Methods, devices, and electronic devices for redirecting to third-party pages

Abstract

This invention discloses a method, apparatus, and electronic device for redirecting to third-party pages, relating to the field of backend development technology. One specific embodiment of the method includes: receiving a dynamic password retrieval request sent by a terminal; wherein the dynamic password retrieval request carries an application identifier and an application password; forwarding the dynamic password retrieval request to the service platform; receiving the dynamic password returned by the service platform; and returning the dynamic password to the terminal. This embodiment can solve the technical problem of users needing to complete multiple authentications.

Description

Technical Field

[0001] This invention relates to the field of backend development technology, and in particular to methods, devices and electronic devices for redirecting to third-party pages. Background Technology

[0002] In production environments, it's common to integrate third-party pages to perform actions. A key challenge is quickly integrating these pages while ensuring the security of API calls. Currently, the usual practice is to request the third-party page, complete authentication (such as login) on that page, and then perform the action.

[0003] In the process of realizing this invention, the inventors discovered at least the following problems in the prior art:

[0004] Users need to complete multiple identity verifications, which is a complicated process and results in a poor user experience. Summary of the Invention

[0005] In view of this, embodiments of the present invention provide a method, apparatus, and electronic device for redirecting to third-party pages to solve the technical problem of requiring users to complete multiple authentications.

[0006] To achieve the above objectives, according to one aspect of the present invention, a method for redirecting to a third-party page is provided, applied to a tenant's end, comprising:

[0007] The receiving terminal sends a dynamic password acquisition request; wherein the dynamic password acquisition request carries an application identifier and an application password;

[0008] The dynamic password retrieval request is forwarded to the service platform;

[0009] Receive the dynamic password returned by the service platform;

[0010] The dynamic password is returned to the terminal.

[0011] Optionally, receiving the dynamic password returned by the service platform includes:

[0012] Receive the dynamic password and its expiration time returned by the service platform;

[0013] Returning the dynamic password to the terminal includes:

[0014] The dynamic password and its expiration time are returned to the terminal.

[0015] Optionally, before receiving the dynamic password retrieval request sent by the receiving terminal, the following steps are also included:

[0016] Send a tenant account registration request to the service platform;

[0017] Receive the application identifier and application password assigned by the service platform;

[0018] The application identifier and the application password are sent to the terminal.

[0019] Furthermore, according to another aspect of the present invention, a method for redirecting to a third-party page is provided, applied to a service platform, comprising:

[0020] Receive a dynamic password retrieval request sent by the tenant; wherein the dynamic password retrieval request carries an application identifier and an application password;

[0021] Permission verification is performed based on the application identifier and the application password;

[0022] If the verification is successful, a dynamic password is generated and returned to the tenant.

[0023] Optionally, generating a dynamic password and returning the dynamic password to the tenant includes:

[0024] Generate a dynamic password and configure its expiration time;

[0025] Return the dynamic password and its expiration time to the tenant.

[0026] Optionally, before receiving the dynamic password retrieval request sent by the tenant, the method further includes:

[0027] Receive tenant account registration requests sent by the tenant client;

[0028] Generate the application identifier and application password corresponding to the tenant, and return the application identifier and application password to the tenant.

[0029] Optionally, after returning the dynamic password to the tenant, the method further includes:

[0030] The receiving terminal sends a page redirection request; wherein the page redirection request carries an application identifier and a dynamic password;

[0031] Verify the dynamic password;

[0032] If the verification is successful, the page redirection request is forwarded to a third-party backend service, and the page data returned by the third-party backend service is forwarded to the terminal.

[0033] If the verification fails, a redirection failure result is returned to the terminal.

[0034] Optionally, verifying the dynamic password includes:

[0035] Determine whether the dynamic password has expired;

[0036] If not, then the dynamic password is verified;

[0037] If so, return a result indicating that the redirection failed to the terminal.

[0038] Furthermore, according to another aspect of the present invention, a third-party page redirection device is provided, disposed on a tenant end, comprising:

[0039] The first receiving module is used to receive a dynamic password acquisition request sent by the terminal; wherein the dynamic password acquisition request carries an application identifier and an application password; and to receive the dynamic password returned by the service platform.

[0040] The sending module is used to forward the dynamic password acquisition request to the service platform and return the dynamic password to the terminal.

[0041] Optionally, the first receiving module is further configured to: receive the dynamic password and its expiration time returned by the service platform;

[0042] The first sending module is further configured to: return the dynamic password and its expiration time to the terminal.

