CN1389807A - System and method for managing website login information - Google Patents

Abstract

The invention relates to a system and a method for logging in different websites by using a single account password, which comprises the steps of receiving an account and a password input by a user, firstly confirming the identity of the user, searching a website login record file corresponding to the identity of the user, wherein the website login record file at least comprises a group of user login information used for logging in the website by the user, encrypting and coding the user login information in advance for protection, decoding the user login information corresponding to the website to be logged in by the user, and then transmitting the decoded user login information to the website to be logged in by the user for logging in.

Description

System and method for managing website login information

technical field

The present invention relates to a system and method for managing website accounts, in particular to a system and method for managing and protecting website login accounts and passwords, and using a single account and password to access multiple websites on the Internet.

Background technique

Since the European Union unifies the borders of various European countries, when you buy a ticket, you can use a single ticket to travel around Europe without changing the ticket frequently to match the countries you want to enter and exit. Similarly, in the Internet (Internet), general websites (Web Site) will require users to enter account numbers and passwords to verify user identity before they can use specific services or information, such as websites that provide shopping services or provide Websites with customized information require users to enter account numbers and passwords to identify them.

Therefore, when a user applies to become a member of a website or applies for a service provided by it, the user is usually required to fill in basic personal information and give the user account number and password, or the user is required to set the account number and password by himself. , use this account number and password to identify the user's network identity to provide customized services.

However, in fact, most users have passwords and accounts for multiple websites at the same time. Most users manage the location of these websites through the bookmark management function provided by the browser, but these functions cannot manage passwords and accounts, or cannot Protect private information such as passwords and account numbers, and these passwords and account numbers are often different, so users usually need to remember the account numbers and passwords of individual websites, which causes great harm to users when managing these website account numbers and passwords Inconvenience and burden.

Furthermore, when a user wants to log in to a website, he must first use a browser (webbrowser) to link to the user login page of the website, and then the user can enter his account password to log in, but if the user login page is too large , the user must spend a longer time waiting for the webpage to be completely displayed on the browser before performing the login action, which also means that more network bandwidth and user waiting time must be occupied, so the above Various shortcomings need to be improved.

Contents of the invention

In view of the many shortcomings of the above-mentioned background of the invention for managing website accounts and passwords on the Internet, the present invention provides a method for managing and protecting website login accounts and passwords, and using a single account and password to access multiple websites on the Internet systems and methods.

The main purpose of the present invention is to manage account numbers and passwords used by users when logging into websites. Another object of the present invention is to protect the account number and password used by the user when logging into the website. Another object of the present invention is to save the network bandwidth occupied by the user when logging into the website. Another object of the present invention is to allow users to quickly log in to the website.

According to the above-mentioned purpose, the present invention provides a method for recording user login information of a website, including: receiving the website login information input by the user, wherein the login information at least includes an account number, a password, and a website user The URL of the login page and validates the login information entered by the user. Encryption encodes the authenticated login information, and stores the encrypted login information.

Among them, the steps of verifying the login information input by the user at least include: searching for the variable name used to store the login information in the source code of the user login webpage, and a verification address for verifying the login information; sending the login information to the verification address; And obtain the message returned by the verification address to know whether the login information sent is correct.

In addition, the present invention also provides a method for logging in different websites with a single account password, which includes receiving an account number and password input by a user, and first confirming the identity of the user. Find a website login record file corresponding to the user identity, wherein the website login record file contains at least one set of user login information used by the user to log in to the website, and the user login information is encrypted and protected in advance. Decoding the user login information corresponding to the website that the user wants to log in, and then sending the decoded user login information to the website that the user wants to log in for login. Therefore, the user only needs to enter the account password once to confirm the user identity, and then only needs to select the website to log in to log in, without entering different user login account numbers and passwords for individual websites.

Known from the above, the present invention can provide users with fast login to different websites, and the user does not need to remember the account information used to log in to the respective websites, and the account numbers and passwords of these websites are stored and then encrypted and stored for use. It is used to protect the user's personal information in the computer at the end of the website. Furthermore, it can save the network bandwidth occupied by the user when logging in to the website and allow the user to quickly log in to the website.

