A business platform authentication method, device, electronic device and storage medium

Abstract

An embodiment of the present invention provides an authentication method, device, electronic device and storage medium for a service platform. The method includes: a SIM card receives a first authentication request issued by a security authentication platform; determines whether the key carried in the first authentication request matches the key preset in the SIM card; when the key carried in the first authentication request matches the key preset in the SIM card, sends an authentication result indicating that the authentication is successful to the target service platform; the target service platform authenticates the target user terminal in response to the authentication result indicating that the authentication is successful. Through the embodiment of the present invention, secure access to a third-party application system based on a security authentication platform is achieved, and secure interaction between the SIM card, security platform and authentication information is achieved based on the mode of the SIM card instruction set, thereby achieving authentication management of the third-party service platform and ensuring the security and uniqueness of the service platform key.

Description

Technical Field

[0001] The present invention relates to the technical field of authentication, and in particular to an authentication method, device, electronic device and storage medium for a service platform. Background Art

[0002] With the development of open strategies of various domestic and international platforms and the mobile Internet, the use of users' existing accounts and passwords on third-party platforms to quickly complete the login or registration of their own applications has become very widespread. It has the following advantages:

[0003] 1. Quick registration and login: Compared with entering an account and password to register and log in, third-party login is more convenient and secure. Once you bind your account for the first time, you can quickly log in by scanning the QR code or even by pressing a button.

[0004] 2. Reduce business logic costs: No need to consider various restrictions on usernames and passwords during registration, or requirements for nickname duplication. For some applications, third-party login can fully meet their needs, eliminating the need to design and develop a custom account system.

[0005] At the same time, third-party login systems also have the following risks:

[0006] For target web applications, data obtained from third-party accounts constitutes input, which generally requires filtering to prevent attacks such as XSS against the business platform. Furthermore, authorizing logins from third-party internet system accounts to secure financial services, such as bank payments, presents significant risks and potential security risks. Summary of the Invention

[0007] In view of the above problems, a method, device, electronic device and storage medium for authenticating a service platform are proposed to overcome or at least partially solve the above problems, including:

[0008] A service platform authentication method is applied to a target user terminal equipped with a subscriber identity module (SIM) card, the method comprising:

[0009] The SIM card receives a first authentication request issued by a security authentication platform; the first authentication request is generated by the security authentication platform after receiving a second authentication request from a target service platform, and the second authentication request is generated by the target service platform after receiving a third authentication request sent by the target user terminal and authenticated at the target service platform;

[0010] Determining whether the key carried in the first authentication request matches the key preset in the SIM card;

[0011] When the key carried in the first authentication request matches the key preset in the SIM card, an authentication result of authentication passing is sent to the target service platform; the target service platform authenticates the target user terminal in response to the authentication result of authentication passing.

[0012] Optionally, determining whether the key carried in the first authentication request matches a key preset in the SIM card includes:

[0013] Determining a validity period corresponding to the key carried in the first authentication request;

[0014] Determining whether the current time of the target user terminal matches the validity period;

[0015] When the current time of the target user terminal does not match the validity period, deleting the first authentication request and outputting a verification timeout reminder;

[0016] When the current time of the target user terminal matches the validity period, it is determined whether the key carried in the first authentication request matches the key preset in the SIM card.

[0017] Optionally, before sending the authentication result indicating that the authentication is successful to the target service platform, the method further includes:

[0018] A password input box pops up on the target user terminal;

[0019] Determining whether the target password entered in the password input box matches the password preset in the SIM card;

[0020] When the target password entered in the password input box matches the password preset in the SIM card, an authentication result indicating that the authentication is successful is sent to the target service platform;

[0021] When the target password input in the password input box does not match the password preset in the SIM card, the first authentication request is deleted and a verification error reminder is output.

[0022] Optionally, before sending the authentication result indicating that the authentication is successful to the target service platform, the method further includes:

[0023] Acquire target user information of a target user currently using the target user terminal, which is collected by the target user terminal;

[0024] Determining whether the target user information matches the user information preset in the SIM card;

[0025] When the target user information matches the user information preset in the SIM card, an authentication result indicating that the authentication is successful is sent to the target service platform;

[0026] When the target user information does not match the user information preset in the SIM card, the first authentication request is deleted and a verification error reminder is output.

[0027] An embodiment of the present invention further provides a service platform authentication method, which is applied to a target service platform. The method includes:

[0028] receiving a third authentication request for authentication on the target service platform sent by a target user terminal; wherein the target user terminal has a SIM card deployed therein;

[0029] generating a second authentication request based on the third authentication request, and sending the second authentication request to a security authentication platform; the security authentication platform is configured to generate a first authentication request based on the second authentication request, and send the first authentication request to the SIM card in the target user terminal for verification;

[0030] receiving an authentication result of authentication passing sent by the security authentication platform; the authentication result of authentication passing is sent by the SIM card to the security authentication platform after verifying the first authentication request;

[0031] In response to the authentication result of passing the authentication, the target user terminal is authenticated.

