Account verification method, device, system and computer-readable storage medium

Abstract

The present invention discloses an account identification method, device, system and readable storage medium, which are applied to the field of Internet. The account identification method includes the following steps: receiving the account credential sent by the client, the account credential is a unique identity identification mark provided by the account management platform to the client reflecting the user login information; synchronously obtaining the trust credential of the account management platform, the trust credential is data information associated with the account credential and used to confirm the authenticity of the user identity provided by the client; according to the trust credential, locally verifying the account credential and confirming the user login information of the account credential. Compared with the prior art, the account verification method provided by the present application effectively improves the success rate of account verification, shortens the response time to respond to client requests, and optimizes the user experience.

Description

Technical Field

[0001] The present invention relates to the field of the Internet, and in particular to an account verification method, device, system and computer-readable storage medium. Background Art

[0002] In the prior art, the server associated with the client is connected to the account management terminal. Every time the user requests to call the relevant information of the server through the client, the user needs to provide the account credentials to the server. The server calls the account management terminal with the obtained account credentials, verifies the authenticity of the account credentials through the account management terminal, and returns to the server after confirming that the account information provided by the client is correct, and calls the relevant data from the client. However, the connection between the server and the account management terminal will reduce the response speed and there is a certain failure rate, resulting in a poor user experience. Summary of the invention

[0003] The main purpose of the present invention is to provide an account verification method, aiming to solve technical problems that cannot be solved by the prior art.

[0004] To achieve the above object, the present invention provides an account verification method, comprising the following contents:

[0005] Receiving the account credential sent by the client, where the account credential is a unique identity mark reflecting user login information provided by the account management platform to the client;

[0006] Synchronously obtaining a trust credential of the account management platform, wherein the trust credential is data information associated with the account credential and used to confirm the authenticity of the user identity provided by the client;

[0007] The account credential is verified locally based on the trust credential to confirm user login information of the account credential.

[0008] The step of synchronously obtaining the trust certificate of the account management platform includes:

[0009] Receiving credential update information pushed by the account management platform, wherein the credential update information is notification information issued by the account management platform when the trusted credential changes;

[0010] Receive the updated trust credential from the account management platform, and update the locally stored trust credential.

[0011] The step of synchronously obtaining the trust certificate of the account management platform includes:

[0012] Pre-set a scheduled task for obtaining trust credentials;

[0013] According to the period set for the timing task of obtaining the trust credential, the trust credential synchronized by the account management platform is periodically obtained, and the trust credential stored locally is synchronously updated.

[0014] The step of synchronously obtaining the trust certificate of the account management platform includes:

[0015] Pre-setting the trust credential acquisition timing task, periodically acquiring the trust credential synchronized by the account management platform, and synchronously updating the trust credential stored locally;

[0016] and / or,

[0017] Receive the credential update information pushed by the account management platform, receive the trust credential updated by the account management platform, and synchronously update the trust credential stored locally.

[0018] The step of synchronously obtaining the trust certificate of the account management platform includes:

[0019] Setting a trust credential storage database, wherein the trust credential storage database is used to store the trust credentials updated by the account management platform;

[0020] The trust credential storage database is accessed to read the updated trust credential in the trust credential storage database.

[0021] The step of locally verifying the account credential based on the trust credential and confirming the user login information of the account credential includes:

[0022] The trust credential stored in the trust credential storage database is called, and an encryption algorithm is locally called to verify whether the account credential sent by the client is correct, and to verify the account login information of the client.

[0023] The step of locally verifying the account credential based on the trust credential and confirming the user login information of the account credential includes:

[0024] Calling the updated locally stored trust credential, and locally calling an encryption algorithm to verify whether the account credential sent by the client matches the trust credential;

[0025] If the account credential matches the trust credential after verification by the encryption algorithm, opening the data port corresponding to the account credential to the client;

[0026] If the account credential and the trust credential do not match after verification by the encryption algorithm, a prompt message indicating that the account credential is wrong is sent to the client.

[0027] In addition, to achieve the above-mentioned purpose, the present invention also provides an account verification device, which includes: a memory, a processor, and an account verification program stored in the memory and executable on the processor, and when the account verification program is executed by the processor, the steps of the above-mentioned account verification method are implemented.