[0043] Optionally, the device further includes a first registration module, used for:

[0044] Send a tenant account registration request to the service platform;

[0045] Receive the application identifier and application password assigned by the service platform;

[0046] The application identifier and the application password are sent to the terminal.

[0047] Furthermore, according to another aspect of the present invention, a third-party page redirection device is provided, configured on a service platform, comprising:

[0048] The second receiving module is used to receive a dynamic password acquisition request sent by the tenant; wherein the dynamic password acquisition request carries an application identifier and an application password;

[0049] The password module is used to perform permission verification based on the application identifier and the application password; if the verification is successful, a dynamic password is generated and returned to the tenant.

[0050] Optionally, the password module is further used for:

[0051] Generate a dynamic password and configure its expiration time;

[0052] Return the dynamic password and its expiration time to the tenant.

[0053] Optionally, a second registration module is also included, for:

[0054] Receive tenant account registration requests sent by the tenant client;

[0055] Generate the application identifier and application password corresponding to the tenant, and return the application identifier and application password to the tenant.

[0056] Optionally, the second receiving module is further configured to: receive a page redirection request sent by the terminal; wherein the page redirection request carries an application identifier and a dynamic password;

[0057] The device further includes a verification module, used to: verify the dynamic password; if the verification is successful, forward the page redirection request to a third-party backend service, and forward the page data returned by the third-party backend service to the terminal; if the verification fails, return a redirection failure result to the terminal.

[0058] Optionally, the verification module is further configured to:

[0059] Determine whether the dynamic password has expired;

[0060] If not, then the dynamic password is verified;

[0061] If so, return a result indicating that the redirection failed to the terminal.

[0062] According to another aspect of the present invention, an electronic device is also provided, comprising:

[0063] One or more processors;

[0064] Storage device for storing one or more programs.

[0065] When the one or more programs are executed by the one or more processors, the one or more processors implement the method described in any of the above embodiments.

[0066] According to another aspect of the present invention, a computer-readable medium is also provided, on which a computer program is stored, which, when executed by a processor, implements the methods described in any of the above embodiments.

[0067] According to another aspect of the present invention, a computer program product is also provided, including a computer program that, when executed by a processor, implements the methods described in any of the above embodiments.

[0068] One embodiment of the above invention has the following advantages or beneficial effects: because it employs a technical means of generating dynamic passwords through a service platform and forwarding the dynamic passwords to the terminal through the tenant's end, enabling the terminal to authenticate itself using the dynamic passwords, it overcomes the technical problem in the prior art where users need to complete multiple authentications. This embodiment of the invention assigns dynamic passwords to the terminal through a service platform, enabling authentication through the dynamic passwords when redirecting to third-party pages. Therefore, page integration can be quickly achieved, ensuring request security while simultaneously improving user experience.

[0069] The further effects of the aforementioned unconventional alternative methods will be explained below in conjunction with specific implementation methods. Attached Figure Description

[0070] To more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort. Wherein:

[0071] Figure 1 This is a schematic diagram of the main flow of the third-party page redirection method according to the first embodiment of the present invention;

[0072] Figure 2 This is a schematic diagram of the main flow of the third-party page redirection method according to the second embodiment of the present invention;

[0073] Figure 3 This is a schematic diagram of the main flow of the third-party page redirection method according to the third embodiment of the present invention;

[0074] Figure 4 This is a schematic diagram of the main flow of the third-party page redirection method according to the fourth embodiment of the present invention;

[0075] Figure 5 This is a schematic diagram of the main flow of the third-party page redirection method according to the fifth embodiment of the present invention;

[0076] Figure 6 This is a schematic diagram of the main flow of the third-party page redirection method according to the sixth embodiment of the present invention;

[0077] Figure 7 This is a schematic diagram of the main modules of the third-party page redirection device according to the first embodiment of the present invention;

[0078] Figure 8This is a schematic diagram of the main modules of the third-party page redirection device according to the second embodiment of the present invention;

[0079] Figure 9 This is an exemplary system architecture diagram in which embodiments of the present invention can be applied;

[0080] Figure 10 This is a schematic diagram of the structure of a computer system suitable for implementing terminal devices or servers of the present invention. Detailed Implementation

[0081] The following description, in conjunction with the accompanying drawings, illustrates exemplary embodiments of the present invention, including various details to aid understanding. These details should be considered merely exemplary. Therefore, those skilled in the art will recognize that various changes and modifications can be made to the embodiments described herein without departing from the scope and spirit of the invention. Similarly, for clarity and brevity, descriptions of well-known functions and structures are omitted in the following description.

