Identity information verification method, device, server, medium and product
By using cookie verification files to save user information in the embedded web server, the low efficiency problem caused by expired authentication of embedded web pages is solved, and efficient access without repeated authentication is achieved in multiple embedded pages.
Patent Information
- Application Number
- CN202211206109.1
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2022-09-30
- Publication Date
- 2025-09-19
- Estimated Expiration
- 2042-09-30
AI Technical Summary
When the web page interface embedded in the web page is set in a menu bar of the embedded web page, the user's identity verification information needs to be re-verified after it expires, resulting in low web page access efficiency.
A cookie verification file is used in the embedded web server to save user information. It is determined whether the user authentication request is the first request. If it is not the first request, the cookie verification file is used for authentication to avoid the need for re-authentication due to the expiration of the temporary token.
It improves the efficiency of web page access, avoids the need for re-authentication due to expired authentication, and reduces authentication time, especially when the Iframe tag crosses domains without frequent authentication.
Smart Images

Figure CN115643054B_ABST
Abstract
Description
Technical Field
[0001] The present application relates to the field of data processing technology, and in particular to an identity information verification method, device, server, medium and product. Background Art
[0002] An iframe is an HTML (Hyper Text Markup Language) tag that embeds the frame and content of one web page into another, improving the clarity and flexibility of the page structure and effectively handling complex page layouts. The embedded web page runs on an embedded web system embedded in a web server, while the embedded web page runs on an embedded web system embedded in the embedded web server.
[0003] Currently, when a user logs into an embedded webpage from a user terminal, they are required to undergo identity verification. During this authentication process, the user's identity on the embedded webpage is first verified, and access to the embedded webpage server's proxy interface is redirected. The embedded webpage then needs to undergo identity verification again on the authentication server. This method has the following issues: if the webpage interface of the embedded webpage is located in a menu bar on the embedded webpage, if the user accesses this page after the authentication information for the embedded webpage has expired, the authentication will expire and re-authentication will be required, resulting in inefficient webpage access. Summary of the Invention
[0004] The present application provides an identity information verification method, device, server, medium and product, which are used to solve the current problem that when the web page interface of the embedded web page is set in a menu bar of the embedded web page, if the user accesses this page after the authentication information of the embedded web page has expired, the authentication will expire and re-authentication will be required, resulting in low web page access efficiency.
[0005] In a first aspect, the present application provides an identity information verification method, which is applied to an embedded web server, wherein a web page interface of the embedded web server is provided in the form of an Iframe tag in a menu bar of a corresponding embedded web page of the embedded web server, the method comprising:
[0006] Receiving a user identity authentication request sent by the embedded web page server; the user identity authentication request is generated by the embedded web page server in response to a user clicking on a corresponding Iframe tag in the menu bar;
[0007] Determining whether the user identity verification request is the first verification request within a preset time period;
[0008] If it is determined that the user identity authentication request is not the first authentication request, determining a stored cookie verification file corresponding to the user identity authentication request; the cookie verification file is generated according to the user login information of the embedded web page in the embedded web page server after the first identity authentication is passed;
[0009] User authentication is completed based on the cookie verification file and the user authentication request.
[0010] Furthermore, in the above method, if it is determined that the user identity verification request is the first verification request within a preset time period, the method further includes:
[0011] Determine the user account information and user password information in the user identity authentication request; wherein the user identity authentication request includes the user account information and user password information corresponding to the embedded web server;
[0012] Sending the user account information and user password information to the identity verification server;
[0013] Receive the authentication result fed back by the authentication server;
[0014] Perform corresponding processing according to the identity verification result.
[0015] Furthermore, in the above method, performing corresponding processing according to the identity authentication result includes:
[0016] If the identity authentication result is passed, a corresponding cookie verification file is generated and stored according to the user identity authentication request; the user identity authentication request also includes user login information of the embedded web page in the embedded web page server;
[0017] If the identity authentication result is failure to authenticate, the failure authentication result is fed back to the embedded web page server.
[0018] Furthermore, in the method described above, the user identity authentication request further includes: a temporary token corresponding to the user login information;
[0019] Before determining the stored cookie verification file corresponding to the user identity authentication request, the method further includes:
[0020] Determine whether the temporary Token in the user identity authentication request has expired;
[0021] If the temporary Token in the user identity authentication request expires, the step of determining the stored cookie verification file corresponding to the user identity authentication request is performed.
