CN102811228A - Network service login method, device and system - Google Patents

Abstract

The invention provides a network business login method, equipment and a system, wherein the method comprises the steps as follows: calculating a random sequence code and a verification code to generate a first verification information based on authentication algorithm after receiving a network business login request through a server; then, sending the random sequence code and the verification code to a user terminal through an IP router respectively; sending the random sequence code and the verification code to a mobile terminal corresponding to a user name through a mobile switching network; and when receiving a second verification information generated by calculating the random sequence code and the verification code based on local authentication algorithm through the user terminal, determining whether the first verification information and the second verification are the same to verify whether users can login legally, thereby verifying the legality of the users by transmitting the verification information through two channels which are the mobile switching network and the IP router, and further simplifying the login process of the users, avoiding the hidden danger that a user password is intercepted during transmission in single channel information, and improving the security and the usability of user network business.

Description

Network service login method, device and system

technical field

The embodiments of the present invention relate to the technical field of communications, and in particular, to a network service login method, device and system.

Background technique

With the rapid development of Internet technology, in order to meet people's actual application needs, network services are becoming more and more diversified.

In the prior art, when a user performs network services, he first needs to enter a pre-registered user name and user password at a user terminal to log in to an application server corresponding to the network service to perform related network services. In practical applications, for the sake of security, it is generally customary for users to set different user passwords to log in to different websites.

It can be seen that based on the current network access method, users need to memorize a large number of user passwords to log in to servers of different network services for access, and criminals can easily intercept the user's login information when the user logs in, which is not conducive to the user's network access.

Contents of the invention

In view of the above-mentioned defects in the prior art, embodiments of the present invention provide a network service login method, device and system.

One aspect of the present invention provides a network service login method, including:

receiving a network service login request including a user name sent by a user through a user terminal, and calculating a random sequence code and a verification code according to a preset authentication algorithm to generate first verification information corresponding to the user;

Send the random sequence code to the user terminal through IP routing, and send the verification code to the mobile terminal corresponding to the user name through the mobile switching network, or send the verification code to the user terminal through IP routing The user terminal, and sending the random sequence code to a mobile terminal corresponding to the user name through a mobile switching network;

receiving a network service verification request sent by the user terminal and including second verification information, and determining whether the first verification information and second verification information are the same to verify whether the user is legal, wherein the second verification information It is generated by the user terminal calculating the random sequence code and the verification code according to the locally stored authentication algorithm, and if the verification is valid, the user is allowed to log in.

Another aspect of the present invention provides a network service login method, including:

receiving the user name of the website to be logged in input by the user, and sending a network service login request including the user name to the application server corresponding to the website;

receiving the random sequence code sent by the application server through the IP route, and the verification code input by the user and received by the mobile terminal corresponding to the user name and sent by the application server through the mobile switching network, or receiving the The verification code sent by the application server through IP routing, and the random sequence code input by the user and received by the mobile terminal corresponding to the user name and sent by the application server through the mobile switching network, wherein the random sequence The code and the verification code are the first verification information corresponding to the user generated by the application server calculating a random sequence code and a verification code according to a preset authentication algorithm after receiving the network service login request The random sequence code and verification code used at the time;

Calculate the random sequence code and the verification code according to the local pre-stored authentication algorithm to generate second verification information corresponding to the user, and send the network service verification including the second verification information to the application server A request is used for the application server to verify whether the user is legal according to the first verification information and the second verification information to determine whether to allow the user to log in.

Another aspect of the present invention provides an application server, including:

The first processing module is configured to receive a network service login request including a user name sent by a user through a user terminal, and calculate a random sequence code and a verification code according to a preset authentication algorithm to generate a corresponding to the user first verification information;

The second processing module is configured to send the random sequence code to the user terminal through IP routing, and send the verification code to the mobile terminal corresponding to the user name through the mobile switching network, or send the The verification code is sent to the user terminal through IP routing, and the random sequence code is sent to the mobile terminal corresponding to the user name through the mobile switching network;

A verification module, configured to receive a network service verification request sent by the user terminal and including second verification information, and determine whether the first verification information and the second verification information are the same to verify whether the user is legal, wherein the The second verification information is generated by the user terminal by calculating the random sequence code and the verification code according to a locally stored authentication algorithm, and if the verification is valid, the user is allowed to log in.