Description of drawings

Figures 1a to 1c show a browser screen with a preferred embodiment of the present invention;

Fig. 2 is used to illustrate the flow chart of the user's operation steps in this preferred embodiment;

FIG. 3a is a flow chart illustrating the processing steps of verifying a newly added website login information in a preferred embodiment of the present invention;

Fig. 3b is a flow chart illustrating how to obtain relevant information from HTML program code;

Fig. 4 is used to illustrate the flow chart of the steps of the preferred embodiment of the present invention when processing the login website;

FIG. 5 is used to illustrate the website login management system of the present invention.

Description of main symbols in the figure

100 "Passport Open" option

102 dialog window

104 function menu

104a "Passport Verification" Option

106 Login Information Verification Window

200~204 step blocks

300~310 step blocks

400~406 step blocks

500 input section

502 verification part

502a search section

502b verification transmission part

502c determination part

504 encryption part

506 storage part

508 decryption part

510 transmission part

Detailed ways

A preferred embodiment of the present invention will be described in detail as follows. However, the invention can be practiced broadly in other embodiments than those described in detail, and the scope of the invention should not be limited except by the claims.

The invention provides a method for recording user login information of a website, comprising: receiving website login information input by a user, wherein the login information at least includes an account number, a password, and a website address of a user login web page of the website; The login information entered by the user; the encrypted login information verified; and the stored encrypted login information.

Among them, the steps of verifying the login information input by the user at least include: searching for the variable name used to store the login information in the source code of the user login webpage, and a verification address for verifying the login information; sending the login information to the verification address; And obtain the message returned by the verification address to know whether the login information sent is correct.

In addition, the present invention also provides a method for logging in to different websites using a single account password, which includes receiving an account number and password input by a user to confirm the user's identity; finding a website login record file corresponding to the user's identity , where the website login record file contains at least one set of user login information used by the user to log in to the website, and the user login information is encrypted and protected in advance; the user login information corresponding to the website that the user wants to log in is translated code; send the decoded user login information to the website that the user wants to log in to log in, so the user only needs to enter the account password once to confirm the user's identity, and then only need to select the website to log in It is possible to log in without inputting different user login IDs and passwords for individual websites.

Fig. 1a to Fig. 1c show the browser (browser) screen of a preferred embodiment of the present invention, and this preferred embodiment embeds a management program in this browser in order to manage and protect the relevant account password that will link and log in website, However, in other embodiments, the present invention can be implemented in other ways, and it is not limited to be combined with a browser. As shown in Figure 1a, after the user clicks "Open Passport" 100, a dialogue window 102 appears to require the user to enter the account password, and before the user has not entered the correct account password, it is impossible to use and perform other actions, and then After the user enters the correct account password, the other function menu 104 as shown in Figure 1b can be used, wherein the above-mentioned account password that requires the user to use "passport to open" is a group for activating the management program Account password, the user only needs to use this single account password to manage other website account passwords, and does not need to memorize the user login account passwords of individual websites, which is used to facilitate users to log in to websites on the Internet.

As shown in Figure 1b, when the user clicks the "passport verification" option 104a, a website login information verification window 106 will appear, requiring the user to input the website account number and password to be verified. For example, in this preferred embodiment, use The user wants to add and manage a website (http://www.pchome.com.tw), so the user enters this user on the website login information verification window 106 (http://www.pchome.com.tw. tw) a group of account passwords, and then the verification work is performed by the management program. If the group of account passwords provided by the user is correct, the group of account passwords will be reserved and protected by encoding. To log in to the website (http://www.pchome.com.tw), you don’t need to enter the account password again. You only need to directly select the verified website name as shown in Figure 1c, and you can directly complete the login of the original website program.

Therefore, it is known from the above that the present invention can provide users with fast login to different websites, and the user does not need to remember the account information used to log in to the respective websites. Furthermore, the present invention stores the account numbers and passwords of these websites through Encrypted codes are stored in the user's computer to protect the user's personal information.

FIG. 2 is used to illustrate the user's operation steps in this preferred embodiment. After the user activates the management program 200, he then enters an account number and password 202 required to activate the management program to open the function option 204. , the functions in this preferred embodiment are mainly to provide website login information verification 204a, website login information management 204b and website login 204c. Among them, the website login information verification 204a function is used to verify a website login account password that the user wants to add, and the verified account password is encrypted and stored; the website login information management 204 function is used to manage the above-mentioned stored websites The login account information, the user can classify and manage or comment on it; the link website 204c function is used to provide the user to directly log in to the selected website without inputting the login account information of each website.

