A page information acquisition method, device and computer readable storage medium
By obtaining the service page address of the target server and using the network application function server to determine the identifier, access can be achieved without the user having to manually enter their account and password. This solves the problems of cumbersome operation and low security in existing technologies, and improves user experience and security.
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- CHINA MOBILE COMM LTD RES INST
- Filing Date
- 2021-09-06
- Publication Date
- 2026-05-29
AI Technical Summary
In scenarios with complex content display and interaction logic, existing technologies require users to manually enter information and passwords, resulting in cumbersome operation and low security.
By obtaining the service page address of the target server, a request to load the authentication open page is sent to the network application function server. The server is used to determine the identifier of the target server and receive the page information sent by it, thus enabling access without the user having to manually enter their account and password.
No modification to user terminal equipment is required, which improves operational efficiency and enhances security, preventing information from being intercepted.
Smart Images

Figure CN115758392B_ABST
Abstract
Description
Technical Field
[0001] This application relates to information acquisition technology in the field of communications, and more particularly to a method, device and computer-readable storage medium for acquiring page information. Background Technology
[0002] 5G messaging, building upon Rich Communication Suite (RCS), introduces Messaging as a Platform (MaaP) capabilities. This upgrades the interaction between third-party service providers and end-users from simple text- and link-based SMS notifications and confirmations to a comprehensive display and interaction capability based on audio, video, geolocation, rich media cards, floating menus, fixed menus, and link navigation. This transforms messaging products from a business endpoint (SMS notifications) to a business starting point (user interaction), enriching the application space and commercial value of industry messaging. However, it is primarily suitable for simple and quick interactive application scenarios. For scenarios requiring complex content display and interactive logic (such as detailed bill display, form filling, etc.), third-party services are needed to provide links within the sent messages to redirect to external Hypertext Markup Language (HTML) pages to complete the business logic processing. Furthermore, this requires users to manually enter user information and login passwords (or SMS verification codes) to confirm their identity; however, this process is cumbersome and reduces user efficiency and business experience.
[0003] To address the aforementioned issues, related technologies have proposed solutions for passwordless user authentication based on trusted platform authentication open identifiers or implementations based on the mapping between user IP addresses and user IDs. However, these solutions suffer from drawbacks such as requiring modifications to user terminal equipment or having insufficient security. Summary of the Invention
[0004] To address the aforementioned technical problems, this application aims to provide a method, device, and computer-readable storage medium for obtaining page information, thereby resolving issues in related technical solutions that require modification of user terminal devices or have low security.
[0005] The technical solution of this application is implemented as follows:
[0006] A method for obtaining page information, the method comprising:
[0007] Obtain the address of the service page of the target server;
[0008] If an access requirement is determined, a loading request for loading an authentication open page is sent to the network application function server; wherein the loading request carries the address of the service page; the loading request is used to instruct the network application function server to determine the first identifier of the target server based on the address of the service page;
[0009] Receive the first identifier sent by the network application function server;
[0010] Send an access request for accessing the service page to the target server corresponding to the first identifier;
[0011] Receive page information after successful login to the service page sent by the target server; wherein, the page information is generated by the target server based on the access request.
[0012] In the above scheme, obtaining the address of the target server's service page includes:
[0013] Receive push information sent by the target server; wherein the push information includes at least the address of the service page and the identifier of the application corresponding to the target server;
[0014] Accordingly, the step of sending a loading request for loading the authentication open page to the web application function server when it is determined that there is an access requirement includes:
[0015] Receive an access request for the push information;
[0016] After confirming successful authentication with the network application function server and core network device based on the access request, the loading request is sent to the network application function server.
[0017] In the above scheme, before sending the loading request to the network application function server after confirming successful authentication with the network application function server and the core network device based on the access request, the method further includes:
[0018] The network application function server and the core network device are authenticated based on the access request and the address of the authentication open page; wherein, the push information also includes the address of the authentication open page.
[0019] The method in the above scheme further includes:
[0020] The system receives an access token sent by the network application function server, which represents permission for the terminal corresponding to the second identifier to access the server; wherein the access token is generated by the network application function server after determining that the target server has the authorization to make an open authentication request, and the loading request carries the second identifier.
