A login authentication method, device and equipment

Abstract

The application provides a login authentication method, device and equipment. The method comprises the following steps: sending a message push request to a push server, wherein the message push request comprises a first push website, a push mobile phone number and push content, and the first push website carries a random number; obtaining a website login request sent by a terminal, wherein the website login request carries a second push website, and the second push website is generated by a background server based on the first push website and first SIM information corresponding to the terminal; verifying the second push website according to second SIM information corresponding to the random number and the push mobile phone number; and sending a login request success message to the terminal in the case that the second push website is verified successfully. The embodiment of the application can effectively ensure that only the terminal in which the SIM (or USIM) card corresponding to the push mobile phone number can log in the pushed website, thereby effectively ensuring the security of the user login information, and the user does not need to input a username and a password, and the operation is simple.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of communication, in particular to a login authentication method, device and equipment. BACKGROUND

[0002] In the related art, a user needs to input an account and a password when clicking a Uniform Resource Locator (URL) login link, and other users can log in on other terminals by obtaining the account and the password, which is complicated and is not conducive to protecting the security of user information. SUMMARY

[0003] The present application aims to provide a login authentication method, device and equipment to solve the problems of complicated operation and poor security of user information in the prior art.

[0004] To achieve the above-mentioned purpose, an embodiment of the present application provides a login authentication method, which is executed by a service server and includes the following steps.

[0005] Sending a message push request to a push server, wherein the message push request includes a first push URL, a push mobile phone number and push content, and the first push URL carries a random number;

[0006] Obtaining a URL login request sent by a terminal, wherein the URL login request carries a second push URL, and the second push URL is generated by a background server based on the first push URL and first user identity recognition SIM information corresponding to the terminal;

[0007] Verifying the second push URL according to a second SIM information corresponding to the random number and the push mobile phone number;

[0008] If the verification of the second push URL is successful, sending a login request success message to the terminal.

[0009] Optionally, the second push URL includes a first login parameter generated based on the random number and the first SIM information.

[0010] Optionally, the verification of the second push URL according to the second SIM information corresponding to the random number and the push mobile phone number includes the following steps.

[0011] Verifying the first login parameter according to the random number and verifying the first SIM information according to the second SIM information.

[0012] Optionally, the verification of the first login parameter according to the random number includes the following steps.

[0013] According to a preset algorithm and a preset key, the random number is processed to obtain a second login parameter.

[0014] If the second login parameter is same as the first login parameter, it is determined that the first login parameter is verified successfully, otherwise, it is determined that the first login parameter is verified unsuccessfully.

[0015] Optionally, the verification of the first SIM information according to the second SIM information comprises:

[0016] If the first SIM information is same as the second SIM information, it is determined that the first SIM information is verified successfully, otherwise, it is determined that the first SIM information is verified unsuccessfully.

[0017] The embodiment of the application further provides a login authentication method, which is executed by a push server and comprises:

[0018] A message push request is acquired, the message push request comprising a first push website, a push mobile phone number and push content, wherein the first push website carries a random number;

[0019] According to the first push website and the push content, a data short message is generated.

[0020] The data short message is sent to a background server corresponding to the push mobile phone number.

[0021] Optionally, the generation of the data short message according to the first push website and the push content comprises:

[0022] According to a preset short message data format, the push content and the first push website are encapsulated to obtain the data short message.

[0023] The embodiment of the application further provides a login authentication method, which is executed by a background server and comprises:

[0024] A data short message is acquired, the data short message being generated based on a message push request, the data short message comprising a first push website and push content, wherein the first push website carries a random number;

[0025] According to the random number and first user identity recognition SIM information corresponding to a terminal sending the data short message, a second push website is generated.

[0026] A start browser command is sent to the terminal, the start browser command comprising the second push website and the push content, so that the terminal sends a website login request according to the start browser command, the website login request carrying the second push website.

[0027] Optionally, a second push website is generated according to the random number and first subscriber identity module (SIM) information corresponding to a terminal sending the data message, and the second push website comprises:

[0028] The random number is processed according to a preset algorithm and a preset key to obtain a first login parameter.

[0029] The second push website is generated according to the first login parameter, the first SIM information and the first push website.

[0030] Optionally, a network identification field of the start browsing command comprises the push content, and a uniform resource locator (URL) field of the start browsing command comprises the second push website.

[0031] Embodiments of the present application also provide a login authentication device applied to a service server and comprising:

[0032] A first sending module is configured to send a message push request to a push server, wherein the message push request comprises a first push website, a push mobile phone number and push content, and the first push website carries a random number.

[0033] A first obtaining module is configured to obtain a website login request sent by a terminal, wherein the website login request carries a second push website, and the second push website is generated by a background server based on the first push website and first subscriber identity module (SIM) information corresponding to the terminal.

[0034] A first verifying module is configured to verify the second push website according to the random number and second SIM information corresponding to the push mobile phone number.

[0035] A first processing module is configured to send a login request success message to the terminal in a case where the second push website is verified successfully.

[0036] Optionally, the second push website comprises a first login parameter generated based on the random number and the first SIM information.

[0037] Optionally, the first verifying module is configured to verify the first login parameter according to the random number and verify the first SIM information according to the second SIM information.

[0038] Optionally, the first verifying module comprises:

[0039] A first processing submodule is configured to process the random number according to a preset algorithm and a preset key to obtain a second login parameter.

[0040] The first verification submodule is configured to determine that the first login parameter is verified successfully if the second login parameter is the same as the first login parameter, and determine that the first login parameter is verified unsuccessfully otherwise.

[0041] Optionally, the first verification module is configured to determine that the first SIM information is verified successfully if the first SIM information is the same as the second SIM information, and determine that the first SIM information is verified unsuccessfully otherwise.

[0042] The embodiment of the application further provides a login authentication device applied to a push server, comprising:

[0043] The second acquisition module is configured to acquire a message push request, wherein the message push request comprises a first push website, a push mobile phone number and push content, and the first push website carries a random number.

