Device trust authentication method and device
By communicating with the operator server on the client, obtaining the mobile phone number matching the terminal device and querying the list of credit device numbers, the cumbersome equipment credit authentication process caused by the replacement of smart terminal devices is solved, and the user login experience is improved.
Patent Information
- Application Number
- CN202111665811.X
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2021-12-30
- Publication Date
- 2025-03-04
- Estimated Expiration
- 2041-12-30
AI Technical Summary
The frequency of smart terminal equipment is updated and replaced is high, which causes users to need to re-engage the cumbersome and complex device credit authentication process when logging in with new terminal equipment, reducing the user's login experience.
By communicating and connecting with the operator server on the client, obtain the mobile phone number matching the terminal device, and check whether the mobile phone number is recorded in the credit device number list. If the record is recorded, the authentication will be passed, otherwise the authentication will not be passed.
It effectively avoids user secure login interference caused by terminal device replacement, improves user login experience, and simplifies the device credit authentication process.
Smart Images

Figure CN114430551B_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the field of Internet technology, and in particular to a device credit authentication method and a device credit authentication device. Background Art
[0002] With the development of the Internet and the popularization of smart phones, many businesses are handled through mobile APPs. In order to ensure the security of user personal information, each APP operator will perform device credit authentication based on the user's login behavior.
[0003] At present, the frequency of smart terminal devices being updated is very high. When users use new terminal devices to log in, they need to go through the device authentication process again. However, the device authentication process is cumbersome and complicated, which brings too much interference to users and greatly reduces the user login experience. Summary of the invention
[0004] In view of the above problems, embodiments of the present invention are proposed to provide a device trust authentication method that overcomes the above problems or at least partially solves the above problems.
[0005] The embodiment of the present invention also provides a device credit authentication apparatus to ensure the implementation of the above method.
[0006] In order to solve the above problem, an embodiment of the present invention discloses a device credit authentication method, which is applied to a client, the client is connected to an operator server for communication, the client includes a list of credit device numbers, and the method includes:
[0007] Upon receiving a login request sent by a user based on a terminal device, obtaining a first mobile phone number matching the terminal device from the operator server;
[0008] Determining whether the first mobile phone number is recorded in the credit device number list;
[0009] If it is determined that the first mobile phone number is recorded in the credit device number list, then it is determined that the terminal device credit authentication is passed;
[0010] If it is determined that the first mobile phone number is not recorded in the credit device number list, it is determined that the terminal device credit authentication fails.
[0011] Optionally, acquiring a first mobile phone number matching the terminal device from the operator server includes:
[0012] Start a preset script; the preset script is used to access the interface of the operator server;
[0013] Through the preset script, a first mobile phone number matching the terminal device is obtained from the interface of the operator server; the first mobile phone number is an identification code of the terminal device read through the interface, and the mobile phone number bound to the identification code is searched.
[0014] Optionally, the credit device number list is established in the following manner:
[0015] Obtaining a second mobile phone number matching the credit device from the operator server; the credit device is a terminal device that has passed the credit authentication;
[0016] A credit device number list is established for the second mobile phone number.
[0017] Optionally, the determining whether the first mobile phone number is recorded in the credit device number list includes:
[0018] Traversing the second mobile phone number in the credit device number list;
[0019] When a second mobile phone number that is the same as the first mobile phone number is traversed, determining that the first mobile phone number is recorded in the credit device number list;
[0020] When the second mobile phone number that is the same as the first mobile phone number is not traversed, it is determined that the first mobile phone number is not recorded in the credit device number list.
[0021] Optionally, the preset script includes a JS script or an SDK script.
[0022] Optionally, the identification code is an International Mobile Subscriber Identity (IMSI) number stored in a subscriber identity module SIM card in the terminal device.
[0023] The embodiment of the present invention further discloses a device credit authentication device, which is applied to a client, the client is connected to an operator server for communication, the client includes a credit device number list, and the device includes:
[0024] A first mobile phone number acquisition module, configured to acquire a first mobile phone number matching the terminal device from the operator server upon receiving a login request sent by the user based on the terminal device;
[0025] A first mobile phone number determination module, used to determine whether the first mobile phone number is recorded in the credit device number list;
[0026] A first credit authentication module, configured to determine that the terminal device credit authentication has passed if it is determined that the first mobile phone number is recorded in the credit device number list;
[0027] The second credit authentication module is used to determine that the terminal device credit authentication fails if it is determined that the first mobile phone number is not recorded in the credit device number list.
