Data processing method, device and equipment
Through the interaction between the terminal device and the authentication server and the application server, authentication information is generated and passed, which solves the complex and time-consuming problem of existing application login process, and achieves a fast and efficient login process.
Patent Information
- Application Number
- CN202210082278.2
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2022-01-24
- Publication Date
- 2025-03-25
- Estimated Expiration
- 2042-01-24
AI Technical Summary
The login process of existing applications is complex and time-consuming, resulting in low login efficiency.
The terminal device sends an authentication request to the authentication server. The authentication server generates and stores the authentication information. The terminal device forwards the authentication information to the application server. The application server obtains the account information based on the authentication information and sends it to the terminal device to complete user identity authentication.
It realizes that the application login can be completed without the user manually entering information, improving the application login efficiency.
Smart Images

Figure CN114398605B_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the field of mobile communication technology, and in particular to a data processing method, device and equipment. Background Art
[0002] Terminal devices (e.g., mobile phones, tablet computers, etc.) can install applications (Application, App), such as e-commerce applications, chat applications, entertainment applications, etc. Users can use various services provided by the applications.
[0003] Typically, an application requires the user to log in before using the application to verify the user's identity. Exemplarily, when the terminal device detects that the user has started an application, it displays a login interface. In the login interface, the user can choose an account and password login method, or a text message verification code login method. Taking the text message verification code login method as an example, the user enters the mobile phone number in the login interface and clicks to get the text message verification code. The terminal device sends the mobile phone number to the application server. The application server sends the text message verification code to the terminal device based on the mobile phone number. The user enters the text message verification code in the login interface, so that the terminal device sends the text message verification code to the application server. The application server compares the text message verification code received from the terminal device with the text message verification code previously sent to the terminal device. If they are consistent, the verification is successful, and if they are inconsistent, the verification fails.
[0004] However, the above login process is complicated and time-consuming, resulting in low application login efficiency. Summary of the invention
[0005] The present application provides a data processing method, apparatus and device, which improve the efficiency of application login.
[0006] In a first aspect, the present application provides a data processing method, applied to a terminal device, the method comprising:
[0007] In response to receiving a start request input by a user to a first application, sending a first authentication request to an authentication server, and receiving first authentication information from the authentication server; wherein the first authentication request includes an identifier of the first application and network address information of the terminal device;
[0008] Sending the first authentication information to an application server, and receiving first account information corresponding to the first authentication information from the application server;
[0009] Display a page of the first application according to the first account information.
[0010] In a possible implementation, sending a first authentication request to an authentication server includes:
[0011] Determine a first communication card in the terminal device that has a data flow function enabled;
[0012] The first authentication request is sent to the authentication server through the data traffic channel of the first communication card.
[0013] In a possible implementation, sending the first authentication request to the authentication server through the data traffic channel of the first communication card includes:
[0014] The first authentication request is sent to the public network server through the data traffic channel of the first communication card, so that the public network server determines the first geographical area corresponding to the terminal device according to the first authentication request, and forwards the first authentication request to the authentication server corresponding to the first geographical area.
[0015] In a possible implementation, determining a first communication card in the terminal device that enables a data flow function includes:
[0016] If data traffic is not enabled for all communication cards in the terminal device, the first communication card is determined from among all the communication cards, and a data traffic function corresponding to the first communication card is enabled.
[0017] In a possible implementation, before sending the first authentication request to the authentication server through the data traffic channel of the first communication card, the method further includes:
[0018] Determining whether the local area network communication function of the terminal device is enabled;
[0019] If yes, the LAN communication function is disabled.
[0020] In a possible implementation, displaying a page of the first application according to the first account information includes:
[0021] Displaying a login confirmation page according to the first account information, wherein the login confirmation page includes the first account information and a confirmation control;
[0022] In response to a click operation input by the user to the confirmation control, a page of the first application is displayed.
[0023] In a second aspect, the present application provides a data processing method, applied to an authentication server, the method comprising:
[0024] Receiving a first authentication request sent by a terminal device, wherein the first authentication request includes an identifier of a first application and network address information of the terminal device;
[0025] Generate first authentication information according to the identifier of the first application and the network address information of the terminal device;
[0026] storing the first authentication information, the network address information of the terminal device, and an identifier of a first geographical area corresponding to the terminal device in a first preset database;
[0027] The first authentication information is sent to the terminal device according to the network address information of the terminal device.
[0028] In a possible implementation, generating first authentication information according to the identifier of the first application and the network address information of the terminal device includes:
[0029] The identifier of the first application and the network address information of the terminal device are encrypted to obtain the first authentication information.
[0030] In a possible implementation, storing the first authentication information, the network address information of the terminal device, and the identifier of the first geographical area corresponding to the terminal device in a first preset database includes:
[0031] Obtaining a generation timestamp corresponding to the first authentication information;
[0032] The first authentication information, the network address information of the terminal device, the identifier of the first geographical area, and the generation timestamp are stored in the first preset database.
[0033] A possible implementation also includes:
[0034] Acquire network data of the terminal device, the network data including: network address information of the terminal device and first account information of the terminal device;
[0035] The network address information of the terminal device, the first account information of the terminal device, and the identifier of the first geographical area corresponding to the terminal device are stored in a second preset database.
[0036] In a third aspect, the present application provides a data processing method, applied to an application server, the method comprising:
[0037] Receiving first authentication information sent by a terminal device;
[0038] According to the first authentication information, the network address information of the terminal device and the identifier of the first geographical area are obtained from a first preset database; the first preset database is used to store the network address information, the identifier of the geographical area and the authentication information of different terminal devices;
[0039] According to the network address information of the terminal device and the identifier of the first geographical area, obtaining the first account information of the terminal device from a second preset database; the second preset database is used to store the network address information, the identifier of the geographical area and the account information of different terminal devices;
[0040] Send the first account information to the terminal device.