[0032] Optionally, the method further includes:

[0033] According to the preset polling rules, a polling query instruction for obtaining the authentication result is sent to the security authentication platform.

[0034] An embodiment of the present invention further provides a service platform authentication device, which is applied to a target user terminal equipped with a SIM card. The device includes:

[0035] a first receiving module configured to receive a first authentication request issued by a security authentication platform; the first authentication request being generated by the security authentication platform after receiving a second authentication request from a target service platform; and the second authentication request being generated by the target service platform after receiving a third authentication request sent by the target user terminal and authenticated at the target service platform;

[0036] a judgment module, configured to judge whether the key carried in the first authentication request matches the key preset in the SIM card;

[0037] The first sending module is used to send an authentication result of authentication success to the target service platform when the key carried in the first authentication request matches the key preset in the SIM card; the target service platform authenticates the target user terminal in response to the authentication result of authentication success.

[0038] Optionally, the judgment module is used to determine the validity period corresponding to the key carried in the first authentication request; judge whether the current time of the target user terminal matches the validity period; when the current time of the target user terminal does not match the validity period, delete the first authentication request and output a verification timeout reminder; when the current time of the target user terminal matches the validity period, judge whether the key carried in the first authentication request matches the key pre-set in the SIM card.

[0039] Optionally, the device further comprises:

[0040] The first verification module is configured to pop up a password input box on the target user terminal before sending an authentication result indicating a successful authentication to the target service platform; determine whether a target password entered in the password input box matches a password preset in the SIM card; when the target password entered in the password input box matches the password preset in the SIM card, send an authentication result indicating a successful authentication to the target service platform; and when the target password entered in the password input box does not match the password preset in the SIM card, delete the first authentication request and output a verification error reminder.

[0041] Optionally, the device further comprises:

[0042] The second verification module is configured to obtain target user information of a target user currently using the target user terminal, which is collected by the target user terminal, before sending an authentication result of authentication success to the target service platform; determine whether the target user information matches the user information preset in the SIM card; when the target user information matches the user information preset in the SIM card, send an authentication result of authentication success to the target service platform; when the target user information does not match the user information preset in the SIM card, delete the first authentication request and output a verification error prompt.

[0043] An embodiment of the present invention further provides a service platform authentication device, which is applied to a target service platform. The device includes:

[0044] The second receiving module is configured to receive a third authentication request sent by a target user terminal for authentication on the target service platform; the target user terminal is equipped with a SIM card;

[0045] a second sending module, configured to generate a second authentication request based on the third authentication request, and send the second authentication request to a security authentication platform; the security authentication platform is configured to generate a first authentication request based on the second authentication request, and send the first authentication request to the SIM card in the target user terminal for verification;

[0046] A third receiving module is configured to receive an authentication result of authentication passing sent by the security authentication platform; the authentication result of authentication passing is sent by the SIM card to the security authentication platform after verifying the first authentication request;

[0047] The authentication module is used to authenticate the target user terminal in response to the authentication result of passing the authentication.

[0048] Optionally, the device further comprises:

[0049] The polling module is used to send a polling query instruction for obtaining the authentication result to the security authentication platform according to the preset polling rules.

[0050] An embodiment of the present invention further provides an electronic device, comprising a processor, a memory, and a computer program stored in the memory and capable of running on the processor, wherein the computer program implements the above-mentioned service platform authentication method when executed by the processor.

[0051] An embodiment of the present invention further provides a computer-readable storage medium storing a computer program. When the computer program is executed by a processor, the computer program implements the above-mentioned authentication method for the service platform.

[0052] The embodiments of the present invention have the following advantages:

[0053] In an embodiment of the present invention, a SIM card receives a first authentication request issued by a security authentication platform; the first authentication request is generated by the security authentication platform after receiving a second authentication request from a target service platform, and the second authentication request is generated by the target service platform after receiving a third authentication request sent by a target user terminal for authentication on the target service platform; it is determined whether the key carried in the first authentication request matches the key preset in the SIM card; when the key carried in the first authentication request matches the key preset in the SIM card, an authentication result of passed authentication is sent to the target service platform; the target service platform authenticates the target user terminal in response to the authentication result of passed authentication. Through the embodiment of the present invention, secure access to a third-party application system based on a security authentication platform is achieved, and secure interaction between the SIM card, security platform and authentication information is achieved based on the mode of the SIM card instruction set, authentication management of the third-party service platform is achieved, and the security and uniqueness of the service platform key are ensured. BRIEF DESCRIPTION OF THE DRAWINGS

[0054] In order to more clearly illustrate the technical solution of the present invention, the following is a brief introduction to the drawings required for the description of the present invention. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0055] Figure 1 This is a flowchart of a method for authenticating a service platform according to an embodiment of the present invention;

[0056] Figure 2 This is a flowchart of another authentication method for a service platform according to an embodiment of the present invention;