[0044] The first generation module is configured to generate a data short message according to the first push website and the push content.

[0045] The second sending module is configured to send the data short message to a background server corresponding to the push mobile phone number.

[0046] Optionally, the first generation module is configured to perform encapsulation processing on the push content and the first push website according to a preset short message data format, and obtain the data short message.

[0047] The embodiment of the application further provides a login authentication device applied to a background server, comprising:

[0048] The third acquisition module is configured to acquire a data short message, wherein the data short message is generated based on a message push request, and the data short message comprises a first push website and push content, and the first push website carries a random number.

[0049] The second generation module is configured to generate a second push website according to the random number and first user identity recognition SIM information corresponding to a terminal sending the data short message.

[0050] The third sending module is configured to send a start browser command to the terminal, wherein the start browser command comprises the second push website and the push content, so that the terminal sends a website login request according to the start browser command, and the website login request carries the second push website.

[0051] Optionally, the third generation module comprises:

[0052] The second processing submodule is configured to process the random number according to a preset algorithm and a preset secret key, and obtain a first login parameter.

[0053] The first generating sub-module is configured to generate a second push website according to the first login parameter, the first SIM information and the first push website.

[0054] Optionally, the network identification field of the start browsing command comprises the push content, and a uniform resource locator (URL) field of the start browsing command comprises the second push website.

[0055] The embodiment of the application further provides a login authentication device applied to a service server and comprising a transceiver and a processor.

[0056] The transceiver is configured to send a message push request to a push server, wherein the message push request comprises a first push website, a push mobile phone number and push content, the first push website carries a random number, and the transceiver is further configured to acquire a website login request sent by a terminal, wherein the website login request carries a second push website, and the second push website is generated by a background server based on the first push website and first subscriber identity module (SIM) information corresponding to the terminal.

[0057] The processor is configured to verify the second push website according to the random number and second SIM information corresponding to the push mobile phone number, and send a login request success message to the terminal through the transceiver in a case where the second push website is verified successfully.

[0058] The embodiment of the application further provides a login authentication device applied to a push server and comprising a transceiver and a processor.

[0059] The transceiver is configured to acquire a message push request, wherein the message push request comprises a first push website, a push mobile phone number and push content, and the first push website carries a random number.

[0060] The processor is configured to generate a data short message according to the first push website and the push content.

[0061] The transceiver is configured to send the data short message to a background server corresponding to the push mobile phone number.

[0062] The embodiment of the application further provides a login authentication device applied to a background server and comprising a transceiver and a processor.

[0063] The transceiver is configured to acquire a data short message, wherein the data short message is generated based on a message push request, and the data short message comprises a first push website and push content, and the first push website carries a random number.

[0064] The processor is configured to generate a second push website according to the random number and first SIM information corresponding to a terminal sending the data short message.

[0065] The transceiver is configured to send a browser starting command to the terminal, the browser starting command comprising the second push website address and the push content, so that the terminal sends a website login request according to the browser starting command, the website login request carrying the second push website address.

[0066] The application also provides a login authentication device, comprising a transceiver, a processor, a memory, and a program or instruction stored in the memory and executable on the processor; the processor implements the steps in the above login authentication method when executing the program or instruction.

[0067] The application also provides a readable storage medium, which stores a program or instruction, and the program or instruction implements the steps in the above login authentication method when executed by a processor.

[0068] The above technical solutions of the application have the following advantages:

[0069] In the application, a message push request is sent to a push server, the message push request comprising a first push website address carrying a random number, a push mobile phone number, and push content; a website login request sent by a terminal is acquired, the website login request carrying a second push website address, the second push website address being generated based on the first push website address and first SIM information corresponding to the terminal; and a login request success message is sent to the terminal in the case that the second push website address is verified successfully, so that only the terminal in which a SIM (or USIM) card corresponding to the push mobile phone number is located can log in to the pushed website address, and the security of user login information is effectively ensured, and the user does not need to input a username and password, and the operation is simple. BRIEF DESCRIPTION OF DRAWINGS

[0070] Figure 1 Fig. 1 is one of flow diagrams of the login authentication method of the application;

[0071] Figure 2 Fig. 2 is another of flow diagrams of the login authentication method of the application;

[0072] Figure 3 Fig. 3 is a third of flow diagrams of the login authentication method of the application;

[0073] Figure 4 Fig. 4 is an interaction diagram of the login authentication method of the application;

[0074] Figure 5 Fig. 5 is one of module diagrams of the login authentication device of the application;

[0075] Figure 6Figure 2 is a schematic diagram of a module of a login authentication device according to an embodiment of the present application;

[0076] Figure 7 Figure 3 is a schematic diagram of a module of a login authentication device according to an embodiment of the present application;

[0077] Figure 8 Figure 4 is a structural block diagram of a login authentication device according to an embodiment of the present application;

[0078] Figure 9 Figure 5 is a structural block diagram of a login authentication device according to an embodiment of the present application. DETAILED DESCRIPTION

[0079] In order to make the technical problems to be solved by the present application, technical solutions and advantages clearer, the following will be described in detail with reference to the accompanying drawings and specific embodiments.

[0080] It should be understood that the "one embodiment" or "an embodiment" mentioned throughout the specification means that the specific features, structures or characteristics related to the embodiment are included in at least one embodiment of the present application. Therefore, "in one embodiment" or "in an embodiment" appearing throughout the specification does not necessarily mean the same embodiment. In addition, these specific features, structures or characteristics can be combined in one or more embodiments in any suitable manner.

[0081] In various embodiments of the present application, it should be understood that the size of the serial number of the following processes does not mean the order of execution, and the execution order of the processes should be determined according to its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present application.

[0082] In addition, the terms "system" and "network" are often used interchangeably herein.

