Authorization authentication method, system, intelligent terminal and storage medium

Abstract

The present invention belongs to the technical field of secure login authentication, and discloses an authorization authentication method, system, intelligent terminal and storage medium, wherein the method comprises: analyzing a user behavior path and a page link of a third-party software to obtain an analysis result; automatically generating a page according to the analysis result to obtain a customized authorization page of the authorization control software; obtaining current user information according to the user's authorization operation instruction allowed in the customized authorization page, and performing authentication on the authorization control software according to the current user information to complete the authorization of the third-party software. By automatically generating a customized authorization page according to the analysis result obtained by analyzing the user behavior path and the page link, and obtaining the current user information according to the input authorization operation instruction allowed, and then completing the authentication on the authorization control software according to the current user information, the third-party software is authorized efficiently and quickly, and the efficiency of authentication is improved.

Description

Technical Field

[0001] The present invention relates to the technical field of secure login authentication, and in particular to an authorization authentication method, system, intelligent terminal and storage medium. Background Art

[0002] At present, when the industry uses mobile applications to complete the third-party page authentication, it will guide users to the third-party website for authentication, and then return to the mobile APP (application). In this case, users may encounter the following problems:

[0003] 1. Poor user experience: The traditional mobile authentication process requires users to switch back and forth between applications and web pages, which leads to an unsmooth user experience and causes user fatigue and dissatisfaction.

[0004] 2. The authentication process is cumbersome: Most authentication processes require users to input a large amount of information or perform complex operations, which increases the user's authentication burden and reduces the user's willingness and efficiency in completing authentication.

[0005] 3. Security issues: When performing three-party authentication, the user's personal information may be at risk of being leaked or stolen, which requires additional security errors to protect the user's data security. Summary of the invention

[0006] The main purpose of the present invention is to provide an authorization authentication method, system, intelligent terminal and storage medium, aiming to solve the problem of complex authentication and poor authentication effect when performing authentication on a third-party page in the prior art.

[0007] In order to achieve the above object, the present invention adopts the following technical solutions:

[0008] In a first aspect, an embodiment of the present application provides an authorization authentication method, including:

[0009] Analyze the user behavior path and the page links of third-party software to obtain analysis results;

[0010] Automatically generate a page based on the analysis result to obtain a customized authorization page for the authorization control software;

[0011] The current user information is obtained according to the user's authorization operation instruction in the customized authorization page, and authentication is performed on the authorization control software according to the current user information to complete the authorization of the third-party software.

[0012] In some embodiments, the authorization authentication method further includes:

[0013] When the authorization control software performs authentication, the jump rate of the customized authorization page is analyzed, and the proportion of the operation instructions in the customized authorization page is adjusted according to the jump rate.

[0014] In some embodiments, the automatic generation of a page according to the analysis result to obtain a customized authorization page of the authorization control software further includes:

[0015] The third-party software is tested for security, and the code automatically generated by the page is tested for eligibility, so as to control the access rights of the unsafe third-party software and the use rights of the unqualified code.

[0016] In some embodiments, the obtaining of current user information according to the user's authorization operation instruction in the customized authorization page, and performing authentication on the authorization control software according to the current user information to complete the authorization of the third-party software, includes:

[0017] After receiving the authorization operation permission instruction input by the user in the authorization window in the customized authorization page, obtaining the pre-stored current user information;

[0018] The authentication form of the third-party software is automatically filled in on the authorization control software according to the current user information to complete the authorization of the third-party software.

[0019] In some embodiments, the analyzing of the user behavior path and the page link of the third-party software to obtain the analysis result includes:

[0020] Analyzing the jump relationship between the third-party software and the corresponding authorized software, the jump relationship between internal pages in the third-party software, and the items to be operated in the third-party software and the authorized software to obtain analysis results;

[0021] The user behavior path includes items to be operated in the third-party software and the authorized software.

[0022] In some embodiments, the automatically generating a page according to the analysis result to obtain a customized authorization page of the authorization control software includes:

[0023] When the analysis result is automatically written using network development technology, key items in the items to be operated are marked, and operation instructions are generated according to the status changes of the items to be operated and the current page, so as to generate the customized authorization page;

[0024] The key items include: form input fields, buttons, links, options, check boxes and various combinations of important prompt information.