[0057] Figure 3 is a schematic diagram of an application scenario of an embodiment of the present invention;

[0058] Figure 4 is a schematic diagram of a data interaction process according to an embodiment of the present invention;

[0059] Figure 5 This is a flowchart of another authentication method for a service platform according to an embodiment of the present invention;

[0060] Figure 6 This is a schematic diagram of the structure of an authentication device for a service platform according to an embodiment of the present invention;

[0061] Figure 7 It is a structural diagram of an authentication device for another service platform according to an embodiment of the present invention. DETAILED DESCRIPTION

[0062] To make the above-mentioned objects, features, and advantages of the present invention more clearly understood, the present invention is further described in detail below with reference to the accompanying drawings and specific embodiments. It should be understood that the embodiments described are only a portion of the embodiments of the present invention, not all of them. All other embodiments derived by persons of ordinary skill in the art based on the embodiments of the present invention without inventive effort are intended to fall within the scope of protection of the present invention.

[0063] In order to achieve secure access to third-party application systems, an embodiment of the present invention provides a service platform authentication method, which implements secure access to third-party application systems based on a security authentication platform, and implements secure interaction between the SIM card, security platform and authentication information based on the SIM (Subscriber Identity Module) card instruction set model, realizes the authentication management of the third-party service platform, and ensures the security and uniqueness of the service platform key.

[0064] Reference Figure 1, shows a flowchart of a service platform authentication method according to an embodiment of the present invention. The method can be applied to a target user terminal equipped with a SIM card and may include the following steps:

[0065] Step 101: The SIM card receives a first authentication request issued by a security authentication platform. The first authentication request is generated by the security authentication platform after receiving a second authentication request from a target service platform. The second authentication request is generated by the target service platform after receiving a third authentication request sent by a target user terminal and authenticated at the target service platform.

[0066] The target service platform may refer to the service platform that the user wants to use; the security authentication platform may refer to a platform pre-deployed for the SIM card-based authentication process, which may be filed in advance with relevant departments to ensure the security of user information.

[0067] In actual applications, when a user needs to authenticate on a target service platform, he or she can first perform an operation on the target user terminal and send a third authentication request to the target service platform through the target user terminal; wherein, the third authentication request can be used to request login / registration on the target service platform; the third authentication request can carry identification information of the SIM card deployed in the target user terminal.

[0068] After receiving the third authentication request, the target business platform can generate a second authentication request based on the third authentication request and send the second authentication request to the security authentication platform for authentication; wherein, the second authentication request can be used to request the security authentication platform to perform authentication to determine whether the user is allowed to log in / register on the target business platform; the second authentication request may also carry the identification information of the SIM card deployed in the target user terminal.

[0069] After receiving the second authentication request, the security authentication platform can send a first authentication request to the target user terminal deployed with the SIM card in response to the second authentication request; the first authentication request can be used to request the SIM card to perform authentication; wherein the first authentication request carries a key corresponding to the identification information of the SIM card deployed in the target user terminal.

[0070] Step 102: Determine whether the key carried in the first authentication request matches the key preset in the SIM card.

[0071] After receiving the first authentication request, the SIM card deployed in the target user terminal can determine whether the user can log in to the target service platform; or whether the user can register on the target service platform based on the first authentication request.

[0072] Specifically, the SIM card deployed in the target user terminal can determine whether the user can log in to the target service platform; or whether the user can register on the target service platform by determining whether the key carried in the first authentication request matches the key preset in the SIM card.

[0073] Step 103: When the key carried in the first authentication request matches the key preset in the SIM card, an authentication result indicating that the authentication is successful is sent to the target service platform; the target service platform authenticates the target user terminal in response to the authentication result indicating that the authentication is successful.

[0074] If the SIM card determines that the key carried in the first authentication request matches the key preset in the SIM card, it means that the user can log in to the target service platform; or, can register on the target service platform.

[0075] At this time, the SIM card can send an authentication result of passed authentication to the target service platform; the target service platform can authenticate the target user terminal in response to the authentication result of passed authentication; for example: it can log in in response to the user's login operation; or, it can register in response to the user's registration operation.

[0076] It's important to note that both login and registration operations on the target service platform are performed based on the target user's SIM card. Each user's SIM card is unique, ensuring the uniqueness of the user's account on the target service platform. Once registration is complete, subsequent logins to the target service platform can be performed directly using the SIM card, without the need for the user to enter their account password.

[0077] In an embodiment of the present invention, a SIM card receives a first authentication request issued by a security authentication platform; the first authentication request is generated by the security authentication platform after receiving a second authentication request from a target service platform, and the second authentication request is generated by the target service platform after receiving a third authentication request sent by a target user terminal for authentication on the target service platform; it is determined whether the key carried in the first authentication request matches the key preset in the SIM card; when the key carried in the first authentication request matches the key preset in the SIM card, an authentication result of passed authentication is sent to the target service platform; the target service platform authenticates the target user terminal in response to the authentication result of passed authentication. Through the embodiment of the present invention, secure access to a third-party application system based on a security authentication platform is achieved, and secure interaction between the SIM card, security platform and authentication information is achieved based on the mode of the SIM card instruction set, authentication management of the third-party service platform is achieved, and the security and uniqueness of the service platform key are ensured.