[0083] In the embodiments provided in the present application, it should be understood that "B corresponding to A" means that B is associated with A, and B can be determined according to A. However, it should also be understood that the determination of B according to A does not mean that B is determined only according to A, but B can also be determined according to A and / or other information.

[0084] As shown in Figure 1 The present application provides a login authentication method, which is executed by a service server and includes the following steps.

[0085] Step 101: sending a message push request to a push server, the message push request including a first push website, a push mobile phone number and push content, wherein the first push website carries a random number.

[0086] In this step, the service server (service platform) generates a random number for the push mobile phone number, adds the random number to the first push website, and sends the first push website carrying the random number, the mobile phone number and the push content to the push server through a message push request. The push server can be a Subscriber Identification Module (SIM) card push platform or a Universal Subscriber Identity Module (USIM) card push platform.

[0087] For example, the format of the first push website can be https: / / www.aaa.com / random number.

[0088] The random number can specifically include 16 bytes and 32 digits.

[0089] Step 102: Obtain the website login request sent by the terminal, wherein the website login request carries a second push website, and the second push website is generated by the background server based on the first push website and the first user identity recognition SIM information corresponding to the terminal.

[0090] In the embodiment of the application, after the service server sends the message push request to the push server, the push server generates a data short message based on the message push request and sends the data short message to the background server corresponding to the push mobile phone number. The background server (server corresponding to the terminal) generates the second push website based on the data short message and sends the second push website and the push content to the terminal through a Launch Browser command. The terminal processes the Launch Browser command and displays a prompt message in a system prompt box, such as whether to log in to the second push website. If the user clicks confirm, the browser opens the second push website, and then sends the website login request.

[0091] Step 103: Verify the second push website according to the random number and the second SIM information corresponding to the mobile phone number.

[0092] Since the second push website is generated by the background server based on the first push website and the first user identity recognition SIM information corresponding to the terminal, the second push website is verified based on the random number and the second SIM information to confirm whether the terminal sending the website login request is the terminal where the SIM card corresponding to the push mobile phone number is located.

[0093] Step 104: If the second push website is verified successfully, send a login request success message to the terminal.

[0094] Here, in the case that the second push website verification is successful, a login request success message is sent to the terminal, that is, the terminal can successfully log in the corresponding first push website, and in the case that the second push website verification fails, a login request failure message is sent to the terminal, that is, the terminal cannot log in the corresponding first push website, so that it can be effectively ensured that only the terminal in which the SIM (or USIM) card corresponding to the push mobile phone number is located can log in the pushed website.

[0095] The login authentication method of the embodiment of the application sends a message push request to a push server, the message push request comprising a first push website carrying a random number, a push mobile phone number and push content; acquires a website login request sent by a terminal, the website login request carrying a second push website, the second push website being generated based on the first push website and first SIM information corresponding to the terminal; and in the case that the second push website verification is successful, a login request success message is sent to the terminal, so that it can be effectively ensured that only the terminal in which the SIM (or USIM) card corresponding to the push mobile phone number is located can log in the pushed website, thereby effectively ensuring the security of user login information, and the user does not need to input a username and password, and the operation is simple.

[0096] Optionally, the second push website comprises a first login parameter generated based on the random number and the first SIM information.

[0097] In the embodiment of the application, a background server processes the random number according to a preset algorithm and a preset secret key to obtain a first login parameter; and generates a second push website according to the first login parameter, the first SIM information and the first push website.

[0098] Optionally, the second push website is verified according to the random number and second SIM information corresponding to the push mobile phone number, comprising:

[0099] The first login parameter is verified according to the random number, and the first SIM information is verified according to the second SIM information.

[0100] That is, the first login parameter in the second push website and the second SIM information are both verified, and in the case that both of them are verified successfully, it is determined that the second push website verification is successful.

[0101] Further, the first login parameter is verified according to the random number, comprising:

[0102] The random number is processed according to a preset algorithm and a preset secret key to obtain a second login parameter;

[0103] If the second login parameter is same as the first login parameter, it is determined that the first login parameter is verified successfully, otherwise, it is determined that the first login parameter is verified unsuccessfully.

[0104] In the embodiment of the application, the service server and the background server use the same preset algorithm and preset key to process the random number, if the second login parameter calculated by the service server is same as the first login parameter calculated by the background server, it is determined that the first login parameter is verified successfully, otherwise, it is determined that the first login parameter is verified unsuccessfully.

[0105] Further, the verification of the first SIM information according to the second SIM information comprises:

[0106] If the first SIM information is same as the second SIM information, it is determined that the first SIM information is verified successfully, otherwise, it is determined that the first SIM information is verified unsuccessfully.

[0107] In the embodiment of the application, it is determined whether the second SIM information corresponding to the pushed mobile phone number is same as the first SIM information carried by the second pushed website, if the two are same, it is determined that the first SIM information is verified successfully, otherwise, it is determined that the first SIM information is verified unsuccessfully.

[0108] The login authentication method of the embodiment of the application sends a message push request to a push server, the message push request comprising a first pushed website carrying a random number, a pushed mobile phone number and pushed content; acquires a website login request sent by a terminal, the website login request carrying a second pushed website, the second pushed website being generated based on the first pushed website and a first SIM information corresponding to the terminal; and sends a login request success message to the terminal in the case that the second pushed website is verified successfully, so that it can be effectively ensured that only the terminal in which the SIM (or USIM) card corresponding to the pushed mobile phone number is located can log in the pushed website, and further, the security of the user login information is effectively ensured, and the user does not need to input a username and password, and the operation is simple.

[0109] As shown in Figure 2 The embodiment of the application further provides a login authentication method, executed by a push server, comprising:

[0110] Step 201: acquire a message push request, the message push request comprising a first pushed website, a pushed mobile phone number and pushed content, wherein the first pushed website carries a random number.

[0111] The message push request is specifically sent by a service platform.

[0112] Step 202: generate a data short message according to the first pushed website and the pushed content.