[0028] The present invention also provides an account verification system, the account verification system comprising:

[0029] A smart terminal, wherein the smart terminal is installed with a client corresponding to the account verification device, and the smart terminal is used to call the client to log in to the account, obtain the account credential sent by the account verification server, access the account verification device according to the account credential, and obtain data from the account verification device;

[0030] An account management terminal, used to run the account management platform, used to send account credentials to the smart terminal, and the account management terminal is also used to synchronize trust credentials with the account verification device;

[0031] An account verification device, the account verification device is connected to the client installed on the smart terminal, and is used to receive a data request instruction from the client, and verify the account credential corresponding to the request instruction according to the trust credential synchronized by the account management terminal;

[0032] The account verification system implements the steps of the account verification method described above when executed.

[0033] The present invention also provides a computer-readable storage medium, on which an account verification program is stored. When the account verification program is executed by a processor, the steps of the account verification method described above are implemented.

[0034] An account verification method proposed in an embodiment of the present invention receives the account credentials sent by the client through a server corresponding to the client, determines the client user login identity through the account credentials, and judges whether the logged-in user has the corresponding request authority; the server synchronizes the trust credentials corresponding to the account credentials of the account management platform, verifies the account credentials locally on the server based on the trust credentials, and determines the user login information of the account credentials. This avoids the situation where the server needs to request verification from the account management platform every time it receives a request from the client, and verifies the verification on the account management platform, thereby achieving the beneficial effects of improving the success rate of account verification, shortening the response time to respond to client requests, and optimizing the user experience. BRIEF DESCRIPTION OF THE DRAWINGS

[0035] Figure 1 It is a schematic diagram of the structure of an account verification device in a hardware operating environment involved in an embodiment of the present invention;

[0036] Figure 2 It is a schematic diagram of the process of the first embodiment of the present invention;

[0037] Figure 3 is a flow chart of a second embodiment of the present invention;

[0038] Figure 4 is a schematic diagram of a flow chart of a third embodiment of the present invention;

[0039] Figure 5 is a schematic diagram of a flow chart of a fourth embodiment of the present invention;

[0040] Figure 6 It is a schematic diagram of the structure of an account verification system in a hardware operating environment involved in an embodiment of the present invention.

[0041] The realization of the purpose, functional features and advantages of the present invention will be further explained in conjunction with embodiments and with reference to the accompanying drawings. DETAILED DESCRIPTION

[0042] It should be understood that the specific embodiments described herein are only used to explain the present invention, and are not used to limit the present invention.

[0043] The main solution of the embodiment of the present application is: receiving the account credential sent by the client, the account credential being a unique identity mark reflecting the user login information provided by the account management platform to the client;

[0044] Synchronously obtaining a trust credential of the account management platform, wherein the trust credential is data information associated with the account credential and used to confirm the authenticity of the user identity provided by the client;

[0045] The account credential is verified locally based on the trust credential to confirm user login information of the account credential.

[0046] In the prior art, the server corresponding to the client is connected to the account management terminal. Every time the user requests to call the relevant information of the server through the client, the user needs to provide the account credentials to the server. The server calls the account management terminal with the obtained account credentials, verifies the authenticity of the account credentials through the account management terminal, and returns to the server after confirming that the account information provided by the client is correct, and calls the relevant data from the client. However, the connection between the server and the account management terminal will reduce the response speed and there is a certain failure rate, resulting in a poor user experience.

[0047] An account verification method proposed in an embodiment of the present invention receives an account credential sent by a client, determines the client user login identity by using the account credential, and determines whether the logged-in user has the corresponding request authority; simultaneously obtains the trust credential corresponding to the account credential of the account management platform, verifies the account credential locally on the server based on the trust credential, and determines the user login information of the account credential. This avoids the situation where the server needs to request verification from the account management platform every time it receives a client request, and verifies on the account management platform, thereby achieving the beneficial effects of improving the success rate of account verification, shortening the response time to respond to client requests, and optimizing the user experience.

[0048] like Figure 1 As shown, Figure 1 This is a schematic diagram of the structure of an account verification device in the hardware operating environment involved in the embodiment of the present application.