Another aspect of the present invention provides a user terminal, including:

The login request module is configured to receive the user name of the website to be logged in input by the user, and send a network service login request including the user name to the application server corresponding to the website;

An acquisition module, configured to receive the random sequence code sent by the application server through IP routing, and the verification code input by the user and received by the mobile terminal corresponding to the user name and sent by the application server through the mobile switching network , or, receiving the verification code sent by the application server through the IP route, and the random sequence code input by the user and received by the mobile terminal corresponding to the user name and sent by the application server through the mobile switching network, wherein The random sequence code and the verification code are calculated by the application server according to a preset authentication algorithm after receiving the network service login request to generate a random sequence code and a verification code corresponding to the user. The random sequence code and verification code used for the first verification information;

A verification request module, configured to calculate the random sequence code and the verification code according to a locally prestored authentication algorithm to generate second verification information corresponding to the user, and send the second verification information containing the second verification information to the application server. A network service verification request for verification information, for the application server to verify whether the user is legal according to the first verification information and the second verification information to determine whether to allow the user to log in.

Another aspect of the present invention provides a network service login system, including: a mobile terminal, the above-mentioned application server and a user terminal.

In the network service login method, device and system provided by the embodiments of the present invention, after receiving the network service login request through the application server, a random sequence code and a verification code are calculated according to the authentication algorithm to generate the first verification information, and then the random The sequence code and the verification code are sent to the user terminal through the IP route, and sent to the mobile terminal corresponding to the user name through the mobile switching network. When receiving the user terminal, the random sequence code and the verification code are calculated according to the local authentication algorithm. The generated second verification information determines whether the first verification information and the second verification information are the same to verify whether the user can log in legally, thereby realizing the transmission of verification information through two channels of the mobile switching network and IP routing to verify the legitimacy of the user , which simplifies the user's login process, avoids the hidden danger of the user's password being intercepted when transmitted in a single channel of information, and improves the security and ease of use of the user's network business.

Description of drawings

Fig. 1 is a flowchart of an embodiment of the network service login method of the present invention;

Fig. 2 is a flow chart of another embodiment of the network service login method of the present invention;

FIG. 3 is a schematic structural diagram of an embodiment of the application server of the present invention;

FIG. 4 is a schematic structural diagram of an embodiment of a user terminal according to the present invention;

Fig. 5 is a schematic structural diagram of an embodiment of the network service login system of the present invention.

Detailed ways

Fig. 1 is a flowchart of an embodiment of the network service login method of the present invention, as shown in Fig. 1, the method includes:

Step 100: Receive a network service login request including a user name sent by a user through a user terminal, and calculate a random sequence code and a verification code according to a preset authentication algorithm to generate first verification information corresponding to the user ;

The user opens the login interface of the network service to be accessed through the user terminal, enters the pre-registered user name corresponding to the network service and logs in, so that the application server corresponding to the network service receives the network service sent by the user through the user terminal The login request is parsed to obtain the user's username. Then the application server calculates a random sequence code and a verification code according to a preset authentication algorithm to generate first verification information corresponding to the user.

Step 101, sending the random sequence code to the user terminal through IP routing, and sending the verification code to the mobile terminal corresponding to the user name through the mobile switching network, or sending the verification code through the IP sending the route to the user terminal, and sending the random sequence code to the mobile terminal corresponding to the user name through the mobile switching network;

After the application server calculates a random sequence code and a verification code through an authentication algorithm to generate the first verification information corresponding to the user, the random sequence code and the verification code are respectively transmitted to The user, specifically: the application server returns the random sequence code to the user terminal through the IP routing channel used by the user terminal to send the network service login request, and sends the random sequence code to the user terminal through a trusted channel in the mobile switching network, such as a voice channel or an SMS channel The verification code is sent to the mobile terminal corresponding to the user name; or, the application server returns the verification code to the user terminal through the IP routing channel used by the user terminal to send the network service login request, and through the trusted channel in the mobile switching network, For example, the voice channel or the short message channel sends the random sequence code to the mobile terminal corresponding to the user name.