[0022] Furthermore, in the above method, if the temporary Token in the user identity authentication request has not expired, completing the user identity authentication according to the cookie verification file and the user identity authentication request includes:
[0023] Verify whether the cookie verification file matches the user authentication request, and / or verify the Token temporary token to complete user authentication.
[0024] Furthermore, the method as described above further includes:
[0025] In response to the user's exit selection operation on the embedded webpage, the embedded webpage is exited, and the stored cookie verification file corresponding to the user identity verification request is deleted.
[0026] A second aspect of the present application provides an identity information verification device, which is located in an embedded web server. The web page interface of the embedded web server is set in the form of an Iframe tag in the menu bar of the embedded web page of the embedded web server. The device includes:
[0027] a receiving module configured to receive a user identity authentication request sent by the embedded web page server; the user identity authentication request is generated by the embedded web page server in response to a user clicking on a corresponding Iframe tag in the menu bar;
[0028] A determination module, configured to determine whether the user identity verification request is the first verification request within a preset time period;
[0029] a determination module configured to, if it is determined that the user identity authentication request is not a first authentication request, determine a stored cookie verification file corresponding to the user identity authentication request; the cookie verification file is generated based on user login information of the embedded web page in the embedded web page server after the first authentication is passed;
[0030] The verification module is used to complete user identity authentication based on the cookie verification file and the user identity authentication request.
[0031] Furthermore, in the above-mentioned apparatus, if it is determined that the user identity authentication request is the first authentication request within a preset time period, the authentication module is further configured to:
[0032] Determine the user account information and user password information in the user identity authentication request; wherein the user identity authentication request includes the user account information and user password information corresponding to the embedded web server; send the user account information and user password information to the identity authentication server; receive the identity authentication result fed back by the identity authentication server; and perform corresponding processing according to the identity authentication result.
[0033] Furthermore, in the above-mentioned device, when the verification module performs corresponding processing according to the identity verification result, it is specifically used to:
[0034] If the identity authentication result is passed, a corresponding cookie verification file is generated and stored according to the user identity authentication request; the user identity authentication request also includes the user login information of the embedded web page in the embedded web server; if the identity authentication result is failed, the failed verification result is fed back to the embedded web server.
[0035] Furthermore, in the above-mentioned device, the user identity authentication request further includes: a temporary token corresponding to the user login information;
[0036] The determining module is further configured to:
[0037] Determine whether the temporary Token in the user identity authentication request has expired; if the temporary Token in the user identity authentication request has expired, execute the step of determining the stored cookie verification file corresponding to the user identity authentication request.
[0038] Furthermore, in the above-described apparatus, if the temporary Token in the user identity authentication request has not expired, the determination module is specifically configured to:
[0039] Verify whether the cookie verification file matches the user authentication request, and / or verify the Token temporary token to complete user authentication.
[0040] Furthermore, the device as described above further includes:
[0041] The deletion module is used to exit the embedded web page in response to the user's exit selection operation on the embedded web page, and delete the stored cookie verification file corresponding to the user identity verification request.
[0042] A third aspect of the present application provides an embedded web page server, comprising: a memory and a processor;
[0043] The memory stores computer-executable instructions;
[0044] The processor executes the computer-executable instructions stored in the memory to implement the identity information verification method as described in any one of the first aspects.
[0045] In a fourth aspect, the present application provides a computer-readable storage medium, wherein the computer-readable storage medium stores computer-executable instructions, and when the computer-executable instructions are executed by a processor, they are used to implement the identity information verification method described in any one of the first aspects.
[0046] In a fifth aspect, the present application provides a computer program product, comprising a computer program, which, when executed by a processor, implements the identity information verification method described in any one of the first aspects.