[0025] In some embodiments, the security detection of the third-party software and the qualification detection of the code automatically generated by the page to control the access rights of the unsafe third-party software and the use rights of the unqualified code include:

[0026] Perform security checks on the domain name and certificate of the third-party software using a preset security check method;

[0027] Prohibit access to third-party software that has not passed the above security test and generate error prompt information;

[0028] After the page automatically generates the code according to the analysis result, the security restrictions and permission requirements of the code are tested for eligibility using a preset eligibility test method;

[0029] prohibiting the execution of code that does not comply with the security restrictions or the permission requirements, and generating a security failure event;

[0030] The preset security verification method includes at least one of whitelist check, secure socket layer verification, transport layer security certificate verification and domain name source check.

[0031] In a second aspect, an embodiment of the present application provides an authorization and authentication system, including:

[0032] The analysis module is used to analyze the user behavior path and the page links of the third-party software to obtain the analysis results;

[0033] An encoding module, used for automatically generating a page according to the analysis result to obtain a customized authorization page of the authorization control software;

[0034] The authentication module is used to obtain the current user information according to the user's authorization operation instruction in the customized authorization page, and perform authentication on the authorization control software according to the current user information to complete the authorization of the third-party software.

[0035] In a third aspect, an embodiment of the present application provides an intelligent terminal, comprising: a memory, a processor, a display, and a computer program stored in the memory and executable on the processor, wherein the computer program implements the steps of the authorization and authentication method as described above when executed by the processor.

[0036] In a fourth aspect, an embodiment of the present application provides a computer-readable storage medium storing a computer program, which implements the steps of the authorization and authentication method as described above when executed by a processor.

[0037] Compared with the prior art, the present invention provides an authorization authentication method, system, intelligent terminal and storage medium. The method automatically generates a customized authorization page based on the analysis results obtained by analyzing the user behavior path and the page link, obtains the current user information according to the input authorization operation instruction, and then completes the authentication on the authorization control software based on the current user information, thereby realizing efficient and fast authorization of third-party software and improving the efficiency of authentication. BRIEF DESCRIPTION OF THE DRAWINGS

[0038] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings required for use in the embodiments will be briefly introduced below. It should be understood that the following drawings only show certain embodiments of the present application and therefore should not be regarded as limiting the scope. For ordinary technicians in this field, other related drawings can be obtained based on these drawings without paying creative work.

[0039] Figure 1 A flowchart of a preferred embodiment of the authorization and authentication method provided by the present invention;

[0040] Figure 2 A flowchart of step S300 in a preferred embodiment of the authorization and authentication method provided by the present invention;

[0041] Figure 3 A page interaction flow chart of a preferred embodiment of the authorization and authentication method provided by the present invention;

[0042] Figure 4 A flowchart of step S10 in a preferred embodiment of the authorization and authentication method provided by the present invention;

[0043] Figure 5 This is a diagram of the architecture of the authorization and authentication system provided by the present invention. DETAILED DESCRIPTION

[0044] The technical solutions in the embodiments of the present application will be described clearly and completely below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, rather than all of the embodiments.

[0045] The components of the embodiments of the present application generally described and shown in the drawings herein may be arranged and designed in various configurations. Therefore, the following detailed description of the embodiments of the present application provided in the drawings is not intended to limit the scope of the application claimed for protection, but merely represents the selected embodiments of the present application. Based on the embodiments of the present application, all other embodiments obtained by those skilled in the art without making creative work belong to the scope of protection of the present application.

[0046] Hereinafter, the terms "including", "having" and their cognates that can be used in various embodiments of the present application are intended only to indicate specific features, numbers, steps, operations, elements, components or a combination of the foregoing items, and should not be understood as first excluding the existence of one or more other features, numbers, steps, operations, elements, components or a combination of the foregoing items or increasing the possibility of one or more features, numbers, steps, operations, elements, components or a combination of the foregoing items. In addition, the terms "first", "second", "third" and the like are only used to distinguish descriptions and cannot be understood as indicating or implying relative importance.

[0047] Unless otherwise defined, all terms (including technical terms and scientific terms) used herein have the same meanings as those generally understood by those skilled in the art to which the various embodiments of the present application belong. The terms (such as those defined in generally used dictionaries) will be interpreted as having the same meanings as the contextual meanings in the relevant technical field and will not be interpreted as having idealized meanings or overly formal meanings unless clearly defined in the various embodiments of the present application.