Fig. 3 a is used to explain the flow chart of the processing steps of the present invention when verifying a newly added website account password. First, the website URL, account number and password 300 input by the user are received. This account number and password are used by the user to log in to this website. The identification information of the website, and then obtain the user login page according to the website URL entered by the user, find the relevant information 302 about the account number and password in this page, and then send the user account number and password to the website 304 for user Log in, if this group of account passwords is not accepted, the user is required to enter the account password 306 again, and then the correct account password that can be used to log in is encrypted and protected 308 and then stored 310. In a preferred embodiment of the present invention, it is encrypted The way of encoding is to use the RSA public/private key algorithm, but the present invention does not limit the use of other encryption and encoding methods in other embodiments. Wherein the processing method of the relevant information of above-mentioned looking for relevant account number and password in the webpage is described as follows, for example in this preferred embodiment the address of the user login webpage of its website is http://www.pchome.com.tw, wherein this Part of the html (Hypertext Markup Language, Hypertext Markup Language) program fragment for the user to log in to the webpage is as follows:

           
    <form method=POST action=http://mail.pchome.com.tw/adm/
flogin.php3>

    <td bgcolor="6FBA52"width="124"class="text"align="center"><img
width="1" height="2">

    <a href="http://mail.pchome.com.tw/"style="color: white"> Email
</a>

    ＜/td＞

    <td valign="top" width="6"><img src="/img/a.gif"width="6"
height="6"border="0"alt=""></td></tr></table>

    <img width="1" height="3"><br>

    <table width="130" border="0" cellspacing="0" cellpadding="6"
bgcolor="BBD976"><tr><td align="center">

    <table border="0"cellspacing="0"cellpadding="0"width="110">

    <tr><td class="text3"><span style="color: white">account
</span></td><td><img width="2"height="3"></td>

    <td><input type="text" name="fuid" size="8"
maxlength="20"></td></tr>

    <tr><td class="text3"><span style="color: white">password
</span></td><td><img width="2"height="3"></td>

    <td><input type="password" name="fpass" size="8"
maxlength="20"></td></tr＞

    </table><img height=3 width=1><br>

    <table width="115"border="0"cellspacing="0"
cellpadding="0"＞＜tr＞＜td＞&nbsp;

    <a href="http://isp.pchome.com.tw/registe/"style="color: white; font-
size: 9pt;″>Join member</a>

    </td><td align="right"><input type="submit" value="login
″＞＜/td＞＜/tr＞＜/table＞

    </td></form>

        

Wherein, it can be known from <form action=″...″metho=″post”> that the website is used to verify the verification program location of the account number and password input by the user, as in this embodiment: http: //mail.pchome.com.tw/adm/flogin.php3

Obtain all the character strings marked with <input> tags again, as in this embodiment:

<input type="text" name="fuid" size="8" maxlength="20">

<input type="password" name="fpass" size="8" maxlength="20">

Among them, if <input type='text'...> means user account, <input type=password...> means user password, <input type=hidden...> means hidden data, so It can be seen from the above hypertext markup language) program fragment that after the user enters the account password for login, the website will store the account number entered by the user in the variable name "fuid", and the password will be stored in In the variable name "fpass", then send these login information to "http://mail.pchome.com.tw/adm/flogin.php3" to verify user identity.

Therefore, the step 302 of finding relevant information about the account number and password in the webpage in FIG. Obtain the information 314 contained in the tag <form> in the hypertext markup language program code, and then analyze the data 316 needed for logging into the website from the above-mentioned extracted data, and finally analyze the obtained data Result storage 318, wherein the analyzed data includes the variable name of the website for storing the account password and the location of the verification login information, so that the present invention allows the user to only need to input the user login account password of the website once, and Through the verification of this account password, if the user wants to log in to the website again next time, the present invention will automatically send the login information to the website for user login, and the user does not need to input again. In this preferred embodiment The transfer protocol used in is Hypertext Transfer Protocol (Hypertext Transfer Protocol, HTTP), but the present invention is not limited to this transfer protocol. Furthermore, since the user does not need to connect to the user login page of the website to log in, it also means that the network bandwidth can be saved.

Fig. 4 is used to illustrate the processing flow steps of the preferred embodiment of the present invention when logging in to the website, as shown in Fig. 1c, when the user selects a verified website name, at first read the desired online website selected by the user The login information 400, the login information at least includes the user account password used to log into the website, the location of the website to verify the login information, and other information required by the website, and then decrypt the previously encrypted login information 402, Then send the user's login information to the site for verifying the login information to perform verification login 404 , and finally the user login is completed 406 .

