Method for realizing single sign-on assets based on two-dimensional code identity authentication

Abstract

The invention discloses a method for realizing single sign-on assets based on two-dimensional code identity authentication, which includes the following steps: an ordinary user selects an asset withinthe permission scope at the login portal of a WEB 4A, and clicks on the login; a 4A background judges whether the login account and asset password of the asset have been taken over by 4A, a login two-dimensional code is generated if the login account and asset password of the asset have been taken over by 4A, otherwise, the user logs in by inputting an account and a password; a background database queries the login status of the login user on a palm 4A, a message is directly sent to the palm 4A of the user if the user has logged in, otherwise, the user is reminded to log into the palm 4A; theuser logs into the palm 4A and scans a two-dimensional code; and the palm 4A sends a confirmation message to the Web 4A, and the Web 4A logs into the asset after receiving the confirmation message. Thorough security verification can be conducted for the situation in which the accounts and passwords of assets are completely taken over by a 4A platform. By transforming the asset information into atwo-dimensional code form, second authentication of user identity can be realized by code scanning authentication with the aid of a palm 4A. The security of assets and the legitimacy of personnel identity are ensured.

Description

Technical field [0001] The invention relates to the technical field of computer network information security, in particular to a method for realizing single sign-on assets based on a two-dimensional code identity authentication method. Background technique [0002] The 4A platform is divided into a management portal and a login portal. The management portal is mainly for the administrators of the 4A platform, including account administrators, authorized administrators, audit administrators, and business administrators. These administrators mainly use the 4A management portal to manage people, things, and things in the enterprise, such as the life cycle management of user accounts, assets, user operation authorization management, that is, which assets users can access, audits after users access assets, User login platform authentication mode configuration, etc. The login portal is mainly for ordinary users. After the administrator completes the configuration and management of the...

AI Technical Summary

Problems solved by technology

[0005] The second granularity: the 4A platform can take over the assets in the enterprise, but does not manage the asset account and password, and requires the user to manually enter the asset account and password when logging in;

[0007] For the first type of takeover granularity, the user does not need to enter any asset account number or password, and can directly log in to the asset with one click, which brings certain security risks while being convenient to use

Images