[0047] The present application provides an identity information verification method, device, server, medium and product, which are applied to an embedded web server, wherein the web page interface of the embedded web server is set in the menu bar of the embedded web page corresponding to the embedded web server in the form of an Iframe tag, and the method includes: receiving a user identity authentication request sent by the embedded web server; the user identity authentication request is generated by the embedded web server in response to the user clicking the corresponding Iframe tag in the menu bar; judging whether the user identity authentication request is the first authentication request within a preset time period; if it is determined that the user identity authentication request is not the first authentication request, determining the stored cookie verification file corresponding to the user identity authentication request; the cookie verification file is generated according to the user login information of the embedded web page in the embedded web server after the first authentication is passed; completing user identity authentication according to the cookie verification file and the user identity authentication request. In the method of this embodiment, when the embedded page is set in the menu bar of the embedded page, if the user identity authentication request is not the first authentication request, the cookie verification file is used to perform user identity authentication on the user identity authentication request. By using a cookie verification file, we can ensure that even if the temporary token returned by the authentication server to the embedded server expires, the user can still work normally on multiple embedded pages under the menu bar, avoiding the need for re-authentication due to authentication expiration and improving web access efficiency. At the same time, it can avoid the need to re-authenticate the user's identity each time they log into a different embedded page when the Iframe tag crosses domains, effectively reducing authentication time. BRIEF DESCRIPTION OF THE DRAWINGS
[0048] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present application and, together with the description, serve to explain the principles of the present application.
[0049] Figure 1 A scenario diagram for implementing the identity information verification method of an embodiment of the present application;
[0050] Figure 2 Schematic diagram of the identity information verification method provided for this application Figure 1 ;
[0051] Figure 3 Schematic diagram of the webpage menu bar embedded in the identity information verification method provided by this application;
[0052] Figure 4 Schematic diagram of the identity information verification method provided for this application Figure 2 ;
[0053] Figure 5 Schematic diagram of the structure of the identity information verification device provided in this application Figure 1 ;
[0054] Figure 6 Schematic diagram of the structure of the identity information verification device provided in this application Figure 2 ;
[0055] Figure 7 A schematic diagram of the structure of the embedded web server provided in this application.
[0056] The above drawings illustrate specific embodiments of the present application, which will be described in more detail below. These drawings and the textual description are not intended to limit the scope of the present application in any way, but rather to illustrate the concepts of the present application to those skilled in the art by reference to specific embodiments. DETAILED DESCRIPTION
[0057] Exemplary embodiments will be described in detail herein, with examples illustrated in the accompanying drawings. In the following description, when referring to the drawings, identical numerals in different figures represent identical or similar elements, unless otherwise indicated. The embodiments described in the following exemplary embodiments are not intended to represent all embodiments consistent with the present application. Rather, they are merely examples of apparatus and methods consistent with certain aspects of the present application, as detailed in the appended claims.
[0058] In the technical solutions of the embodiments of this application, the collection, storage, use, processing, transmission, provision and disclosure of user personal information involved comply with the provisions of relevant laws and regulations and do not violate public order and good morals.
[0059] It should be noted that the disclosed identity information verification method, apparatus, device, medium, and product can be used in the field of data processing technology. They can also be used in any field other than data processing, such as finance. The application fields of the disclosed identity information verification method, apparatus, device, medium, and product are not limited.
[0060] The technical solution of the present application is described in detail below with specific embodiments. The following specific embodiments can be combined with each other, and the same or similar concepts or processes may not be repeated in some embodiments. The embodiments of the present application will be described below with reference to the accompanying drawings.
[0061] To clearly understand the technical solution of this application, we first provide a detailed introduction to the existing technology. The Web (World Wide Web, Global Wide Area Network) is a global, dynamically interactive, cross-platform distributed graphics processing system based on hypertext and the Hypertext Transfer Protocol. It is a network service built on the Internet that provides a graphical, easily accessible, and intuitive interface for viewers to search and browse information on the Internet. HTML is the core of web project development. As a markup language, it is an application, specification, and standard under the Standard Generalized Markup Language, which uses markup symbols to mark the various parts of the web page to be displayed.
[0062] As an HTML tag, Iframe can load content or plug-ins from a third party. Use Iframe to embed a web page into another web page and both web pages require a temporary token verification. The token of the embedded web page comes from a third-party organization. When the embedded web page is opened and the token needs to be verified, the user logs in through the third party and the third-party organization generates a token, which is then passed to the client. The client then sends the token to the third party. When the verification is passed, the specific content of the embedded web page can be browsed and edited. However, after the user logs in to the embedded web page, when the embedded web page is not viewed, the validity period of the token of the embedded web page will also be reduced, resulting in the situation where the web page cannot be browsed and needs to be logged in again when the validity period of the token of the embedded web page is exceeded. In particular, when the web page interface of the embedded web page is set in a menu bar of the embedded web page, if the user visits this page after the identity authentication information of the embedded web page has expired, the identity authentication will expire and need to be re-verified, resulting in low web page access efficiency.