[0028] Optionally, the first mobile phone number obtaining module includes:
[0029] A preset script startup submodule, used to start a preset script; the preset script is used to access the interface of the operator server;
[0030] The first mobile phone number acquisition submodule is used to obtain the first mobile phone number matching the terminal device from the interface of the operator server through the preset script; the first mobile phone number is to read the identification code of the terminal device through the interface and find the mobile phone number bound to the identification code.
[0031] Optionally, the credit device number list is established by the following modules:
[0032] A second mobile phone number acquisition module, used to acquire a second mobile phone number matching a credit device from the operator server; the credit device is a terminal device that has passed the credit authentication;
[0033] The credit device number list establishing module is used to establish a credit device number list for the second mobile phone number.
[0034] Optionally, the first mobile phone number determination module includes:
[0035] A traversal submodule, used for traversing the second mobile phone number in the credit device number list;
[0036] A first determination submodule, configured to determine that the first mobile phone number is recorded in the credit device number list when a second mobile phone number that is the same as the first mobile phone number is traversed;
[0037] The second determination submodule is used to determine that the first mobile phone number is not recorded in the credit device number list when the second mobile phone number that is the same as the first mobile phone number is not traversed.
[0038] Optionally, the preset script includes a JS script or an SDK script.
[0039] Optionally, the identification code is an International Mobile Subscriber Identity (IMSI) number stored in a subscriber identity module SIM card in the terminal device.
[0040] The embodiment of the present invention further discloses an electronic device, comprising a processor, a communication interface, a memory and a communication bus, wherein the processor, the communication interface and the memory communicate with each other via the communication bus;
[0041] The memory is used to store computer programs;
[0042] The processor is used to implement the method described in the embodiment of the present invention when executing the program stored in the memory.
[0043] The embodiment of the present invention further discloses one or more computer-readable media on which instructions are stored. When executed by one or more processors, the processors are enabled to execute the method described in the embodiment of the present invention.
[0044] Compared with the prior art, the embodiments of the present invention have the following advantages:
[0045] In an embodiment of the present invention, when a login request sent by a user based on a terminal device is received, a first mobile phone number matching the terminal device is obtained from an operator server, and then it is determined whether the first mobile phone number is recorded in the credit device number list. If it is determined that the first mobile phone number is recorded in the credit device number list, it is determined that the terminal device credit authentication is passed; if it is determined that the first mobile phone number is not recorded in the credit device number list, it is determined that the terminal device credit authentication is not passed. The embodiment of the present invention effectively identifies the communication operator information of the user's current terminal device through the operator server, and uses the credit device number list to judge the communication operator information, which can avoid excessive security login interference to the user due to the replacement of the terminal device, and greatly improve the user login experience. BRIEF DESCRIPTION OF THE DRAWINGS
[0046] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.
[0047] Figure 1 It is a flowchart of the steps of a device credit authentication method provided by an embodiment of the present invention;
[0048] Figure 2 is a flow chart of device credit authentication provided by an embodiment of the present invention;
[0049] Figure 3 It is a structural block diagram of a device credit authentication apparatus provided by an embodiment of the present invention. DETAILED DESCRIPTION
[0050] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.
[0051] When a user logs in, if the user's login device is not in the list of trusted devices, the user needs to manually re-perform the device trusted authentication process. However, the device trusted authentication process is cumbersome and complicated, which brings too much interference to the user and greatly reduces the user's login experience.
[0052] In view of the above problems, an embodiment of the present invention provides a device trust authentication method, which can avoid excessive interference with user security login caused by replacement of terminal devices, thereby greatly improving the user login experience.
[0053] Reference Figure 1 , shows a flow chart of the steps of a device credit authentication method provided by an embodiment of the present invention, which is applied to a client, the client is connected to the operator server for communication, the client includes a list of credit device numbers, and the method may specifically include the following steps:
[0054] Step 101, upon receiving a login request sent by a user based on a terminal device, obtaining a first mobile phone number matching the terminal device from the operator server.
[0055] In the embodiments of the present invention, it can be applied to the client, which can be a computer device used in motion, such as a mobile phone, iPad (tablet computer), laptop computer, etc., and the present invention is not limited to this. These clients can support operating systems such as Android, iOS (iPhone Operating System), and Windows.
[0056] In an embodiment of the present invention, the client may be connected to the operator server for communication. When the client receives a login request sent by the user based on the terminal device, it may obtain the first mobile phone number matching the terminal device from the operator server.