[0113] Here, the data message includes the first push URL and the push content.

[0114] Step 203: Send the data SMS to the backend server corresponding to the push mobile phone number.

[0115] Specifically, data SMS messages can be sent to the backend server corresponding to the mobile phone number through the operator's SMS gateway.

[0116] Here, after the data SMS is sent to the backend server corresponding to the push mobile number, the backend server generates a second push URL based on the random number and the first user identification SIM information corresponding to the terminal that sent the data SMS, and sends a browser launch command to the terminal. The browser launch command includes the second push URL and the push content, so that the terminal sends a URL login request according to the browser launch command. The URL login request carries the second push URL.

[0117] Optionally, a data SMS is generated based on the first push URL and the push content, including:

[0118] According to the preset SMS data format, the push content and the first push URL are encapsulated to obtain the data SMS.

[0119] In this embodiment of the invention, the preset SMS data format can refer to the ETSI 102.225 standard.

[0120] The method of this invention involves obtaining a message push request; generating a data SMS based on the first push URL and the push content; and sending the data SMS to the backend server corresponding to the push mobile number, so that the backend server generates a second push URL based on the data SMS, so as to facilitate subsequent login verification based on the second push URL.

[0121] like Figure 3 As shown, this embodiment of the invention also provides a login authentication method, executed by a backend server, which may be a server for the SIM card or USIM card corresponding to the terminal. The method includes:

[0122] Step 301: Obtain a data SMS message, which is generated based on a message push request. The data SMS message includes a first push URL and push content, wherein the first push URL carries a random number.

[0123] In this step, the data SMS sent by the push server is obtained and parsed according to the ETSI 102.225 standard to obtain the first push URL and push content.

[0124] Step 302: generating a second push website according to the random number and first subscriber identity module (SIM) information corresponding to the terminal sending the data short message.

[0125] Step 303: sending a launch browser command to the terminal, the launch browser command including the second push website and the push content, so that the terminal sends a website login request according to the launch browser command, the website login request carrying the second push website.

[0126] Optionally, an alpha identifier field of the launch browser command includes the push content, and a uniform resource locator (URL) field of the launch browser command includes the second push website.

[0127] Specifically, in a launch browser command, an alpha identifier field of the launch browser command is filled with the push content, and a URL field of the launch browser command is filled with the second push website, and the parameters of the launch browser command can refer to ETSI.102.223 standards.

[0128] In the embodiment of the application, the data short message is acquired, a second push website is generated according to the random number and first SIM information corresponding to the terminal sending the data short message, a launch browser command is sent to the terminal, the launch browser command including the second push website and the push content, so that the terminal processes the launch browser command, displays prompt information in a system prompt box, such as whether to log in the second push website, and the user clicks to confirm, the browser is started to open the second push website, and then a website login request is sent.

[0129] Optionally, the second push website is generated according to the random number and first SIM information corresponding to the terminal sending the data short message, and includes:

[0130] The random number is processed according to a preset algorithm and a preset secret key to obtain a first login parameter.

[0131] The second push website is generated according to the first login parameter, the first SIM information and the first push website.

[0132] For example, the format of the second push website can be specifically https: / / www.aaa.com / USIM ID / first login parameter.

[0133] In the embodiment of the present application, a data message is acquired; a second push website is generated according to the random number and first subscriber identity module (SIM) information corresponding to a terminal sending the data message; a start browser command is sent to the terminal, the start browser command including the second push website and the push content, so that the terminal processes the start browser command, displays prompt information in a system prompt box, such as whether to log in the second push website, and the user clicks to confirm, the browser is started to open the second push website, and then a website login request is sent, the second push website in the website login request is verified successfully in the service server, and then the login is performed, so that it can be ensured that only the terminal in which the SIM (or USIM) card corresponding to the push mobile phone number can log in the pushed website, and the security of user login information is effectively ensured, and the user does not need to input a user name and a password, and the operation is simple.

[0134] The interactive process of the login authentication method of the embodiment of the present application will be described below in combination with specific embodiments.

[0135] As shown in the figure, the interactive process includes the following steps. Figure 4

[0136] Step 401: A service platform generates a random number for a push mobile phone number.

[0137] Step 402: The random number is added to a push URL address.

[0138] For example, the format of the URL address is https: / / www.aaa.com / random number.

[0139] Step 403: The service platform sends a push request to a SIM push platform.

[0140] The push request carries the push mobile phone number, the push content and the URL address.

[0141] Step 404: The SIM push platform encapsulates the push content and the URL address into a data message.

[0142] The format of the data message refers to the ETSI 102.225 standard, and supports short message concatenation.

[0143] Step 405: The SIM push platform sends the data message to a (U)SIM card corresponding to the mobile phone through an operator short message gateway.

[0144] Step 406: The (U)SIM card refers to the ETSI 102.225 standard to analyze the data message, and acquires the push content, the URL address and the random number.

[0145] Step 407: The SIM card generates a login parameter according to the random number and a key, and acquires a USIM ID of the (U)SIM card.​

[0146] For example, the login parameters mentioned above are generated based on the HMAC-SHA256 algorithm. The USIM ID mentioned above can specifically be an Integrated Circuit Card Identity (ICCID).

[0147] Step 408: The SIM card generates a new URL address based on the login parameters and USIM ID.

[0148] The new URL can be formatted as: https: / / www.aaa.com / USIM ID / login parameters.

[0149] Step 409: In the Launch Browser command, fill in the push content in the alpha Identifier field and the newly generated URL address in the URL field.

[0150] Please refer to the ETSI.102.223 standard for the Launch Browser command parameters.

[0151] Step 410: The SIM card sends the Launch Browser command to the terminal.

[0152] Step 411: The terminal processes the Launch Browser command, a system prompt box pops up displaying the pushed content, click OK, and the URL address is opened in the browser.