[0021] Accordingly, sending an access request for accessing the service page to the target server corresponding to the first identifier includes:
[0022] The access token is carried in the access request, and the access request is sent to the target server.
[0023] A method for obtaining page information, the method comprising:
[0024] The receiving terminal sends a loading request for loading the authentication access page; wherein the loading request carries the address of the service page;
[0025] Based on the loading request, determine whether the target server has the authorization to open authentication requests;
[0026] If it is determined that the target server has the authorization to request authentication, a first identifier of the target server is determined based on the address of the service page, and the first identifier is sent to the terminal;
[0027] The system receives an acquisition request from the target server for obtaining terminal information and sends the terminal information to the target server. The acquisition request is generated by the target server after receiving an access request from the terminal based on the first identifier for requesting access to a service page. The terminal information is used to enable the target server to generate page information after successful login of the service page.
[0028] In the above scheme, determining whether the target server has authentication open request permission based on the loading request includes:
[0029] Identify the target application in the network application function server;
[0030] Based on the loading request, the application identifier, and the target application identifier, it is determined whether the target server has the authorization to request authentication; wherein, the loading request also carries the application identifier.
[0031] In the above scheme, determining whether the target server has authentication open request permission based on the loading request, the application identifier, and the target application identifier includes:
[0032] The application identifier is decrypted based on the loading request to obtain the decrypted application identifier;
[0033] If the identifier of the decrypted application matches the identifier of the target application, it is determined that the target server has the authorization to grant an authentication request.
[0034] The method in the above scheme further includes:
[0035] If it is determined that the target server has the authorization to request authentication, an access token is generated that allows the terminal corresponding to the second identifier to access the service page.
[0036] Send the access token to the terminal.
[0037] A terminal, the terminal comprising: a first processor, a first memory, and a first communication bus;
[0038] The first communication bus is used to establish a communication connection between the first processor and the first memory;
[0039] The first processor is used to execute a page information acquisition program in the first memory to implement the steps of the page information acquisition method described above.
[0040] A network application function server, the network application function server comprising: a second processor, a second memory, and a second communication bus;
[0041] The second communication bus is used to establish a communication connection between the second processor and the second memory;
[0042] The second processor is used to execute a page information acquisition program in the second memory to implement the steps of the page information acquisition method described above.
[0043] A computer-readable storage medium storing one or more programs that can be executed by one or more processors to implement the steps of the page information acquisition method described above.
[0044] The page information acquisition method, device, and computer-readable storage medium provided in the embodiments of this application can obtain the address of the service page of the target server, and send a loading request for loading the authentication open page to the network application function server when it is determined that there is an access requirement. The loading request carries the address of the service page. The loading request is used to instruct the network application function server to determine the first identifier of the target server based on the address of the service page, receive the first identifier sent by the network application function server, send an access request for requesting access to the service page to the target server corresponding to the first identifier, and receive the page information of the service page after successful login sent by the target server. The page information is generated by the target server based on the access request. In this way, the user terminal does not need to have a separate environment, and there is no risk of information being intercepted by other users. By determining the first identifier of the target server that the terminal needs to access through the network application function server, the user can directly enter the page after successful login when accessing the target server based on the first identifier. This solves the problems of needing to modify user terminal equipment or low security in related technical solutions without requiring the user to manually enter an account and login password. Attached Figure Description
[0045] Figure 1 A flowchart illustrating a method for obtaining page information provided in an embodiment of this application;
[0046] Figure 2 A flowchart illustrating another method for obtaining page information provided in an embodiment of this application;
[0047] Figure 3 A flowchart illustrating yet another page information acquisition method provided in an embodiment of this application;
[0048] Figure 4 A schematic diagram of the structure of a terminal provided for an embodiment of this application;
[0049] Figure 5 This is a schematic diagram of the structure of a network application function server provided in an embodiment of this application. Detailed Implementation
[0050] The technical solutions in the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings.