[0078] Reference Figure 2, which shows a flowchart of another service platform authentication method according to an embodiment of the present invention, which may include the following steps:

[0079] Step 201: The SIM card receives a first authentication request sent by a security authentication platform.

[0080] In actual applications, when a user needs to be authenticated on a target service platform, the user may first perform an operation on a target user terminal and then send a third authentication request to the target service platform via the target user terminal.

[0081] After receiving the third authentication request, the target service platform may generate a second authentication request based on the third authentication request, and send the second authentication request to the security authentication platform for authentication.

[0082] After receiving the second authentication request, the security authentication platform may send a first authentication request to the target user terminal deployed with the SIM card in response to the second authentication request.

[0083] Step 202: Determine the validity period corresponding to the key carried in the first authentication request.

[0084] In practical applications, in order to further improve the security of authentication, a validity period may be set for each key; after receiving the first authentication request, the SIM card may first determine the validity period corresponding to the key carried in the first authentication request.

[0085] As an example, the validity period may refer to a time period, such as 12:00:00 on December 1, 2022 to 12:05:00 on December 1, 2022. This embodiment of the present invention does not limit this.

[0086] Step 203: Determine whether the current time of the target user terminal matches the validity period.

[0087] When determining the validity period corresponding to the key carried in the first authentication request, the SIM card may also determine the current time of the target user terminal. The current time may be the current system time of the target user terminal, which is not limited in this embodiment of the present invention.

[0088] After determining the validity period corresponding to the key carried in the first authentication request and the current time of the target user terminal, it can be determined whether the current time matches the validity period.

[0089] For example, if the validity period is 12:00:00 on December 1, 2022, to 12:05:00 on December 1, 2022, and the current time is 12:06:00 on December 1, 2022, it can be determined that the current time does not match the validity period.

[0090] Step 204: When the current time of the target user terminal does not match the validity period, the first authentication request is deleted and a verification timeout reminder is output.

[0091] In actual application, if it is determined that the current time of the target user terminal does not match the validity period, it may indicate that the first authentication request is illegal; at this time, the SIM card can delete the first authentication request and output a verification timeout reminder to inform the user of the current problem.

[0092] Step 205: When the current time of the target user terminal matches the validity period, it is determined whether the key carried in the first authentication request matches the key preset in the SIM card.

[0093] If the current time of the target user terminal matches the validity period, the first authentication request is considered legitimate, and subsequent steps can be performed. Specifically, the SIM card deployed in the target user terminal can determine whether the key carried in the first authentication request matches the key pre-set in the SIM card to determine whether the user can log in to the target service platform or register on the target service platform.

[0094] Step 206: When the key carried in the first authentication request matches the key preset in the SIM card, an authentication result indicating that the authentication is successful is sent to the target service platform.

[0095] If the SIM card determines that the key carried in the first authentication request matches the key preset in the SIM card, it means that the user can log in to the target service platform; or, can register on the target service platform.

[0096] At this time, the SIM card can send an authentication result of passed authentication to the target service platform; the target service platform can authenticate the target user terminal in response to the authentication result of passed authentication; for example: it can log in in response to the user's login operation; or, it can register in response to the user's registration operation.

[0097] In one embodiment of the present invention, before sending the authentication result indicating that the authentication is successful to the target service platform, the method further includes:

[0098] A password input box pops up on the target user terminal; a determination is made as to whether the target password entered in the password input box matches the password preset in the SIM card; when the target password entered in the password input box matches the password preset in the SIM card, an authentication result indicating authentication success is sent to the target service platform; when the target password entered in the password input box does not match the password preset in the SIM card, the first authentication request is deleted and a verification error reminder is output.

[0099] In actual applications, in order to further improve the security of authentication, a secondary verification can be performed before sending the authentication result of authentication success to the target business platform.

[0100] Specifically, the SIM card deployed in the target user terminal can pop up a password input box on the target user terminal; the password input box can be triggered to pop up by the SIM card through a SIM card application.

[0101] When the password input box pops up on the target user terminal, the user can enter the target password in the password input box; the target password is a pre-set password used for SIM card verification.

[0102] After receiving the target password input in the password input box, the SIM card can match the target password with the password preset in the SIM card.

[0103] When the target password matches the password preset in the SIM card, it can indicate that the secondary verification is passed; at this time, the step of sending the authentication result of the authentication passing to the target service platform can be continued.

[0104] If the target password does not match the password preset in the SIM card, it may indicate that the secondary verification has failed. At this time, the first authentication request may be deleted and a verification error reminder may be output, for example: the password is entered incorrectly. This embodiment of the present invention does not impose any restrictions on this.