[0049] like Figure 1 As shown, the account verification device may include: a processor 1001, such as a CPU, a network interface 1004, a user interface 1003, a memory 1005, and a communication bus 1002. Among them, the communication bus 1002 is used to realize the connection and communication between the components. The user interface 1003 includes a display screen (Display) and an input unit such as a keyboard (Keyboard). Optionally, the user interface 1003 may also include a standard wired interface, a wireless interface, and the network interface 1004 may include a standard wired interface, a wireless interface (such as a WI-FI interface). The memory 1005 can be a high-speed RAM memory, or it can be a stable memory (non-volatile memory), such as a disk memory. The memory 1005 can also be a storage device independent of the aforementioned processor 1001.

[0050] Optionally, the account verification device may include RF (Radio Frequency) circuits, sensors, remote controls, cameras, microphones, WiFi modules, detectors, etc. Of course, the account verification device may also be configured with other sensors such as gyroscopes, barometers, hygrometers, temperature sensors, etc., which will not be described in detail here.

[0051] Those skilled in the art will understand that Figure 1 The account verification device structure shown in the figure does not constitute a limitation on the account verification device, and may include more or fewer components than shown in the figure, or combine certain components, or arrange parts in different positions.

[0052] like Figure 1 As shown, the memory 1005 as a computer-readable storage medium may include an operating system, a network communication module, a user interface module, and an account verification program.

[0053] exist Figure 1 In the account verification device shown, the network interface 1004 is mainly used to access the network, the user interface 1003 is mainly used to receive operation instructions issued by the user, and the processor 1003 can be used to call the account verification program stored in the memory 1005 and perform the following operations:

[0054] Receiving the account credential sent by the client, where the account credential is a unique identity mark reflecting user login information provided by the account management platform to the client;

[0055] Synchronously obtaining a trust credential of the account management platform, wherein the trust credential is data information associated with the account credential and used to confirm the authenticity of the user identity provided by the client;

[0056] The account credential is verified locally based on the trust credential to confirm user login information of the account credential.

[0057] Further, the processor 1001 may call the account verification program in the memory 1005 and perform the following operations:

[0058] Receiving credential update information pushed by the account management platform, wherein the credential update information is notification information issued by the account management platform when the trusted credential changes;

[0059] Receive the updated trust credential from the account management platform, and update the locally stored trust credential.

[0060] Further, the processor 1001 may call the account verification program in the memory 1005 and perform the following operations:

[0061] Pre-set a scheduled task for obtaining trust credentials;

[0062] According to the period set for the trust credential acquisition timing task, the trust credential synchronized by the account management platform is periodically acquired, and the trust credential stored locally is synchronously updated.

[0063] Further, the processor 1001 may call the account verification program in the memory 1005 and perform the following operations:

[0064] Pre-setting the trust credential acquisition timing task, periodically acquiring the trust credential synchronized by the account management platform, and synchronously updating the trust credential stored locally;

[0065] and / or,

[0066] Receive the credential update information pushed by the account management platform, receive the trust credential updated by the account management platform, and synchronously update the trust credential stored locally.

[0067] Further, the processor 1001 may call the account verification program in the memory 1005 and perform the following operations:

[0068] Setting a trust credential storage database, wherein the trust credential storage database is used to store the trust credentials updated by the account management platform;

[0069] The trust credential storage database is accessed to read the updated trust credential in the trust credential storage database.

[0070] Further, the processor 1001 may call the account verification program in the memory 1005 and perform the following operations:

[0071] The trust credential stored in the trust credential storage database is called, and an encryption algorithm is locally called to verify whether the account credential sent by the client is correct, and to verify the account login information of the client.

[0072] Further, the processor 1001 may call the account verification program in the memory 1005 and perform the following operations:

[0073] Calling the updated locally stored trust credential, and locally calling an encryption algorithm to verify whether the account credential sent by the client matches the trust credential;

[0074] If the account credential matches the trust credential after verification by the encryption algorithm, opening the data port corresponding to the account credential to the client;

[0075] If the account credential and the trust credential do not match after verification by the encryption algorithm, a prompt message indicating that the account credential is wrong is sent to the client.

[0076] Based on the above-mentioned hardware structure of the account verification device, various embodiments of the account verification method of the present invention are proposed.

[0077] See also Figure 2 , Figure 2 It is a flowchart of the first embodiment of the account verification method of the present invention.