[0057] In an optional embodiment of the present invention, step 101 may include the following sub-steps:
[0058] Sub-step S11, starting a preset script; the preset script is used to access the interface of the operator server.
[0059] In an optional embodiment of the present invention, the preset script includes a JS script or an SDK script.
[0060] In a specific implementation, the operator server encapsulates multiple interfaces, and the client can access the interface of the operator server by starting a preset script. The preset script may include a JS (javascript) script or an SDK (Software Development Kit) script. In addition, the client can also access the interface of the operator server by loading a browser, and the embodiment of the present invention does not limit the access method.
[0061] Sub-step S12, through the preset script, obtain the first mobile phone number matching the terminal device from the interface of the operator server; the first mobile phone number is to read the identification code of the terminal device through the interface, and find the mobile phone number bound to the identification code.
[0062] In an optional embodiment of the present invention, the identification code is an International Mobile Subscriber Identity (IMSI) number stored in a Subscriber Identity Module (SIM) card in the terminal device.
[0063] In a specific implementation, since the terminal device is currently in a networked state, the interface of the operator server can receive the network signal sent by the terminal device according to the link protocol of 3GPP (3rd Generation Partnership Project), so that the identification code corresponding to the network signal can be read. Among them, the identification code can be an IMSI (International Mobile Subscriber Identification Number) number, and the IMSI number can distinguish the user's identity. The IMSI number is usually stored in a SIM card (Subscriber Identity Module), and the SIM card is inserted into the terminal device. The embodiment of the present invention can identify the mobile phone number and operator information of the user's current terminal device through the network information sent by the user's current terminal device, so as to accurately obtain the mobile phone number and operator type of the SIM card of the user's current terminal device by utilizing the interface function of the operator server.
[0064] In a specific implementation, the operator server can be connected to the MISC (Mobile Information Service Center) system. The MISC system can refer to adding a management network element to the original gateway position of the Mobile Dream Network. It is a platform provided by an operator that can quickly start various data services. The MISC system can maintain user information, and the user information can include the binding relationship between the IMSI number and the mobile phone number. The interface of the operator server can search the MISC system for the mobile phone number bound to the IMSI number, so that the first mobile phone number that matches the terminal device can be returned to the client. The first mobile phone number is the mobile phone number of the SIM card in the user's current terminal device.
[0065] Step 102: Determine whether the first mobile phone number is recorded in the credit device number list.
[0066] In an embodiment of the present invention, the client can pre-establish a trusted device number list, which can be a whitelist of mobile phone numbers of trusted operators of user terminal devices. That is, the mobile phone numbers included in the trusted device number list are numbers that have passed trust authentication, and the trusted device number list is called WhiteList.
[0067] In a specific implementation, after obtaining the first mobile phone number from the operator server, it can be determined whether the first mobile phone number is in the trusted device number list WhiteList, thereby automatically identifying whether the user's current terminal device is a trusted device.
[0068] In an optional embodiment of the present invention, the credit device number list can be established in the following manner:
[0069] Obtaining a second mobile phone number matching the credit device from the operator server; the credit device is a terminal device that has passed the credit authentication;
[0070] A credit device number list is established for the second mobile phone number.
[0071] In a specific implementation, the second mobile phone number of a trusted device that has passed the trust authentication can be obtained in advance from the operator server, so that a trusted device number list WhiteList can be established for the second mobile phone number. For example, assuming that terminal device A, terminal device B, and terminal device C are all trusted and authenticated devices, wherein the mobile phone numbers of the SIM cards inserted into terminal device A, terminal device B, and terminal device C are the second mobile phone number A, the second mobile phone number B, and the second mobile phone number C, respectively, and then a trusted device number list WhiteList can be established for the second mobile phone number A, the second mobile phone number B, and the second mobile phone number C. The examples described are only used to enable those skilled in the art to better understand the embodiments of the present invention, and the present invention does not limit this.
[0072] In an optional embodiment of the present invention, step 102 may include the following sub-steps:
[0073] Sub-step S21, traversing the second mobile phone number in the credit device number list.
[0074] Sub-step S22, when a second mobile phone number that is the same as the first mobile phone number is traversed, determining that the first mobile phone number is recorded in the credit device number list.
[0075] Sub-step S23, when the second mobile phone number that is the same as the first mobile phone number is not traversed, determining that the first mobile phone number is not recorded in the credit device number list.