[0041] In a possible implementation, the first preset database is further used to store generation timestamps corresponding to different authentication information; and obtaining the network address information of the terminal device and the identifier of the first geographical area from the first preset database according to the first authentication information includes:
[0042] Get the current timestamp;
[0043] According to the first authentication information, obtaining a generation timestamp corresponding to the first authentication information from the first preset database;
[0044] If the time interval between the current timestamp and the generated timestamp is less than a preset time length, the network address information of the terminal device and the identifier of the first geographical area are obtained from the first preset database according to the first authentication information.
[0045] In a fourth aspect, the present application provides a data processing device, applied to a terminal device, comprising: a receiving module, a sending module and a display module; wherein:
[0046] The receiving module is used to receive a start request input by a user to the first application;
[0047] The sending module is used to send a first authentication request to the authentication server;
[0048] The receiving module is further configured to receive first authentication information from the authentication server; wherein the first authentication request includes an identifier of the first application and network address information of the terminal device;
[0049] The sending module is further used to send the first authentication information to the application server;
[0050] The receiving module is further configured to receive first account information corresponding to the first authentication information from the application server;
[0051] The display module is used to display the page of the first application according to the first account information.
[0052] In a fifth aspect, the present application provides a data processing device, applied to an authentication server, comprising: a receiving module, a processing module and a sending module, wherein:
[0053] The receiving module is used to receive a first authentication request sent by a terminal device, wherein the first authentication request includes an identifier of a first application and network address information of the terminal device;
[0054] The processing module is used to generate first authentication information according to the identifier of the first application and the network address information of the terminal device;
[0055] The processing module is further used to store the first authentication information, the network address information of the terminal device and the identifier of the first geographical area corresponding to the terminal device in a first preset database;
[0056] The sending module is used to send the first authentication information to the terminal device according to the network address information of the terminal device.
[0057] In a sixth aspect, the present application provides a data processing device, applied to an application server, comprising: a receiving module, a processing module and a sending module, wherein:
[0058] The receiving module is used to receive the first authentication information sent by the terminal device;
[0059] The processing module is used to obtain the network address information of the terminal device and the identifier of the first geographical area from a first preset database according to the first authentication information; the first preset database is used to store the network address information, the identifier of the geographical area and the authentication information of different terminal devices;
[0060] The processing module is further used to obtain the first account information of the terminal device from a second preset database according to the network address information of the terminal device and the identifier of the first geographical area; the second preset database is used to store the network address information, the identifier of the geographical area and the account information of different terminal devices;
[0061] The sending module is used to send the first account information to the terminal device.
[0062] In a seventh aspect, the present application provides a data processing device, comprising: a processor, and a memory communicatively connected to the processor;
[0063] The memory stores a computer program;
[0064] The processor executes the computer program to implement the method as described in any one of the first aspects, or implement the method as described in any one of the second aspects, or implement the method as described in any one of the third aspects.
[0065] In an eighth aspect, the present application provides a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a computer, implements the method as described in any one of the first aspect, or implements the method as described in any one of the second aspect, or implements the method as described in any one of the third aspect.
[0066] In a ninth aspect, the present application provides a computer program product, comprising a computer program, wherein when the computer program is executed by a computer, the computer program implements the method as described in any one of the first aspect, or the method as described in any one of the second aspect, or the method as described in any one of the third aspect.
[0067] The present application provides a data processing method, device and equipment, wherein an authentication server can collect network data such as network address information and account information of a terminal device in real time, and store the above network data in a second preset database. When the terminal device receives a startup request input by a user to a first application, the terminal device sends a first authentication request to the authentication server, and the authentication server generates first authentication information according to the first authentication request, and sends the first authentication information to the terminal device, and at the same time stores the first authentication information, the network address information of the terminal device and the identifier of the first geographical area corresponding to the terminal device in the first preset database. The terminal device forwards the received first authentication information to the application server. The application server obtains the network address information of the terminal device and the identifier of the first geographical area from the first preset database according to the first authentication information, and then obtains the first account information of the terminal device from the second preset database according to the network address information of the terminal device and the identifier of the first geographical area, and sends the first account information to the terminal device to complete the user identity authentication. The user does not need to manually enter information when logging into the first application, which improves the login efficiency of the application. BRIEF DESCRIPTION OF THE DRAWINGS
[0068] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative labor.
[0069] Figure 1 A schematic diagram of an interface for logging into an application in the prior art;
[0070] Figure 2 A schematic diagram of the interface of the login application provided in the embodiment of the present application;
[0071] Figure 3A schematic diagram of a data processing system architecture provided in an embodiment of the present application;
[0072] Figure 4 A flowchart of a data processing method provided in an embodiment of the present application;
[0073] Figure 5 A flowchart of another data processing method provided in an embodiment of the present application;
[0074] Figure 6 A schematic diagram of another interface for logging into an application provided in an embodiment of the present application;
[0075] Figure 7 A schematic diagram of the structure of a data processing device provided in an embodiment of the present application;
[0076] Figure 8 A schematic diagram of the structure of another data processing device provided in an embodiment of the present application;
[0077] Fig. 9 A schematic diagram of the structure of another data processing device provided in an embodiment of the present application;
[0078] Fig.10 A schematic diagram of the structure of a data processing device provided in an embodiment of the present application. DETAILED DESCRIPTION
[0079] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.
[0080] The terms "first", "second", "third", "fourth", etc. (if any) in the specification and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchanged where appropriate, so that the embodiments of the present invention described herein can, for example, be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units that are clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.
[0081] To facilitate understanding, first combine Figure 1, the process of logging into an application in the prior art is described.
[0082] Figure 1 Schematic diagram of the interface for logging into an application in the prior art. Figure 1 , including interface 101 to interface 104.
[0083] Referring to interface 101 , taking a mobile phone as an example, when an application W needs to be started, the user clicks the icon of the application W on the mobile phone desktop to trigger a start request. When the mobile phone detects the user's start request, it displays a login interface, such as interface 102 .