[0063] Therefore, in the prior art, if a user visits this page after the authentication information embedded in the web page expires, the authentication will expire and need to be re-authenticated, resulting in low web page access efficiency. The inventor found in the research that in order to solve this problem, the user information can be saved in the form of a cookie verification file, so that when the temporary token returned by the authentication server to the embedded server expires, the user can still work normally in multiple embedded pages under the menu bar, avoiding the need for re-authentication due to authentication expiration, and improving web page access efficiency.
[0064] Specifically, a user identity authentication request sent by the embedded web page server is received. The user identity authentication request is generated by the embedded web page server in response to the user clicking the corresponding Iframe tag in the menu bar. Determine whether the user identity authentication request is the first authentication request within a preset time period. If it is determined that the user identity authentication request is not the first authentication request, determine the stored cookie verification file corresponding to the user identity authentication request. The cookie verification file is generated based on the user login information of the embedded web page in the embedded web page server after the first identity authentication is passed. Complete user identity authentication based on the cookie verification file and the user identity authentication request.
[0065] Based on the above creative findings, the inventor proposed the technical solution of this application.
[0066] The following describes the application scenarios of the identity information verification method provided in the embodiment of the present application. Figure 1 As shown, 1 is an embedded web server, 2 is an embedded web server, and 3 is an identity verification server. The network architecture of the application scenario corresponding to the identity information verification method provided by the embodiment of the application includes: embedded web server 1, embedded web server 2 and identity verification server 3.
[0067] Exemplarily, the user first logs in to the embedded web page, and then clicks on the menu bar of the embedded web page to seek to open and access the embedded web page. At this time, the embedded web page server 2 generates a user identity authentication request in response to the user's click operation on the corresponding Iframe tag in the menu bar. The Iframe tag can also be called a submenu, and sends the identity authentication request to the embedded web page server 1. The embedded web page server 1 determines whether the user identity authentication request is the first authentication request within a preset time period. If it is the first authentication request, the user account information and user password information corresponding to the embedded web page server 1 in the user identity authentication request are sent to the authentication server 3 for the first authentication through the authentication server 3. At the same time, after passing the first authentication, the user login information of the embedded web page in the embedded web page server 2 included in the user identity authentication request is stored in the cookie authentication file. If it is not the first authentication request, the stored cookie authentication file corresponding to the user identity authentication request is determined. The user identity authentication is completed according to the cookie authentication file and the user identity authentication request.
[0068] The embodiments of the present application are introduced below with reference to the accompanying drawings.
[0069] Figure 2 Schematic diagram of the identity information verification method provided for this application Figure 1 ,like Figure 2As shown, in this embodiment, the execution subject of the embodiment of the present application is an identity information verification device, which can be integrated into an embedded web server. The identity information verification method provided in this embodiment includes the following steps:
[0070] Step S101: receiving a user identity authentication request sent by an embedded web page server. The user identity authentication request is generated by the embedded web page server in response to a user clicking on a corresponding Iframe tag in a menu bar.
[0071] In this embodiment, Iframe is an HTML tag, which is a form of implementing a frame. It can be used to split the web page structure so that certain parts of the web page remain common. Iframe is more flexible and can be nested anywhere on the web page. It can embed another web page file in one web page file, and the method is simple.
[0072] An embedded web page refers to a web page that is embedded in a web page, and an embedded web page refers to a web page that is embedded in another web page through an Iframe.
[0073] Before logging into the embedded web page, the user needs to log into the embedded web page first. The embedded web page server can record the user login information through its own program, such as through the embedded web page system. When the user corresponds to the Iframe tag in the menu bar, the menu bar of the embedded web page is as follows Figure 3 As shown in the figure, the dotted box is the menu bar, and the filled grid in the dotted box represents the submenu of the embedded web page, which can also be understood as the corresponding Iframe tag of the embedded web page. When the user selects the submenu of the embedded web page, the embedded web page server will generate a corresponding user authentication request based on the operation. If it is the first click within a preset time period, such as the user's first login click on a certain day within a year, the user authentication request will be accompanied by the user account and user password corresponding to the embedded page server when the user logged in to the embedded page, as well as the user login information of the embedded web page.