[0076] In a specific implementation, the credit device number list may include multiple second mobile phone numbers, and the multiple second mobile phone numbers may be traversed in sequence to find whether there is a second mobile phone number that is the same as the first mobile phone number. When the second mobile phone number that is the same as the first mobile phone number is traversed, it can be determined that the first mobile phone number is recorded in the credit device number list; when the second mobile phone number that is the same as the first mobile phone number is not traversed, it can be determined that the first mobile phone number is not recorded in the credit device number list.
[0077] Step 103: If it is determined that the first mobile phone number is recorded in the credit device number list, it is determined that the terminal device credit authentication is passed.
[0078] In the specific implementation, if the first mobile phone number is recorded in the credit device number list, it means that the SIM card in the user's current terminal device has not been replaced, so it can be determined that the terminal device credit authentication has passed, so that the user does not need to manually re-operate a series of device credit authentication processes, and the user's credit identity can be quickly authenticated, greatly improving the user's login experience.
[0079] As an example, assume that terminal device A is the device originally used by the user, terminal device A is a device that has been authenticated and passed, the mobile phone number of the SIM card inserted in terminal device A is the second mobile phone number A, and the second mobile phone number A has been written into the list of trusted device numbers. If the user changes to a new terminal device, assume that it is replaced with terminal device B, but the user does not change the SIM card, that is, the SIM card inserted in terminal device B is still the SIM card before the device is changed, then the first mobile phone number obtained from the operator server is still the original mobile phone number, that is, the first mobile phone number is the second mobile phone number A, so when the user logs in based on the new terminal device B, the trust authentication can be quickly and automatically passed. The example is only used to enable those skilled in the art to better understand the embodiments of the present invention, and the present invention does not limit this.
[0080] Compared with the prior art that performs security judgment and interception by reading the basic hardware information of the terminal device, the embodiments of the present invention combine the unique advantages of operators and identify the mobile phone information of the SIM card of the user's current terminal device. Even if the user changes the terminal device, credit authentication can be performed in a timely and accurate manner, thereby avoiding excessive security login interference to the user due to the change of the terminal device.
[0081] Step 104: If it is determined that the first mobile phone number is not recorded in the credit device number list, it is determined that the terminal device credit authentication fails.
[0082] In a specific implementation, if the first mobile phone number is not recorded in the credit device number list, it can be said that the SIM card in the user's current terminal device has been replaced, so it can be determined that the terminal device credit authentication has failed. The user can be asked to re-perform the device credit authentication process. When the terminal device passes the credit authentication, the mobile phone number of the SIM card inserted in the terminal device can be written into the credit device number list, so that the user's credit identity can be quickly authenticated when the user changes to a new terminal device next time but does not replace the SIM card in it.
[0083] In an embodiment of the present invention, when a login request sent by a user based on a terminal device is received, a first mobile phone number matching the terminal device is obtained from an operator server, and then it is determined whether the first mobile phone number is recorded in the credit device number list. If it is determined that the first mobile phone number is recorded in the credit device number list, it is determined that the terminal device credit authentication is passed; if it is determined that the first mobile phone number is not recorded in the credit device number list, it is determined that the terminal device credit authentication is not passed. The embodiment of the present invention effectively identifies the communication operator information of the user's current terminal device through the operator server, and uses the credit device number list to judge the communication operator information, which can avoid excessive security login interference to the user due to the replacement of the terminal device, and greatly improve the user login experience.
[0084] In order to enable those skilled in the art to better understand the embodiments of the present invention, the embodiments of the present invention are described below through the following examples:
[0085] refer to Figure 2 , shows a flow chart of device credit authentication provided by an embodiment of the present invention, and the device credit authentication process may be specifically as follows:
[0086] 1. Equipment credit certification begins;
[0087] 2. Pre-establish a list of credit device numbers; wherein the list of credit device numbers includes a plurality of second mobile phone numbers, and the second mobile phone numbers are mobile phone numbers of credit devices that have passed credit authentication and are obtained from the operator server;
[0088] 3. Receive a login request sent by the user based on the terminal device;
[0089] 4. Obtain the first mobile phone number that matches the user's current terminal device from the operator server;
[0090] 5. Determine whether there is a second mobile phone number that is the same as the first mobile phone number in the credit device number list; if so, determine that the user's current terminal device has passed the credit authentication; if not, determine that the user's current terminal device has not passed the credit authentication;
[0091] 6. The equipment credit authentication is completed.