[0153] Step 412: The terminal initiates a URL login request, which carries the USIM ID and login parameters.

[0154] Step 413: The business backend uses the same random number and algorithm to calculate the login parameters.

[0155] Step 414: The business backend compares the login parameters it calculates with the login parameters carried in the URL. If they match, it checks whether the USIM ID corresponding to the push mobile number matches the USIM ID carried in the URL. If they match, the URL login request is successful.

[0156] If either the login parameters or the USIM ID do not match, the URL login request will fail.

[0157] The method of this invention can effectively ensure that only the terminal with the SIM (or USIM) card corresponding to the push mobile number can log in to the pushed website, thereby effectively ensuring the security of user login information. Moreover, it does not require the user to enter a username and password, is simple to operate, and can also log in when the terminal is in WLAN mode.

[0158] likeFigure 5 As shown, the embodiment of the present application further provides a login authentication device 500 applied to a service server, comprising:

[0159] A first sending module 501 is configured to send a message push request to a push server, wherein the message push request comprises a first push website, a push mobile phone number and push content, and the first push website carries a random number.

[0160] A first obtaining module 502 is configured to obtain a website login request sent by a terminal, wherein the website login request carries a second push website, and the second push website is generated by a background server based on the first push website and first user identity recognition SIM information corresponding to the terminal.

[0161] A first verifying module 503 is configured to verify the second push website according to the random number and second SIM information corresponding to the push mobile phone number.

[0162] A first processing module 504 is configured to send a login request success message to the terminal in a case where the second push website is verified successfully.

[0163] Optionally, the second push website comprises a first login parameter generated based on the random number and the first SIM information.

[0164] Optionally, the first verifying module is configured to verify the first login parameter according to the random number and verify the first SIM information according to the second SIM information.

[0165] Optionally, the first verifying module comprises:

[0166] A first processing sub-module is configured to process the random number according to a preset algorithm and a preset secret key to obtain a second login parameter.

[0167] A first verifying sub-module is configured to determine that the first login parameter is verified successfully if the second login parameter is identical to the first login parameter, and otherwise, determine that the first login parameter is verified unsuccessfully.

[0168] Optionally, the first verifying module is configured to determine that the first SIM information is verified successfully if the first SIM information is identical to the second SIM information, and otherwise, determine that the first SIM information is verified unsuccessfully.

[0169] The login authentication device can realize all implementation manners in the above-mentioned login authentication method applied to a service server, and thus, details are not described herein again.

[0170] As Figure 6As shown, this embodiment of the invention also provides a login authentication device 600, applied to a push server, comprising:

[0171] The second acquisition module 601 is used to acquire a message push request, wherein the message push request includes a first push URL, a push mobile phone number, and push content, wherein the first push URL carries a random number;

[0172] The first generation module 602 is used to generate a data SMS message based on the first push URL and the push content;

[0173] The second sending module 603 is used to send the data SMS to the backend server corresponding to the push mobile phone number.

[0174] Optionally, the first generation module is used to encapsulate the push content and the first push URL according to a preset SMS data format to obtain the data SMS.

[0175] This login authentication device can implement all the implementation methods described above in the login authentication method embodiment applied to the push server. To avoid repetition, it will not be described again here.

[0176] like Figure 7 As shown, this embodiment of the invention also provides a login authentication device 700, applied to a backend server, comprising:

[0177] The third acquisition module 701 is used to acquire data SMS messages, which are generated based on message push requests. The data SMS messages include a first push URL and push content, wherein the first push URL carries a random number.

[0178] The second generation module 702 is used to generate a second push URL based on the random number and the first user identity identification SIM information corresponding to the terminal sending the data SMS message;

[0179] The third sending module 703 is used to send a browser launch command to the terminal. The browser launch command includes the second pushed URL and the pushed content, so that the terminal sends a URL login request according to the browser launch command. The URL login request carries the second pushed URL.

[0180] Optionally, the third generation module includes:

[0181] The second processing submodule is used to process the random number according to a preset algorithm and a preset key to obtain the first login parameters;

[0182] The first generation submodule is used to generate a second push URL based on the first login parameters, the first SIM information, and the first push URL.

[0183] Optionally, the network identification field of the start browsing command includes the push content, and a uniform resource locator (URL) field of the start browsing command includes the second push website.

[0184] The login authentication apparatus can implement all implementation manners in the above-mentioned login authentication method embodiment applied to a background server, and thus details are not repeated here.

[0185] As shown in Figure 8 The present embodiment further provides a login authentication device 800 applied to a service server, including a transceiver 820 and a processor 810.

[0186] The transceiver 820 is configured to send a message push request to a push server, the message push request including a first push website, a push mobile phone number and push content, wherein the first push website carries a random number; and acquire a website login request sent by a terminal, the website login request carrying a second push website, the second push website being generated by a background server based on the first push website and first subscriber identity module (SIM) information corresponding to the terminal.

[0187] The processor 810 is configured to verify the second push website according to the random number and second SIM information corresponding to the push mobile phone number; and send a login request success message to the terminal through the transceiver in a case where the second push website is verified successfully.

[0188] Optionally, the second push website includes a first login parameter generated based on the random number and the first SIM information.

[0189] Optionally, the processor 810 is further configured to:

[0190] verify the first login parameter according to the random number, and verify the first SIM information according to the second SIM information.

[0191] Optionally, the processor 810 is further configured to:

[0192] process the random number according to a preset algorithm and a preset key to obtain a second login parameter;

[0193] If the second login parameter is the same as the first login parameter, it is determined that the first login parameter is verified successfully, otherwise, it is determined that the first login parameter is verified unsuccessfully.

[0194] Optionally, the processor 810 is further configured to:

[0195] If the first SIM information is the same as the second SIM information, it is determined that the first SIM information is verified successfully, otherwise, it is determined that the first SIM information is verified unsuccessfully.

[0196] The login authentication apparatus can realize all implementation manners in the login authentication method embodiment applied to the service server, and details are not repeated here.