[0084] Please refer to page 102. In the login interface, the user enters the mobile phone number and clicks the "Get Verification Code" button. The mobile phone will send the mobile phone number entered by the user to the application server. After receiving the mobile phone number, the application server sends a text message verification code to the mobile phone based on the mobile phone number. After that, the user needs to enter the text message verification code (for example, the text message verification code is 9816) in the login interface, as shown in interface 103.
[0085] Please refer to interface 103, the user enters the SMS verification code and clicks the "Login" button. At this time, the mobile phone will send the SMS verification code entered by the user to the application server. The application server will compare the SMS verification code received from the mobile phone with the SMS verification code previously sent to the mobile phone. If the two verification codes are consistent, the user identity verification is successful, otherwise, the user identity verification fails.
[0086] Please refer to interface 104. After the user identity verification is successful, the mobile phone displays the interface of application W.
[0087] In the above process, the user needs to enter the mobile phone number and SMS verification code in the login interface, which takes a long time. There are also other situations that extend the login process and increase the login time. For example, when the mobile phone number or SMS verification code entered by the user is wrong, it takes a while to get the SMS verification code again. This results in a long application login time and low login efficiency.
[0088] In order to solve the above technical problems, the embodiment of the present application provides a method for quickly logging into an application with one-click login. Figure 2 The process of logging into the application provided in the embodiment of the present application is described.
[0089] Figure 2 This is a schematic diagram of the login application interface provided in the embodiment of the present application. Figure 2 , including interface 201 and interface 202.
[0090] Please refer to interface 201. When the application W needs to be started, the user clicks the icon of the application W on the mobile phone desktop to trigger the start request. After the start request is triggered, the terminal device can implement the user identity verification process without the user having to enter any information (for example, without having to enter a mobile phone number and SMS verification code, nor an account password). After the user identity verification is successful, the mobile phone displays the interface of the application W, such as interface 202.
[0091] For ease of understanding, below, combined Figure 3 The data processing system architecture involved in the embodiments of the present application is described.
[0092] Figure 3 This is a schematic diagram of the data processing system architecture provided in the embodiment of the present application. Figure 3 The system includes: terminal equipment, application server, and authentication server.
[0093] In the above data processing architecture, the authentication server is a server set up in each geographical area. One authentication server can be set up in one geographical area, and the authentication server can provide authentication services for terminal devices in the geographical area. That is, the geographical area corresponds to the authentication server one by one.
[0094] Exemplarily, the geographical area may be a province, a municipality, etc. For easy distinction, the identification of the geographical area may be formed by numbering, etc. For example, the identification of the geographical area of Province A may be 01, and the identification of the geographical area of Municipality B may be 02. It should be understood that the private network addresses of all terminal devices in a geographical area are different, but the public network addresses fall within the same address segment, and the public network addresses of the authentication server and the terminal devices in the geographical area fall within the same address segment.
[0095] Application server refers to the backend server of the application.
[0096] In the embodiment of the present application, after the terminal device receives the startup request of the application, it can implement the user identity verification process through interaction with the authentication server and the application server.
[0097] Optionally, in some possible implementations, the above system architecture may also include: a public network server and a core gateway.
[0098] The public network server is a server set up on the public network. The public network server stores the identifiers of each geographical area and the public network addresses corresponding to each geographical area. For example, the public network server can store the identifiers of the geographical areas and the public network addresses of the geographical areas in the form of a list. The main function of the public network server is to determine the geographical area or the identifier of the geographical area corresponding to the public network address based on the public network address.
[0099] The core gateway can provide storage services for the authentication server.
[0100] In the data processing method provided in the embodiment of the present application, on the one hand, the authentication server can collect network data of terminal devices in the area in real time, and can store the collected network data and the identifier of the geographical area where the authentication server is located to the core gateway. Among them, the network data may include the network address information of the terminal device, as well as account information, etc. For example, the network data may include the private network address, mobile phone number, etc. of the terminal device. Optionally, the core gateway can store the identifier of the geographical area, the private network address and mobile phone number of the terminal device in the form of a list. On the other hand, when the user logs in to the application, the authentication server can generate an authentication code based on the network address information of the mobile phone and the identifier of the application to verify the user's identity.
[0101] The technical solution of the present invention is described in detail with specific embodiments below. The following specific embodiments can be combined with each other, and the same or similar concepts or processes may not be described in detail in some embodiments.
[0102] Figure 4 A flowchart of a data processing method provided in an embodiment of the present application. Figure 4 , the method may include:
[0103] S401: The terminal device sends a first authentication request to an authentication server. The first authentication request includes an identifier of a first application and network address information of the terminal device.
[0104] Correspondingly, the authentication server receives the first authentication request sent by the terminal device.
[0105] It should be understood that before sending the first authentication request to the authentication server, the terminal device receives a start request input by the user to the first application.
[0106] The terminal device may be a mobile phone, a tablet computer, etc. The network address information of the terminal device is used to indicate the private network address of the terminal device.
[0107] The first application is the application that the user requests to start at the current moment.
[0108] The first authentication request is an authentication request sent by the terminal device to the authentication server when the first application is started.
[0109] The terminal device has the first application installed, and the user can initiate a request to start the first application on the terminal device. For example, the first application can be installed on a mobile phone, and the user can initiate a start request by clicking the icon of the first application on the mobile phone desktop.
[0110] After the user initiates a start request, the terminal device sends a first authentication request to the authentication server. In actual application, the first authentication request can be sent to the authentication server in the following manner: determining a first communication card with a data flow function enabled in the terminal device; and sending the first authentication request to the authentication server through the data flow channel of the first communication card.
[0111] The first communication card is a communication card with a data flow function enabled in the terminal device. For example, when two communication cards are installed in the terminal device, the communication card with a data flow function enabled is the first communication card; when one communication card is installed in the terminal device, after the data flow function is enabled, the communication card is the first communication card.
[0112] It should be understood that each communication card has only one mobile phone number. After the data traffic function is turned on, the data traffic channel of each communication card is uniquely determined, and thus the private network address of the terminal device is uniquely determined. That is, the private network address of the terminal device corresponds to the mobile phone number one by one.