[0105] As an example, the target password may change over time, or may be a fixed password, which is not limited in the embodiment of the present invention.

[0106] In another embodiment of the present invention, before sending the authentication result indicating that the authentication is successful to the target service platform, the method further includes:

[0107] Obtain target user information of the target user currently using the target user terminal, which is collected by the target user terminal; determine whether the target user information matches the user information preset in the SIM card; when the target user information matches the user information preset in the SIM card, send an authentication result indicating that the authentication is passed to the target service platform; when the target user information does not match the user information preset in the SIM card, delete the first authentication request and output a verification error reminder.

[0108] In actual applications, when performing secondary verification, you can also use the following methods:

[0109] First, the target user information of the target user currently using the target user terminal, which is collected by the target user terminal, may be obtained, for example, facial information, voiceprint information, and other information that can uniquely represent the user's identity.

[0110] Then, the SIM card can determine whether the target user information matches the user information preset in the SIM card. If the target user information matches the user information preset in the SIM card, it can indicate that the secondary verification has passed. At this point, the step of sending the authentication result of the authentication to the target service platform can be continued.

[0111] If the target user information does not match the user information preset in the SIM card, it may indicate that the secondary verification has failed. At this time, the first authentication request may be deleted and a verification error reminder may be output, for example: identity recognition error. This embodiment of the present invention does not impose any restrictions on this.

[0112] like Figure 3 , which shows a schematic diagram of an application scenario of an embodiment of the present invention:

[0113] When a user needs to authenticate on a third-party business platform, the third-party business platform will send an authentication request to the security authentication platform; after receiving the authentication request, the security authentication platform will send an authentication request to the user terminal; at this time, the SIM card will trigger the card application pop-up window and display a password input box.

[0114] The SIM card can be verified according to the password entered by the user, and after the verification is passed, it sends an authentication result of passing the authentication to the security authentication platform; at this time, the security authentication platform can forward the authentication result of passing the authentication to the third-party business platform.

[0115] like Figure 4 , which shows a schematic diagram of a data interaction process according to an embodiment of the present invention:

[0116] (1) The user initiates a login to a third-party business platform and triggers the security authentication platform to perform security authentication; at this time, the user can enter a mobile phone number to request authentication.

[0117] (2) The security authentication platform sends an authentication request to the SIM card.

[0118] (3) The SIM card command triggers the card application pop-up window, and the mobile phone automatically loads the card pop-up window application and allows the user to enter the verification password through the card pop-up window; during the pop-up window process, the user can be prompted to perform operations.

[0119] (4) The SIM card obtains the authentication password through the card pop-up window and sends it to the SIM card through a command for security command verification.

[0120] (5) After completing the instruction verification, submit the authentication result to the security authentication platform.

[0121] (6) The third-party application system polls the security authentication platform for authentication results and completes system login after obtaining the authentication results; after completing the login, the user can be notified of the authentication results.

[0122] In an embodiment of the present invention, a SIM card receives a first authentication request issued by a security authentication platform; determines the validity period corresponding to the key carried in the first authentication request; determines whether the current time of the target user terminal matches the validity period; when the current time of the target user terminal does not match the validity period, deletes the first authentication request and outputs a verification timeout reminder; when the current time of the target user terminal matches the validity period, determines whether the key carried in the first authentication request matches the key pre-set in the SIM card; when the key carried in the first authentication request matches the key pre-set in the SIM card, sends an authentication result indicating that the authentication is passed to the target service platform. Through the embodiment of the present invention, secure access to a third-party application system based on a security authentication platform is achieved, and secure interaction between the SIM card, the security platform, and authentication information is achieved based on the mode of the SIM card instruction set, authentication management of the third-party service platform is achieved, and the security and uniqueness of the service platform key are ensured.

[0123] And the security authentication management mode of completing password input and SIM card security verification through the card application pop-up window ensures the security and uniqueness of the business platform key.

[0124] Reference Figure 5 , shows a flowchart of another service platform authentication method according to an embodiment of the present invention. The method can be applied to a target service platform and may include the following steps:

[0125] Step 501: Receive a third authentication request for authentication on a target service platform sent by a target user terminal; the target user terminal is equipped with a SIM card.

[0126] In actual applications, when a user needs to be authenticated on a target service platform, the user may first perform an operation on a target user terminal and then send a third authentication request to the target service platform via the target user terminal.

[0127] Step 502: Generate a second authentication request based on the third authentication request, and send the second authentication request to a security authentication platform; the security authentication platform is used to generate a first authentication request based on the second authentication request, and send the first authentication request to the SIM card in the target user terminal for verification.

[0128] After receiving the third authentication request, the target service platform may generate a second authentication request based on the third authentication request, and send the second authentication request to the security authentication platform for authentication.

[0129] After receiving the second authentication request, the security authentication platform may send a first authentication request to the target user terminal deployed with the SIM card in response to the second authentication request.