[0074] The preset time period can be set based on actual needs, such as a longer period of several years, or a shorter period of several months or days. The program in the embedded page server that manages embedded page logins is the embedded page system, while the program in the embedded page server that manages embedded page logins is the embedded page system. For ease of understanding, the embedded page server and the embedded page server will be used for illustration. If the user authentication request is not the first click within the preset time period, the user login information of the embedded page will generally be included with the user.
[0075] Step S102: determining whether the user identity verification request is the first verification request within a preset time period.
[0076] In this embodiment, when performing identity authentication, it is necessary to determine whether it is the first authentication or a non-first authentication, so as to perform a subsequent judgment process.
[0077] Step S103: If it is determined that the user identity authentication request is not the first authentication request, the stored cookie verification file corresponding to the user identity authentication request is determined. The cookie verification file is generated based on the user login information of the embedded web page in the embedded web page server after the first authentication is passed.
[0078] In this embodiment, the stored cookie verification file is generated after the first verification. The cookie verification file can store the user login information of the embedded web page, so that during the next identity authentication, it is only necessary to verify the user login information through the cookie verification file, and there is no need to verify the user account and user password corresponding to the embedded web page server, thereby improving verification efficiency.
[0079] Step S104: Complete user identity authentication according to the cookie verification file and the user identity authentication request.
[0080] In the case of non-first-time verification, the user identity authentication request generally includes the user login information of the embedded web page, so that it can be directly verified through the cookie verification file.
[0081] An embodiment of the present application provides an identity information verification method, which includes: receiving a user identity authentication request sent by an embedded web page server. The user identity authentication request is generated by the embedded web page server in response to the user's click operation on the corresponding Iframe tag in the menu bar. Determine whether the user identity authentication request is the first authentication request within a preset time period. If it is determined that the user identity authentication request is not the first authentication request, determine the stored cookie verification file corresponding to the user identity authentication request. The cookie verification file is generated according to the user login information of the embedded web page in the embedded web page server after the first identity authentication is passed. Complete user identity authentication based on the cookie verification file and the user identity authentication request.
[0082] In this embodiment, when an embedded page is placed in the menu bar of the embedded page, if the user identity verification request is not the first authentication request, a cookie verification file is used to verify the user identity. Using a cookie verification file ensures that even if the temporary token returned by the authentication server to the embedding server expires, the user can still operate normally on multiple embedded pages under the menu bar, avoiding the need for re-authentication due to expired authentication, thereby improving web page access efficiency.
[0083] At the same time, when the Iframe tag crosses domains, for example, clicking on different Iframe tags to open different embedded pages requires re-verification of identity each time, resulting in slow web page loading. Therefore, the method of this embodiment can also avoid the need to re-verify the user's identity each time logging into a different embedded page when the Iframe tag crosses domains, effectively reducing the identity authentication time.
[0084] Figure 4 Schematic diagram of the identity information verification method provided for this application Figure 2 ,like Figure 4 As shown, the identity information verification method provided in this embodiment is a further refinement of the identity information verification method provided in the previous embodiment of this application. The identity information verification method provided in this embodiment includes the following steps.
[0085] Step S201: receiving a user identity authentication request sent by an embedded web page server.
[0086] The implementation of step S201 is similar to the implementation of step S101 in the previous embodiment, and will not be described in detail here.
[0087] Step S202 , determining whether the user identity authentication request is the first authentication request within a preset time period, if so, executing step S205 , if not, executing step S203 .
[0088] Step S203: Determine the stored cookie verification file corresponding to the user identity authentication request.
[0089] The implementation of step S203 is similar to the implementation of step S103 in the previous embodiment, and will not be described in detail here.
[0090] Optionally, in this embodiment, the user identity authentication request further includes: a temporary Token corresponding to the user login information.
[0091] Before step S203, the method further includes:
[0092] Determines whether the temporary token in the user authentication request has expired.