[0092] refer to Figure 3 , shows a structural block diagram of a device credit authentication device provided by an embodiment of the present invention, which is applied to a client, the client is connected to the operator server for communication, the client includes a list of credit device numbers, and specifically may include the following modules
[0093] The first mobile phone number acquisition module 301 is used to acquire a first mobile phone number matching the terminal device from the operator server when receiving a login request sent by the user based on the terminal device;
[0094] A first mobile phone number determination module 302, used to determine whether the first mobile phone number is recorded in the credit device number list;
[0095] A first credit authentication module 303, configured to determine that the terminal device credit authentication is passed if it is determined that the first mobile phone number is recorded in the credit device number list;
[0096] The second credit authentication module 304 is used to determine that the terminal device credit authentication fails if it is determined that the first mobile phone number is not recorded in the credit device number list.
[0097] In an optional embodiment of the present invention, the first mobile phone number obtaining module 301 may include:
[0098] A preset script startup submodule, used to start a preset script; the preset script is used to access the interface of the operator server;
[0099] The first mobile phone number acquisition submodule is used to obtain the first mobile phone number matching the terminal device from the interface of the operator server through the preset script; the first mobile phone number is to read the identification code of the terminal device through the interface and find the mobile phone number bound to the identification code.
[0100] In an optional embodiment of the present invention, the credit device number list is established by the following modules:
[0101] A second mobile phone number acquisition module, used to acquire a second mobile phone number matching a credit device from the operator server; the credit device is a terminal device that has passed the credit authentication;
[0102] The credit device number list establishing module is used to establish a credit device number list for the second mobile phone number.
[0103] In an optional embodiment of the present invention, the first mobile phone number determination module 302 may include:
[0104] A traversal submodule, used for traversing the second mobile phone number in the credit device number list;
[0105] A first determination submodule, configured to determine that the first mobile phone number is recorded in the credit device number list when a second mobile phone number that is the same as the first mobile phone number is traversed;
[0106] The second determination submodule is used to determine that the first mobile phone number is not recorded in the credit device number list when the second mobile phone number that is the same as the first mobile phone number is not traversed.
[0107] In an optional embodiment of the present invention, the preset script includes a JS script or an SDK script.
[0108] In an optional embodiment of the present invention, the identification code is an International Mobile Subscriber Identity (IMSI) number stored in a Subscriber Identity Module (SIM) card in the terminal device.
[0109] In an embodiment of the present invention, when a login request sent by a user based on a terminal device is received, a first mobile phone number matching the terminal device is obtained from an operator server, and then it is determined whether the first mobile phone number is recorded in the credit device number list. If it is determined that the first mobile phone number is recorded in the credit device number list, it is determined that the terminal device credit authentication is passed; if it is determined that the first mobile phone number is not recorded in the credit device number list, it is determined that the terminal device credit authentication is not passed. The embodiment of the present invention effectively identifies the communication operator information of the user's current terminal device through the operator server, and uses the credit device number list to judge the communication operator information, which can avoid excessive security login interference to the user due to the replacement of the terminal device, and greatly improve the user login experience.
[0110] As for the device embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.
[0111] An embodiment of the present invention also provides an electronic device, including: a processor, a memory, and a computer program stored in the memory and executable on the processor. When the computer program is executed by the processor, the various processes of the above-mentioned device credit authentication method embodiment are implemented, and the same technical effect can be achieved. To avoid repetition, it will not be repeated here.
[0112] An embodiment of the present invention also provides a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the various processes of the above-mentioned device credit authentication method embodiment are implemented, and the same technical effect can be achieved. To avoid repetition, it will not be repeated here.
[0113] The various embodiments in this specification are described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the various embodiments can be referenced to each other.
[0114] It will be appreciated by those skilled in the art that the embodiments of the present invention may be provided as methods, devices, or computer program products. Therefore, the embodiments of the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the embodiments of the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program codes.
[0115] The embodiments of the present invention are described with reference to the flowcharts and / or block diagrams of the methods, terminal devices (systems), and computer program products according to the embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of the processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing terminal device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing terminal device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.
[0116] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing terminal device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce a manufactured product including an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.
[0117] These computer program instructions can also be loaded onto a computer or other programmable data processing terminal device so that a series of operating steps are executed on the computer or other programmable terminal device to produce a computer-implemented process, thereby providing instructions for executing on the computer or other programmable terminal device to implement the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.
[0118] Although the preferred embodiments of the present invention have been described, those skilled in the art may make additional changes and modifications to these embodiments once they have learned the basic creative concept. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and all changes and modifications that fall within the scope of the embodiments of the present invention.
[0119] Finally, it should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or terminal device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or terminal device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the existence of other identical elements in the process, method, article or terminal device including the elements.