[0197] The embodiment of the application further provides a login authentication device applied to a push server, comprising a transceiver and a processor (the structural schematic diagram can be referred to as Figure 8 );

[0198] The transceiver is used for acquiring a message push request, and the message push request comprises a first push website, a push mobile phone number and push content, wherein the first push website carries a random number.

[0199] The processor is used for generating a data short message according to the first push website and the push content.

[0200] The transceiver is used for sending the data short message to a background server corresponding to the push mobile phone number.

[0201] Optionally, the processor is used for performing encapsulation processing on the push content and the first push website according to a preset short message data format, so as to obtain the data short message.

[0202] The login authentication apparatus can realize all implementation manners in the login authentication method embodiment applied to the push server, and details are not repeated here.

[0203] The embodiment of the application further provides a login authentication device applied to a background server, comprising a transceiver and a processor (the structural schematic diagram can be referred to as Figure 8 );

[0204] The transceiver is used for acquiring a data short message, and the data short message is generated based on a message push request, and the data short message comprises a first push website and push content, wherein the first push website carries a random number.

[0205] The processor is used for generating a second push website according to the random number and first user identity recognition SIM information corresponding to a terminal sending the data short message.

[0206] The transceiver is used for sending a start browser command to the terminal, and the start browser command comprises the second push website and the push content, so that the terminal sends a website login request according to the start browser command, and the website login request carries the second push website.

[0207] Optionally, the processor is further configured to:

[0208] process the random number according to a preset algorithm and a preset secret key to obtain a first login parameter;

[0209] generate a second push website according to the first login parameter, the first SIM information and the first push website.

[0210] Optionally, the network identification field of the start browsing command comprises the push content, and the uniform resource locator (URL) field of the start browsing command comprises the second push website.

[0211] The login authentication device can realize all implementation manners in the above-mentioned login authentication method embodiment applied to the background server, and thus, details are not described herein again.

[0212] An embodiment of the present application provides a login authentication device, as shown in the accompanying drawings, comprising a transceiver 910, a processor 900, a memory 920, and a program or instruction stored in the memory 920 and executable on the processor 900; the processor 900 realizes the above-mentioned login authentication method when executing the program or instruction. Figure 9

[0213] The transceiver 910 is configured to receive and send data under the control of the processor 900.

[0214] In the above-mentioned login authentication device, Figure 9 The bus architecture can comprise any number of interconnected buses and bridges, which are specifically linked together by various circuits of one or more processors represented by the processor 900 and the memory represented by the memory 920. The bus architecture can also link various other circuits such as peripheral devices, voltage stabilizers and power management circuits together, which are well known in the art, and thus, details are not described herein again. The bus interface provides an interface. The transceiver 910 can be a plurality of elements, that is, comprises a transmitter and a receiver, and provides a unit for communicating with various other devices on a transmission medium. The processor 900 is responsible for managing the bus architecture and general processing, and the memory 920 can store data used by the processor 900 when performing operations.

[0215] An embodiment of the present application further provides a readable storage medium, which stores a program or instruction, the program or instruction is executed by a processor to realize steps in the above-mentioned login authentication method, and can achieve the same technical effects, and thus, details are not described herein again.

[0216] ​The processor is the processor in the login authentication device in the above embodiments. The readable storage medium includes a computer readable storage medium, such as a computer read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk, etc.

[0217] It is further noted that the terminals described in this specification include, but are not limited to, smart phones, tablet computers, etc., and many of the functional components described are referred to as modules in order to more particularly emphasize their independence from implementation.

[0218] In the embodiments of the present application, the modules can be implemented in software, so as to be executed by various types of processors. For example, an identified executable code module can include one or more physical or logical blocks of computer instructions. For example, it can be structured as an object, a procedure, or a function. However, the executable code of the identified module need not be physically located together, but can include different instructions stored in different locations which, when joined logically together, comprise the module and achieve the stated purpose for the module.

[0219] In fact, the executable code module can be a single instruction or many instructions, and can even be spread across multiple different code segments, among different programs, and across multiple memory devices. Similarly, operational data can be identified within the module, and can be implemented in any suitable form and organized within any suitable type of data structure. The operational data can be collected as a single data set, or can be distributed in different locations including over different storage devices, and can exist at least in part only as electronic signals on a system or network.

[0220] When the modules can be implemented in software, in view of the level of existing hardware technology, the modules implemented in software can be built into corresponding hardware circuits by those skilled in the art without considering the cost, and the hardware circuits include conventional very large scale integration (VLSI) circuits or gate arrays, and existing semiconductors such as logic chips, transistors, or other discrete elements. The modules can also be implemented by programmable hardware devices, such as field programmable gate arrays, programmable array logic, programmable logic devices, etc.

[0221] The foregoing exemplary embodiments are described with reference made to the drawings which are provided for the purpose of explanation and illustration. They are not intended to limit the scope of the invention. Rather, these exemplary embodiments are described in order to enable others skilled in the art to embody the application. As will be understood by those familiar with the art, the application can be embodied in many different forms and should not be limited to the exemplary embodiments set forth herein. Rather, these exemplary embodiments are provided so that this disclosure will be complete and fully convey the scope of the application to those skilled in the art. In the drawings, the size and relative sizes of components can be exaggerated for clarity. The terminology used herein is for the purpose of describing particular embodiments only and is not intended to be limiting. As used herein, the singular articles "a," "an," and "the" are intended to include the plural forms as well, unless the context clearly indicates otherwise. It will be further understood that the terms "comprises" and / or "comprising," when used in this specification, specify the presence of stated features, integers, steps, operations, elements, and / or components, but do not preclude the presence or addition of one or more other features, integers, steps, operations, elements, components, and / or groups thereof. Unless otherwise indicated, a value range includes the upper and lower limits of the range and any sub-ranges therebetween.