[0078] In this embodiment, the account verification method includes:

[0079] Step S101: receiving the account credential provided by the client, where the account credential is a user identity identification mark provided by the account verification platform to the client;

[0080] In this embodiment, optionally, the account verification device can be a server or other intelligent terminal corresponding to the application client installed on the user's intelligent terminal. The account verification device can receive the operation instructions issued by the user through the application client, respond to the user's operation instructions, and provide feedback to the user's operation instructions. Optionally, the operation instruction can be a data request or other operation in the account verification device. In a specific embodiment, the account verification device is a mall server with a mall system installed. The account verification device is associated with the mall application client installed on the user's intelligent terminal. The user can make a transaction request on the client, and the client sends the user's transaction request to the account verification device. The account verification device reads the transaction request, processes the transaction request, and then feeds back the processing result to the client, so that the user can remotely process the transaction through the client.

[0081] Specifically, before the user uses the client to interact with the account verification device, he needs to enter the account and the corresponding password to log in. Among them, the account is registered by the user visiting the account registration interface of the application, which is associated with the user identity and can reflect the identity of the log-in user. Optionally, the account is usually formed by one or more combinations of letters, numbers or Chinese characters. After the user successfully registers, the client uploads the user's registered account to the account management platform running on the account management terminal associated with the application, and generates an account credential corresponding to the account in the account management platform. Among them, the account management terminal is independently set up independently of the account verification device and the client on the user's mobile terminal, and provides a server or other intelligent terminal for account management to the client and the account verification device. The account credential is a unique identity identification mark provided to the user by the account management platform to identify the account when the client user enters the corresponding account in the client login interface to log in. In a specific embodiment, the account credential is a 32-bit string generated by the account management platform.

[0082] Specifically, the client receives the login account typed by the user on the login interface generated by the client or web page, and verifies the account management terminal sent by the login account typed by the user. The account management terminal verifies whether the account and password of the user login match. If the account management terminal verifies that the account and password of the user login match, it reads the identity information of the account, obtains the application permissions associated with the identity information, generates an account credential carrying the account identity information and application permissions information, and the account management terminal transmits the credential back to the client or web page port on the user's mobile terminal. Among them, the account credential is a unique identity identification identifier associated with the account when the user logs in to the account, which is used for the third-party system to confirm the identity information of the user logged in by the client. The client receives the account credential returned by the account management terminal and stores the account credential. Optionally, in a specific embodiment, for account security considerations, the account credential has a certain validity period. After the validity period exceeds the validity period, the account credential becomes invalid, and the user needs to re-enter the account password. The client requests the account credential from the account management platform running on the account management terminal again according to the account password typed by the user.

[0083] After the user logs in to the client, the client calls the business system associated with the client and sends a request to the business system to obtain relevant data. The account credentials are simultaneously sent for the business system to verify the identity information and relevant permissions of the client login user.

[0084] Step S201: synchronously obtaining a trust credential of the account management platform, wherein the trust credential is data information associated with the account credential and used to confirm the authenticity of the user identity provided by the client;

[0085] Specifically, the account verification device is a server or other intelligent terminal installed with one or more business systems associated with the client. After the user enters the account password through the client's login interface, the account management terminal verifies the correctness of the account password and obtains the account credential returned by the account management terminal after the account password is successfully verified. The account verification device synchronously obtains the trust credential from the account management platform of the account management terminal, wherein the trust credential is provided by the account management terminal and is associated with the account credential, and can be uniquely associated with the information related to the account of the business system installed in the account verification device, and is used to confirm the authenticity of the client user identity and data information reflected by the account credential.

[0086] In a specific embodiment, a mall system is installed in the account verification device. After the user logs in to the mall client and enters the account password in the mall client, the mall client obtains the verification result of the account management terminal and obtains the account credentials of the user. Optionally, after obtaining the user's account credentials, the mall client sends a notification message to the mall system in the account verification device, and the notification message carries the user's login account credentials. Optionally, in another specific embodiment, after verifying the user's account information, the account verification platform of the account management terminal sends a notification message to each mall system associated with the mall client, notifying the mall system to synchronize the trust credentials associated with the account credentials. The account verification device receives the notification message of synchronizing the trust credentials sent by the mall client or the account management terminal, sends a request to obtain the updated trust credentials to the account management terminal, and receives the updated trust credentials associated with the user's account credentials returned by the account management terminal.

[0087] Step S301: Based on the trust credential, locally verify the account credential and confirm the user login information of the account credential.

[0088] Specifically, in this embodiment, the account verification device receives an interaction request instruction sent by the user through the client, identifies the business system accessed by the interaction request instruction, and obtains the account credential reflecting the user login identity information carried in the interaction request instruction. The trust credential associated with the account credential updated by the obtained account management platform is called and verified with the account credential carried in the interaction request in the account verification device.

