Method for logging on Web end in instant communication device

Abstract

Aiming at solving the problem of preventing a hacker from steeling account numbers and passwords of a user in the process of logging on the instant communication, the invention provides a method for logging on a Web end in an instant communication device. The method comprises the following steps that: an instant communication server submits a username to request to log on and access a Web server; the Web server redirects the instant communication server to a single logging-on server, generates an unique identity value by the username, and binds the identity value with the user to acquire assertion; the single logging-on server requests the instant communication server to provide a method of proving the identity; the instant communication server provides the account number and password and the unique identity of the instant communication server for the single logging-on server; the single logging-on server authenticates the password and searches and judges the unique identity, and then redirects the instant communication server to the original Web server; after the Web server checks the assertion of the single logging-on server, the instant communication server is provided with the service by utilizing the username to log on the Web server if the signature is right, and the service is refused to provide the service if the signature is faulty.

Description

Technical field: [0001] The invention relates to the fields of computer software and network communication, in particular to instant messaging technology, in particular to a method for logging into a Web terminal in an instant messaging tool. Background technique: [0002] Instant messaging (IM for short) has now become an important means for users to communicate through a network. With the ever-increasing demand for real-time business communication in recent years, there are currently many instant messaging tools, such as Tencent's QQ, Microsoft's MSN, and some enterprise instant messaging for enterprises, such as RTX and IBM's Sametime. [0003] At present, the enterprise instant messaging system adopts C / S structure and B / S structure. C / S refers to the structure of client and server, and B / S refers to browser and web server. The same account of enterprise instant messaging provides both client service and client service. In order to avoid the trouble of multiple logins,...

AI Technical Summary

Problems solved by technology

In order to avoid the trouble of multiple logins, there is only one login entry in the client, that is, after successfully logging in to the client, you can directly click to enter the Web side, reducing the procedures on the Web side, and to achieve such a function, some instant messaging The one-click login method is used in the service, that is, the client opens the browser and automatically logs in without re-entering the user's personal information. However, this method has security problems, such as the user's personal information is directly placed in the If the address bar of the browser is directly sent to the web server, then hackers (Hacker) will easily capture all user names and passwords, so that the account will be stolen by others and the benefits will be lost

Images