[0222] The above description is that of the preferred embodiments of the application. Various modifications and changes can be made thereto without departing from the spirit and scope of the application, which is to be understood. The scope of the application is indicated only by the subjoined claims.

Claims

1. A login authentication method, executed by a business server, characterized in that, include: Send a message push request to the push server. The message push request includes a first push URL, a push mobile number, and push content, wherein the first push URL carries a random number. The system obtains a URL login request sent by the terminal, wherein the URL login request carries a second push URL, which is generated by the backend server based on the first push URL and the first SIM information corresponding to the terminal; The second push URL is verified based on the random number and the second SIM information corresponding to the push mobile phone number; If the second push URL is successfully verified, a login request success message is sent to the terminal; The second push URL includes a first login parameter generated based on the random number and the first SIM information; The push server is either a SIM card push platform or a USIM card push platform; the first push URL and the push content are used to generate a data SMS; the data SMS is obtained by encapsulating the push content and the first push URL according to a preset SMS data format, the preset SMS data format being a data structure used to transmit information between the SIM card or USIM card and the push server; the data SMS is sent by the push server to the backend server corresponding to the push mobile phone number, the backend server being the server of the SIM card or USIM card corresponding to the terminal.

2. The method according to claim 1, characterized in that, The second push URL is verified based on the random number and the second SIM information corresponding to the push mobile phone number, including: The first login parameters are verified based on the random number, and the first SIM information is verified based on the second SIM information.

3. The method according to claim 2, characterized in that, The step of verifying the first login parameter based on the random number includes: The random number is processed according to a preset algorithm and a preset key to obtain the second login parameters; If the second login parameter is the same as the first login parameter, then the first login parameter is determined to have been successfully verified; otherwise, the first login parameter is determined to have failed to be verified.

4. The method according to claim 2, characterized in that, The step of verifying the first SIM information based on the second SIM information includes: If the first SIM information is the same as the second SIM information, then the first SIM information verification is successful; otherwise, the first SIM information verification is unsuccessful.

5. A login authentication method, executed by a push server, characterized in that, include: Obtain a message push request, the message push request including a first push URL, a push mobile number, and push content, wherein the first push URL carries a random number; Generate a data SMS message based on the first push URL and the push content; The data SMS is sent to the backend server corresponding to the push mobile phone number; The backend server generates a second push URL based on the first push URL and the first SIM information corresponding to the terminal. The second push URL includes a first login parameter generated based on the random number and the first SIM information. The push server is a SIM card push platform or a USIM card push platform; the backend server is the server for the SIM card or USIM card corresponding to the terminal. The step of generating a data SMS message based on the first push URL and the push content includes: According to the preset SMS data format, the push content and the first push URL are encapsulated to obtain the data SMS; The preset SMS data format is a data structure used to transmit information between the SIM card or USIM card and the push server.

6. A login authentication method, executed by a backend server, characterized in that, include: The system retrieves a data SMS message sent by a push server. The data SMS message is generated based on a message push request. The data SMS message includes a first push URL and push content, wherein the first push URL carries a random number. The data SMS message is obtained by encapsulating the push content and the first push URL according to a preset SMS data format. The preset SMS data format is a data structure used for information exchange between the SIM card or USIM card and the push server. A second push URL is generated based on the random number and the first SIM information corresponding to the terminal sending the data SMS message; Send a browser launch command to the terminal, the browser launch command including the second pushed URL and the pushed content, so that the terminal sends a URL login request according to the browser launch command, the URL login request carrying the second pushed URL; The second push URL includes a first login parameter generated based on the random number and the first SIM information; The push server is a SIM card push platform or a USIM card push platform; the backend server is the server for the SIM card or USIM card corresponding to the terminal.

7. The method according to claim 6, characterized in that, Based on the random number and the first SIM information corresponding to the terminal sending the data SMS, a second push URL is generated, including: The random number is processed according to a preset algorithm and a preset key to obtain the first login parameters; A second push URL is generated based on the first login parameters, the first SIM information, and the first push URL.

8. The method according to claim 6, characterized in that, The network identifier field of the start browsing command includes the pushed content, and the Uniform Resource Locator (URL) field of the start browsing command includes the second pushed URL.

9. A login authentication device, applied to a business server, characterized in that, include: The first sending module is used to send a message push request to the push server. The message push request includes a first push URL, a push mobile number, and push content, wherein the first push URL carries a random number. The first acquisition module is used to acquire a URL login request sent by the terminal. The URL login request carries a second push URL, which is generated by the backend server based on the first push URL and the first SIM information corresponding to the terminal. The first verification module is used to verify the second push URL based on the random number and the second SIM information corresponding to the push mobile phone number; The first processing module is used to send a login request success message to the terminal if the second push URL is successfully verified. The second push URL includes a first login parameter generated based on the random number and the first SIM information; The push server is either a SIM card push platform or a USIM card push platform; the first push URL and the push content are used to generate a data SMS; the data SMS is obtained by encapsulating the push content and the first push URL according to a preset SMS data format, the preset SMS data format being a data structure used to transmit information between the SIM card or USIM card and the push server; the data SMS is sent by the push server to the backend server corresponding to the push mobile phone number, the backend server being the server of the SIM card or USIM card corresponding to the terminal.

10. The apparatus according to claim 9, characterized in that, The first verification module is used to verify the first login parameters based on the random number, and to verify the first SIM information based on the second SIM information.

11. The apparatus according to claim 10, characterized in that, The first verification module includes: The first processing submodule is used to process the random number according to a preset algorithm and a preset key to obtain the second login parameters; The first verification submodule is used to determine that the first login parameter verification is successful if the second login parameter is the same as the first login parameter; otherwise, it determines that the first login parameter verification fails.

12. The apparatus according to claim 10, characterized in that, The first verification module is used to determine that the first SIM information verification is successful if the first SIM information is the same as the second SIM information; otherwise, it determines that the first SIM information verification fails.