[0048] The present invention provides an authorization authentication method, system, intelligent terminal and storage medium. In the present invention, after analyzing the user behavior path and page link to obtain the analysis result, the page is automatically generated according to the analysis result to obtain the customized authorization page of the authorization control software, and the current user information is obtained according to the user's authorization operation instruction to complete the authentication on the authorization control software, so that after receiving the authorization operation instruction, the authorization control software is used to perform automatic authentication, which can reduce the process of authentication steps and improve the efficiency, security and user experience of the authentication process.

[0049] The following is a description of the design of the authorization authentication method through specific exemplary embodiments. It should be noted that the following embodiments are only used to explain the technical solution of the invention and are not specifically limited:

[0050] See also Figure 1 , the present application embodiment provides an authorization authentication method, including:

[0051] S100, analyzing the user behavior path and the page links of the third-party software to obtain analysis results;

[0052] Among them, the user behavior path includes items to be operated in third-party software and authorized software.

[0053] Optionally, in the embodiment of the present application, a hybrid container for the mobile terminal (referred to as authorization control software in this embodiment) is designed by self-development, and has customized protocol interactions and methods, which allows the use of native code and Web technology (for example: HTML (HTML is a markup language used to structure Web pages and their contents, consisting of a series of elements, which can be used to surround different parts of the content to make it present or work in a certain way), CSS (Cascading Style Sheets, Chinese name Cascading Styles, CSS is a language used to set and arrange web pages, which can change the font, color, size and spacing of the content, as well as add animation and other decorative functions) and JavaScript (JavaScript is a scripting language) etc.) in mobile applications. It provides a way to integrate the advantages of native applications and Web applications to meet the needs of cross-platform development and the use of Web technologies, and implements access to native functions through a "bridging" mechanism.

[0054] Among them, hybrid containers handle native code and Web technology differently. Native code usually refers to application code written in native programming languages ​​(such as Java, Swift (Swift is a modern, safe and fast programming language suitable for all Apple platforms. It is an open source programming language used to develop iOS, OS X and WatchOS applications), Object-C (an object-oriented programming language that extends C)), while Web technology refers to web pages or Web applications built using Web development technologies (such as HTML, CSS and JavaScript, etc.). Hybrid containers are compatible with both technologies in mobile applications, allowing developers to mix native code and Web technology in the same application to gain the advantages of both technologies.

[0055] The hybrid container is similar to a plug-in that extends the functionality of mobile applications, enabling them to integrate native functions and Web technologies in the same application. On the terminal, the hybrid container exists in the form of a mobile application, which users can download and install on their mobile devices for use.

[0056] Among them, the prior art generally jumps to the third-party software for authentication when authorizing the authorized software. For example, when authorizing software A, it jumps to browser B for authentication such as entering personal information. However, in this embodiment, the hybrid container, as the authorization control software, can realize the process of authentication in the third-party software.

[0057] Then, the implementation process of the authorization and authentication method is as follows:

[0058] First, in the scenario implemented by this method, when the user authorizes the authorization control software, personalized guidance for user operation is first performed:

[0059] After obtaining the user behavior path in the third-party software (the user behavior path includes the items to be operated in the third-party software and the authorized software), and the page link of the third-party software, the user behavior path and the page link are analyzed to obtain the analysis results. The analysis results mainly include the process steps of the third-party software and the key items in the process steps, so as to generate a customized authorization page according to the analysis results.

[0060] Furthermore, in step S100, the user behavior path and the page link of the third-party software are analyzed to obtain analysis results, including:

[0061] S110, analyzing the jump relationship between the third-party software and the corresponding authorized software, the jump relationship between internal pages in the third-party software, and the items to be operated in the third-party software and the authorized software to obtain analysis results.

[0062] Among them, the third-party software corresponds to the authorized software one by one, that is, when the authorized software is authorized, it will jump to the corresponding third-party software.

[0063] Optionally, the specific implementation process of the authorization and authentication method is as follows:

[0064] First, the jump relationship between the third-party software and the authorized software corresponding to the third-party software, the jump relationship between the internal pages in the third-party software, and the items to be operated in the third-party software and the authorized software are analyzed, that is, the specific operation requirements of the user in different authentication pages or processes are identified, such as determining the buttons that the user needs to click, the form fields to fill in, the options to select, etc., so as to obtain the analysis results such as the process steps of the third-party software and the key items in the process steps.

[0065] For further information, please refer to Figure 1 , S200, automatically generate a page according to the analysis result to obtain a customized authorization page of the authorization control software.