[0082] The acquisition, storage, use, and processing of data in this application all comply with the relevant provisions of national laws and regulations.

[0083] Figure 1 This is a schematic diagram illustrating the main flow of a third-party page redirection method according to an embodiment of the present invention. As one embodiment of the present invention, such as... Figure 1 As shown, the method for redirecting to the third-party page, applied to the tenant's end, may include:

[0084] Step 101: Receive a dynamic password retrieval request sent by the terminal. The dynamic password retrieval request carries an application identifier and an application password.

[0085] When a redirect to a third-party page is required, the terminal sends a dynamic password retrieval request to the tenant. This request carries the application identifier and the application password. Upon receiving the request, the tenant parses it to obtain the application identifier and the application password.

[0086] Step 102: Forward the dynamic password acquisition request to the service platform.

[0087] After obtaining the application identifier and application password, the tenant calls the dynamic password interface provided by the service platform, thereby forwarding the dynamic password retrieval request to the service platform.

[0088] Step 103: Receive the dynamic password returned by the service platform.

[0089] After receiving the dynamic password retrieval request forwarded by the tenant, the service platform parses it to obtain the application identifier and application password. Next, the service platform performs authorization verification based on the application identifier and application password. Specifically, it determines whether the application password matches the application identifier. If they match, the authorization verification is successful, a dynamic password is generated, and then returned to the tenant. The tenant receives the dynamic password returned by the service platform.

[0090] Step 104: Return the dynamic password to the terminal.

[0091] After receiving the dynamic password returned by the service platform, the tenant returns the dynamic password to the terminal so that the terminal can authenticate itself by using the dynamic password when redirecting to a third-party page. If the authentication is successful, the terminal will be redirected to the third-party page.

[0092] Based on the various embodiments described above, it can be seen that the embodiments of the present invention solve the technical problem in the prior art where users need to complete multiple authentications by forwarding a dynamic password acquisition request from the terminal to the service platform, and then forwarding the dynamic password returned by the service platform back to the terminal, thereby enabling the terminal to authenticate itself using the dynamic password. The embodiments of the present invention assign dynamic passwords to the terminal through the service platform, allowing authentication via dynamic passwords when redirecting to third-party pages. Therefore, page integration can be quickly achieved, ensuring request security while simultaneously improving user experience.

[0093] Figure 2 This is a schematic diagram illustrating the main flow of a third-party page redirection method according to a second embodiment of the present invention. As another embodiment of the present invention, such as... Figure 2 As shown, the method for redirecting to the third-party page, applied to the tenant's end, may include:

[0094] Step 201: Send a tenant account registration request to the service platform.

[0095] To obtain a dynamic password from the service platform, an account must first be registered on the service platform. Specifically, the tenant sends a tenant account registration request to the service platform. After receiving the tenant account registration request, the service platform assigns an application identifier (appID) and an application password (appSecret) to the tenant.

[0096] Step 202: Receive the application identifier and application password assigned by the service platform.

[0097] The service platform distributes the application identifier and application password from the tenant's end to the tenant's end, and the tenant's end receives the application identifier and application password assigned to it by the service platform.

[0098] Step 203: Send the application identifier and the application password to the terminal.

[0099] After receiving the application identifier and application password assigned by the service platform, the tenant will continue to send the application identifier and application password to the terminal.

[0100] Step 204: Receive a dynamic password retrieval request sent by the terminal. The dynamic password retrieval request carries an application identifier and an application password.

[0101] When a redirect to a third-party page is required, the terminal sends a dynamic password retrieval request to the tenant. This request carries the application identifier and the application password. Upon receiving the request, the tenant parses it to obtain the application identifier and the application password.

[0102] Step 205: Forward the dynamic password acquisition request to the service platform.

[0103] After obtaining the application identifier and application password, the tenant calls the dynamic password interface provided by the service platform, thereby forwarding the dynamic password retrieval request to the service platform.

[0104] Step 206: Receive the dynamic password and its expiration time returned by the service platform.

[0105] After receiving a dynamic password retrieval request forwarded by the tenant, the service platform parses it to obtain the application identifier and application password. Next, the service platform performs authorization verification based on the application identifier and application password. Specifically, it determines whether the application password matches the application identifier. If they match, the authorization verification is successful, a dynamic password is generated, and its expiration time is configured. The service platform then returns the dynamic password and its expiration time to the tenant. The tenant receives the dynamic password and its expiration time returned by the service platform.

[0106] Step 207: Return the dynamic password and its expiration time to the terminal.