[0051] It should be understood that the phrases "embodiments of this application" or "foreign embodiments" throughout the specification mean that a specific feature, structure, or characteristic related to an embodiment is included in at least one embodiment of this application. Therefore, "embodiments of this application" or "in the foreign embodiments" appearing throughout the specification do not necessarily refer to the same embodiment. Furthermore, these specific features, structures, or characteristics can be combined in any suitable manner in one or more embodiments. In the various embodiments of this application, the sequence numbers of the above-described processes do not imply a sequential order of execution; the execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of this application. The sequence numbers of the above-described embodiments are merely descriptive and do not represent the superiority or inferiority of the embodiments.
[0052] Unless otherwise specified, any step in the embodiments of this application performed by the electronic device may be executed by the processor of the electronic device. It is also worth noting that the embodiments of this application do not limit the order in which the electronic device performs the following steps. Furthermore, the methods used to process data in different embodiments may be the same or different methods. It should also be noted that any step in the embodiments of this application can be executed independently by the electronic device; that is, when the electronic device performs any step in the following embodiments, it may not depend on the execution of other steps.
[0053] It should be understood that the specific embodiments described herein are for illustrative purposes only and are not intended to limit the scope of this application.
[0054] This application provides a method for obtaining page information, which can be applied to a terminal. (Refer to...) Figure 1 As shown, the method may include the following steps:
[0055] Step 101: Obtain the address of the service page of the target server.
[0056] In this embodiment, the target server can be a third-party server corresponding to the application whose service page the user wants to access; that is, the third-party server provides services to the corresponding application. The address of the target server's service page can refer to the page address of the page the user wants to access. It should be noted that the address of the target server's service page can be obtained actively by the terminal from the target server, or the target server can actively send its own service page address to the terminal. Furthermore, the terminal in this embodiment can be a user equipment (UE) that supports 5G messaging communication.
[0057] Step 102: If it is determined that there is an access requirement, send a loading request to the web application function server to load the authentication open page.
[0058] The loading request carries the address of the service page; the loading request is used to instruct the network application function server to determine the first identifier of the target server based on the address of the service page.
[0059] In the embodiments of this application, determining whether there is an access requirement can be done by determining whether the UE has a need to access the target server; in one feasible implementation, it can be determined whether the UE has an access requirement by determining whether an access request triggered by the user is received on the UE. It should be noted that the Network Application Function (NAF) server can also be called an application server.
[0060] Step 103: Receive the first identifier sent by the network application function server.
[0061] In this embodiment of the application, after receiving a loading request sent by the terminal, the NAF can respond to the loading request and determine the identification information of the target server to be accessed by the UE based on the address of the service page carried in the loading request, thereby obtaining the first identifier; wherein, the first identifier is used to uniquely identify the target server.
[0062] Step 104: Send an access request to the target server corresponding to the first identifier to request access to the service page.
[0063] In this embodiment of the application, after receiving the first identifier, the UE can know which third-party server it wants to access is based on the first identifier; at this time, the UE can send an access request to the target server to access the service page.
[0064] Step 105: Receive the login success page information sent by the target server.
[0065] The page information after successful login is generated by the target server based on the access request.
[0066] In this embodiment, after receiving the access request sent by the UE, the target server obtains the UE's user information from the NAF, and then determines the page information of the service page corresponding to the user information after successful login based on the obtained user information. After that, the page information of successful login is returned to the UE. In other words, the UE's display screen can display the page information of successful login, so that the user can successfully log in to the service page and access it without entering an account and login password, which greatly improves the efficiency of operation.
[0067] The page information acquisition method provided in this application embodiment does not require the user terminal to have a separate environment, nor does it pose a risk of information being intercepted by other users. By determining the first identifier of the target server that the terminal needs to access through the network application function server, the terminal can directly enter the page after successful login when accessing the target server based on the first identifier. This solves the problems of requiring modification of user terminal equipment or low security in related technical solutions without requiring the user to manually enter their account and login password.
[0068] Based on the foregoing embodiments, this application provides a method for obtaining page information, which is applied to a web application function server, with reference to... Figure 2 As shown, the method may include the following steps:
[0069] Step 201: Receive the loading request sent by the terminal for loading the authentication open page.