It should be noted that the mobile terminal corresponding to the user name provided in this embodiment specifically includes the following situations: Situation 1: If the user name in the network service login request sent by the user is a mobile phone number, the application server can receive The mobile phone number is obtained in the login request, and after applying the authentication algorithm to calculate a random sequence code and a verification code to generate the first verification information corresponding to the user, the mobile phone number can be passed through the trusted channel in the mobile switching network, such as voice The channel or short message channel sends the random sequence code or verification code to the mobile terminal corresponding to the mobile phone number. Case 2: If the user name in the network service login request sent by the user is not a mobile phone number, the application server obtains the user name from the network service login request sent by the user, and queries the user information stored locally. The registration information of the user applying for the network service includes the user name and the mobile phone number bound to it, so that the application server judges whether the mobile phone number corresponding to the user name is included according to the user information. If the application server can obtain the mobile phone number corresponding to the user name from the user information, and then apply the authentication algorithm to calculate a random sequence code and a verification code to generate the first verification information corresponding to the user, it can pass A trusted channel in the mobile switching network, such as a voice channel or a short message channel, sends the random sequence code or verification code to the mobile terminal corresponding to the mobile phone number. If the application server cannot obtain the mobile phone number corresponding to the user name from the user information, it means that the user did not provide a bound mobile phone number during registration, so the application server sends a mobile phone number verification request to the user terminal, Prompt the user to resend the network service login request with the mobile phone number as the user name, so that when the user receives the mobile phone number verification request sent by the application server through the user terminal, re-enter a mobile phone number as the user name to resend the network service to the application server Login request.

It is worth noting that the mobile terminal in this embodiment is a terminal device such as a mobile phone or a smart phone, and the user terminal includes a personal computer, a notebook computer, a smart phone, etc. Therefore, the mobile terminal and the user terminal in this embodiment can be the same or can be Different, for example, when the user uses a smart phone to access the network, and the mobile phone number of the smart phone is used as the user name or as the mobile phone number bound to the user name, then the user terminal and the mobile terminal are the same terminal device; when the user If a laptop is used for network access, and the mobile phone number of the mobile phone is used as the user name or as the mobile phone number bound to the user name, then the user terminal and the mobile terminal are not the same terminal device.

Step 102, receiving a network service verification request sent by the user terminal and including second verification information, and determining whether the first verification information and the second verification information are the same to verify whether the user is legal, wherein the first The second verification information is generated by the user terminal by calculating the random sequence code and the verification code according to a locally stored authentication algorithm. If the verification is valid, the user is allowed to log in.

When the user receives the random sequence code returned by the application server through a trusted channel in the mobile switching network, such as a voice channel or a short message channel, through the mobile terminal, the random sequence code is input into the user terminal, so that the user terminal uses the authentication algorithm stored locally Calculate the random sequence code input by the user and the verification code returned by the application server through IP routing to generate the second verification information corresponding to the user; or, when the user receives the application server through the mobile terminal through the trusted channel in the mobile switching network , such as the verification code returned by the voice channel or SMS channel, input the verification code into the user terminal, so that the user terminal performs verification on the verification code entered by the user and the random sequence code returned by the application server through the IP route according to the authentication algorithm stored locally. Calculate and generate second verification information corresponding to the user. Then the user sends a network service verification request containing the second verification information to the application server through the user terminal, so that the application server parses the received network service verification request to obtain the second verification information, and uses the first verification information generated by itself to obtain the second verification information. The information is compared with the second verification information to determine whether they are the same to verify whether the user is legal. If the first verification information is the same as the second verification information, it means that the user is legal, and the user is allowed to log in to perform related network services. If the first If the verification information is different from the second verification information, it means that the user is not legal, and the user is not allowed to log in and the user is prompted to log in again.

In the network service login method provided in this embodiment, after the application server receives the network service login request, it calculates a random sequence code and a verification code according to an authentication algorithm to generate first verification information, and then combines the random sequence code with the verification code The codes are sent to the user terminal through the IP route, and sent to the mobile terminal corresponding to the user name through the mobile switching network. When receiving the second verification generated by the user terminal according to the local authentication algorithm, the random sequence code and the verification code are calculated. Information, determine whether the first verification information and the second verification information are the same to verify whether the user can log in legally, thereby realizing the transmission of verification information through the two channels of the mobile switching network and IP routing to verify the legitimacy of the user, simplifying the user's The login process avoids the hidden danger of user passwords being intercepted when transmitted in a single channel of information, and improves the security and ease of use of user network services.