[0130] Step 503: Receive the authentication result of authentication passed sent by the security authentication platform; the authentication result of authentication passed is sent by the SIM card to the security authentication platform after verifying the first authentication request.

[0131] After receiving the first authentication request, the SIM card deployed in the target user terminal can determine whether the user can log in to the target service platform; or whether the user can register on the target service platform based on the first authentication request.

[0132] If the SIM card determines that the key carried in the first authentication request matches the key preset in the SIM card, it means that the user can log in to the target service platform; or, can register on the target service platform.

[0133] At this time, the SIM card can send an authentication result indicating that the authentication is passed to the target service platform.

[0134] In one embodiment of the present invention, the authentication result of passing the authentication can be obtained by:

[0135] According to the preset polling rules, a polling query instruction is sent to the security authentication platform to obtain the authentication result.

[0136] In actual applications, the target business platform may send a polling query instruction to obtain the authentication result to the security authentication platform according to a preset polling rule; for example, the target business platform may send a polling query instruction to obtain the authentication result to the security authentication platform according to a preset time interval.

[0137] After receiving the polling query instruction, the security authentication platform can first check whether the authentication result has been received before; if the authentication result has been received, the authentication result can be returned to the target business platform; the authentication result can include the authentication result of passing the authentication, and can also include the authentication result of failing the authentication.

[0138] Step 504: In response to the authentication result of passed authentication, the target user terminal is authenticated.

[0139] The target service platform may authenticate the target user terminal in response to the authentication result of passing the authentication; for example, it may perform login in response to the user's login operation; or, it may perform registration in response to the user's registration operation.

[0140] In an embodiment of the present invention, a third authentication request sent by a target user terminal for authentication on a target service platform is received; a SIM card is deployed in the target user terminal; a second authentication request is generated based on the third authentication request, and the second authentication request is sent to a security authentication platform; the security authentication platform is used to generate a first authentication request based on the second authentication request, and send the first authentication request to the SIM card in the target user terminal for verification; an authentication result of passing the authentication is received from the security authentication platform; the authentication result of passing the authentication is sent by the SIM card to the security authentication platform after the first authentication request is verified; in response to the authentication result of passing the authentication, the target user terminal is authenticated. Through the embodiment of the present invention, secure access to a third-party application system based on the security authentication platform is realized, and secure interaction between the SIM card, security platform and authentication information is realized based on the mode of the SIM card instruction set, authentication management of the third-party service platform is realized, and the security and uniqueness of the service platform key are ensured.

[0141] It should be noted that for the sake of simplicity, the method embodiments are described as a series of actions. However, those skilled in the art should be aware that the embodiments of the present invention are not limited by the order of the actions described, because according to the embodiments of the present invention, certain steps can be performed in other orders or simultaneously. Secondly, those skilled in the art should also be aware that the embodiments described in this specification are all preferred embodiments, and the actions involved are not necessarily required by the embodiments of the present invention.

[0142] Reference Figure 6 , which shows a schematic diagram of the structure of an authentication device for a service platform according to an embodiment of the present invention, and is applied to a target user terminal equipped with a SIM card, and may include the following modules:

[0143] A first receiving module 601 is configured to receive a first authentication request issued by a security authentication platform; the first authentication request is generated by the security authentication platform after receiving a second authentication request from a target service platform; the second authentication request is generated by the target service platform after receiving a third authentication request sent by a target user terminal and authenticated at the target service platform;

[0144] The judging module 602 is configured to judge whether the key carried in the first authentication request matches the key preset in the SIM card;

[0145] The first sending module 603 is used to send an authentication result of authentication success to the target service platform when the key carried in the first authentication request matches the key preset in the SIM card; the target service platform authenticates the target user terminal in response to the authentication result of authentication success.

[0146] In an optional embodiment of the present invention, the judgment module 602 is used to determine the validity period corresponding to the key carried in the first authentication request; judge whether the current time of the target user terminal matches the validity period; when the current time of the target user terminal does not match the validity period, delete the first authentication request and output a verification timeout reminder; when the current time of the target user terminal matches the validity period, judge whether the key carried in the first authentication request matches the key pre-set in the SIM card.

[0147] In an optional embodiment of the present invention, the device further comprises:

[0148] The first verification module is used to pop up a password input box on the target user terminal before sending the authentication result of authentication success to the target service platform; determine whether the target password entered in the password input box matches the password preset in the SIM card; when the target password entered in the password input box matches the password preset in the SIM card, send the authentication result of authentication success to the target service platform; when the target password entered in the password input box does not match the password preset in the SIM card, delete the first authentication request and output a verification error reminder.

[0149] In an optional embodiment of the present invention, the device further comprises:

[0150] The second verification module is used to obtain target user information of the target user currently using the target user terminal, which is collected by the target user terminal, before sending the authentication result of authentication success to the target service platform; determine whether the target user information matches the user information preset in the SIM card; when the target user information matches the user information preset in the SIM card, send the authentication result of authentication success to the target service platform; when the target user information does not match the user information preset in the SIM card, delete the first authentication request and output a verification error reminder.