[0120] The above is a detailed introduction to a device credit authentication method, apparatus, electronic device and computer-readable storage medium provided by the present invention. Specific examples are used in this article to illustrate the principles and implementation methods of the present invention. The description of the above embodiments is only used to help understand the method of the present invention and its core idea; at the same time, for general technical personnel in this field, according to the idea of the present invention, there will be changes in the specific implementation method and application scope. In summary, the content of this specification should not be understood as a limitation on the present invention.
Claims
1. A device trust authentication method, characterized in that: Applied to a client, the client is connected to a carrier server for communication, the client includes a list of credit device numbers, and the method includes: Upon receiving a login request sent by a user based on a terminal device, determining an identification code and operator information according to a network signal sent by the terminal device; Determine the operator server corresponding to the operator information; According to the identification code and the interface function of the operator server corresponding to the operator information, obtaining a first mobile phone number matching the terminal device from the operator server corresponding to the operator information; Determining whether the first mobile phone number is recorded in the credit device number list; If it is determined that the first mobile phone number is recorded in the credit device number list, then it is determined that the terminal device credit authentication is passed; If it is determined that the first mobile phone number is not recorded in the credit device number list, then it is determined that the terminal device credit authentication fails; The credit device number list is established in the following way: Obtaining a second mobile phone number matching the credit device from the operator server; the credit device is a terminal device that has passed the credit authentication; A credit device number list is established for the second mobile phone number.
2. The method according to claim 1, characterized in that The obtaining, from the operator server, a first mobile phone number matching the terminal device, comprises: Start a preset script; the preset script is used to access the interface of the operator server; Through the preset script, a first mobile phone number matching the terminal device is obtained from the interface of the operator server; the first mobile phone number is an identification code of the terminal device read through the interface, and the mobile phone number bound to the identification code is searched.
3. The method according to claim 1, characterized in that: The determining whether the first mobile phone number is recorded in the credit device number list includes: Traversing the second mobile phone number in the credit device number list; When a second mobile phone number that is the same as the first mobile phone number is traversed, determining that the first mobile phone number is recorded in the credit device number list; When the second mobile phone number that is the same as the first mobile phone number is not traversed, it is determined that the first mobile phone number is not recorded in the credit device number list.
4. The method according to claim 2, characterized in that: The preset script includes a JS script or an SDK script.
5. The method according to claim 2, characterized in that: The identification code is the International Mobile Subscriber Identity (IMSI) number stored in the subscriber identity module SIM card in the terminal device.
6. A device authentication device, characterized in that: Applied to a client, the client is connected to a carrier server for communication, the client includes a list of credit device numbers, and the device includes: A first mobile phone number acquisition module is used to determine the identification code and the operator information according to the network signal sent by the terminal device when receiving a login request sent by the user based on the terminal device; determine the operator server corresponding to the operator information; and obtain a first mobile phone number matching the terminal device from the operator server corresponding to the operator information according to the identification code and the interface function of the operator server corresponding to the operator information; A first mobile phone number determination module, used to determine whether the first mobile phone number is recorded in the credit device number list; A first credit authentication module, configured to determine that the terminal device credit authentication has passed if it is determined that the first mobile phone number is recorded in the credit device number list; A second credit authentication module, configured to determine that the terminal device credit authentication fails if it is determined that the first mobile phone number is not recorded in the credit device number list; The credit device number list is established through the following modules: A second mobile phone number acquisition module, used to acquire a second mobile phone number matching a credit device from the operator server; the credit device is a terminal device that has passed the credit authentication; The credit device number list establishing module is used to establish a credit device number list for the second mobile phone number.
7. The device according to claim 6, characterized in that The first mobile phone number acquisition module includes: A preset script startup submodule, used to start a preset script; the preset script is used to access the interface of the operator server; The first mobile phone number acquisition submodule is used to obtain the first mobile phone number matching the terminal device from the interface of the operator server through the preset script; the first mobile phone number is to read the identification code of the terminal device through the interface and find the mobile phone number bound to the identification code.
8. An electronic device, characterized in that: include: A processor, a memory, and a computer program stored in the memory and executable on the processor, wherein the computer program, when executed by the processor, implements the steps of the device trust authentication method as described in any one of claims 1 to 5.
9. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the steps of the device trust authentication method according to any one of claims 1 to 5 are implemented.
Citation Information
Patent Citations
Mobile phone APP information protection method, mobile phone APP client and system thereof
CN106936802A