[0093] If the temporary Token in the user identity authentication request expires, step S203 is executed.
[0094] If the temporary token in the user authentication request has not expired, you can authenticate by verifying the temporary token, or continue authentication through the cookie verification file, as follows:
[0095] Verify that the cookie verification file matches the user authentication request, and / or verify the token temporary token to complete the user authentication.
[0096] Tkoen is a string generated by the server and can be used as a temporary token for user terminal requests. Tokens can reduce server pressure and reduce frequent database queries. By using two verification methods, we can increase verification diversity and improve the efficiency of token verification, further improving verification efficiency.
[0097] Step S204: Complete user identity verification based on the cookie verification file and the user identity verification request. Then proceed to step S209.
[0098] The implementation of step 204 is similar to the implementation of step 104 in the previous embodiment, and will not be described in detail here.
[0099] Step S205: Determine the user account information and user password information in the user identity authentication request, wherein the user identity authentication request includes the user account information and user password information corresponding to the embedded web server.
[0100] Step S206: Send the user account information and user password information to the identity authentication server.
[0101] Step S207: Receive the identity authentication result fed back by the identity authentication server.
[0102] Step S208: Perform corresponding processing according to the identity verification result, and then execute step S209.
[0103] In this embodiment, user account information and password information are used for authentication with a third-party authentication server. Since authentication within an embedded web server typically relies on the authentication server, the initial authentication process requires the authentication server to perform verification. After the user enters their account and password into the embedded system embedded in the web server, the embedded system sends an authentication request to the third-party authentication server. The authentication server generates authentication information, and the embedded web server calls the authentication server's interface to determine whether the authentication information provided by the authentication server passes. If so, the user is authenticated and logged into the web page.
[0104] Optionally, in this embodiment, step S208 may specifically be:
[0105] If the identity authentication result is passed, a corresponding cookie authentication file is generated and stored according to the user identity authentication request. The user identity authentication request also includes user login information of the embedded web page in the embedded web page server.
[0106] If the identity authentication result is failure to authenticate, the failure authentication result is fed back to the embedded web page server.
[0107] After receiving the verification result, the embedded web page server can feedback a message indicating that the password is incorrect to the embedded page.
[0108] Step S209 , in response to the user's exit selection operation on the embedded webpage, exit the embedded webpage and delete the stored cookie verification file corresponding to the user identity authentication request.
[0109] In this embodiment, after the user exits the embedded system embedded in the web server, for example, by choosing to exit on the embedded web page, the cookie verification file is cleared, thereby avoiding the situation where the current user logs in and opens the embedded page with the login information of the previous user.
[0110] The method of this embodiment does not require repeated verification of user information when the Iframe is cross-domain. The user information generated after the user logs in is stored as a cookie verification file, and the cookie verification file is cleared in time after the user logs out, which will not affect the login of other users and improve the page response speed.
[0111] Figure 5 Schematic diagram of the structure of the identity information verification device provided in this application Figure 1 ,like Figure 5 As shown, in this embodiment, the identity information verification device 300 can be set in an embedded web server. The web page interface of the embedded web server is set in the form of an Iframe tag in the menu bar of the embedded web page corresponding to the embedded web server. The identity information verification device 300 includes:
[0112] The receiving module 301 is configured to receive a user identity authentication request sent by the embedded web page server. The user identity authentication request is generated by the embedded web page server in response to a user clicking on a corresponding Iframe tag in the menu bar.
[0113] The judgment module 302 is used to judge whether the user identity authentication request is the first authentication request within a preset time period.
[0114] The determination module 303 is configured to determine the stored cookie verification file corresponding to the user identity authentication request if it is determined that the user identity authentication request is not the first authentication request. The cookie verification file is generated based on the user login information of the embedded web page in the embedded web page server after the first authentication is passed.
[0115] The verification module 304 is used to complete the user identity verification according to the cookie verification file and the user identity verification request.
[0116] The identity information verification device provided in this embodiment can perform Figure 2 The technical solution of the method embodiment shown in the figure has the same implementation principle and technical effect as Figure 2 The method embodiments shown are similar and will not be described in detail here.