[0107] After receiving the dynamic password and its expiration time from the service platform, the tenant sends the dynamic password and its expiration time back to the terminal so that the terminal can authenticate itself using the dynamic password when redirecting to a third-party page. If the authentication is successful, the terminal will be redirected to the third-party page.

[0108] Furthermore, the specific implementation details of the third-party page redirection method in the second embodiment of the present invention have been described in detail in the above-described third-party page redirection method, so the details will not be repeated here.

[0109] Figure 3 This is a schematic diagram of the main flow of the third-party page redirection method according to the third embodiment of the present invention. As another embodiment of the present invention, such as... Figure 3 As shown, the method for redirecting to third-party pages, applied to the service platform, may include:

[0110] Step 301: Receive a dynamic password retrieval request sent by the tenant; wherein the dynamic password retrieval request carries an application identifier and an application password.

[0111] Step 302: Perform permission verification based on the application identifier and the application password; if the verification passes, proceed to step 303; if the verification fails, proceed to step 304.

[0112] After receiving a dynamic password retrieval request forwarded by the tenant, the service platform parses it to obtain the application identifier and application password. Next, the service platform performs authorization verification based on the application identifier and application password, specifically determining whether the application password matches the application identifier.

[0113] Step 303: Generate a dynamic password and return the dynamic password to the tenant.

[0114] If the application password matches the application identifier, the permission verification is successful. A dynamic password is then generated and returned to the tenant.

[0115] Step 304 returns the result of failure to retrieve dynamic password.

[0116] If the application password does not match the application identifier, it means that the permission verification failed, and the result of dynamic password retrieval failure is returned.

[0117] Based on the various embodiments described above, it can be seen that the embodiments of the present invention solve the technical problem in the prior art where users need to complete multiple authentications by generating dynamic passwords through a service platform and forwarding the dynamic passwords to the terminal through the tenant's end, so that the terminal can perform authentication through the dynamic passwords. The embodiments of the present invention assign dynamic passwords to the terminal through the service platform, enabling authentication through the dynamic passwords when redirecting to third-party pages. Therefore, page integration can be quickly achieved, ensuring request security while improving user experience.

[0118] Figure 4 This is a schematic diagram of the main flow of the third-party page redirection method according to the fourth embodiment of the present invention. As another embodiment of the present invention, such as... Figure 4As shown, the method for redirecting to third-party pages, applied to the service platform, may include:

[0119] Step 401: Receive the tenant account registration request sent by the tenant client.

[0120] Step 402: Generate the application identifier and application password corresponding to the tenant end.

[0121] Step 403: Return the application identifier and the application password to the tenant.

[0122] Step 404: Receive a dynamic password retrieval request sent by the tenant; wherein the dynamic password retrieval request carries an application identifier and an application password.

[0123] Step 405: Perform permission verification based on the application identifier and the application password; if the verification passes, proceed to step 406; if the verification fails, proceed to step 407.

[0124] Step 406: Generate a dynamic password and configure the expiration time of the dynamic password, and return the dynamic password and its expiration time to the tenant.

[0125] Step 407 returns the result of failure to retrieve dynamic password.

[0126] After receiving a dynamic password retrieval request forwarded by the tenant, the service platform parses it to obtain the application identifier and application password. Next, the service platform performs authorization verification based on the application identifier and application password. Specifically, it determines whether the application password matches the application identifier. If they match, the authorization verification is successful, a dynamic password is generated, and its expiration time is configured. The service platform then returns the dynamic password and its expiration time to the tenant. The tenant receives the dynamic password and its expiration time returned by the service platform. If the application password and application identifier do not match, the authorization verification fails, and the service platform returns a result indicating that the dynamic password retrieval failed.

[0127] Furthermore, the specific implementation details of the third-party page redirection method in the fourth embodiment of the present invention have been described in detail in the above-described third-party page redirection method, so the details will not be repeated here.

[0128] Figure 5 This is a schematic diagram of the main flow of the third-party page redirection method according to the fifth embodiment of the present invention. As another embodiment of the present invention, such as... Figure 5 As shown, the method for redirecting to third-party pages, applied to the service platform, may include:

[0129] Step 501: Receive a page redirection request sent by the terminal; wherein the page redirection request carries an application identifier and a dynamic password.

[0130] After obtaining the dynamic password assigned by the service platform, the terminal directly sends a page redirection request to the service platform. This request carries the application identifier and the dynamic password. Upon receiving the page redirection request, the service platform parses it to obtain the application identifier and the dynamic password.

