Client-based single sign-on method and system

Abstract

The invention discloses a single-point login method and system based on a client, and relates to the field of browser login application. The method comprises the following steps: a server creates a white list file, wherein the white list file comprises the login information of all registered users, and login authority corresponding to each piece of login information; the client uploads the login information of the user to the server, the server confirms the presence of the login information in the white list file, generates a random number according to the login information and issues the random number to the client; the server verifies the random number uploaded by the client, and the client obtains all application systems with login information having the login authority, and generates an application system integrated page according to the application systems. By adoption of the single-point login method and system, on the basis that the server only stores one piece of login information of each user, single-point login is achieved, thereby greatly reducing the memory of the server and improving the service efficiency and quality of the server.

Description

technical field [0001] The invention relates to the field of browser login applications, in particular to a client-based single sign-on method and system. Background technique [0002] Users can log in through a browser to enter an application system and access relevant data of the application system. The existing browser login method is as follows: each time an application system is logged in, the login information (user name and password) needs to be input for login verification. When logging into multiple mutually trusted application systems, it is cumbersome to input multiple login information. Not only is the operation efficiency low, but multiple input may cause the login information to be leaked, and there are certain hidden dangers in security. [0003] In order to solve the above problems, the industry has proposed a single sign-on method: in multiple mutually trusted application systems, the user only needs to enter the login information once when logging in to ac...

AI Technical Summary

Problems solved by technology

[0005] (1) When there are many users, the number of login information stored on the server is relatively large, which not only takes up memory, but also has a mapping relationship between too many login information, and its logic is more complicated, which seriously aggravates the load on the server. thereby reducing work efficiency and quality

[0006] (2) During the single sign-on process, the server is only responsible for automatically obtaining and entering the corresponding login information when the user enters the application system, which determines that the server cannot perform operations and management on user behavior

Images