Cross-platform single sign-on service system for use with mobile application

Abstract

A cross-platform single sign-on service system is disclosed for use with a mobile application. The system includes an authorization server and a connected online banking server. The authorization server receives a scepter request from the mobile application to generate a one-time scepter and stores the binding relationship between the one-time scepter and a user identification code. The online banking server receives a webpage access request initiated by the mobile application within an embedded webpage, containing a one-time scepter, and sends a verification request to the authorization server. If the authorization server confirms the one-time scepter is valid, the online banking server obtains the user identification code bound to the one-time scepter to establish an online banking conversation and provides the online banking function page to the embedded webpage of the mobile application. This achieves cross-platform single sign-on and seamless functional integration while ensuring information security.

Claims

1. A cross-platform single sign-on service system for use with a mobile application, comprising: an authorization server for supporting single sign-on scepter issuance and verification; and an online banking server connected to the authorization server; wherein: The authorization server receives a scepter request from the mobile application to generate a one-time scepter and stores the binding relationship between the one-time scepter and a user identification code; the online banking server receives a webpage access request from the mobile application, which is initiated by the mobile application in an embedded webpage and includes the one-time scepter; the online banking server sends a verification request to the authorization server to verify the one-time scepter. If the authorization server confirms that the one-time scepter is valid, the online banking server obtains the user identification code bound to the one-time scepter to establish an online banking dialogue stage and provides an online banking function page to the embedded webpage of the mobile application.

2. The cross-platform single sign-on service system as described in claim 1, wherein when the authorization server generates the one-time scepter, it further binds the one-time scepter to one of the Internet Protocol (IP) addresses used when the mobile application sends the request.

3. In the cross-platform single sign-on service system as described in request item 2, when the online banking server sends the verification request to the authorized server, it also transmits the source IP address of the webpage access request received by the online banking server, so that the authorized server can compare whether the operation IP address is consistent with the source IP address.

4. The cross-platform single sign-on service system as described in Request 1, wherein the one-time scepter has an expiration time and adopts a universally unique identifier (UUID) format.

5. The cross-platform single sign-on service system as described in Request 1, wherein the webpage access request includes a Uniform Resource Locator (URL), and the one-time scepter is appended to one of the query parameters of the Uniform Resource Locator.

6. The cross-platform single sign-on service system as described in Request 1, wherein if the authorization server determines that the one-time scepter is invalid or has expired, the online banking server refuses to establish the online banking session.

7. The cross-platform single sign-on service system as described in Request 1, wherein the online banking server provides the online banking function page for the mobile application to automatically close the embedded webpage or redirect to a deep link to return to the native screen of the mobile application after the operation is completed.

Images