[0131] Step 502: Verify the dynamic password; if the verification is successful, proceed to step 503; if the verification fails, proceed to step 504.

[0132] After obtaining the application identifier and dynamic password, the service platform verifies the dynamic password. Optionally, step 502 may include: determining whether the dynamic password has expired; if not, verifying the dynamic password; if so, returning a redirection failure result to the terminal. To improve request security, it is possible to first determine whether the dynamic password has expired; if not, verifying the dynamic password; if so, no verification of the dynamic password is required, and a redirection failure result is directly returned to the terminal.

[0133] Step 503: Forward the page redirection request to a third-party backend service, and forward the page data returned by the third-party backend service to the terminal.

[0134] If the dynamic password verification is successful, the service platform forwards the page redirection request to the third-party backend service, and then forwards the page data returned by the third-party backend service to the terminal.

[0135] Step 504: Return the result of the redirection failure to the terminal.

[0136] If the dynamic password verification fails, a redirection failure result is returned to the terminal.

[0137] Furthermore, the specific implementation details of the third-party page redirection method in the fifth embodiment of the present invention have been described in detail in the above-described third-party page redirection method, so the details will not be repeated here.

[0138] Figure 6 This is a schematic diagram of the main flow of the third-party page redirection method according to the sixth embodiment of the present invention. As another embodiment of the present invention, such as... Figure 6 As shown, the method for redirecting to the third-party page may include:

[0139] Step 601: The terminal sends a dynamic password acquisition request to the tenant terminal; wherein the dynamic password acquisition request carries the application identifier and the application password.

[0140] Step 602: The tenant forwards the dynamic password retrieval request to the service platform.

[0141] Step 603: The service platform performs permission verification based on the application identifier and the application password.

[0142] Step 604: If the verification is successful, the service platform generates a dynamic password and returns the dynamic password to the tenant.

[0143] Step 605: The tenant forwards the dynamic password to the terminal.

[0144] Step 606: The terminal sends a page redirection request to the service platform; wherein the page redirection request carries an application identifier and a dynamic password.

[0145] Step 607: The service platform verifies the dynamic password.

[0146] Step 608: If the verification is successful, the service platform will forward the page redirection request to the backend service.

[0147] Step 609: The service platform receives the page data returned by the backend service.

[0148] Step 610: The service platform forwards the page data to the terminal.

[0149] Furthermore, the specific implementation details of the third-party page redirection method in the sixth embodiment of the present invention have been described in detail in the above-described third-party page redirection method, so the details will not be repeated here.

[0150] Figure 7 This is a schematic diagram of the main modules of a third-party page redirection device according to an embodiment of the present invention. Figure 7 As shown, the third-party page redirection device 700 is located on the tenant's end and includes a first receiving module 701 and a sending module 702. The first receiving module 701 is used to receive a dynamic password acquisition request sent by the terminal. The dynamic password acquisition request carries an application identifier and an application password. The sending module 702 is used to receive the dynamic password acquisition request returned by the service platform and forward it to the service platform. The sending module 702 is used to return the dynamic password to the terminal.

[0151] Optionally, the first receiving module 701 is further configured to: receive the dynamic password and its expiration time returned by the service platform;

[0152] The first sending module 702 is further configured to: return the dynamic password and its expiration time to the terminal.

[0153] Optionally, it also includes a first registration module for:

[0154] Send a tenant account registration request to the service platform;

[0155] Receive the application identifier and application password assigned by the service platform;

[0156] The application identifier and the application password are sent to the terminal.

[0157] It should be noted that the specific implementation details of the third-party page redirection device described in this invention have been explained in detail in the third-party page redirection method described above, so the details will not be repeated here.

[0158] Figure 8 This is a schematic diagram of the main modules of a third-party page redirection device according to an embodiment of the present invention. Figure 8 As shown, the third-party page redirection device 800 is set on the service platform and includes a second receiving module 801 and a password module 802. The second receiving module 801 is used to receive a dynamic password acquisition request sent by the tenant. The dynamic password acquisition request carries an application identifier and an application password. The password module 802 is used to perform permission verification based on the application identifier and the application password. If the verification is successful, a dynamic password is generated and returned to the tenant.

[0159] Optionally, the password module 802 is further configured to:

[0160] Generate a dynamic password and configure its expiration time;

[0161] Return the dynamic password and its expiration time to the tenant.

[0162] Optionally, a second registration module is also included, for:

[0163] Receive tenant account registration requests sent by the tenant client;

[0164] Generate the application identifier and application password corresponding to the tenant, and return the application identifier and application password to the tenant.