[0070] The loading request includes the address of the service page.
[0071] In this embodiment, the loading request may be generated and sent when the terminal determines that it has an access requirement. It should be noted that all steps performed by the NAF in this application can be executed through the authentication open module within the NAF.
[0072] Step 202: Based on the loading request, determine whether the target server has the authorization to open authentication requests.
[0073] In this application, NAF, upon receiving a loading request, can respond to the loading request to determine whether the target server has the permission to grant an authentication request. It should be noted that the determination of whether the target server has the permission to grant authentication requests can be made in real time, thereby determining whether the execution of this access request can be permitted.
[0074] Step 203: If it is determined that the target server has the authorization to make authentication requests, determine the first identifier of the target server based on the address of the service page, and send the first identifier to the terminal.
[0075] In this embodiment of the application, when the NAF determines that the target server has the authorization to make an open authentication request, it means that the target server is legitimate and has the right to be accessed. At this time, the NAF can re-identify the third-party server based on the address of the service page, and then determine the first identifier of the target server.
[0076] Step 204: Receive the acquisition request sent by the target server to obtain terminal information, and send the terminal information to the target server.
[0077] The retrieval request is generated by the target server after receiving an access request sent by the terminal based on the first identifier to request access to the service page; the terminal's information is used to enable the target server to generate the page information after successful login of the service page.
[0078] In this embodiment of the application, after the NAF sends the first identifier of the redirected target server to the terminal, the terminal can send an access request to the target server; then, the target server can respond to the access request by sending an acquisition request to the NAF to obtain the terminal's information, so that after receiving the terminal's information, it can generate customized service page information after successful login based on the terminal's information.
[0079] It should be noted that the explanation of the same or corresponding steps in the embodiments of this application and other embodiments can be referred to the description in other embodiments, and will not be repeated here.
[0080] The page information acquisition method provided in this application embodiment does not require the user terminal to have a separate environment, nor does it pose a risk of information being intercepted by other users. By determining the first identifier of the target server that the terminal needs to access through the network application function server, the terminal can directly enter the page after successful login when accessing the target server based on the first identifier. This solves the problems of requiring modification of user terminal equipment or low security in related technical solutions without requiring the user to manually enter their account and login password.
[0081] Based on the foregoing embodiments, embodiments of this application provide a method for obtaining page information, referring to... Figure 3 As shown, the method may include the following steps:
[0082] Step 301: The terminal receives push information sent by the target server.
[0083] The push notification includes at least the address of the service page and the identifier of the application corresponding to the target server.
[0084] In this embodiment, the address of the service page and the identifier of the application corresponding to the target server can be included in the push notification as a link; furthermore, the address of the service page and the identifier of the application can exist as parameters in the link. The address of the service page can refer to the address used by the user when accessing the service page; in one feasible implementation, the address of the service page can refer to the Uniform Resource Locator (URL) of the service page.
[0085] Step 302: The terminal receives an access request for the push information.
[0086] In this embodiment of the application, the user can directly click the link to send an access request to the terminal.
[0087] Step 303: The terminal authenticates with the network application function server and core network equipment based on the access request and the address of the authentication open page.
[0088] The push notification also includes the address of the authentication open page.
[0089] In this embodiment, the address of the authentication open page can also be included in the push notification as a link. The terminal can respond to the access request and perform General Bootstrapping Architecture (GBA) authentication with the NAF and core network devices; the core network devices may include, but are not limited to, a Bootstrapping Server Function (BSF) and a Home Subscriber Server (HSS). It should be noted that the terminal can also determine whether the previous GBA authentication is still valid. If the previous GBA authentication is still valid, then the authentication can be considered successful. In one feasible implementation, the address of the authentication open page can refer to the URL of the authentication open page.
[0090] In addition, during the GBA authentication process, BSF will assign a temporary identity identifier to the terminal, which can be represented by B-TID.
[0091] Step 304: After confirming that the terminal has successfully authenticated with the network application function server and the core network device based on the access request, the terminal sends a loading request to the network application function server to load the authentication open page.