[0066] Optionally, after obtaining the analysis results, the analysis results such as the process steps to be executed in the third-party software and the key items in the process steps are automatically compiled into JavaScript code to run and generate a customized authorization page for the authorization control software, that is, to generate a customized authorization page in the hybrid container. For example, the shutdown step in the process steps can be marked with reference to the page on the third-party software as an operation guide to generate a customized authorization page.

[0067] In this application, a complete link analysis is performed on the target page in the third-party software, customized JavaScript code is written, and personalized operation guidance is provided for different authentication pages and authentication processes, such as adding prompt information to specific page elements and guiding users to perform specific operations, etc. Specifically, pop-up boxes, prompt information or indicator arrows are displayed on the page to guide users to perform operations, so that users can more clearly understand the operation steps to be performed, and at the same time, it can guide user operations, which helps to improve the efficiency of authorization authentication and page jump rate.

[0068] Furthermore, step S200, automatically generating a page according to the analysis result to obtain a customized authorization page of the authorization control software includes:

[0069] S210, when automatically compiling the analysis results using network development technology, marking key steps in the items to be operated, and generating operation instructions according to the status changes of the items to be operated and the current page, so as to generate a customized authorization page;

[0070] The key steps include: various combinations of form input fields, buttons, links, options, check boxes, and important prompts.

[0071] Optionally, after obtaining the analysis results, use network development technology to automatically write customized JavaScript code for the analysis results to mark the key steps in the project to be operated (various combinations of form input fields, buttons, links, options, check boxes and important prompt information), such as highlighting the background color, wireframe marking, prompt marking and setting dynamic effects.

[0072] Then, we conduct scenario analysis on these items to be operated according to the business scenario requirements, configure and solidify these key steps, and write corresponding scripts to provide guidance for each scenario, that is, generate operation instructions based on the status changes of the items to be operated and the current page, so as to finally generate a customized authorization page.

[0073] At the same time, in the custom JavaScript code, conditional judgment is required based on the user's operation requirements and the status of the current page (for example, the location of the current page) to determine when to trigger the operation guidance. This may involve monitoring the appearance or status changes of specific page elements and triggering the corresponding operation guidance when the conditions are met.

[0074] Among them, key operations usually include the following categories:

[0075] (1) Form input fields: Information that users need to fill in, such as user name, password, and verification code. (2) Buttons and links: Action buttons or links that users need to click, such as "Submit", "Next", and "Confirm". (3) Options and checkboxes: Options that users need to select, such as radio buttons, checkboxes, and drop-down menus. (4) Important prompts: Prompt information that users need to pay attention to, such as error prompts and confirmation messages.

[0076] Among them, the specific marking methods mainly include the following:

[0077] 1. Background color highlight: Add a distinct background color to key operation elements to make them more prominent on the page. For example, set the background color of the button that needs to be clicked to bright yellow or blue.

[0078] Example: A login button is set to a bright yellow background, and other buttons retain the default background color. The programming example is:

[0079] <button style="background-color: yellow;"> Log in< / button> .

[0080] 2. Wireframe marking: Add obvious borders to key operation elements to distinguish them from surrounding elements.

[0081] Example: To add a red border to the form fields that need to be filled in, the programming example is:

[0082] <input type="text" style="border: 2px solid red;" placeholder="请输入用户名"> .

[0083] 3. Prompt marks: Add prompt marks next to key operation elements, such as indicator arrows, icons or text prompts, to help users identify the elements that need to be operated.

[0084] Example: To add an arrow and a text prompt "Click here" next to the submit button, the programming example is:

[0085] <button style="position: relative;">;

[0086] submit;

[0087] ；

[0088] ；

[0089] Please click here ；

[0090] ;

[0091] < / button> .

[0092] 4. Dynamic effects: Use animation or dynamic effects (such as flashing and jumping) to attract user attention.

[0093] Example: To make important prompt information flash to attract attention, the coding example is:

[0094] <style>；

[0095] @keyframes flash {

[0096] 0%, 100% { opacity: 1;}；

[0097] 50% { opacity: 0;}；

[0098] }；

[0099] .flash {

[0100] animation: flash 1s infinite;

[0101] }；

[0102] < / style> ;

[0103] Please fill in all required fields .

[0104] Among them, specific application examples:

[0105] Assume that on a user login page, the user needs to fill in the username and password and click the login button. The key operation elements can be marked as follows:

[0106] 1. Username input field: Add a red border and a light yellow background.

[0107] 2. Password input field: add a red border and a light yellow background.