[0165] Optionally, the second receiving module 801 is further configured to: receive a page redirection request sent by the terminal; wherein the page redirection request carries an application identifier and a dynamic password;

[0166] The device further includes a verification module, used to: verify the dynamic password; if the verification is successful, forward the page redirection request to a third-party backend service, and forward the page data returned by the third-party backend service to the terminal; if the verification fails, return a redirection failure result to the terminal.

[0167] Optionally, the verification module is further configured to:

[0168] Determine whether the dynamic password has expired;

[0169] If not, then the dynamic password is verified;

[0170] If so, return a result indicating that the redirection failed to the terminal.

[0171] It should be noted that the specific implementation details of the third-party page redirection device described in this invention have been explained in detail in the third-party page redirection method described above, so the details will not be repeated here.

[0172] Figure 9 An exemplary system architecture 900 is shown that can be applied to the third-party page redirection method or the third-party page redirection device according to the embodiments of the present invention.

[0173] like Figure 9 As shown, system architecture 900 may include terminal devices 901, 902, and 903, network 904, and server 905. Network 904 is used as a medium to provide a communication link between terminal devices 901, 902, and 903 and server 905. Network 904 may include various connection types, such as wired or wireless communication links or fiber optic cables, etc.

[0174] Users can use terminal devices 901, 902, and 903 to interact with server 905 via network 904 to receive or send messages, etc. Various communication client applications can be installed on terminal devices 901, 902, and 903, such as shopping applications, web browser applications, search applications, instant messaging tools, email clients, social media platform software, etc. (for example only).

[0175] Terminal devices 901, 902, and 903 can be various electronic devices with displays that support web browsing, including but not limited to smartphones, tablets, laptops, and desktop computers.

[0176] Server 905 can be a server providing various services, such as a backend management server supporting shopping websites browsed by users using terminal devices 901, 902, and 903 (for example only). The backend management server can analyze and process data such as received item information query requests, and feed back the processing results (such as target push information and item information—for example only) to the terminal devices.

[0177] It should be noted that the third-party page redirection method provided in this embodiment of the invention is generally executed by server 905, and correspondingly, the third-party page redirection device is generally set in server 905.

[0178] It should be understood that Figure 9 The number of terminal devices, networks, and servers shown is merely illustrative. Depending on implementation needs, any number of terminal devices, networks, and servers can be included.

[0179] The following is for reference. Figure 10 It shows a schematic diagram of the structure of a computer system 1000 suitable for implementing a terminal device of the present invention. Figure 10 The terminal device shown is merely an example and should not impose any limitations on the functionality and scope of use of the embodiments of the present invention.

[0180] like Figure 10 As shown, the computer system 1000 includes a central processing unit (CPU) 1001, which can perform various appropriate actions and processes according to a program stored in a read-only memory (ROM) 1002 or a program loaded from a storage section 1008 into a random access memory (RAM) 1003. The RAM 1003 also stores various programs and data required for the operation of the system 1000. The CPU 1001, ROM 1002, and RAM 1003 are interconnected via a bus 1004. An input / output (I / O) interface 1005 is also connected to the bus 1004.

[0181] The following components are connected to I / O interface 1005: an input section 1006 including a keyboard, mouse, etc.; an output section 1007 including a cathode ray tube (CRT), liquid crystal display (LCD), etc., and speakers, etc.; a storage section 1008 including a hard disk, etc.; and a communication section 1009 including a network interface card such as a LAN card, modem, etc. The communication section 1009 performs communication processing via a network such as the Internet. A drive 1010 is also connected to I / O interface 1005 as needed. A removable medium 1011, such as a disk, optical disk, magneto-optical disk, semiconductor memory, etc., is installed on drive 1010 as needed so that computer programs read from it can be installed into storage section 1008 as needed.

[0182] In particular, according to the embodiments disclosed in this invention, the processes described above with reference to the flowcharts can be implemented as computer software programs. For example, embodiments disclosed in this invention include a computer program carried on a computer-readable medium, the computer program containing program code for performing the methods shown in the flowcharts. In such embodiments, the computer program can be downloaded and installed from a network via communication section 1009, and / or installed from removable medium 1011. When the computer program is executed by central processing unit (CPU) 1001, it performs the functions defined in the system of this invention.