13. A login authentication device, applied to a push server, characterized in that, include: The second acquisition module is used to acquire a message push request, wherein the message push request includes a first push URL, a push mobile phone number, and push content, wherein the first push URL carries a random number; The first generation module is used to generate a data SMS message based on the first push URL and the push content; The second sending module is used to send the data SMS to the backend server corresponding to the push mobile phone number; The backend server generates a second push URL based on the first push URL and the first SIM information corresponding to the terminal. The second push URL includes a first login parameter generated based on the random number and the first SIM information. The push server is a SIM card push platform or a USIM card push platform; the backend server is the server for the SIM card or USIM card corresponding to the terminal. The first generation module is used to encapsulate the push content and the first push URL according to a preset SMS data format to obtain the data SMS. The preset SMS data format is a data structure used to transmit information between the SIM card or USIM card and the push server.

14. A login authentication device, applied to a backend server, characterized in that, include: The third acquisition module is used to acquire data SMS messages sent by the push server. The data SMS messages are generated based on message push requests. The data SMS messages include a first push URL and push content, wherein the first push URL carries a random number. The data SMS messages are obtained by encapsulating the push content and the first push URL according to a preset SMS data format. The preset SMS data format is a data structure used to transmit instructions or notifications between the SIM card or USIM card and the terminal. The second generation module is used to generate a second push URL based on the random number and the first SIM information corresponding to the terminal sending the data SMS message; The third sending module is used to send a browser launch command to the terminal. The browser launch command includes the second pushed URL and the pushed content, so that the terminal sends a URL login request according to the browser launch command. The URL login request carries the second pushed URL. The second push URL includes a first login parameter generated based on the random number and the first SIM information; The push server is a SIM card push platform or a USIM card push platform; the backend server is the server for the SIM card or USIM card corresponding to the terminal.

15. The apparatus according to claim 14, characterized in that, The second generation module includes: The second processing submodule is used to process the random number according to a preset algorithm and a preset key to obtain the first login parameters; The first generation submodule is used to generate a second push URL based on the first login parameters, the first SIM information, and the first push URL.

16. The apparatus according to claim 14, characterized in that, The network identifier field of the start browsing command includes the pushed content, and the Uniform Resource Locator (URL) field of the start browsing command includes the second pushed URL.

17. A login authentication device, applied to a business server, characterized in that, include: Transceiver and processor; The transceiver is used to send a message push request to the push server. The message push request includes a first push URL, a push mobile number, and push content. The first push URL carries a random number. The transceiver is also used to obtain a URL login request sent by the terminal. The URL login request carries a second push URL. The second push URL is generated by the backend server based on the first push URL and the first SIM information corresponding to the terminal. The processor is used to verify the second push URL based on the random number and the second SIM information corresponding to the push mobile phone number; if the second push URL is successfully verified, the processor sends a login request success message to the terminal through the transceiver. The second push URL includes a first login parameter generated based on the random number and the first SIM information; The push server is either a SIM card push platform or a USIM card push platform; the first push URL and the push content are used to generate a data SMS; the data SMS is obtained by encapsulating the push content and the first push URL according to a preset SMS data format, the preset SMS data format being a data structure used to transmit information between the SIM card or USIM card and the push server; the data SMS is sent by the push server to the backend server corresponding to the push mobile phone number, the backend server being the server of the SIM card or USIM card corresponding to the terminal.

18. A login authentication device, used in push server execution, characterized in that, include: Transceiver and processor; The transceiver is used to obtain a message push request, which includes a first push URL, a push mobile number, and push content, wherein the first push URL carries a random number; The processor is used to generate a data SMS message based on the first push URL and the push content; The transceiver is used to send the data SMS to the backend server corresponding to the push mobile phone number; The backend server generates a second push URL based on the first push URL and the first SIM information corresponding to the terminal. The second push URL includes a first login parameter generated based on the random number and the first SIM information. The push server is a SIM card push platform or a USIM card push platform; the backend server is the server for the SIM card or USIM card corresponding to the terminal. The step of generating a data SMS message based on the first push URL and the push content includes: According to the preset SMS data format, the push content and the first push URL are encapsulated to obtain the data SMS; The preset SMS data format is a data structure used to transmit information between the SIM card or USIM card and the push server.

19. A login authentication device, applied to a backend server, characterized in that, include: Transceiver and processor; The transceiver is used to obtain data SMS messages sent by the push server. The data SMS messages are generated based on message push requests. The data SMS messages include a first push URL and push content, wherein the first push URL carries a random number. The data SMS messages are obtained by encapsulating the push content and the first push URL according to a preset SMS data format. The preset SMS data format is a data structure used to transmit instructions or notifications between the SIM card or USIM card and the terminal. The processor is used to generate a second push URL based on the random number and the first SIM information corresponding to the terminal sending the data SMS message; The transceiver is used to send a browser launch command to the terminal. The browser launch command includes the second pushed URL and the pushed content, so that the terminal sends a URL login request according to the browser launch command. The URL login request carries the second pushed URL. The second push URL includes a first login parameter generated based on the random number and the first SIM information; The push server is a SIM card push platform or a USIM card push platform; the backend server is the server for the SIM card or USIM card corresponding to the terminal.

20. A login authentication device, comprising: A transceiver, a processor, a memory, and a program or instructions stored in the memory and executable on the processor; characterized in that, when the processor executes the program or instructions, it implements the steps of the login authentication method as described in any one of claims 1 to 4, or implements the steps of the login authentication method as described in claim 5, or implements the steps of the login authentication method as described in any one of claims 6 to 8.

21. A readable storage medium having a program or instructions stored thereon, characterized in that, When the program or instructions are executed by the processor, they implement the steps of the login authentication method as described in any one of claims 1 to 4, or implement the steps of the login authentication method as described in claim 5, or implement the steps of the login authentication method as described in any one of claims 6 to 8.

Images