[0151] In an embodiment of the present invention, a SIM card receives a first authentication request issued by a security authentication platform; the first authentication request is generated by the security authentication platform after receiving a second authentication request from a target service platform, and the second authentication request is generated by the target service platform after receiving a third authentication request sent by a target user terminal for authentication on the target service platform; it is determined whether the key carried in the first authentication request matches the key preset in the SIM card; when the key carried in the first authentication request matches the key preset in the SIM card, an authentication result of passed authentication is sent to the target service platform; the target service platform authenticates the target user terminal in response to the authentication result of passed authentication. Through the embodiment of the present invention, secure access to a third-party application system based on a security authentication platform is achieved, and secure interaction between the SIM card, security platform and authentication information is achieved based on the mode of the SIM card instruction set, authentication management of the third-party service platform is achieved, and the security and uniqueness of the service platform key are ensured.

[0152] Reference Figure 7 , shows a schematic diagram of the structure of another service platform authentication device according to an embodiment of the present invention, which is applied to a target service platform and may include the following modules:

[0153] The second receiving module 701 is configured to receive a third authentication request sent by a target user terminal for authentication on a target service platform; the target user terminal is equipped with a SIM card;

[0154] The second sending module 702 is configured to generate a second authentication request based on the third authentication request and send the second authentication request to a security authentication platform; the security authentication platform is configured to generate a first authentication request based on the second authentication request and send the first authentication request to the SIM card in the target user terminal for verification;

[0155] The third receiving module 703 is used to receive the authentication result of the authentication passed sent by the security authentication platform; the authentication result of the authentication passed is sent by the SIM card to the security authentication platform after verifying the first authentication request;

[0156] The authentication module 704 is configured to authenticate the target user terminal in response to an authentication result indicating that the authentication is successful.

[0157] In an optional embodiment of the present invention, the device further comprises:

[0158] The polling module is used to send a polling query instruction to the security authentication platform to obtain the authentication result according to the preset polling rules.

[0159] In an embodiment of the present invention, a SIM card receives a first authentication request issued by a security authentication platform; the first authentication request is generated by the security authentication platform after receiving a second authentication request from a target service platform, and the second authentication request is generated by the target service platform after receiving a third authentication request sent by a target user terminal for authentication on the target service platform; it is determined whether the key carried in the first authentication request matches the key preset in the SIM card; when the key carried in the first authentication request matches the key preset in the SIM card, an authentication result of passed authentication is sent to the target service platform; the target service platform authenticates the target user terminal in response to the authentication result of passed authentication. Through the embodiment of the present invention, secure access to a third-party application system based on a security authentication platform is achieved, and secure interaction between the SIM card, security platform and authentication information is achieved based on the mode of the SIM card instruction set, authentication management of the third-party service platform is achieved, and the security and uniqueness of the service platform key are ensured.

[0160] An embodiment of the present invention further provides an electronic device, including a processor, a memory, and a computer program stored in the memory and capable of running on the processor. When the computer program is executed by the processor, the above-mentioned service platform authentication method is implemented.

[0161] An embodiment of the present invention further provides a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the above-mentioned service platform authentication method is implemented.

[0162] As for the device embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.

[0163] The various embodiments in this specification are described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the various embodiments can be referenced to each other.

[0164] Those skilled in the art will appreciate that embodiments of the present invention may be provided as methods, apparatus, or computer program products. Thus, embodiments of the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Furthermore, embodiments of the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to magnetic disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0165] The embodiments of the present invention are described with reference to the flowcharts and / or block diagrams of the methods, terminal devices (systems), and computer program products according to the embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of the processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing terminal device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing terminal device generate instructions for implementing the process in the flowchart and / or block diagram. Figure 1 a process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0166] These computer program instructions may also be stored in a computer readable memory that can direct a computer or other programmable data processing terminal device to operate in a specific manner, so that the instructions stored in the computer readable memory produce a manufactured product including an instruction device, which implements the process Figure 1 a process or multiple processes and / or boxes Figure 1 The function specified in one or more boxes.

[0167] These computer program instructions can also be loaded onto a computer or other programmable data processing terminal device so that a series of operating steps are executed on the computer or other programmable terminal device to produce a computer-implemented process, thereby providing instructions for executing on the computer or other programmable terminal device to implement the process. Figure 1 a process or multiple processes and / or boxes Figure 1 A step that specifies a function in one or more boxes.

[0168] Although the preferred embodiments of the present invention have been described, those skilled in the art may make additional changes and modifications to these embodiments once they become aware of the basic creative concepts. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and all changes and modifications that fall within the scope of the embodiments of the present invention.