Fig. 5 is a preferred implementation structure diagram of the management system for website login of the present invention, which at least includes an input part 500, a verification part 502, an encryption code part 504, a storage part 506, a decryption part 508, and a transmission part 510 and a central processing unit. Wherein, the input part 500 is used to receive a plurality of website login information input by a user, each website login information includes a user login account corresponding to the website, and is used to confirm the identity of the user, so that it can log in this website In the management system for website login, the verification part 502 can be divided into three parts: a search part 502a, which is used to search for a variable name used to store the website login information in the source code of the user's login webpage, and the website user A verification user identity address to verify the website login information; a verification transmission part 502b, used to transmit the website login information to the verification user identity address from the variable name; and a determination part 502c, used to obtain A message sent back from the user's identity address to verify whether the sent login information of the website is correct.

Next, the website login information verified by the verification part 502 is encrypted and protected by the encryption code part 504, and then stored in the storage part 506 to maintain the confidentiality of the website login information, wherein the above-mentioned storage part 506 is a The data storage medium is, for example, a disk storage device or a flash memory.

Then when the user wants to log in to a website, the user login information corresponding to the website that the user wants to log in stored in the storage part 506 is decrypted by the decryption part 508, and then the decrypted website login information is sent through the transmission part 510 information to the corresponding web server.

Known from the above, the present invention can provide users with fast login to different websites, and the user does not need to remember the account information used to log in to the respective websites, and the account numbers and passwords of these websites are stored and then encrypted and stored for use. It is used to protect the user's personal information in the computer at the end of the website. Furthermore, it can save the network bandwidth occupied by the user when logging in to the website and allow the user to quickly log in to the website.

The above descriptions are only preferred embodiments of the present invention, and are not intended to limit the protection scope of the present invention; all other equivalent changes or modifications that do not deviate from the spirit disclosed in the present invention should be included in the claims In the range.

Claims (10)

1. A management system for website login, characterized in that it comprises: An input part for receiving a plurality of website login information input by a user, wherein each of the website login information includes a user login account of a corresponding website; a storage section for storing the login information of the plurality of websites; and A sending part, according to the selection of the user, sends one of the stored website login information to the corresponding website. 2. The website login management system as claimed in claim 1, wherein each of the above-mentioned website login information further includes a login web address and a password. 3. The management system for website login as claimed in claim 1, further comprising a verification part for sending out the website login information and verifying the correctness of the website login information, and the verification part includes: a search part for searching a variable name used to store the login information of the website in the source code of the user's login webpage, and a verification user identity address used by the website to verify the login information of the website; a verification transmission part, which transmits the login information of the website to the verification user identity address according to the variable name; and A judging part obtains a message sent back from the verified user's identity address to verify whether the sent login information of the website is correct or not. 4. The management system for website login as claimed in claim 1, further comprising an encoding part and a decoding part, wherein the encoding part encodes the website login information and then stores it in the storage part , to maintain the confidentiality of the website login information, and the decoding part is used to decode the encoded website login information before it is transmitted. 5. The management system for website login as claimed in claim 1, further comprising a confirmation part for receiving a user login message input by the user to confirm the identity of the user so as to allow him to log in the A management system for website logins. 6. A method for managing website login, characterized in that it comprises: receiving a plurality of website login information input by a user, wherein each website login information includes a user login account of a corresponding website; store the login information for the plurality of websites; and According to the user's selection, one of the stored website login information is sent to the corresponding website. 7. The method for managing website login as claimed in claim 6, wherein each of the above-mentioned website login information further includes a login web address and a password. 8. The method for managing website login as claimed in claim 6, further comprising sending out the website login information and verifying the correctness of the website login information, wherein the verifying step comprises: Search for a variable name used to store the website login information in the source code of the user's login webpage, and a verification user identity address used by the website to verify the website login information; From the variable name, send the website login information to the verified user identity address; and Obtain a message sent back by the verified user identity address to verify whether the sent login information of the website is correct. 9. The method for managing website login as claimed in claim 6, further comprising encoding the website login information, and then performing the storing step to maintain the confidentiality of the website login information, and Encoded website login information is decoded before being transmitted. 10. The method for managing website login as claimed in claim 6, further comprising receiving a user login message input by the user to confirm the identity of the user so as to allow him to log in to the management of the website login system.

Images