[0092] The loading request includes the address of the service page.
[0093] Step 305: The network application function server receives the loading request sent by the terminal.
[0094] Step 306: The network application function server determines the identifier of the target application in the network application function server.
[0095] In this embodiment of the application, the identifier of the target application may refer to the identifier of an application that has the authorization to make open requests for authentication, which is pre-stored in NAF.
[0096] Step 307: The network application function server determines whether the target server has the authorization to request authentication based on the loading request, the application identifier, and the target application identifier.
[0097] The loading request also carries the application's identifier.
[0098] In this embodiment of the application, NAF can respond to a loading request and use the application's identifier and the pre-stored identifier of the target application to determine whether the target server has the authorization to request authentication.
[0099] Step 307a: The network application function server decrypts the application identifier based on the loading request to obtain the decrypted application identifier.
[0100] It should be noted that the application identifier carried in the loading request can be encrypted; because NAF has already obtained the public and private key information in advance; at this time, the public and private key information can be used to decrypt the application identifier to obtain the decrypted application identifier.
[0101] Step 307b: If the identifier of the decrypted application matches the identifier of the target application, the network application function server determines that the target server has the authorization to make an authentication request.
[0102] In this embodiment of the application, NAF can compare the decrypted application identifier with the target application identifier. If the decrypted application identifier and the target application identifier match exactly, it means that the target server has the authorization to grant open authentication requests. The matching of the decrypted application identifier and the target application identifier can be achieved by comparing whether the decrypted application identifier and the target application identifier are the same.
[0103] It should be noted that when the terminal sends a record request to the NAF, it also carries the B-TID in the load request. The NAF can then use the B-TID to obtain the second identifier of the terminal corresponding to the terminal user from the BSF / HSS to confirm the identity of the terminal.
[0104] Step 308: If it is determined that the target server has the authorization to request authentication, the network application function server generates an access token that allows the terminal corresponding to the second identifier to access the service page, and determines the first identifier of the target server based on the address of the service page.
[0105] In this embodiment, when the NAF determines that the target server has the authorization to request authentication, it has already determined the identity of the terminal based on the terminal's second identifier. At this time, the NAF can assign an access identifier to the user corresponding to the second identifier. In one feasible implementation, the access identifier can refer to an access token. It should be noted that the first identifier can be obtained by the NAF after redirecting the URL of the service page to a third-party server.
[0106] Step 309: The network application function server sends the access tag and the first identifier to the terminal.
[0107] Step 310: The terminal receives an access token and a first identifier sent by the network application function server, which are used to indicate that the terminal corresponding to the second identifier is allowed to access.
[0108] The access token is generated by the network application function server after determining that the target server has the authorization to make open requests. The second identifier is carried in the loading request.
[0109] Step 311: The terminal carries the access token in the access request used to request access to the service page, and sends the access request to the target server corresponding to the first identifier.
[0110] Step 312: The network application function server receives the acquisition request sent by the target server for obtaining terminal information, and sends the terminal information to the target server.
[0111] The retrieval request is generated by the target server after receiving an access request sent by the terminal based on the first identifier to request access to the service page; the terminal's information is used to enable the target server to generate the page information after successful login of the service page.
[0112] In the embodiments of this application, the terminal information is used to uniquely identify the terminal; in one feasible implementation, the terminal information may include the user's number Multimedia Public Identity (IMPU), or it may be an authentication open unique identifier provided by the authentication open module for each terminal in a specific third-party service, which can be represented by openID.
[0113] It should be noted that when a third-party server requests terminal information from the authentication open module, the authentication open module can provide different terminal information according to different system configurations; that is, when the operator provides real-name access to the third-party server, the returned information is the user's IMPU; when the operator provides anonymous access to the third-party server, a unique open identifier OpenID is generated and returned for each user on a specific third-party server to achieve user privacy protection.
[0114] Step 313: The terminal receives the login success page information sent by the target server.
[0115] In this embodiment, the process by which the terminal obtains the page information after successful login does not pose a security risk of binding the user account through a fixed link or Internet Protocol (IP) address; furthermore, it does not require modification of existing terminals or support for new security zones to protect login information; the dynamic allocation and verification of user identity information when accessing pages on third-party servers can ensure the security of the data accessed by the user.