[0089] Specifically, the account verification device calls the trust credential in the business system pointed to by the client's request interaction instruction, and uses the encryption verification algorithm locally in the account verification device to parse the trust credential and the account credential, and determines whether the account credential sent by the client matches the trust credential obtained by the account verification device. If the parsing result is that the account credential and the trust credential are consistent, it is determined that the account credential and the trust credential match. Determine that the user's account identity logged in at the client is authentic and legal, and determine whether the account has the authority to obtain the interaction data. If the account has the authority to obtain the interaction data, return the business data that the user requested from the relevant business system through the client. If the account authority is insufficient, the account verification device returns a notification message to the client that the account authority is insufficient and stops access to the business system.

[0090] Optionally, if the account verification device locally uses an encryption verification algorithm to parse the trust credential and the account credential, and the result of the judgment is that the account credential and the trust credential are inconsistent, it is determined that the identity of the client's login user is illegal. An error message is returned to the client, and the user is guided to log in again through the client.

[0091] In a specific embodiment, the user requests the mall system installed in the account verification device to obtain relevant business data through the mall client, and simultaneously sends the account credentials of the client login account to the account verification device. The account verification device receives the client request and account credentials, and locally calls the trust credential in the account verification device to verify the account credentials through an encryption algorithm. If the verification is successful, the mall system determines whether the account has the authority to obtain business data. If so, the mall system returns the business data requested by the user through the client.

[0092] In this embodiment, the account verification device receives the account credentials sent by the client, obtains the trust credentials of the account management platform synchronously, and then locally calls the trust credentials to verify the account credentials through an encryption algorithm. This avoids the need for the account verification device to call the account management system before responding to the client's data interaction request each time, and performs account verification in the account management system, thereby improving the efficiency of account verification, increasing the speed of responding to client requests, and reducing the failure rate of account verification, so that users who have legally logged in to the client can obtain the required data more quickly.

[0093] See also Figure 3 , Figure 3 It is a flowchart of the second embodiment of the account verification method of the present invention.

[0094] The difference between the second embodiment of the account verification method and the first embodiment of the account verification method is that a scheduled task is set to obtain the trust certificate of the account management platform at a scheduled time, including:

[0095] Step S211: pre-setting a scheduled task for obtaining a trust credential;

[0096] Step S212: According to the period set by the timing task of obtaining the trust credential, the trust credential synchronized by the account management platform is periodically obtained, and the trust credential stored locally is synchronously updated.

[0097] In this embodiment, a timed task of obtaining a trust credential is pre-set in the account verification device, and a thread for obtaining a trust credential is started in the background of the account verification device. The thread for obtaining a trust credential is repeatedly executed according to the timer setting to send a request for obtaining a trust credential to the account management platform on the account management terminal. Optionally, the user or relevant staff can customize the timed period of the timed task of obtaining a trust credential according to the actual access situation. In a specific embodiment, the timed period is set to obtain a trust credential once every hour.

[0098] Optionally, the scheduled task for obtaining trust credentials can also be set to execute at a specified time to send a request for obtaining trust credentials to the account management platform on the account management terminal. When the preset specified time is reached, the account verification device automatically obtains trust credentials from the account management platform. Optionally, the scheduled task can be set as a single scheduled task or a recurring scheduled task. In a specific embodiment, the scheduled task for obtaining trust credentials is set to automatically send a request for obtaining trust credentials to the account management platform at 12:00. When the clock reaches 12:00, the account verification device starts the thread for obtaining trust credentials in the background, automatically sends a request for obtaining trust credentials to the account management platform, receives the trust credentials sent back by the account management platform, and synchronously updates the trust credentials stored locally in the account verification device.

[0099] Optionally, the timed task for obtaining the trust credential can also be set to execute a request to send a trust credential to the account management platform on the account management terminal after a certain delay time after the specified time. When the preset specified time is reached, the account verification device automatically obtains the trust credential from the account management platform after the preset delay time. Optionally, the timed delay task can be set as a single timed delay task, or it can be set as a repeated timed delay task. Optionally, in a specific embodiment, the timed task for obtaining the trust credential is set to automatically send a request to obtain the trust credential to the account management platform at a delay of 5 seconds at 12:00 every day. When the clock reaches 12:00, the internal timer of the account verification device counts down for 5 seconds and the background starts the thread for obtaining the trust credential, automatically sends a request to obtain the trust credential to the account management platform, receives the trust credential sent back by the account management platform, and synchronously updates the trust credential stored locally in the account verification device.