[0108] 3. Login button: The background color is bright yellow, with an indicator arrow and prompt text added next to it.

[0109] The innovative methods achieved through the above technologies, such as marking, not only provide operation guidance, allowing users to more accurately identify and perform key operations during operation, thereby improving the accuracy and practicality of operation prompts, but also can directly present operation prompts in the mixing container, simplifying the user's operation process and improving the user's operation experience.

[0110] For further information, please refer to Figure 1 S300: Obtain the current user information according to the user's authorization operation instruction in the customized authorization page, and perform authentication on the authorization control software according to the current user information to complete the authorization of the third-party software.

[0111] Optionally, after the customized authorization page is generated in the authorization control software, the user enters an instruction to allow the authorization operation on the customized authorization page, such as setting a pop-up window or page for confirming authorization to receive the user's instruction to allow the authorization operation.

[0112] Then, after receiving the authorization operation instruction, the current user information is obtained, and then the page of the authorization control software is automatically filled in according to the current user information to perform authentication, thereby completing the authorization of the third-party software.

[0113] This application achieves efficient and fast one-click authentication by automatically completing the authentication on the authorization control software based on the current user information obtained after obtaining the authorization instruction, reduces the burden of repeated authentication input, simplifies the user's operation process, thereby improving authentication efficiency and user experience, and effectively avoiding the leakage of user personal information, ensuring the security of authentication.

[0114] For further information, see Figure 2 Step S300: obtaining the current user information according to the user's authorization operation instruction in the customized authorization page, and performing authentication on the authorization control software according to the current user information to complete the authorization of the third-party software, including:

[0115] S310, after receiving the authorization operation permission instruction input by the user in the authorization window in the customized authorization page, obtaining the pre-stored current user information;

[0116] S320. Automatically fill in the authentication form of the third-party software on the authorization control software according to the current user information to complete the authorization of the third-party software.

[0117] Optionally, after the customized authorization page is generated, an authorization window or authorization page is set on the customized authorization page to prompt the user whether to allow authorization, and a confirmation key is set. The user can grant the application permission to access his information in this authorization page or authorization window.

[0118] Then, after the user confirms the authorization to access their user information, the control authorization software will obtain the user's pre-stored relevant information by calling the background server, thereby securely obtaining the current user information. This is usually achieved through API (Application Programming Interface (API) is a set of tools, definitions and protocols for integrating application software and services. It is a set of definitions and protocols for building and integrating application software) calls to pass user information from the server to the client.

[0119] Secondly, the control authorization software will use the current user information to automatically pre-fill an authentication form similar to the third-party software on the customized authorization page to ultimately complete the authorization of the third-party software.

[0120] Please refer to the page interaction flow chart Figure 3 In another example of the present application, if the background server does not pre-store the current user information, then when the user confirms the authorization pop-up window or page (corresponding to Figure 3 After clicking the Allow Authorization button on (1) in the figure, a customized authorization page for user registration and login is generated first (corresponding to Figure 3 (2) in the figure so that users can fill in their personal login account.

[0121] After that, generate the entry selection page (corresponding to Figure 3 (3) in the above), including the process steps of third-party software, where Figure 3 The process steps are represented in the form of folders. Then the form filling page is generated (corresponding to Figure 3 (4) in the figure) so that users can manually fill in the current user information.

[0122] Furthermore, step S100, automatically generating a page according to the analysis result to obtain a customized authorization page of the authorization control software, and then further comprising:

[0123] S10. Perform security checks on third-party software and conduct qualification checks on the code automatically generated by the page to control access rights of unsafe third-party software and control usage rights of non-qualified code.

[0124] Optionally, during the automated programming process, this application will also perform security checks on third-party software and qualification checks on the code, that is, mainly verifying the legitimacy of the third-party software to limit the access rights of unsafe third-party software, and limiting the running environment of JavaScript code to a mixed container to control the usage rights of non-qualified code, thereby preventing bad code from interfering with and damaging user operations.

[0125] For further information, see Figure 4 Step S10: Perform security checks on third-party software and conduct eligibility checks on the code automatically generated by the page to control access rights of unsafe third-party software and control usage rights of unqualified code, including:

[0126] S11. Perform security testing on the domain name and certificate of the third-party software using a preset security testing method;

[0127] S12. Prohibit access to third-party software that has not passed security testing and generate an error message;

[0128] S13. After the page automatically generates code according to the analysis results, the security restrictions and permission requirements of the code are tested for eligibility using a preset eligibility test method;

[0129] S14. Prohibit the execution of code that does not comply with security restrictions or permission requirements, and generate a security failure event.