[0116] It should be noted that the explanation of the same or corresponding steps in the embodiments of this application and other embodiments can be referred to the description in other embodiments, and will not be repeated here.
[0117] The page information acquisition method provided in this application embodiment does not require the user terminal to have a separate environment, nor does it pose a risk of information being intercepted by other users. By determining the first identifier of the target server that the terminal needs to access through the network application function server, the terminal can directly enter the page after successful login when accessing the target server based on the first identifier. This solves the problems of requiring modification of user terminal equipment or low security in related technical solutions without requiring the user to manually enter their account and login password.
[0118] Based on the foregoing embodiments, embodiments of this application provide a terminal that can be applied to... Figure 1 and 3 In the corresponding embodiment, the method for obtaining page information is referred to Figure 4 As shown, the terminal 4 may include: a first processor 41, a first memory 42, and a first communication bus 43, wherein:
[0119] The first communication bus 43 is used to realize the communication connection between the first processor 41 and the first memory 42;
[0120] The first processor 41 is used to execute a page information fetching program in the first memory 42 to perform the following steps:
[0121] Obtain the address of the service page of the target server;
[0122] If an access requirement is determined, a load request for loading the authentication open page is sent to the network application function server; wherein, the load request carries the address of the service page; the load request is used to instruct the network application function server to determine the first identifier of the target server based on the address of the service page;
[0123] Receive the first identifier sent by the network application function server;
[0124] Send an access request to the target server corresponding to the first identifier to request access to the service page;
[0125] Receive the page information after successful login from the target server; the page information is generated by the target server based on the access request.
[0126] In other embodiments of this application, the first processor 41 is used to execute the page information acquisition program in the first memory 42 to obtain the address of the service page of the target server, so as to implement the following steps:
[0127] Receive push notifications from the target server; the push notifications include at least the address of the service page and the identifier of the application corresponding to the target server.
[0128] In other embodiments of this application, the first processor 41 is used to execute the page information acquisition program in the first memory 42, and when it is determined that there is an access requirement, sends a loading request for loading an authentication open page to the network application function server to implement the following steps:
[0129] Receive access requests for push notifications;
[0130] After confirming successful authentication with the network application function server and core network devices based on the access request, a loading request is sent to the network application function server.
[0131] In other embodiments of this application, the first processor 41 executing the page information fetching program in the first memory 42 may also perform the following steps:
[0132] The network application function server and core network equipment are authenticated based on the access request and the address of the authentication open page; the push information also includes the address of the authentication open page.
[0133] In other embodiments of this application, the first processor 41 executing the page information fetching program in the first memory 42 may also perform the following steps:
[0134] The system receives an access token sent by the network application function server, which represents permission for the terminal corresponding to the second identifier to access the server. The access token is generated by the network application function server after determining that the target server has the authorization to make an open authentication request, and the second identifier is carried in the loading request.
[0135] In other embodiments of this application, the first processor 41 is configured to execute the page information acquisition program in the first memory 42 to send an access request for accessing a service page to the target server corresponding to the first identifier, in order to implement the following steps:
[0136] Include the access token in the access request and send the access request to the target server.
[0137] It should be noted that a detailed description of the steps performed by the first processor can be found in [reference needed]. Figure 1 and 3 The page information acquisition method provided in the corresponding embodiment will not be described in detail here.
[0138] The terminal provided in this application embodiment does not require the user terminal to have a separate environment, nor is there any risk of information being intercepted by other users. By determining the first identifier of the target server that the terminal needs to access through the network application function server, it can directly enter the page after successful login when accessing the target server based on the first identifier. This solves the problem of requiring modification of user terminal equipment or low security in related technical solutions without requiring the user to manually enter an account and login password.