Fig. 2 is a flow chart of another embodiment of the network service login method of the present invention. As shown in Fig. 2, the method includes:

Step 200, receiving the user name of the website to be logged in input by the user, and sending a network service login request including the user name to the application server corresponding to the website;

Step 201, receiving the random sequence code sent by the application server through IP routing, and the verification code input by the user and received by the mobile terminal corresponding to the user name and sent by the application server through the mobile switching network, or , receiving the verification code sent by the application server through IP routing, and the random sequence code input by the user and received by the mobile terminal corresponding to the user name and sent by the application server through the mobile switching network, wherein the The random sequence code and the verification code are calculated by the application server according to the preset authentication algorithm after receiving the network service login request to generate the first corresponding to the user. - Random sequence code and verification code used when verifying information;

Step 202: Calculate the random sequence code and the verification code according to the local pre-stored authentication algorithm to generate second verification information corresponding to the user, and send a message containing the second verification information to the application server A network service verification request, used by the application server to verify whether the user is legal according to the first verification information and the second verification information to determine whether to allow the user to log in.

It should be noted that, after sending the network service login request including the user name to the application server corresponding to the website, the method further includes: if receiving the request from the application server for prompting the user to use the mobile phone number as the user name mobile phone number verification request, send a network service login request including the mobile phone number to the application server.

For the functions and processing flow of each module in the network service login method provided in this embodiment, refer to the method embodiment shown in FIG. 1 above. The implementation principles and technical effects are similar, and will not be repeated here.

Those of ordinary skill in the art can understand that all or part of the steps for realizing the above-mentioned method embodiments can be completed by hardware related to program instructions, and the aforementioned program can be stored in a computer-readable storage medium. When the program is executed, the It includes the steps of the above method embodiments; and the aforementioned storage medium includes: ROM, RAM, magnetic disk or optical disk and other various media that can store program codes.

Figure 3 is a schematic structural diagram of an embodiment of the application server of the present invention, as shown in Figure 3, the application server includes: a first processing module 11, a second processing module 12 and a verification module 13, wherein the first processing module 11 is used for Receive a network service login request including a user name sent by a user through a user terminal, and calculate a random sequence code and a verification code according to a preset authentication algorithm to generate first verification information corresponding to the user; the second processing module 12 is used to send the random sequence code to the user terminal through the IP route, and send the verification code to the mobile terminal corresponding to the user name through the mobile switching network, or send the verification code to the user terminal through the IP route, and send the random sequence code The code is sent to the mobile terminal corresponding to the user name through the mobile switching network; the verification module 13 is used to receive the network service verification request sent by the user terminal and including the second verification information, and determine whether the first verification information and the second verification information are the same To verify whether the user is legal, wherein the second verification information is generated by the user terminal by calculating the random sequence code and the verification code according to the locally stored authentication algorithm, and if the verification is legal, the user is allowed to log in.

Wherein, if the user name is a mobile phone number, the second processing module 12 is specifically configured to: send the random sequence code to the user terminal through IP routing, and send the verification code to the mobile phone number corresponding to the mobile phone number through the mobile switching network. terminal, or send the verification code to the user terminal through IP routing, and send the random sequence code to the mobile terminal corresponding to the mobile phone number through the mobile switching network; if the user name is not a mobile phone number, the second processing module 12 specifically It is used for: if the mobile phone number corresponding to the user name is obtained according to the pre-stored user information, the random sequence code is sent to the user terminal through IP routing, and the verification code is sent to the mobile terminal corresponding to the mobile phone number through the mobile switching network, or , send the verification code to the user terminal through IP routing, and send the random sequence code to the mobile terminal corresponding to the mobile phone number through the mobile switching network; if the mobile phone number corresponding to the user name is not obtained according to the user information, then send it to the user terminal Mobile phone number verification request, prompting the user to resend the network service login request with the mobile phone number as the user name.

For the functions and processing flow of each module in the application server provided by this embodiment, refer to the method embodiment shown in FIG. 1 above. The implementation principles and technical effects are similar and will not be repeated here.

