The invention provides a method for realizing automatic login of an APP (Application) at a swan Mongolia side, and belongs to the technical field of mobile terminal applications, when a user logs in for the first time, a
client encrypts and signs a user name and a
password and then sends the user name and the
password to a
server, and the
server verifies, decrypts and completes
authentication, generates a unique identity token, encrypts and returns the unique identity token; and the
client decrypts the identity token, persistently stores the identity token in a local secure
storage area, and establishes a local
encryption pool to store a user basic information
ciphertext. During subsequent starting, the
client preferentially reads the identity token, initiates a token
verification request to the
server and encrypts and signs a communication message; and the server verifies the validity period of the token and equipment binding information after decryption and signature
verification, if the token is valid, the client is allowed to unlock the local
encryption pool and directly enter the application, and if the token is invalid, the client cleans the token and
encryption pool data and prompts to log in again. According to the scheme, account passwords are prevented from being stored locally, the concurrent pressure of sensitive
information transmission and login is reduced, and the safety and the user experience are improved.