[0139] Based on the foregoing embodiments, embodiments of this application provide a network application function server, which can be applied to... Figures 2-3 In the corresponding embodiment, the method for obtaining page information is referred to Figure 5 As shown, the network application function server 5 may include: a second processor 51, a second memory 52, and a second communication bus 53, wherein:
[0140] The second communication bus 53 is used to realize the communication connection between the second processor 51 and the second memory 52;
[0141] The second processor 51 is used to execute the page information fetching program in the second memory 52 to perform the following steps:
[0142] The receiving terminal sends a loading request for loading the authentication access page; the loading request carries the address of the service page.
[0143] Based on the loading request, determine whether the target server has the authorization to open authentication requests;
[0144] If it is determined that the target server has the permission to make authentication requests, the first identifier of the target server is determined based on the address of the service page, and the first identifier is sent to the terminal;
[0145] The system receives an acquisition request from the target server to obtain terminal information and sends the terminal information to the target server. The acquisition request is generated by the target server after receiving an access request from the terminal based on a first identifier to request access to a service page. The terminal information is used to enable the target server to generate page information after successful login of the service page.
[0146] In other embodiments of this application, the second processor 51 is used to execute the page information retrieval program in the second memory 52 based on the loading request to determine whether the target server has authentication open request permission, so as to implement the following steps:
[0147] Identify the target application in the network application function server;
[0148] Based on the loading request, the application identifier, and the target application identifier, it is determined whether the target server has the authorization to open the authentication request; the loading request also carries the application identifier.
[0149] In other embodiments of this application, the second processor 51 is used to execute the page information acquisition program in the second memory 52 to determine whether the target server has authentication open request permission based on the loading request, the application identifier, and the target application identifier, and can implement the following steps:
[0150] The application's identifier is decrypted based on the loading request to obtain the decrypted application identifier;
[0151] If the identifier of the decrypted application matches the identifier of the target application, it is determined that the target server has the authorization to grant authentication requests.
[0152] In other embodiments of this application, the second processor 51 is used to execute a page information acquisition program in the second memory 52, and can also implement the following steps:
[0153] If it is determined that the target server has the authorization to request authentication, an access token is generated that allows the terminal corresponding to the second identifier to access the service page;
[0154] Send an access token to the terminal.
[0155] It should be noted that a detailed description of the steps performed by the second processor can be found in [reference needed]. Figures 2-3 The page information acquisition method provided in the corresponding embodiment will not be described in detail here.
[0156] The network application function server provided in this application embodiment does not require the user terminal to have a separate environment, nor does it pose a risk of information being intercepted by other users. By determining the first identifier of the target server that the terminal needs to access through the network application function server, the terminal can directly enter the page after successful login when accessing the target server based on the first identifier. This solves the problem of requiring modification of user terminal equipment or low security in related technical solutions without requiring the user to manually enter an account and login password.
[0157] Based on the foregoing embodiments, embodiments of this application provide a computer-readable storage medium storing one or more programs, which can be executed by one or more processors to implement... Figures 1-3 The corresponding embodiment provides the steps of the page information acquisition method.
[0158] Those skilled in the art will understand that embodiments of this application can be provided as methods, systems, or computer program products. Therefore, this application can take the form of hardware embodiments, software embodiments, or embodiments combining software and hardware aspects. Furthermore, this application can take the form of a computer program product implemented on one or more computer-usable storage media (including, but not limited to, disk storage and optical storage) containing computer-usable program code.
[0159] This application is described with reference to flowchart illustrations and / or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of this application. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, generate instructions for implementing the flowchart... Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.
[0160] These computer program instructions may also be stored in a computer-readable storage medium that can direct a computer or other programmable data processing device to function in a particular manner, such that the instructions stored in the computer-readable storage medium produce an article of manufacture including instruction means, which are implemented in a process Figure 1 One or more processes and / or boxes Figure 1 The function specified in one or more boxes.
[0161] These computer program instructions may also be loaded onto a computer or other programmable data processing equipment to cause a series of operational steps to be performed on the computer or other programmable equipment to produce a computer-implemented process, thereby providing instructions that execute on the computer or other programmable equipment for implementing the process. Figure 1 One or more processes and / or boxes Figure 1 The steps of the function specified in one or more boxes.
[0162] The above description is merely a preferred embodiment of this application and is not intended to limit the scope of protection of this application.