[0113] In this embodiment, the terminal device can send a first authentication request to the authentication server through the following process: the terminal device sends the first authentication request to the public network server, the public network server determines the first geographical area corresponding to the terminal device based on the first authentication request, and forwards the first authentication request to the authentication server corresponding to the first geographical area.
[0114] It should be understood that when accessing the Internet, the private network address of the terminal device needs to be converted to a public network address through a firewall before it can access the Internet. When the terminal device accesses a public network server, the private network address will be converted to a public network address, and the public network server can obtain the converted public network address, that is, the public network server can obtain the public network address of the terminal device. The public network server can query the identifier of the geographical area corresponding to the terminal device according to the correspondence table between the identifier of the geographical area and the public network address stored locally, and forward the first authentication request to the authentication server of the geographical area.
[0115] S402: The authentication server generates first authentication information according to the identifier of the first application and the network address information of the terminal device.
[0116] In this embodiment, the authentication server can encrypt the identifier of the first application and the network address information of the terminal device through an encryption algorithm to generate first authentication information, and the first authentication information includes the application identification information, so that the first authentication information cannot be misused by other applications. The encryption algorithm can be a random algorithm or other algorithms, which is not limited in this embodiment.
[0117] For example, the authentication server can encrypt the identification of application A and the private network address of the terminal device through a random algorithm to generate authentication information A of application A. If authentication information A is used to log in to application B, user identity authentication cannot be completed, resulting in authentication failure.
[0118] S403: The authentication server sends first authentication information to the terminal device according to the network address information of the terminal device.
[0119] Correspondingly, the terminal device receives the first authentication information sent by the authentication server.
[0120] After generating the first authentication information, the authentication server may send the first authentication information to the terminal device according to the network address information of the terminal device in the first authentication request.
[0121] S404: The authentication server stores the first authentication information, the network address information of the terminal device, and the identifier of the first geographical area corresponding to the terminal device in a first preset database.
[0122] It should be noted that the execution order of S403 and S404 is not limited, and S403 may be executed first and then S404, or S404 may be executed first and then S403, or both may be executed simultaneously.
[0123] Exemplarily, when the authentication server sends the first authentication information to the terminal device, it stores the first authentication information, the identifier of the first geographical area corresponding to the terminal device, and the network address information of the terminal device obtained from the first authentication request in a first preset database.
[0124] Optionally, the first preset database may store the first authentication information, the identifier of the first geographical area, and the network address information of the terminal device in the form of a table for easy query or retrieval.
[0125] For example, the content stored in the first preset database may be as shown in Table 1.
[0126] Table 1
[0127] Identification of geographical areas Network address information of the terminal device Authentication information Geographical Area A Network Address 1 Authentication information 1 Geographical Area B Network Address 2 Authentication information 2 … … …
[0128] Optionally, the first preset database may be set in the core gateway. For example, the authentication server sends the first authentication information, the identifier of the first geographical area corresponding to the terminal device, and the network address information of the terminal device to the core gateway, and the core gateway stores the above information in the first preset database.
[0129] S405. The terminal device sends first authentication information to the application server.
[0130] The terminal device forwards the received first authentication information to the application server so that the application server verifies the user identity.
[0131] Correspondingly, the application server receives the first authentication information sent by the terminal device.
[0132] S406: The application server obtains the network address information of the terminal device and the identifier of the first geographical area from the first preset database according to the first authentication information.
[0133] As mentioned above, the first preset database stores the correspondence between the first authentication information, the identifier of the first geographical area, and the network address information of the terminal device. The application server can query the identifier of the first geographical area corresponding to the first authentication information and the network address information of the terminal device in the first preset database according to the first authentication information.
[0134] S407: The application server obtains the first account information of the terminal device from the second preset database according to the network address information of the terminal device and the identifier of the first geographical area.
[0135] As mentioned above, the authentication server can collect network address information and account information of terminal devices in the area in real time, and can store the collected network address information, account information of the terminal devices, and the identification storage of the geographical area where the authentication server is located.
[0136] Optionally, the authentication server may store the above information in a second preset database.
[0137] Optionally, the second preset database can be set in the core gateway. For example, the authentication server sends the collected network address information, account information of the terminal device, and the identification of the geographical area where the authentication server is located to the core gateway, and the core gateway stores the above information in the second preset database.
[0138] For example, the data in the second preset database is shown in Table 2.
[0139] Table 2
[0140] Network address information of the terminal device Account Information Identification of geographical areas Network Address 1 Account Information1 Geographical Area A Network Address 2 Account Information 2 Geographical Area B … … …
[0141] Optionally, the account information may be a mobile phone number, user email address, user ID, etc.
[0142] In this embodiment, after the application server obtains the network address information of the terminal device and the identifier of the first geographical area, it can search for the corresponding first account information in the second preset database according to the network address information of the terminal device and the identifier of the first geographical area.
[0143] S408: The application server sends the first account information to the terminal device.
[0144] After the application server obtains the first account information of the terminal device, it sends the account information to the terminal device, thereby completing the user identity authentication.
[0145] Correspondingly, the terminal device receives the first account information from the application server.
[0146] S409: The terminal device displays a page of the first program according to the first account information.
[0147] After the user identity verification is successful, the terminal device displays the page of the first application and the login is completed.
[0148] In the data processing method provided in this embodiment, the authentication server can collect network data such as the network address information and account information of the terminal device in real time, and store the above network data in the second preset database. When the terminal device receives the startup request input by the user to the first application, the terminal device sends a first authentication request to the authentication server, and the authentication server generates the first authentication information according to the first authentication request, and sends the first authentication information to the terminal device, and at the same time stores the first authentication information, the network address information of the terminal device and the identifier of the first geographical area corresponding to the terminal device in the first preset database. The terminal device forwards the received first authentication information to the application server. The application server obtains the network address information of the terminal device and the identifier of the first geographical area from the first preset database according to the first authentication information, and then obtains the first account information of the terminal device from the second preset database according to the network address information of the terminal device and the identifier of the first geographical area, and sends the first account information to the terminal device to complete the user identity authentication. The user does not need to manually enter information when logging into the first application, which improves the login efficiency of the application.
