Safety logging method, system and device of mobile application

Abstract

The invention provides a safety logging method of a mobile application. The safety logging method includes the following steps that the encryption key arrangement is performed on the mobile application in a cloud server and a mobile terminal, and an encryption key is stored in the cloud server and the mobile terminal respectively; the cloud server receives a logging verification request sent by the mobile application, wherein the logging verification request comprises a user name and a first encryption string, and the first encryption string comprises information obtained after a user code is encrypted through the encryption key; the cloud server decrypts the first encryption string according to the encryption key so as to obtain the user code; the cloud server performs logging verification on the mobile terminal according to the user code. According to the safety logging method of the mobile application, through the encryption key arrangement, safety of a logging system on the mobile application is ensured, and user privacy is protected. The invention further discloses a safety logging system and the cloud server for the mobile application.

Description

technical field [0001] The invention relates to the technical field of mobile internet, in particular to a method, system and device for securely logging in to mobile applications. Background technique [0002] The growth of the Internet has also been accompanied by the growth of cybersecurity threats. Services in many websites can only be used after the user logs in. During the login process, the user's account number and password need to be transmitted. Many hackers maliciously steal user accounts and passwords by intercepting transmitted user login information, threatening the security of users' personal accounts. [0003] Generally, when a traditional login system submits a user login request, in order to ensure the safe transmission of the user password, it generally adopts a data transmission mechanism based on the SSL protocol, such as the HTTPS protocol. [0004] Under the domestic mobile network, using the https protocol will cause the following fatal problems: ...

AI Technical Summary

Problems solved by technology

[0005] (1) The gateways of some mobile operators do not support the https protocol, such as the earlier CMWAP gateways

[0006] (2) Due to the slow transmission speed of the mobile network itself, and the three-way SSL handshake process and the https certificate verification process in the https protocol, and the certificate verification agencies are all abroad, these lead to the use of the https protocol on the domestic mobile network. There is a problem with very slow response

[0009] (2) If the client uses an asymmetric encryption algorithm when encrypting the user password, the hacker cannot use the method in (1) to obtain the real password of the user

Therefore, account information is easily stolen, causing user information to be leaked and user accounts to be compromised.

Images