Claims
1. A method for obtaining page information, characterized in that, The method is applied to a terminal, and the method includes: Obtain the address of the service page of the target server; If an access requirement is determined, a loading request for loading an authentication open page is sent to the network application function server; wherein the loading request carries the address of the service page; the loading request is used to instruct the network application function server to determine the first identifier of the target server based on the address of the service page; Receive the first identifier sent by the network application function server; Send an access request for accessing the service page to the target server corresponding to the first identifier; The system receives page information indicating successful login to the service page sent by the target server; wherein the page information is determined by the target server based on the terminal's information; and the terminal's information is obtained by the target server from the network application function server based on the access request.
2. The method according to claim 1, characterized in that, The step of obtaining the address of the service page of the target server includes: Receive push information sent by the target server; wherein the push information includes at least the address of the service page and the identifier of the application corresponding to the target server; Accordingly, the step of sending a loading request for loading the authentication open page to the web application function server when it is determined that there is an access requirement includes: Receive an access request for the push information; After confirming successful authentication with the network application function server and core network device based on the access request, the loading request is sent to the network application function server.
3. The method according to claim 2, characterized in that, Before sending the loading request to the network application function server after confirming successful authentication with the network application function server and core network device based on the access request, the method further includes: The network application function server and the core network device are authenticated based on the access request and the address of the authentication open page; wherein, the push information also includes the address of the authentication open page.
4. The method according to claim 1, characterized in that, The method further includes: The system receives an access token sent by the network application function server, which represents permission for the terminal corresponding to the second identifier to access the server; wherein the access token is generated by the network application function server after determining that the target server has authentication open request permission, and the loading request carries the second identifier. Accordingly, sending an access request for accessing the service page to the target server corresponding to the first identifier includes: The access token is carried in the access request, and the access request is sent to the target server.
5. A method for obtaining page information, characterized in that, The method is applied to a network application function server, and the method includes: The receiving terminal sends a loading request for loading the authentication access page; wherein the loading request carries the address of the service page; Based on the loading request, determine whether the target server has the authorization to open authentication requests; If it is determined that the target server has the authorization to request authentication, a first identifier of the target server is determined based on the address of the service page, and the first identifier is sent to the terminal; The system receives an acquisition request from the target server for obtaining terminal information and sends the terminal information to the target server. The acquisition request is generated by the target server after receiving an access request from the terminal based on the first identifier for requesting access to a service page. The terminal information is used to enable the target server to generate page information after successful login of the service page.
6. The method according to claim 5, characterized in that, The step of determining whether the target server has authentication open request permission based on the loading request includes: Identify the target application in the network application function server; Based on the loading request, the application identifier, and the target application identifier, it is determined whether the target server has the authorization to request authentication; wherein, the loading request also carries the application identifier.
7. The method according to claim 6, characterized in that, The step of determining whether the target server has authentication open request permission based on the loading request, the application identifier, and the target application identifier includes: The application identifier is decrypted based on the loading request to obtain the decrypted application identifier; If the identifier of the decrypted application matches the identifier of the target application, it is determined that the target server has the authorization to grant an authentication request.
8. The method according to claim 6, characterized in that, The method further includes: If it is determined that the target server has the authorization to request authentication, an access token is generated that allows the terminal corresponding to the second identifier to access the service page. Send the access token to the terminal.
9. A terminal, characterized in that, The terminal includes: a first processor, a first memory, and a first communication bus; The first communication bus is used to establish a communication connection between the first processor and the first memory; The first processor is used to execute a page information acquisition program in the first memory to implement the steps of the page information acquisition method as described in any one of claims 1 to 4.
10. A network application function server, characterized in that, The network application function server includes: a second processor, a second memory, and a second communication bus; The second communication bus is used to establish a communication connection between the second processor and the second memory; The second processor is used to execute a page information acquisition program in the second memory to implement the steps of the page information acquisition method as described in any one of claims 5 to 8.
11. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores one or more programs, which can be executed by one or more processors to implement the steps of the page information acquisition method as described in any one of claims 1 to 4 or 5 to 8.