[0117] Figure 6 Schematic diagram of the structure of the identity information verification device provided in this application Figure 2 ,like Figure 6 As shown, the identity information verification device provided in this application is further refined based on the identity information verification device provided in the previous embodiment. For better description, the identity information verification device of this embodiment uses the identity information verification device 400 for exemplary description, and the identity information verification device 400 includes:
[0118] Optionally, in this embodiment, if it is determined that the user identity authentication request is the first authentication request within a preset time period, the authentication module 304 is further configured to:
[0119] Determine the user account information and password information in the user authentication request. The user authentication request includes the user account information and password information corresponding to the embedded web server. Send the user account information and password information to the authentication server. Receive the authentication result from the authentication server. Perform appropriate processing based on the authentication result.
[0120] Optionally, in this embodiment, when performing corresponding processing according to the identity authentication result, the verification module 304 is specifically configured to:
[0121] If the authentication result is a pass, a corresponding cookie verification file is generated and stored based on the user authentication request. The user authentication request also includes the user login information of the embedded web page in the embedded web server. If the authentication result is a fail, the fail verification result is fed back to the embedded web server.
[0122] Optionally, in this embodiment, the user identity authentication request further includes: a temporary Token corresponding to the user login information.
[0123] The determination module 303 is further configured to:
[0124] Determine whether the temporary token in the user authentication request has expired. If the temporary token in the user authentication request has expired, perform the step of determining the stored cookie verification file corresponding to the user authentication request.
[0125] Optionally, in this embodiment, if the temporary token Token in the user identity authentication request has not expired, the determination module 303 is specifically configured to:
[0126] Verify that the cookie verification file matches the user authentication request, and / or verify the token temporary token to complete the user authentication.
[0127] Optionally, in this embodiment, the identity information verification device 400 further includes:
[0128] The deletion module 401 is configured to exit the embedded web page in response to a user's exit selection operation on the embedded web page, and delete the stored cookie verification file corresponding to the user identity verification request.
[0129] The identity information verification device provided in this embodiment can perform Figure 2-Figure 4 The technical solution of the method embodiment shown in the figure has the same implementation principle and technical effect as Figure 2-Figure 4 The method embodiments shown are similar and will not be described in detail here.
[0130] According to an embodiment of the present application, the present application also provides an embedded web page server, a computer-readable storage medium, and a computer program product.
[0131] like Figure 7 As shown, Figure 7 is a schematic diagram of the structure of the embedded web server provided by this application. The embedded web server is intended for various forms of digital computers, such as laptop computers, desktop computers, workstations, personal digital assistants, blade servers, mainframe computers, and other suitable computers. The components shown herein, their connections and relationships, and their functions are provided for example only and are not intended to limit the implementation of the present application as described and / or claimed herein.
[0132] like Figure 7 As shown, the embedded web server includes: a processor 501 and a memory 502. Each component is connected to each other using different buses and can be installed on a common motherboard or installed in other ways as needed. The processor can process instructions executed in the embedded web server.
[0133] Memory 502 is the non-transitory computer-readable storage medium provided in this application. The memory stores instructions executable by at least one processor, causing the at least one processor to perform the identity information verification method provided in this application. The non-transitory computer-readable storage medium of this application stores computer instructions for causing a computer to perform the identity information verification method provided in this application.
[0134] The memory 502 is a non-transient computer-readable storage medium that can be used to store non-transient software programs, non-transient computer executable programs and modules, such as the program instructions / modules corresponding to the identity information verification method in the embodiment of the present application (for example, the attached Figure 5 The processor 501 executes the non-transient software programs, instructions, and modules stored in the memory 502 to execute various functional applications and data processing of the electronic device, thereby implementing the identity information verification method in the above method embodiment.
[0135] At the same time, this embodiment also provides a computer product. When the instructions in the computer product are executed by the processor of the electronic device, the electronic device can execute the identity information verification method of the above embodiment.
[0136] Those skilled in the art will readily conceive of other implementations of the embodiments of the present application after considering the specification and practicing the invention disclosed herein. This application is intended to cover any variations, uses, or adaptations of the embodiments of the present application, which follow the general principles of the embodiments of the present application and include common knowledge or customary technical means in the art not disclosed in the embodiments of the present application.
[0137] It should be understood that the embodiments of the present application are not limited to the precise structures described above and shown in the drawings, and various modifications and changes can be made without departing from the scope thereof. The scope of the embodiments of the present application is limited only by the appended claims.
