transmits it to the client, which is a special identifier as a two-dimensional code.

Step S302, the client uses the obtained special identifier, plus the address of the server, and the WeChat open platform generates a unique two-dimensional code, which is displayed on the client page.

Step S303, the mobile WeChat user opens and scans the QR code, analyzes the content of the QR code, and obtains the information contained in the QR code, including the special identifier written in the QR code, and obtains the WeChat terminal user information according to the WeChat open platform. Reconnect to the server-side channel.

Step S304: Bind the obtained user information with the special identifier, and use the server to determine whether the user is a legal user who logs in to the client.

Step S305, no matter whether it is successful or not, the verification result information is transmitted through MQTT, with the special identifier as the subject, the verification result as the content is uploaded to the MQTT server, the client subscribes to the message with the special identifier as the subject, and obtains the content of the subject , judging whether the WeChat user has successfully logged in at the client terminal, if the client login is successful, all functions are enabled, and the WeChat terminal displays a successful login page, if it fails, both the client terminal and the WeChat terminal are prompted to fail to log in at the same time.

According to the above process steps, the login request is sent and the server is connected at the same time, and the content parsed by the QR code needs to be verified on the server. The verification process includes the following steps:

Step P1: First of all, it is necessary to ensure that the QR code is valid. The special identifier contained in the QR code has a life cycle, which can be set according to the security requirements of each client. After a certain life cycle, for example, 30s, The special identifier will be invalid, which directly leads to the invalidation of the QR code. When WeChat users scan the QR code, they will be prompted that the QR code is invalid, that is, the client login fails.

Step P2: If the two-dimensional code is valid, then the special identifier in the two-dimensional code information, the generated two-dimensional code information, specifically: the special random identifier generated by the server, according to the special identifier and the server address to form two-dimensional code information; according to the two-dimensional code information to obtain the unique identification of the user who scans the code, according to the unique identification of the user, it can be judged whether the user is in the queue allowed to log in.

Step P3: According to the method of this embodiment, the relationship between each client login and WeChat user is one-to-one, that is, one WeChat account can only log in to one client. According to the WeChat user information, we can log in The server finds out whether the WeChat user has a client login elsewhere. If yes, the login fails; .

If in this embodiment, the client login is successful in step S305, according to the unique identification of WeChat user information, the user can be found on the server, and the login status is set to login

When the client is closed, the client connects to the server, finds the user at the server according to the unique identifier of the WeChat user information (ie, the user identifier in the above-mentioned embodiment), and sets the login status to unlogged.

In the technical solution of the present invention, due to the above-mentioned embodiment, a special identifier is added to the two-dimensional code; this identifier has a fixed life cycle, and it will become invalid within a specific time, thus causing the two-dimensional code to become invalid. To a certain extent, the security of client login is protected. In addition, the technical solution of the present invention also adds a state module to the client, that is, detects whether the user is in the login state of the client through the above-mentioned user information and user identification, which can prevent multiple clients from simultaneously using one Account authentication login ensures the security of the client and the one-to-one relationship between the login account and the client.

Application example

Fig. 4 is a specific application process of the technical solution of the present invention to realize the third-party security authentication login of the two-dimensional code.

This application example realizes the process of scanning the QR code of the computer client by the third-party application on the mobile terminal, obtaining the unique identification of the third-party user through the WeChat open platform, and logging into the computer client through identity authentication without letting go of any possibility of illegal login.

The above-mentioned third-party users refer to WeChat users in the application of the present invention.

The WeChat terminal mentioned above refers to the WeChat application on mobile terminals such as mobile phones and tablets, which support the scan function.

This specific implementation method is based on the open interface of WeChat, which can help to obtain the unique identifier of the WeChat user who scans the code.

The above specific implementation method is to apply the two-dimensional code authentication login to a client that processes infrared thermal images.

WeChat public platform development refers to business development for WeChat public accounts, development of mobile applications, PC-side websites, and third-party platforms for public accounts (providing services for operators of public accounts in various industries), please go to the WeChat open platform to access, Specifically, the application process includes the following:

Apply for a WeChat official account;

Connect the WeChat official account to the Microengine system;

Access the domain name of the server on the WeChat public platform;

Open the above client, connect to the server service, and the server generates a random number UUID.

The client generates a QR code, and the composition of the QR code can refer to the following example:

http://open.weixin.qq.com/connect/auth2.0/authorize? appid=XX&redirect_uri=http://server verification address/"+UUID+"&reponse_type=code&scope=snsapi_userinfo&stat=0#wechat_redict.

WeChat users scan the QR code and initiate a request to obtain user information from the WeChat open platform. If they have followed the WeChat official account, it will display the user information whether they are authorized to obtain it. The information includes obtaining OPENID (the unique identification of each user relative to each official account) and user information (nickname, avatar, country, province, city, gender, authority);

While the WeChat client scans the code, it connects to the server-side verification mechanism;

WeEngine’s background can see all the users who follow this WeChat official account, and divide them into groups, which represent legal users and illegal users who log in to the client.

Fig. 5 is the specific application process of the server-side authentication after the code scanning of the technical solution of the present invention.