[0149] Figure 5 A flowchart of another data processing method provided in an embodiment of the present application. Figure 5 , the method may include:
[0150] S501, determining a first communication card in a terminal device that has a data flow function enabled.
[0151] It should be noted that Figure 4 The implementation of the first communication card in S401 is also applicable to S501 of this embodiment, and the similarities are not repeated here. In addition, if all communication cards in the terminal device do not have data traffic turned on, the first communication card is determined among all communication cards, and the data traffic function corresponding to the first communication card is turned on. In addition, it is determined whether the local area network communication function of the terminal device is turned on, and if so, the local area network communication function is turned off.
[0152] Exemplarily, it is assumed that one or both of the communication cards installed in the terminal device do not have data traffic turned on. The user selects one of the communication cards or the two communication cards as the first communication card. After the user determines the first communication card, the data traffic of the first communication card is turned on, and the local area network communication function of the terminal device is confirmed to be turned off.
[0153] S502: The terminal device sends a first authentication request to the public network server through the data flow channel of the first communication card. The first authentication request includes the identifier of the first application and the network address information of the terminal device.
[0154] Correspondingly, the public network server receives the first authentication request sent by the terminal device.
[0155] It should be understood that before sending the first authentication request to the public network server, the terminal device receives a start request input by the user to the first application.
[0156] S503: The public network server determines the first geographical area corresponding to the terminal device according to the first authentication request.
[0157] As mentioned above, the public network server can query the identifier of the first geographical area corresponding to the terminal device according to the correspondence table between the identifiers of the geographical areas and the public network addresses stored locally.
[0158] S504: The public network server forwards the first authentication request to the authentication server corresponding to the first geographical area.
[0159] After querying the first geographical area corresponding to the terminal device, the public network server forwards the first authentication request to the authentication server in the geographical area.
[0160] S505: The authentication server generates first authentication information according to the identifier of the first application and the network address information of the terminal device, and obtains a generation timestamp corresponding to the first authentication information.
[0161] S506: The authentication server sends first authentication information to the terminal device according to the network address information of the terminal device.
[0162] S507: The authentication server stores the first authentication information, the network address information of the terminal device, the identifier of the first geographical area corresponding to the terminal device, and the generation timestamp in a first preset database. The first preset database is set in the core gateway.
[0163] It should be noted that the specific implementation of S505 to S507 in this embodiment is the same as Figure 4 S402 to S404 are similar, and the similarities are not repeated here.
[0164] In addition, in this embodiment, when the authentication server generates the first authentication information, it obtains the generation timestamp corresponding to the first authentication information. The first preset database is set in the core gateway. When the authentication server stores the first authentication information, the network address information of the terminal device, and the identifier of the first geographical area corresponding to the terminal device, it also stores the generation timestamp in the first preset database.
[0165] S508. The terminal device sends first authentication information to the application server.
[0166] Correspondingly, the application server receives the first authentication information sent by the terminal device.
[0167] S509: The application server obtains the current timestamp.
[0168] S510. The application server obtains a generation timestamp corresponding to the first authentication information from a first preset database according to the first authentication information.
[0169] S511. If the time interval between the current timestamp and the generated timestamp is less than the preset time length, execute S512; otherwise, the user identity authentication fails.
[0170] It should be understood that in this embodiment, the first authentication information generated by the authentication server has a time limit. If the application server verifies the user identity within the time limit, the first authentication information is valid, and the application server continues to verify the user identity. If the application server does not verify the user identity within the time limit, the first authentication information is invalid and the user identity authentication fails.
[0171] For example, the preset duration is 60 seconds. In S509 to S511, after receiving the first authentication information, the application server obtains the current timestamp, and obtains the generation timestamp corresponding to the first authentication information from the first preset database according to the first authentication information.
[0172] Assuming that the time interval between the current timestamp and the generated timestamp is 50s, the time interval between the current timestamp and the generated timestamp is less than the preset duration (50s<60s), the first authentication information is valid, and the application server continues to verify the user identity.
[0173] Assuming that the time interval between the current timestamp and the generated timestamp is 80s, if the time interval between the current timestamp and the generated timestamp is greater than the preset time length (50s>80s), the first authentication information becomes invalid and the user identity authentication fails.
[0174] S512: The application server obtains the network address information of the terminal device and the identifier of the first geographical area from the first preset database according to the first authentication information.
[0175] S513: The application server obtains first account information of the terminal device from a second preset database according to the network address information of the terminal device and the identifier of the first geographical area.
[0176] S514. The application server sends the first account information to the terminal device.
[0177] It should be understood that the specific implementation of S512 to S514 in this embodiment is different from Figure 4 S406 to S408 are the same as those in the above, and will not be repeated here.
[0178] S515. The terminal device displays a page of the first program according to the first account information.
[0179] In this embodiment, after the user identity verification is successful, the user can confirm the first account information.
[0180] Exemplarily, after successful user identity authentication, the page of the first program can be displayed in the following manner: the terminal device displays a login confirmation page based on the first account information, the login confirmation page including the first account information and a confirmation control; the user inputs a click operation to the confirmation control to display the page of the first application.
[0181] For ease of understanding, the following Figure 6 , the process of displaying the page of the first program in S515 is explained.
[0182] Figure 6 This is another interface diagram of a login application provided in an embodiment of the present application. Figure 6 , including interface 601 to interface 603.
[0183] Please refer to interface 601. When the application W needs to be started, the user clicks the icon of the application W on the mobile phone desktop to trigger a start request. After the start request is triggered, the application server verifies the user's identity. After the user identity verification is successful, the application sends the account information to the terminal device (for example, the account information is 16123456789). The terminal device displays the login confirmation page based on the account information. The login confirmation page includes account information and confirmation controls, such as interface 602. After the user clicks the confirmation control in the login confirmation page, the terminal device displays the page of the first application, such as interface 603. During the application login process, the user does not need to enter any information.