Claims
1. A method for verifying identity information, characterized in that: Applied to an embedded web server, the web page interface of the embedded web server is set in the form of an Iframe tag in the menu bar of the embedded web page corresponding to the embedded web server, and the method includes: Receiving a user identity authentication request sent by the embedded web page server; the user identity authentication request is generated by the embedded web page server in response to a user clicking on a corresponding Iframe tag in the menu bar; Determining whether the user identity verification request is the first verification request within a preset time period; If it is determined that the user identity authentication request is not the first authentication request, determining a stored cookie verification file corresponding to the user identity authentication request; the cookie verification file is generated according to the user login information of the embedded web page in the embedded web page server after the first identity authentication is passed; Complete user authentication based on the cookie verification file and user authentication request; The user identity authentication request also includes: a temporary token corresponding to the user login information; Before determining the stored cookie verification file corresponding to the user identity authentication request, the method further includes: Determine whether the temporary Token in the user identity authentication request has expired; If the temporary Token in the user identity authentication request expires, the step of determining the stored cookie verification file corresponding to the user identity authentication request is performed.
2. The method according to claim 1, characterized in that If it is determined that the user identity verification request is the first verification request within a preset time period, the method further includes: Determine the user account information and user password information in the user identity authentication request; wherein the user identity authentication request includes the user account information and user password information corresponding to the embedded web server; Sending the user account information and user password information to the identity verification server; Receive the authentication result fed back by the authentication server; Perform corresponding processing according to the identity verification result.
3. The method according to claim 2, characterized in that The performing corresponding processing according to the identity authentication result includes: If the identity authentication result is passed, a corresponding cookie verification file is generated and stored according to the user identity authentication request; the user identity authentication request also includes user login information of the embedded web page in the embedded web page server; If the identity authentication result is failure to authenticate, the failure authentication result is fed back to the embedded web page server.
4. The method according to claim 1, wherein If the temporary Token in the user identity authentication request has not expired, completing the user identity authentication according to the cookie verification file and the user identity authentication request includes: Verify whether the cookie verification file matches the user authentication request, and / or verify the Token temporary token to complete user authentication.
5. The method according to any one of claims 1 to 4, characterized in that The method further comprises: In response to the user's exit selection operation on the embedded webpage, the embedded webpage is exited, and the stored cookie verification file corresponding to the user identity verification request is deleted.
6. An identity information verification device, characterized in that: Located in an embedded web server, the web page interface of the embedded web server is set in the form of an Iframe tag in the menu bar of the embedded web page corresponding to the embedded web server, and the device includes: a receiving module configured to receive a user identity authentication request sent by the embedded web page server; the user identity authentication request is generated by the embedded web page server in response to a user clicking on a corresponding Iframe tag in the menu bar; A determination module, configured to determine whether the user identity verification request is the first verification request within a preset time period; a determination module configured to, if it is determined that the user identity authentication request is not a first authentication request, determine a stored cookie verification file corresponding to the user identity authentication request; the cookie verification file is generated based on user login information of the embedded web page in the embedded web page server after the first authentication is passed; A verification module, used to complete user authentication based on the cookie verification file and the user authentication request; The user identity authentication request also includes: a temporary Token corresponding to the user login information; the determination module is also used to: determine whether the temporary Token in the user identity authentication request is expired; if the temporary Token in the user identity authentication request is expired, execute the step of determining the stored cookie verification file corresponding to the user identity authentication request.
7. An embedded web server, characterized in that: include: memory and processor; The memory stores computer-executable instructions; The processor executes the computer-executable instructions stored in the memory to implement the identity information verification method according to any one of claims 1 to 5.
8. A computer-readable storage medium, characterized in that The computer-readable storage medium stores computer-executable instructions, which, when executed by a processor, are used to implement the identity information verification method according to any one of claims 1 to 5.
9. A computer program product comprising a computer program, characterized in that When the computer program is executed by a processor, the identity information verification method according to any one of claims 1 to 5 is implemented.
Citation Information
Patent Citations
Authorization control method, device and system and authorization request method and device
CN103581140A
Report viewing method and device, electronic equipment and storage medium
CN111046314A