Fig. 4 is a schematic structural diagram of an embodiment of the user terminal of the present invention. As shown in Fig. 4, the user terminal includes: a login request module 21, an acquisition module 22 and a verification request module 23, wherein the login request module 21 is used to receive user input The user name of the website to be logged in, and send a network service login request including the user name to the application server corresponding to the website; the acquisition module 22 is used to receive the random sequence code sent by the application server through IP routing, and the user input, The verification code sent by the application server through the mobile switching network received by the mobile terminal corresponding to the user name, or the verification code sent by the application server through the IP route, and the application input by the user and received by the mobile terminal corresponding to the user name The random sequence code sent by the server through the mobile switching network, wherein the random sequence code and verification code are calculated and generated by the application server according to a preset authentication algorithm after receiving the network service login request. The random sequence code and verification code used for the first verification information corresponding to the user; the verification request module 23 is used to calculate the random sequence code and verification code according to the local pre-stored authentication algorithm to generate the second verification information corresponding to the user, and Sending a network service verification request including the second verification information to the application server, so that the application server verifies whether the user is legal according to the first verification information and the second verification information to determine whether to allow the user to log in.

Further, the obtaining module 22 is also configured to receive a mobile phone number verification request sent by the application server for prompting the user to use the mobile phone number as the user name after sending the network service login request including the user name to the application server corresponding to the website The login request module 21 is also used to send a network service login request including a mobile phone number to the application server.

For the functions and processing flow of each module in the user terminal provided in this embodiment, refer to the method embodiment shown in FIG. 2 above. The implementation principles and technical effects are similar, and will not be repeated here.

Fig. 5 is a schematic structural diagram of an embodiment of the network service login system of the present invention. As shown in Fig. 5, the system includes: a mobile terminal 1, an application server 2 and a user terminal 3, wherein the application server 2 and the user terminal 3 can use this The application server and the user terminal provided in the embodiment of the invention, the mobile terminal 1 is the mobile terminal involved in the shown embodiment of the invention.

For the functions and processing flow of each module in the network service login system provided by this embodiment, refer to the method embodiment shown above, and its implementation principle and technical effect are similar, and will not be repeated here.

Finally, it should be noted that: the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit them; although the present invention has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art should understand that: it can still be Modifications are made to the technical solutions described in the foregoing embodiments, or equivalent replacements are made to some of the technical features; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the spirit and scope of the technical solutions of the various embodiments of the present invention.

Claims (10)

