Login token generation and authentication method, device thereof, and storage medium

Abstract

The present invention relates to security techniques, and discloses a login token generation and authentication method, an electronic device thereof and a storage medium. That method comprises the steps of receiving account information and related information sent by a client, verifying the account information, and when the verification is passed, determining the access time of the client according to the mapping relationship between the related information and the preset related information and the access time. Then, according to the related information and the access time, the related information and the access time are encrypted by using a public key and a preset asymmetric encryption algorithm to generate a login token, and the login token is transmitted to the client. Finally, an access request of a client carrying a login token is received, whether the login token carried by the client is the generated login token is verified by using a preset authentication rule according to a private key corresponding to the public key, and permits the client to access if the authentication is passed. By using the method, the device thereof and the storage medium, the safety of informationexchange in the interaction process between the client and the server can be improved, and the hidden danger of safety can be reduced.

Description

technical field [0001] The present invention relates to the field of security technology, in particular to a login token generation and verification method, device and computer-readable storage medium. Background technique [0002] A login token is an identity authentication or token that represents the execution of certain operation instructions, such as a token token. During the interaction between the client and the server, in order to improve the security of information interaction, the server will send a login token to the client and store it in the local memory. When the client accesses the web page of the server, it calls the login token stored locally and sends it to the server for verification and access to data. At present, the login token is generally randomly generated by a string of unintentional character strings. After the client receives the login token, it stores it in the browser cookie. Once the cookie is leaked, it will bring security risks to the user. ...

AI Technical Summary

Problems solved by technology

At present, the login token is generally randomly generated by a string of unintentional strings. After the client receives the login token, it stores it in the browser cookie. Once the cookie is leaked, it will bring security risks to the user.

Images