[0130] Among them, the preset security verification method includes: at least one of: whitelist check, secure socket layer verification, transport layer security certificate verification and domain name source check.

[0131] Optionally, the specific implementation process of the safety test and the eligibility test is as follows:

[0132] First, the domain name and certificate of the third-party software are security checked using at least one preset security verification method among whitelist check, secure socket layer verification, transport layer security certificate verification and domain name origin check.

[0133] Among them, the security verification content includes: 1. Domain name legitimacy: Check whether the third-party domain name is in the pre-defined whitelist. 2. Certificate verification: Ensure that the SSL / TLS (SSL / TLS is the abbreviation of Secure Sockets Layer / Transport Layer Security, which is an encryption protocol to ensure the security of the connection between the client and the network server) certificate used by the domain name is valid and has not expired. 3. Domain name source: Check whether the domain name belongs to a trusted source to prevent access from phishing or malicious domain names.

[0134] Among them, 1. Whitelist check is to maintain a whitelist of trusted third-party domain names in the hybrid container. When a user requests to access a third-party page, first check whether the domain name is in the whitelist. 2. SSL / TLS certificate verification is to use the built-in security library or API to verify the SSL / TLS certificate of the domain name to ensure the encryption and security of communication. 3. Domain name source check is to verify the registration information and source of the domain name to ensure that it comes from a trusted organization or service provider.

[0135] Then, if the domain name, etc. passes the security check such as whitelist check and certificate verification, the page of the corresponding third-party software is allowed to be loaded and accessed, so as to complete the authorization of the third-party software according to the current user information. However, if the domain name, etc. fails to pass the verification, the access to the third-party software is blocked and an error message is displayed to the user, indicating that the domain name is not trusted, that is, the access to the third-party software that has not passed the security check is prohibited, and an error message is generated.

[0136] Secondly, use the preset qualification test method to check the security restrictions and permission requirements of the code.

[0137] Among them, the preset qualification inspection methods include: sandbox technology and permission management methods; in the computer field, sandbox technology (Sandboxing) is a security mechanism used to isolate running programs, and its purpose is to limit the access rights of untrusted processes or untrusted code at runtime. Sandbox technology uses WebView (WebView is a control based on the webkit engine that displays web pages) or similar technologies to confine JavaScript code to a sandbox environment, isolating its interaction with the device operating system and other applications. Permission management is to limit JavaScript code to perform only specific operations, such as accessing certain APIs or data, through a strict permission management mechanism.

[0138] The eligibility test includes: 1. Operating environment isolation: restrict JavaScript code to be executed only in the secure environment of the hybrid container to prevent it from running in an unauthorized environment. 2. Permission control: restrict the permissions of JavaScript code to prevent it from accessing sensitive data (for example, user information) or performing high-risk operations (for example, verifying offensive code).

[0139] Database security restrictions refer to a series of rules and measures set in a database management system to protect data in the database from unauthorized access, modification, deletion and other malicious behaviors. These restrictions can include authentication, access control, encryption and auditing, etc., aiming to improve the security of the database.

[0140] Furthermore, if the eligibility detection shows that the JavaScript code complies with all security restrictions and permission requirements, it is compliant code, and it is allowed to execute in the mixed container. However, if the JavaScript code violates security restrictions or permission requirements, it is non-compliant code, and the non-compliant code is blocked from execution and security events are recorded, that is, the execution of code that does not comply with security restrictions or permission requirements is prohibited, and a security failure event is generated.

[0141] Through the above two security measures, hybrid containers can effectively prevent bad code from interfering with and damaging user operations, thereby improving the security and reliability of the overall application.

[0142] Furthermore, the authorization authentication method also includes:

[0143] S400: When the authorization control software performs authentication, the jump rate of the customized authorization page is analyzed, and the proportion of the operation instructions in the customized authorization page is adjusted according to the jump rate.

[0144] Optionally, after completing the entire authorization process, real-time feedback and optimization are required:

[0145] Collect user feedback and behavior data to understand the effectiveness and practicality of the customized solution, and make corresponding adjustments and optimizations based on the feedback results. Specifically, collect the conversion rate of users between pages throughout the process, compare the difference between with and without guidance, and adjust the proportion of operation guidance in the entire customized page based on the comparison results, or remove factors that reduce conversion rate based on the comparison results, such as removing marks that block or affect usage.