1. A network service login method, characterized in that, comprising: receiving a network service login request including a user name sent by a user through a user terminal, and calculating a random sequence code and a verification code according to a preset authentication algorithm to generate first verification information corresponding to the user; Send the random sequence code to the user terminal through IP routing, and send the verification code to the mobile terminal corresponding to the user name through the mobile switching network, or send the verification code to the user terminal through IP routing The user terminal, and sending the random sequence code to a mobile terminal corresponding to the user name through a mobile switching network; receiving a network service verification request sent by the user terminal and including second verification information, and determining whether the first verification information and second verification information are the same to verify whether the user is legal, wherein the second verification information It is generated by the user terminal calculating the random sequence code and the verification code according to the locally stored authentication algorithm, and if the verification is valid, the user is allowed to log in. 2. The network service login method according to claim 1, characterized in that, If the user name is a mobile phone number, The sending to the mobile terminal corresponding to the user name is specifically: Send to the mobile terminal corresponding to the mobile phone number; If the user name is not a mobile phone number, The sending to the mobile terminal corresponding to the user name is specifically: If the mobile phone number corresponding to the user name is obtained according to the prestored user information, then it is sent to the mobile terminal corresponding to the mobile phone number; If the mobile phone number corresponding to the user name is not obtained according to the user information, a mobile phone number verification request is sent to the user terminal, prompting the user to resend the network service login request using the mobile phone number as the user name. 3. The network service login method according to claim 1 or 2, wherein the mobile terminal is the user terminal. 4. A network service login method, characterized in that, comprising: receiving the user name of the website to be logged in input by the user, and sending a network service login request including the user name to the application server corresponding to the website; receiving the random sequence code sent by the application server through the IP route, and the verification code input by the user and received by the mobile terminal corresponding to the user name and sent by the application server through the mobile switching network, or receiving the The verification code sent by the application server through IP routing, and the random sequence code input by the user and received by the mobile terminal corresponding to the user name and sent by the application server through the mobile switching network, wherein the random sequence The code and the verification code are the first verification information corresponding to the user generated by the application server calculating a random sequence code and a verification code according to a preset authentication algorithm after receiving the network service login request The random sequence code and verification code used at the time; Calculate the random sequence code and the verification code according to the local pre-stored authentication algorithm to generate second verification information corresponding to the user, and send the network service verification including the second verification information to the application server A request is used for the application server to verify whether the user is legal according to the first verification information and the second verification information to determine whether to allow the user to log in. 5. The network service login method according to claim 4, characterized in that, after sending the network service login request including the user name to the application server corresponding to the website, the method further comprises: receiving a mobile phone number verification request sent by the application server for prompting the user to use the mobile phone number as the user name; Sending a network service login request including a mobile phone number to the application server. 6. An application server, characterized in that, comprising: The first processing module is configured to receive a network service login request including a user name sent by a user through a user terminal, and calculate a random sequence code and a verification code according to a preset authentication algorithm to generate a corresponding to the user first verification information; The second processing module is configured to send the random sequence code to the user terminal through IP routing, and send the verification code to the mobile terminal corresponding to the user name through the mobile switching network, or send the The verification code is sent to the user terminal through IP routing, and the random sequence code is sent to the mobile terminal corresponding to the user name through the mobile switching network; A verification module, configured to receive a network service verification request sent by the user terminal and including second verification information, and determine whether the first verification information and the second verification information are the same to verify whether the user is legal, wherein the The second verification information is generated by the user terminal by calculating the random sequence code and the verification code according to a locally stored authentication algorithm, and if the verification is valid, the user is allowed to log in. 7. The application server according to claim 6, characterized in that, If the user name is a mobile phone number, The second processing module is specifically configured to: send the random sequence code to the user terminal through IP routing, and send the verification code to the mobile terminal corresponding to the mobile phone number through a mobile switching network, or, sending the verification code to the user terminal through IP routing, and sending the random sequence code to the mobile terminal corresponding to the mobile phone number through a mobile switching network; If the user name is not a mobile phone number, The second processing module is specifically configured to: if the mobile phone number corresponding to the user name is obtained according to the pre-stored user information, then send the random sequence code to the user terminal through IP routing, and send the verification code Send the mobile terminal corresponding to the mobile phone number through the mobile switching network, or send the verification code to the user terminal through IP routing, and send the random sequence code to the mobile phone through the mobile switching network The mobile terminal corresponding to the number; if the mobile phone number corresponding to the user name is not obtained according to the user information, a mobile phone number verification request is sent to the user terminal, prompting the user to use the mobile phone number as the user name to resend the network service Login request. 8. A user terminal, characterized in that, comprising: The login request module is configured to receive the user name of the website to be logged in input by the user, and send a network service login request including the user name to the application server corresponding to the website; An acquisition module, configured to receive the random sequence code sent by the application server through IP routing, and the verification code input by the user and received by the mobile terminal corresponding to the user name and sent by the application server through the mobile switching network , or, receiving the verification code sent by the application server through the IP route, and the random sequence code input by the user and received by the mobile terminal corresponding to the user name and sent by the application server through the mobile switching network, wherein The random sequence code and the verification code are calculated by the application server according to a preset authentication algorithm after receiving the network service login request to generate a random sequence code and a verification code corresponding to the user. The random sequence code and verification code used for the first verification information; A verification request module, configured to calculate the random sequence code and the verification code according to a locally prestored authentication algorithm to generate second verification information corresponding to the user, and send the second verification information containing the second verification information to the application server. A network service verification request for verification information, for the application server to verify whether the user is legal according to the first verification information and the second verification information to determine whether to allow the user to log in. 9. The user terminal according to claim 8, characterized in that, The acquisition module is further configured to receive the request sent by the application server for prompting the user to provide the mobile phone number after sending the network service login request including the user name to the application server corresponding to the website. Mobile phone number verification request as username; The login request module is further configured to send a network service login request including a mobile phone number to the application server. 10. A network service login system, comprising: a mobile terminal, the application server according to claim 6 or 7, and the user terminal according to claim 8 or 9.

Images