[0184] In the data processing method provided in this embodiment, the first authentication information generated by the authentication server has a time limit. If the application server does not verify the user identity within the time limit, the first authentication information becomes invalid. This can prevent malicious acquisition of the authentication code.
[0185] Figure 7 This is a schematic diagram of the structure of a data processing device provided in an embodiment of the present application. Figure 7 The data processing device 700 can be applied to a terminal device, and the data processing device 700 includes: a receiving module 701, a sending module 702 and a display module 703; wherein,
[0186] The receiving module 701 is used to receive a start request input by a user to the first application;
[0187] The sending module 702 is used to send a first authentication request to the authentication server;
[0188] The receiving module 701 is further configured to receive first authentication information from the authentication server; wherein the first authentication request includes an identifier of the first application and network address information of the terminal device;
[0189] The sending module 702 is further configured to send the first authentication information to an application server;
[0190] The receiving module 701 is further configured to receive first account information corresponding to the first authentication information from the application server;
[0191] The display module 703 is used to display the page of the first application according to the first account information.
[0192] In a possible implementation manner, the sending module 702 is specifically configured to:
[0193] Determine a first communication card in the terminal device that has a data flow function enabled;
[0194] The first authentication request is sent to the authentication server through the data traffic channel of the first communication card.
[0195] In a possible implementation manner, the sending module 702 is specifically configured to:
[0196] The first authentication request is sent to the public network server through the data traffic channel of the first communication card, so that the public network server determines the first geographical area corresponding to the terminal device according to the first authentication request, and forwards the first authentication request to the authentication server corresponding to the first geographical area.
[0197] In a possible implementation manner, the sending module 702 is specifically configured to:
[0198] If data traffic is not enabled for all communication cards in the terminal device, the first communication card is determined from among all the communication cards, and a data traffic function corresponding to the first communication card is enabled.
[0199] In a possible implementation manner, the sending module 702 is specifically configured to:
[0200] Determining whether the local area network communication function of the terminal device is enabled;
[0201] If yes, the LAN communication function is disabled.
[0202] In a possible implementation manner, the display module 703 is specifically used for:
[0203] Displaying a login confirmation page according to the first account information, wherein the login confirmation page includes the first account information and a confirmation control;
[0204] In response to a click operation input by the user to the confirmation control, a page of the first application is displayed.
[0205] The data processing device provided in the embodiment of the present application can execute the technical solution shown in the above method embodiment, and its implementation principle and beneficial effects are similar, which will not be repeated here.
[0206] Figure 8 This is a schematic diagram of the structure of another data processing device provided in an embodiment of the present application. Figure 8 The data processing device 800 can be applied to an authentication server. The data processing device 800 includes: a receiving module 801, a processing module 802 and a sending module 803, wherein:
[0207] The receiving module 801 is used to receive a first authentication request sent by a terminal device, where the first authentication request includes an identifier of a first application and network address information of the terminal device;
[0208] The processing module 802 is used to generate first authentication information according to the identifier of the first application and the network address information of the terminal device;
[0209] The processing module 802 is further configured to store the first authentication information, the network address information of the terminal device, and an identifier of a first geographical area corresponding to the terminal device in a first preset database;
[0210] The sending module 803 is used to send the first authentication information to the terminal device according to the network address information of the terminal device.
[0211] In a possible implementation manner, the processing module 802 is specifically configured to:
[0212] The identifier of the first application and the network address information of the terminal device are encrypted to obtain the first authentication information.
[0213] In a possible implementation manner, the processing module 802 is specifically configured to:
[0214] Obtaining a generation timestamp corresponding to the first authentication information;
[0215] The first authentication information, the network address information of the terminal device, the identifier of the first geographical area, and the generation timestamp are stored in the first preset database.
[0216] In a possible implementation manner, the processing module 802 is specifically configured to:
[0217] Acquire network data of the terminal device, the network data including: network address information of the terminal device and first account information of the terminal device;
[0218] The network address information of the terminal device, the first account information of the terminal device, and the identifier of the first geographical area corresponding to the terminal device are stored in a second preset database.
[0219] The data processing device provided in the embodiment of the present application can execute the technical solution shown in the above method embodiment, and its implementation principle and beneficial effects are similar, which will not be repeated here.
[0220] Fig. 9 This is a structural diagram of another data processing device provided in an embodiment of the present application. Fig. 9 The data processing device 900 can be applied to an application server. The data processing device 900 includes: a receiving module 901, a processing module 902 and a sending module 903, wherein:
[0221] The receiving module 901 is used to receive first authentication information sent by a terminal device;
[0222] The processing module 902 is used to obtain the network address information of the terminal device and the identifier of the first geographical area from a first preset database according to the first authentication information; the first preset database is used to store the network address information, the identifier of the geographical area and the authentication information of different terminal devices;
[0223] The processing module 902 is further used to obtain the first account information of the terminal device from a second preset database according to the network address information of the terminal device and the identifier of the first geographical area; the second preset database is used to store the network address information, the identifier of the geographical area and the account information of different terminal devices;
[0224] The sending module 903 is used to send the first account information to the terminal device.
[0225] In a possible implementation, the processing module 902 is specifically configured to:
[0226] Get the current timestamp;
[0227] According to the first authentication information, obtaining a generation timestamp corresponding to the first authentication information from the first preset database;
[0228] If the time interval between the current timestamp and the generated timestamp is less than a preset time length, the network address information of the terminal device and the identifier of the first geographical area are obtained from the first preset database according to the first authentication information.
[0229] The data processing device provided in the embodiment of the present application can execute the technical solution shown in the above method embodiment, and its implementation principle and beneficial effects are similar, which will not be repeated here.
[0230] Fig.10 A schematic diagram of the structure of a data processing device provided in an embodiment of the present application. The data processing device may be a terminal device, or a chip, a chip module, etc. in a terminal device. The data processing device may also be an authentication server, or a chip, a chip module, etc. in an authentication server. The data processing device may also be an application server, or a chip, a chip module, etc. in an application server.