[0100] Specifically, the account verification device periodically obtains the trust credentials sent back by the account management platform through a scheduled task, and periodically synchronizes the trust credentials of the local account verification device. When obtaining the business data request for calling the business system issued by the user through the client, the local trust credentials are called, and the user's account credentials are verified using an encryption algorithm to determine that the user's account identity logged in on the client is authentic and legal, and whether the account has the authority to obtain the interactive data. If the account has the authority to obtain the interactive data, the business data requested by the user through the client to the relevant business system is returned. If the account authority is insufficient, the account verification device returns a notification message to the client that the account authority is insufficient and stops access to the business system.

[0101] In this embodiment, by presetting a timed task for obtaining trust credentials, the account verification device can start a thread for obtaining trust credentials in the background on a regular and periodic basis, send a request for obtaining trust credentials to the account management platform in a specified time period, receive the trust credentials returned by the account management platform, and update the locally stored trust credentials. This allows the account verification device to locally call the updated trust credentials to verify the user's account credentials when the user sends a service request through the client. This reduces the failure rate of account verification, reduces the service request response time, and optimizes the user experience.

[0102] See also Figure 4 , Figure 4 It is a flowchart of the third embodiment of the account verification method of the present invention.

[0103] The third embodiment of the account verification method includes:

[0104] Step S221: presetting the trust credential acquisition timing task, periodically acquiring the trust credential synchronized by the account management platform, and synchronously updating the trust credential stored locally;

[0105] Step S222: receiving the credential update information pushed by the account management platform, receiving the trust credential updated by the account management platform, and synchronously updating the trust credential stored locally.

[0106] In this embodiment, a timed task of obtaining trust credentials is pre-set in the account verification device, and a thread of obtaining trust credentials is started in the background of the account verification device. The thread of obtaining trust credentials is repeatedly executed according to the timer setting to send a request for obtaining trust credentials to the account management platform on the account management terminal. Optionally, the user or relevant staff can customize the timing period of the timed task of obtaining trust credentials according to the actual access situation.

[0107] Specifically, when the time for obtaining the trust credential set by the preset trust credential obtaining timed task has not been reached, the user logs in on the client or web page, and after the user enters the account password through the client login interface, the user verifies the correctness of the account password on the account management terminal, and obtains the account credential returned by the account management terminal after successfully verifying the account password. After the account management terminal returns the account credential to the client, it sends a trust credential change notification message to the account verification device, notifying the account verification device to synchronously update the trust credential. The account verification device receives the trust credential change notification message and obtains the updated trust credential from the account management terminal.

[0108] Specifically, the account verification device periodically obtains the trust credentials sent back by the account management platform through a scheduled task, and periodically synchronizes the local trust credentials of the account verification device. Before the set time for updating the trust credentials of the scheduled task is reached, it can also be updated according to the trust credential update information of the account management platform. When the business data request for calling the business system issued by the user through the client is obtained, the updated trust credential is called locally, and the user's account credential is verified using an encryption algorithm to determine that the user's account identity logged in at the client is authentic and legal, and whether the account has the authority to obtain the interactive data. If the account has the authority to obtain the interactive data, the business data requested by the user through the client to the relevant business system is returned. If the account authority is insufficient, the account verification device returns a notification message to the client that the account authority is insufficient and stops access to the business system.

[0109] In this embodiment, a scheduled task for obtaining trust credentials is preset to obtain trust credentials from the account management platform on a regular basis. When the time set for the scheduled task for obtaining trust credentials has not arrived, the trust credentials are updated according to the trust credential update information sent by the account management platform, thereby achieving timely acquisition of the updated trust credentials and improving the success rate of the account verification device in verifying the account.

[0110] See also Figure 5 , Figure 5 It is a flowchart of the fourth embodiment of the account verification method of the present invention.

[0111] The fourth embodiment of the account verification method includes:

[0112] Step S231: Setting a trust credential storage database;

[0113] Step S232: accessing the trust credential storage database, and reading the updated trust credential in the trust credential storage database.