Server-side verification mainly includes three aspects, combined with Figure 5, specifically:

1. Determine whether the UUID has expired. If it expires, the login failure page will appear directly on the official account, and the client will not respond.

2. If the UUID has not expired, then bind the OPENID to the UUID. According to the user information obtained above, especially the OPENID, judge whether the OPENID is in the list of legally logged-in users on the server side. If not, the server side uses the UUID It is the topic of MQTT, 0 means that the content is uploaded to the server, and the WeChat official account shows that the login failed.

3. If the UUID has not expired and the OPENID is in the list of legally logged-in users, use the OPENID to find the login status of the OPENID. If you have already logged in to the server, use the UUID as the MQTT topic and 0 as the content to upload to the server, and the WeChat official account displays login Failed; if not logged in, use UUID as the MQTT topic and 1 as the content to upload to the server.

The client subscribes to the message with the subject of UUID. Once the server has uploaded the content of the same subject, it can be received by the client. The client judges whether the login is successful according to the received content. If the received content is 1, the client login is successful. Login The name is the nickname of the WeChat user, and a message is sent to the server at the same time. The login status corresponding to this UUID is logged in.

Close the client and connect to the server at the same time, the login status corresponding to this UUID is not logged in.

Specific embodiments of the present invention have been described above. It should be understood that the present invention is not limited to the specific embodiments described above, and those skilled in the art may make various changes or modifications within the scope of the claims, which do not affect the essence of the present invention.

Claims (10)

1. A kind of 1. third party's user authen method based on Quick Response Code, it is characterised in that including：

   All user profile that the third party user corresponds to third-party application are obtained, the user profile identifies including user；

   The random identification generated according to server end produces Quick Response Code；

   Quick Response Code is scanned using the third-party application to obtain the use that user described in this certification identifies corresponding third party user Family information；

   When the random identification is effective, the user of user profile acquired in identifies inquiry validated user list with to described Third party user is authenticated.
2. 2. third party's user authen method based on Quick Response Code as claimed in claim 1, it is characterised in that described to obtain described the All user profile that tripartite user corresponds to third-party application include：

   Based on the third-party application application user terminal platform；

   Have the right to obtain third party use if the third party user uses the user terminal platform in the third-party application The user profile at family.
3. 3. third party's user authen method based on Quick Response Code as claimed in claim 1 or 2, it is characterised in that the acquisition institute State third party user correspond to third-party application user mark also include：The described 3rd is obtained based on the third-party application interface Square user corresponds to the user profile of third-party application.
4. 4. third party's user authen method based on Quick Response Code as claimed in claim 1, it is characterised in that described according to server Random identification caused by end and the user, which identify generation Quick Response Code, to be included：During certification according to caused by server end random identification And the user identifies and produces Quick Response Code.
5. It is described to be generated according to server end 5. third party's user authen method based on Quick Response Code as described in claim 1 or 4 Random identification, which produces Quick Response Code, to be included：

   Obtain the hyperlink request of the user profile；

   Obtain random identification caused by server end and the verified link of the checking random identification and user's mark；

   The Quick Response Code is formed based on the hyperlink request, random identification and verified link.
6. 6. third party's user authen method based on Quick Response Code as claimed in claim 1, it is characterised in that the random identification tool There is predetermined timeliness, the user profile includes：Subscriber information message and user's mark, the subscriber information message comprise at least such as One kind in lower information：The pet name, head portrait, sex, address, authority.
7. 7. third party's user authen method based on Quick Response Code as claimed in claim 1, it is characterised in that described described random The user of user profile acquired in identifies inquiry validated user list to be carried out to the third party user when identifying effective Certification includes：

   The user that the random identification and this certification obtain is identified and bound, the random identification is that the third-party application is ordered Read the message subject about certification；

   The successful message of certification is uploaded to server end if user mark is present in the validated user list, is otherwise uploaded The message of authentification failure is to server end.
8. 8. third party's user authen method based on Quick Response Code as claimed in claim 1, it is characterised in that described described random The user of user profile acquired in identifies inquiry validated user list to be carried out to the third party user when identifying effective Certification includes：

   The user that the random identification and this certification obtain is identified and bound, the random identification is that the third-party application is ordered Read the message subject about certification；

   Continue to identify based on the user if user mark is present in the validated user list and inquire about third party's use The logging status at family；

   If the logging status of the third party user uploads the successful message of certification to server end, otherwise uploaded to be not logged in The message of authentification failure is to server end.
9. 9. third party's user authen method based on Quick Response Code as claimed in claim 1, it is characterised in that also include：

   It is described legal to be formed that the third party user is grouped based on acquired all user profile and user's mark User list.
10. A kind of 10. user login method based on third-party application, it is characterised in that including：

    Logging request based on user's input produces Quick Response Code, and Quick Response Code random identification according to caused by server end is produced Raw, the Quick Response Code has the link that request accesses the third-party application user profile；

    The Quick Response Code, which is scanned, using the third-party application identifies corresponding third party user to obtain user described in this certification User profile；

    When the random identification is effective, the user of user profile acquired in identifies inquiry validated user list with to described Third party user is authenticated；

    User profile of the user based on the third party user is logged in if certification success.