[0231] like Fig.10 As shown, the data processing device 1000 provided in this embodiment includes: a transceiver 1001, a memory 1002, and a processor 1003. The transceiver 1001 may include: a transmitter and / or a receiver. The transmitter may also be referred to as a transmitter, a transmitter, a transmission port, a transmission interface, or similar descriptions, and the receiver may also be referred to as a receiver, a receiver, a reception port, a reception interface, or similar descriptions. Exemplarily, the transceiver 1001, the memory 1002, and the processor 1003 are interconnected via a bus 1004.
[0232] The memory 1002 is used to store computer programs;
[0233] The processor 1003 is used to execute the computer program stored in the memory to implement the data processing method performed by the terminal device, the authentication server, or the application server in any of the above method embodiments.
[0234] The receiver in the transceiver 1001 can be used to perform the receiving function of the data processing device in the above method embodiment. The transmitter in the transceiver 1001 can be used to perform the sending function of the data processing device in the above method embodiment. The processor 1003 can be used to perform the processing function of the data processing device in the above method embodiment.
[0235] The data processing device provided in this embodiment can be used to execute the data processing method performed by the terminal device, the authentication server, or the application server in any of the above method embodiments. Its implementation principle and technical effects are similar and will not be described in detail here.
[0236] An embodiment of the present application also provides a computer-readable storage medium, which stores a computer program. When the computer program is executed by a computer, it implements the data processing method performed by the terminal device in any of the above method embodiments, or implements the data processing method performed by the authentication server in any of the above method embodiments, or implements the data processing method performed by the application server in any of the above method embodiments. The implementation principles and technical effects are similar and are not elaborated here.
[0237] An embodiment of the present application also provides a chip, including: a memory, a processor, and hardware system resources, wherein a computer program is stored in the memory, and the processor runs the computer program to implement a data processing method executed by a terminal device in any of the above method embodiments, or to implement a data processing method executed by an authentication server in any of the above method embodiments, or to implement a data processing method executed by an application server in any of the above method embodiments, and the implementation principles and technical effects thereof are similar and will not be elaborated herein.
[0238] An embodiment of the present application also provides a computer program product, including a computer program. When the computer program is executed by a computer, it implements the data processing method performed by the terminal device in any of the above method embodiments, or implements the data processing method performed by the authentication server in any of the above method embodiments, or implements the data processing method performed by the application server in any of the above method embodiments. The implementation principles and technical effects are similar and will not be repeated here.
[0239] In the several embodiments provided in the present application, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the modules is only a logical function division. There may be other division methods in actual implementation, such as multiple modules can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be an indirect coupling or communication connection through some interfaces, devices or modules, which can be electrical, mechanical or other forms.
[0240] The modules described as separate components may or may not be physically separated, and the components shown as modules may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the solution of this embodiment.
[0241] In addition, each functional module in each embodiment of the present application can be integrated into one processing unit, or each module can exist physically separately, or two or more modules can be integrated into one unit. The above-mentioned module-composed unit can be implemented in the form of hardware or in the form of hardware plus software functional units.
[0242] The above-mentioned integrated module implemented in the form of a software function module can be stored in a computer-readable storage medium. The above-mentioned software function module is stored in a storage medium, including a number of instructions for enabling a computer device (which can be a personal computer, a server, or a network device, etc.) or a processor to perform some steps of the method described in each embodiment of the present application.
[0243] It should be understood that the processor may be a central processing unit (CPU), or other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), etc. A general-purpose processor may be a microprocessor or any conventional processor, etc. The steps of the method disclosed in the application may be directly implemented as being executed by a hardware processor, or may be executed by a combination of hardware and software modules in the processor.
[0244] The memory may include a high-speed memory (Random Access Memory, RAM), and may also include a non-volatile memory (NVM), such as at least one disk memory, and may also be a USB flash drive, a mobile hard disk, a read-only memory, a disk or an optical disk, etc.
[0245] The bus may be an Industry Standard Architecture (ISA) bus, a Peripheral Component Interconnect (PCI) bus, or an Extended Industry Standard Architecture (EISA) bus, etc. The bus may be divided into an address bus, a data bus, a control bus, etc. For ease of representation, the bus in the drawings of the present application is not limited to only one bus or one type of bus.
[0246] The above storage medium can be implemented by any type of volatile or non-volatile storage device or a combination thereof, such as static random access memory (SRAM), electrically erasable programmable read only memory (EEPROM), erasable programmable read only memory (EPROM), programmable read only memory (PROM), read only memory (ROM), magnetic memory, flash memory, magnetic disk or optical disk. The storage medium can be any available medium that can be accessed by a general or special-purpose computer.
[0247] An exemplary storage medium is coupled to a processor so that the processor can read information from the storage medium and write information to the storage medium. Of course, the storage medium can also be a component of the processor. The processor and the storage medium can be located in an application specific integrated circuit (ASIC). Of course, the processor and the storage medium can also exist as discrete components in an electronic device or a main control device.
[0248] Those skilled in the art can understand that all or part of the steps of implementing the above-mentioned method embodiments can be completed by hardware related to program instructions. The aforementioned program can be stored in a computer-readable storage medium. When the program is executed, the steps of the above-mentioned method embodiments are executed; and the aforementioned storage medium includes: ROM, RAM, disk or optical disk and other media that can store program codes.
[0249] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit it. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or replace some or all of the technical features therein with equivalents. However, these modifications or replacements do not cause the essence of the corresponding technical solutions to deviate from the scope of the technical solutions of the embodiments of the present invention.