[0114] In this embodiment, the account verification device sets a trust credential storage database, which is a data set that organizes, stores and manages trust credentials according to a data structure. The trust credential storage database can query, add, delete and set permission management functions for trust credentials. Specifically, when the user logs in, the account management terminal verifies the user's login information and returns the account credential and generates a trust credential associated with the account credential, which can be used to verify the user's login identity information. The account management terminal saves the trust credential in the trust credential storage database, and the account management terminal has read and write permission management on the trust credential storage database. The account verification device has the permission to read the trust credential storage database, and can retrieve the updated trust credential in the trust credential storage database by accessing the trust credential storage database.

[0115] Specifically, after the user logs in to the client, he sends an interaction request to the business system of the account verification device. The account verification device reads the interaction request and extracts the account credentials carried in the interaction request. The account verification device accesses the trust credential storage database and retrieves the trust credential associated with the account credential in the trust credential storage database for verifying the account credential. After the account verification device obtains the trust credential, it locally calls the encryption algorithm to verify the account credential carried in the interaction request sent by the user. It is determined whether the account credential sent by the client matches the trust credential obtained by the account verification device. If the parsing result is that the account credential and the trust credential are consistent, it is determined that the account credential and the trust credential match. It is determined that the account identity identification information of the user who logs in to the client is correct, and it is determined whether the account has the authority to obtain the interaction data. If the account has the authority to obtain the interaction data, the business data requested by the user through the client to the relevant business system is returned. If the account authority is insufficient, the account verification device returns to the client a notification message that the account authority is insufficient and stops access to the business system.

[0116] In this embodiment, by setting up a trust credential storage database, the account verification platform uploads the trust credential and the account verification device obtains the trust credential for verification separately, achieving the effect of asynchronous verification. When obtaining the trust credential for verification, the account verification device can obtain the trust credential without accessing the account verification platform, and the account verification device uses an encryption algorithm to verify the account credential locally, thereby improving the efficiency of account verification. At the same time, since the access rights are set for the trust credential storage database, the security of the account verification device obtaining the trust credential for verification is guaranteed.

[0117] To implement the above embodiment, the present application also provides an account verification system. Figure 6 This is a schematic diagram of the structure of the account verification system of this application, which includes: a smart terminal 10, an account management terminal 20, and an account verification device 30, wherein:

[0118] The smart terminal 10 is installed with a client corresponding to the account verification device 30, and the smart terminal 10 is used to call the client login account, obtain the account credential sent by the account management terminal 20, access the account verification device 30 according to the account credential, and obtain data from the account verification device 30;

[0119] An account verification device 20, used to run the account management platform, and to send account credentials to the smart terminal 10, and the account management terminal is also used to synchronize trust credentials with the account verification device 30;

[0120] An account verification device 30 is connected to the client installed on the smart terminal 10, and is used to receive a data request instruction from the client, and verify the account credentials corresponding to the request instruction according to the trust credentials synchronized by the account management terminal 20 to confirm the authenticity of the login identity of the client user.

[0121] In addition, the present application also provides a readable storage medium, on which an account identification program is stored. When the account identification program is executed by a processor, any step of the above account identification method is implemented.

[0122] It should be noted that, in this article, the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, drug or system including a series of elements includes not only those elements, but also includes other elements not explicitly listed, or also includes elements inherent to such process, method, drug or system. In the absence of further restrictions, an element defined by the sentence "comprises a ..." does not exclude the existence of other identical elements in the process, method, drug or system including the element.

[0123] The serial numbers of the above embodiments of the present invention are only for description and do not represent the advantages or disadvantages of the embodiments.

[0124] Through the description of the above implementation methods, those skilled in the art can clearly understand that the above-mentioned embodiment methods can be implemented by means of software plus a necessary general hardware platform, and of course by hardware, but in many cases the former is a better implementation method. Based on such an understanding, the technical solution of the present invention is essentially or the part that contributes to the prior art can be embodied in the form of a software product, which is stored in a storage medium (such as ROM / RAM, magnetic disk, optical disk) as described above, and includes a number of instructions for enabling a terminal device (which can be a mobile phone, computer, server, air conditioner, or network device, etc.) to execute the methods described in each embodiment of the present invention.

[0125] The above are only preferred embodiments of the present invention, and are not intended to limit the patent scope of the present invention. Any equivalent structure or equivalent process transformation made using the contents of the present invention specification and drawings, or directly or indirectly applied in other related technical fields, are also included in the patent protection scope of the present invention.