[0146] See also Figure 5 , the present application embodiment provides an authorization and authentication system, including:

[0147] The analysis module 1 is used to analyze the user behavior path and the page link of the third-party software to obtain the analysis result.

[0148] The encoding module 2 is used to automatically generate a page according to the analysis result to obtain a customized authorization page of the authorization control software.

[0149] The authentication module 3 is used to obtain the current user information according to the user's authorization operation instruction in the customized authorization page, and perform authentication on the authorization control software according to the current user information to complete the authorization of the third-party software.

[0150] Optionally, the authorization authentication method is applicable to an authorization authentication system, and the implementation process of the authorization authentication system is as follows:

[0151] First, the authorization control software obtains the user behavior path in the third-party software, including the items to be operated in the third-party software and the authorized software, and obtains the page links of the third-party software, including the jump relationship between the third-party software and its corresponding authorized software, and the jump relationship between internal pages in the third-party software, and analyzes the user behavior path and page links to obtain analysis results such as the process steps of the third-party software and the key items in the process steps.

[0152] Then, according to the analysis results, the code is automatically compiled into JavaScript code, and the page is automatically generated to obtain the customized authorization page of the authorization control software. After that, the user is received to allow the authorization operation instruction entered in the pop-up window or page of the customized authorization page to confirm the authorization.

[0153] Secondly, after receiving the authorization operation instruction, the current user information is obtained, and the authentication form on the authorization control software is automatically filled in according to the current user information to complete the authorization of the third-party software.

[0154] In this application, the customized authorization page of the authorization control software is automatically generated based on the analysis results obtained by analyzing the user behavior path and the page link, and the authentication on the authorization control software is completed based on the current user information obtained after receiving the authorization operation instruction, so as to realize the authorization of the third-party software, so that the user can quickly and accurately complete the authentication process, saving time and energy. At the same time, the concise authentication process improves the user's satisfaction and user experience, and the user can more accurately identify the authenticity of the authentication page, reducing the security risks in the authentication process.

[0155] The present application also provides an intelligent terminal. Exemplarily, the intelligent terminal includes a processor and a memory, wherein the memory stores a computer program, and the processor runs the computer program to enable the intelligent terminal to execute the functions of each module in the above-mentioned authorization and authentication method or the above-mentioned authorization and authentication system.

[0156] Among them, the processor can be an integrated circuit chip with signal processing capabilities. The processor can be a general-purpose processor, including a central processing unit (CPU), a graphics processing unit (GPU), a network processor (NP), a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a field programmable gate array (FPGA) or at least one of other programmable logic devices, discrete gates or transistor logic devices, and discrete hardware components. The general-purpose processor can be a microprocessor or the processor can also be any conventional processor, etc., which can implement or execute the methods, steps and logic block diagrams disclosed in the embodiments of the present application.

[0157] The memory may be, but is not limited to, a random access memory (RAM), a read only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electric erasable programmable read-only memory (EEPROM), etc. The memory is used to store a computer program, and the processor may execute the computer program accordingly after receiving an execution instruction.

[0158] The present application also provides a computer-readable storage medium for storing the computer program used in the above-mentioned intelligent terminal. For example, the computer-readable storage medium may include but is not limited to: a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk, and other media that can store program codes.

[0159] In several embodiments provided in the present application, it should be understood that the disclosed devices and methods can also be implemented in other ways. The device embodiments described above are merely schematic. For example, the flowcharts and structure diagrams in the accompanying drawings show the possible architecture, functions and operations of the devices, methods and computer program products according to multiple embodiments of the present application. In this regard, each box in the flowchart or block diagram can represent a module, a program segment or a part of a code, and the module, a program segment or a part of a code contains one or more executable instructions for implementing the specified logical function. It should also be noted that in an alternative implementation, the functions marked in the box can also occur in a different order from the order marked in the accompanying drawings. For example, two consecutive boxes can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the structure diagram and / or the flow diagram, and the combination of boxes in the structure diagram and / or the flow diagram, can be implemented with a dedicated hardware-based system that performs a specified function or action, or can be implemented with a combination of dedicated hardware and computer instructions.

[0160] In addition, the functional modules or units in the various embodiments of the present application may be integrated together to form an independent part, or each module may exist separately, or two or more modules may be integrated to form an independent part.