Claims
1. A data processing method, characterized in that: Applied to a data processing system, the data processing system includes: a terminal device, an application server, and an authentication server, and the method includes: In response to receiving a start-up request input by a user to a first application, the terminal device sends a first authentication request to a public network server, so that the public network server determines the first geographical area corresponding to the terminal device according to the first authentication request, and forwards the first authentication request to an authentication server corresponding to the first geographical area; wherein the first authentication request includes an identifier of the first application and network address information of the terminal device; The authentication server receives a first authentication request sent by the terminal device; The authentication server generates first authentication information according to the identifier of the first application and the network address information of the terminal device; The authentication server obtains a generation timestamp corresponding to the first authentication information; The authentication server stores the first authentication information, the network address information of the terminal device, the identifier of the first geographical area, and the generation timestamp in a first preset database; The authentication server sends the first authentication information to the terminal device according to the network address information of the terminal device; The terminal device receives the first authentication information and sends the first authentication information to the application server; The application server receives the first authentication information sent by the terminal device; The application server obtains the current timestamp; The application server obtains, from a first preset database, a generation timestamp corresponding to the first authentication information according to the first authentication information; if the time interval between the current timestamp and the generation timestamp is less than a preset time length, obtaining, from the first preset database, the network address information of the terminal device and an identifier of the first geographical area according to the first authentication information; The application server obtains the first account information of the terminal device from a second preset database according to the network address information of the terminal device and the identifier of the first geographical area; the second preset database is used to store the network address information, the identifier of the geographical area and the account information of different terminal devices; The application server sends the first account information to the terminal device; The terminal device receives the first account information corresponding to the first authentication information from the application server; The terminal device displays the page of the first application according to the first account information.
2. The method according to claim 1, characterized in that Sending a first authentication request to a public network server so that the public network server determines a first geographical area corresponding to the terminal device according to the first authentication request, and forwarding the first authentication request to an authentication server corresponding to the first geographical area, including: Determine a first communication card in the terminal device that has a data flow function enabled; The first authentication request is sent to the public network server through the data traffic channel of the first communication card, so that the public network server determines the first geographical area corresponding to the terminal device according to the first authentication request, and forwards the first authentication request to the authentication server corresponding to the first geographical area.
3. The method according to claim 1, characterized in that Determining a first communication card in the terminal device that enables a data flow function includes: If data traffic is not enabled for all communication cards in the terminal device, the first communication card is determined from among all the communication cards, and a data traffic function corresponding to the first communication card is enabled.
4. The method according to claim 1, characterized in that: Before sending the first authentication request to the authentication server through the data traffic channel of the first communication card, the method further includes: Determining whether the local area network communication function of the terminal device is enabled; If yes, the LAN communication function is disabled.
5. The method according to any one of claims 1 to 4, characterized in that: Displaying a page of the first application according to the first account information includes: Displaying a login confirmation page according to the first account information, wherein the login confirmation page includes the first account information and a confirmation control; In response to a click operation input by the user to the confirmation control, a page of the first application is displayed.
6. The method according to claim 1, characterized in that The authentication server generates first authentication information according to the identifier of the first application and the network address information of the terminal device, including: The authentication server encrypts the identifier of the first application and the network address information of the terminal device to obtain the first authentication information.
7. The method according to claim 6, characterized in that Also includes: The authentication server obtains network data of the terminal device, wherein the network data includes: network address information of the terminal device and first account information of the terminal device; The authentication server stores the network address information of the terminal device, the first account information of the terminal device, and the identifier of the first geographical area corresponding to the terminal device in a second preset database.
8. A data processing device, characterized in that: Applied to a data processing system, the data processing system includes: a terminal device, an application server, and an authentication server; the terminal device includes: a first receiving module, a first sending module, and a first display module; the authentication server includes: a second receiving module, a second processing module, and a second sending module; the application server includes: a third receiving module, a third processing module, and a third sending module, wherein: The first receiving module is used to receive a start request input by a user to the first application; The first sending module is used to send a first authentication request to a public network server, so that the public network server determines the first geographical area corresponding to the terminal device according to the first authentication request, and forwards the first authentication request to an authentication server corresponding to the first geographical area; The first receiving module is further used to receive first authentication information from the authentication server; wherein the first authentication request includes the identifier of the first application and the network address information of the terminal device; The first sending module is further used to send the first authentication information to the application server; The first receiving module is further used to receive first account information corresponding to the first authentication information from the application server; wherein the first account information is obtained by the application server when the time interval between the generation timestamp corresponding to the first authentication information and the current timestamp of the application server receiving the first authentication information is less than a preset time length; The first display module is used to display a page of the first application according to the first account information; The second receiving module is used to receive a first authentication request sent by a terminal device; The second processing module is used to generate first authentication information according to the identifier of the first application and the network address information of the terminal device; The second processing module is further used to store the first authentication information, the network address information of the terminal device and the identifier of the first geographical area corresponding to the terminal device in a first preset database; The second sending module is used to send the first authentication information to the terminal device according to the network address information of the terminal device; The second processing module is specifically configured to obtain a generation timestamp corresponding to the first authentication information; storing the first authentication information, the network address information of the terminal device, the identifier of the first geographical area, and the generation timestamp in the first preset database; The third receiving module is used to receive the first authentication information sent by the terminal device; The third processing module is used to obtain the network address information of the terminal device and the identifier of the first geographical area from the first preset database according to the first authentication information; the third processing module is also used to obtain the first account information of the terminal device from the second preset database according to the network address information of the terminal device and the identifier of the first geographical area; the second preset database is used to store the network address information, the identifier of the geographical area and the account information of different terminal devices; The third sending module is used to send the first account information to the terminal device; The third processing module is specifically used to obtain a current timestamp; According to the first authentication information, obtaining a generation timestamp corresponding to the first authentication information from the first preset database; If the time interval between the current timestamp and the generated timestamp is less than a preset time length, the network address information of the terminal device and the identifier of the first geographical area are obtained from the first preset database according to the first authentication information.
9. A data processing device, characterized in that: include: A processor, and a memory communicatively connected to the processor; The memory stores a computer program; The processor executes the computer program to implement the method according to any one of claims 1 to 7.
10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by a computer, the method according to any one of claims 1 to 7 is implemented.
11. A computer program product, characterized in that The invention comprises a computer program, which implements the method according to any one of claims 1 to 7 when being executed by a computer.
Citation Information
Patent Citations
A method for client to automatically log in the server via intelligent encryption mode
CN101166094A
Login method, and authentication method and device
CN104935575A