[0183] It should be noted that the computer-readable medium shown in this invention can be a computer-readable signal medium or a computer-readable storage medium, or any combination thereof. A computer-readable storage medium can be, for example,—but not limited to—an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any combination thereof. More specific examples of a computer-readable storage medium may include, but are not limited to: an electrical connection having one or more wires, a portable computer disk, a hard disk, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), optical fiber, portable compact disk read-only memory (CD-ROM), optical storage device, magnetic storage device, or any suitable combination thereof. In this invention, a computer-readable storage medium can be any tangible medium containing or storing a program that can be used by or in conjunction with an instruction execution system, apparatus, or device. In this invention, a computer-readable signal medium can include a data signal propagated in baseband or as part of a carrier wave, carrying computer-readable program code. Such propagated data signals can take various forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination thereof. Computer-readable signal media can also be any computer-readable medium other than computer-readable storage media, which can send, propagate, or transmit a program for use by or in connection with an instruction execution system, apparatus, or device. The program code contained on the computer-readable medium can be transmitted using any suitable medium, including but not limited to: wireless, wire, optical fiber, RF, etc., or any suitable combination thereof.

[0184] The flowcharts and block diagrams in the accompanying drawings illustrate the architecture, functionality, and operation of possible implementations of systems, methods, and computer programs according to various embodiments of the present invention. In this regard, each block in a flowchart or block diagram may represent a module, segment, or portion of code containing one or more executable instructions for implementing the specified logical function. It should also be noted that in some alternative implementations, the functions indicated in the blocks may occur in a different order than those indicated in the drawings. For example, two consecutively indicated blocks may actually be executed substantially in parallel, and they may sometimes be executed in reverse order, depending on the functions involved. It should also be noted that each block in a block diagram or flowchart, and combinations of blocks in a block diagram or flowchart, may be implemented using a dedicated hardware-based system that performs the specified function or operation, or using a combination of dedicated hardware and computer instructions.

[0185] The modules described in the embodiments of the present invention can be implemented in software or hardware. The described modules can also be housed in a processor; for example, a processor may be described as including a first receiving module and a transmitting module, wherein the names of these modules do not necessarily limit the module itself.

[0186] The modules described in the embodiments of the present invention can be implemented in software or hardware. The described modules can also be housed in a processor; for example, a processor may be described as including a second receiving module and a password module, wherein the names of these modules do not necessarily limit the module itself.

[0187] In another aspect, the present invention also provides a computer-readable medium, which may be included in the device described in the above embodiments; or it may exist independently and not assembled into the device. The computer-readable medium carries one or more programs, and when the one or more programs are executed by the device, the device implements the following method: receiving a dynamic password acquisition request sent by a terminal; wherein the dynamic password acquisition request carries an application identifier and an application password; forwarding the dynamic password acquisition request to the service platform; receiving a dynamic password returned by the service platform; and returning the dynamic password to the terminal.

[0188] In another aspect, the present invention also provides a computer-readable medium, which may be included in the device described in the above embodiments; or it may exist independently and not assembled into the device. The computer-readable medium carries one or more programs, and when the one or more programs are executed by the device, the device implements the following method: receiving a dynamic password acquisition request sent by a tenant; wherein the dynamic password acquisition request carries an application identifier and an application password; performing permission verification based on the application identifier and the application password; if the verification is successful, generating a dynamic password and returning the dynamic password to the tenant.

[0189] In another aspect, embodiments of the present invention also provide a computer program product, including a computer program that, when executed by a processor, implements the methods described in any of the above embodiments.

[0190] According to the technical solution of this invention, by employing a technical means of generating a dynamic password through a service platform and forwarding the dynamic password to the terminal through the tenant end, enabling the terminal to authenticate itself using the dynamic password, the technical problem of requiring users to complete multiple authentications in the prior art is overcome. This invention, by assigning a dynamic password to the terminal through a service platform, enables authentication through the dynamic password when redirecting to a third-party page, thus quickly achieving page integration. This ensures request security while simultaneously improving user experience.

[0191] The specific embodiments described above do not constitute a limitation on the scope of protection of this invention. Those skilled in the art should understand that various modifications, combinations, sub-combinations, and substitutions can occur depending on design requirements and other factors. Any modifications, equivalent substitutions, and improvements made within the spirit and principles of this invention should be included within the scope of protection of this invention.

Claims

1. A method for jump of a third-party page, characterized in that, Applied to the tenant end, comprising: sending a tenant account registration request to a service platform; receiving an application program identifier and an application program password assigned by the service platform; issuing the application program identifier and the application program password to a terminal; receiving a dynamic password acquisition request sent by the terminal; wherein the dynamic password acquisition request carries the application program identifier and the application program password; forwarding the dynamic password acquisition request to the service platform; receiving a dynamic password returned by the service platform; returning the dynamic password to the terminal to enable the terminal to perform identity authentication through the dynamic password when jumping to a third-party page.