[0161] If the functions are implemented in the form of software function modules and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application, or the part that contributes to the prior art, or the part of the technical solution, can be embodied in the form of a software product, which is stored in a storage medium and includes several instructions for enabling a computer device (which can be a smart phone, a personal computer, a server, or a network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of the present application.

[0162] The above description is only a specific implementation manner of the present application, but the protection scope of the present application is not limited thereto. Any technician familiar with the technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application.

Claims

1. An authorization authentication method, characterized in that: include: Analyze the user behavior path and the page links of third-party software to obtain analysis results; Automatically generate a page based on the analysis result to obtain a customized authorization page for the authorization control software; Acquire current user information according to the user's authorization operation instruction in the customized authorization page, and perform authentication on the authorization control software according to the current user information to complete the authorization of the third-party software; The analysis of the user behavior path and the page links of the third-party software to obtain the analysis results includes: Analyzing the jump relationship between the third-party software and the corresponding authorized software, the jump relationship between internal pages in the third-party software, and the items to be operated in the third-party software and the authorized software to obtain analysis results; The user behavior path includes items to be operated in the third-party software and the authorized software.

2. The authorization authentication method according to claim 1, characterized in that: Also includes: When the authorization control software performs authentication, the jump rate of the customized authorization page is analyzed, and the proportion of the operation instructions in the customized authorization page is adjusted according to the jump rate.

3. The authorization authentication method according to claim 1, characterized in that: The page is automatically generated according to the analysis result to obtain a customized authorization page of the authorization control software, and then further includes: The third-party software is tested for security, and the code automatically generated by the page is tested for eligibility, so as to control the access rights of the unsafe third-party software and the use rights of the unqualified code.

4. The authorization authentication method according to claim 1, characterized in that: The obtaining of current user information according to the user's authorization operation instruction in the customized authorization page, and performing authentication on the authorization control software according to the current user information to complete the authorization of the third-party software, includes: After receiving the authorization operation permission instruction input by the user in the authorization window in the customized authorization page, obtaining the pre-stored current user information; The authentication form of the third-party software is automatically filled in on the authorization control software according to the current user information to complete the authorization of the third-party software.

5. The authorization authentication method according to claim 1, characterized in that: The step of automatically generating a page according to the analysis result to obtain a customized authorization page of the authorization control software includes: When the analysis result is automatically written using network development technology, key items in the items to be operated are marked, and operation instructions are generated according to the status changes of the items to be operated and the current page, so as to generate the customized authorization page; The key items include: form input fields, buttons, links, options, check boxes and various combinations of important prompt information.

6. The authorization authentication method according to claim 3, characterized in that: The security detection of the third-party software and the qualification detection of the code automatically generated by the page to control the access rights of the unsafe third-party software and the use rights of the unqualified code include: Perform security checks on the domain name and certificate of the third-party software using a preset security check method; Prohibit access to third-party software that has not passed the above security test and generate error prompt information; After the page automatically generates the code according to the analysis result, the security restrictions and permission requirements of the code are tested for eligibility using a preset eligibility test method; prohibiting the execution of code that does not comply with the security restrictions or the permission requirements, and generating a security failure event; The preset security verification method includes: at least one of whitelist check, secure socket layer verification, transport layer security certificate verification and domain name source check.

7. An authorization authentication system, characterized in that: include: The analysis module is used to analyze the user behavior path and the page links of the third-party software to obtain the analysis results; An encoding module, used for automatically generating a page according to the analysis result to obtain a customized authorization page of the authorization control software; An authentication module, used to obtain current user information according to the user's authorization operation instruction in the customized authorization page, and perform authentication on the authorization control software according to the current user information to complete the authorization of the third-party software; The analysis of the user behavior path and the page links of the third-party software to obtain the analysis results includes: Analyzing the jump relationship between the third-party software and the corresponding authorized software, the jump relationship between internal pages in the third-party software, and the items to be operated in the third-party software and the authorized software to obtain analysis results; The user behavior path includes items to be operated in the third-party software and the authorized software.

8. An intelligent terminal, characterized in that: include: A memory, a processor, a display, and a computer program stored in the memory and executable on the processor, wherein the computer program, when executed by the processor, implements the steps of the authorization and authentication method as described in any one of claims 1 to 6.

9. A computer-readable storage medium, characterized in that: A computer program is stored, and when the computer program is executed by a processor, the steps of the authorization and authentication method according to any one of claims 1 to 6 are implemented.

Images