Claims

1. An account verification method, characterized in that: The account verification method comprises the following steps: The client receives the account password, verifies the correctness of the account password at the account management terminal, and obtains the account credential returned by the account management terminal after successfully verifying the account password; Receiving the account credential sent by the client, where the account credential is a unique identity mark reflecting user login information provided by the account management platform to the client; Synchronously obtaining a trust credential from the account management platform of the account management terminal, wherein the trust credential is data information associated with the account credential and used to confirm the authenticity of the user identity provided by the client; The trust credential and the account credential are locally parsed using an encryption verification algorithm. If the parsing result shows that the account credential is consistent with the trust credential, it is determined that the account credential matches the trust credential, confirming that the user login information logged in by the user at the client is authentic and legal; Determine whether the account has the authority to obtain the interactive data. If the account has the authority to obtain the interactive data, return the business data requested by the user through the client to the relevant business system. If the account does not have sufficient authority, the account verification device returns insufficient account authority to the client.

2. The account verification method according to claim 1, characterized in that: The steps to synchronously obtain the trust credentials of the account management platform include: Receiving credential update information pushed by the account management platform, wherein the credential update information is notification information issued by the account management platform when the trusted credential changes; Receive the updated trust credential from the account management platform, and update the locally stored trust credential.

3. The account verification method according to claim 1, characterized in that: The steps to synchronously obtain the trust credentials of the account management platform include: Pre-set a scheduled task for obtaining trust credentials; According to the period set for the timing task of obtaining the trust credential, the trust credential synchronized by the account management platform is periodically obtained, and the trust credential stored locally is synchronously updated.

4. The account verification method according to claim 1, characterized in that: The steps to synchronously obtain the trust credentials of the account management platform include: Pre-setting the trust credential acquisition timing task, periodically acquiring the trust credential synchronized by the account management platform, and synchronously updating the trust credential stored locally; and / or, Receive the credential update information pushed by the account management platform, receive the trust credential updated by the account management platform, and synchronously update the trust credential stored locally.

5. The account verification method according to claim 1, characterized in that: The steps to synchronously obtain the trust credentials of the account management platform include: Setting a trust credential storage database, wherein the trust credential storage database is used to store the trust credentials updated by the account management platform; The trust credential storage database is accessed to read the updated trust credential in the trust credential storage database.

6. The account verification method according to claim 5, characterized in that: The steps of locally verifying the account credentials based on the trust credentials and confirming the user login information of the account credentials include: The trust credential stored in the trust credential storage database is called, and an encryption algorithm is locally called to verify whether the account credential sent by the client is correct, and to verify the account login information of the client.

7. The account verification method according to any one of claims 2 to 4, characterized in that: The steps of locally verifying the account credentials based on the trust credentials and confirming the user login information of the account credentials include: Calling the updated locally stored trust credential, and locally calling an encryption algorithm to verify whether the account credential sent by the client matches the trust credential; If the account credential matches the trust credential after verification by the encryption algorithm, opening the data port corresponding to the account credential to the client; If the account credential and the trust credential do not match after verification by the encryption algorithm, a prompt message indicating that the account credential is wrong is sent to the client.

8. An account verification device, characterized in that: The account verification device includes a memory, a processor, and an account verification program stored in the memory and executable on the processor. When the processor executes the account verification program, the steps of the account verification method according to any one of claims 1 to 7 are implemented.

9. An account verification system, characterized in that: The account verification system includes: A smart terminal, wherein the smart terminal is installed with a client corresponding to the account verification device, and the smart terminal is used to call the client to log in to the account, obtain the account credential sent by the account management terminal, access the account verification device according to the account credential, and obtain data from the account verification device; An account management terminal, used to run the account management platform, used to send account credentials to the smart terminal, and the account management terminal is also used to synchronize trust credentials with the account verification device; An account verification device, the account verification device is connected to the client installed on the smart terminal, and is used to receive a data request instruction from the client, and verify the account credential corresponding to the request instruction according to the trust credential synchronized by the account management terminal; When executed, the account verification system implements the steps of the account verification method according to any one of claims 1 to 7.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores an account verification program, and when the account verification program is executed by the processor, the steps of the account verification method according to any one of claims 1 to 7 are implemented.

Images