2. The method of claim 1, wherein, receiving a dynamic password returned by the service platform, comprising: receiving a dynamic password and an expiration time thereof returned by the service platform; returning the dynamic password to the terminal, comprising: returning the dynamic password and the expiration time thereof to the terminal.

3. A method for jump of a third-party page, characterized in that, Applied to the service platform, comprising: receiving a tenant account registration request sent by the tenant end; generating an application program identifier and an application program password corresponding to the tenant end, and returning the application program identifier and the application program password to the tenant end; receiving a dynamic password acquisition request sent by the tenant end; wherein the dynamic password acquisition request carries the application program identifier and the application program password; performing permission verification based on the application program identifier and the application program password; if the verification is passed, generating a dynamic password and returning the dynamic password to the tenant end to enable the terminal to perform identity authentication through the dynamic password when jumping to a third-party page.

4. The method of claim 3, wherein, generating a dynamic password and returning the dynamic password to the tenant end, comprising: generating a dynamic password and configuring an expiration time of the dynamic password; returning the dynamic password and the expiration time thereof to the tenant end.

5. The method of claim 3, wherein, after returning the dynamic password to the tenant end, further comprising: receiving a page jump request sent by the terminal; wherein the page jump request carries the application program identifier and the dynamic password; verifying the dynamic password; if the verification is passed, forwarding the page jump request to a third-party backend service, and forwarding page data returned by the third-party backend service to the terminal; if the verification is not passed, returning a jump failure result to the terminal.

6. The method of claim 5, wherein, verifying the dynamic password, comprising: judging whether the dynamic password has expired; if not, verifying the dynamic password; if yes, returning a jump failure result to the terminal.

7. A jump apparatus of a third party page, characterized by, provided on the tenant end, comprising: a first receiving module, configured to receive a dynamic password acquisition request sent by a terminal; wherein the dynamic password acquisition request carries an application program identifier and an application program password; and receive a dynamic password returned by a service platform; a sending module, configured to forward the dynamic password acquisition request to the service platform; and return the dynamic password to the terminal to enable the terminal to perform identity authentication through the dynamic password when jumping to a third-party page; a first registration module, configured to: send a tenant account registration request to a service platform; receive an application program identifier and an application program password assigned by the service platform; issue the application program identifier and the application program password to a terminal.

8. The apparatus of claim 7, wherein, The receiving module is further configured to receive the dynamic password and the expiration time thereof returned by the service platform. The sending module is further configured to return the dynamic password and the expiration time thereof to the terminal.

9. A jump apparatus of a third party page, characterized by, The service platform is arranged in a service platform, and comprises: The second receiving module is configured to receive a dynamic password obtaining request sent by a tenant end, wherein the dynamic password obtaining request carries an application identifier and an application password. The password module is configured to perform permission verification based on the application identifier and the application password, and generate a dynamic password and return the dynamic password to the tenant end if the permission verification is passed. The second registration module is configured to: receive a tenant account registration request sent by a tenant end; generate an application identifier and an application password corresponding to the tenant end, and return the application identifier and the application password to the tenant end.

10. The apparatus of claim 9, wherein, The password module is further configured to: generate a dynamic password and configure an expiration time of the dynamic password; return the dynamic password and the expiration time thereof to the tenant end.

11. The apparatus of claim 9, wherein, The second receiving module is further configured to receive a page jump request sent by a terminal, wherein the page jump request carries an application identifier and a dynamic password. The verification module is further configured to:

12. The apparatus of claim 11, wherein, verify the dynamic password, forward the page jump request to a third-party backend service if the verification is passed, and forward page data returned by the third-party backend service to the terminal, and return a jump failure result to the terminal if the verification is not passed. The verification module is further configured to: determine whether the dynamic password has expired; if not, verify the dynamic password; 13. An electronic device, comprising: if yes, return a jump failure result to the terminal. The service platform comprises: one or more processors; a storage device configured to store one or more programs, 14. A computer readable medium having stored thereon a computer program, characterized in that, when the one or more programs are executed by the one or more processors, the one or more processors implement the method according to any one of claims 1-6.

15. A computer program product comprising a computer program, characterized in that, The program is executed by the processor to implement the method according to any one of claims 1-6. The computer program is executed by the processor to implement the method according to any one of claims 1-6.

Images