[0169] Finally, it should be noted that, in this document, relational terms such as first and second, etc., are used only to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any actual relationship or order between these entities or operations. Moreover, the terms "comprises," "comprising," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or terminal device that includes a series of elements includes not only those elements, but also other elements not explicitly listed, or elements inherent to such process, method, article, or terminal device. In the absence of further limitations, an element defined by the phrase "comprising a ..." does not exclude the presence of additional identical elements in the process, method, article, or terminal device that includes the element.

[0170] The above is a detailed introduction to the authentication method, device, electronic device and storage medium of a business platform provided. Specific examples are used in this article to illustrate the principles and implementation methods of the present invention. The description of the above embodiments is only used to help understand the method of the present invention and its core idea; at the same time, for general technical personnel in this field, based on the ideas of the present invention, there will be changes in the specific implementation methods and application scope. In summary, the content of this specification should not be understood as a limitation on the present invention.

Claims

1. A service platform authentication method, characterized in that: Applied to a target user terminal deployed with a subscriber identity module (SIM) card, the method includes: The SIM card receives a first authentication request issued by a security authentication platform; the first authentication request is generated by the security authentication platform after receiving a second authentication request from a target service platform, and the second authentication request is generated by the target service platform after receiving a third authentication request sent by the target user terminal and authenticated at the target service platform; Determining whether the key carried in the first authentication request matches the key preset in the SIM card; When the key carried in the first authentication request matches the key preset in the SIM card, an authentication result of authentication passing is sent to the target service platform; the target service platform authenticates the target user terminal in response to the authentication result of authentication passing.

2. The method according to claim 1, characterized in that The determining whether the key carried in the first authentication request matches the key preset in the SIM card includes: Determining a validity period corresponding to the key carried in the first authentication request; Determining whether the current time of the target user terminal matches the validity period; When the current time of the target user terminal does not match the validity period, deleting the first authentication request and outputting a verification timeout reminder; When the current time of the target user terminal matches the validity period, it is determined whether the key carried in the first authentication request matches the key preset in the SIM card.

3. The method according to claim 1, characterized in that Before sending the authentication result of passing the authentication to the target service platform, the method further includes: A password input box pops up on the target user terminal; Determining whether the target password entered in the password input box matches the password preset in the SIM card; When the target password entered in the password input box matches the password preset in the SIM card, an authentication result indicating that the authentication is successful is sent to the target service platform; When the target password input in the password input box does not match the password preset in the SIM card, the first authentication request is deleted and a verification error reminder is output.

4. The method according to claim 1, wherein Before sending the authentication result of passing the authentication to the target service platform, the method further includes: Acquire target user information of a target user currently using the target user terminal, which is collected by the target user terminal; Determining whether the target user information matches the user information preset in the SIM card; When the target user information matches the user information preset in the SIM card, an authentication result indicating that the authentication is successful is sent to the target service platform; When the target user information does not match the user information preset in the SIM card, the first authentication request is deleted and a verification error reminder is output.

5. A service platform authentication method, characterized in that: Applied to the target business platform, the method includes: receiving a third authentication request for authentication on the target service platform sent by a target user terminal; wherein the target user terminal has a SIM card deployed therein; generating a second authentication request based on the third authentication request, and sending the second authentication request to a security authentication platform; the security authentication platform is configured to generate a first authentication request based on the second authentication request, and send the first authentication request to the SIM card in the target user terminal for verification; receiving an authentication result of authentication passing sent by the security authentication platform; the authentication result of authentication passing is sent by the SIM card to the security authentication platform after verifying the first authentication request; In response to the authentication result of passing the authentication, the target user terminal is authenticated.

6. The method according to claim 5, characterized in that The method further comprises: According to the preset polling rules, a polling query instruction for obtaining the authentication result is sent to the security authentication platform.

7. An authentication device for a service platform, characterized in that: Applied to a target user terminal deployed with a SIM card, the device includes: a first receiving module configured to receive a first authentication request issued by a security authentication platform; the first authentication request being generated by the security authentication platform after receiving a second authentication request from a target service platform; and the second authentication request being generated by the target service platform after receiving a third authentication request sent by the target user terminal and authenticated at the target service platform; a judgment module, configured to judge whether the key carried in the first authentication request matches the key preset in the SIM card; The first sending module is used to send an authentication result of authentication success to the target service platform when the key carried in the first authentication request matches the key preset in the SIM card; the target service platform authenticates the target user terminal in response to the authentication result of authentication success.

8. An authentication device for a service platform, characterized in that: Applied to a target service platform, the device includes: The second receiving module is configured to receive a third authentication request sent by a target user terminal for authentication on the target service platform; the target user terminal is equipped with a SIM card; a second sending module, configured to generate a second authentication request based on the third authentication request, and send the second authentication request to a security authentication platform; the security authentication platform is configured to generate a first authentication request based on the second authentication request, and send the first authentication request to the SIM card in the target user terminal for verification; A third receiving module is configured to receive an authentication result of authentication passing sent by the security authentication platform; the authentication result of authentication passing is sent by the SIM card to the security authentication platform after verifying the first authentication request; The authentication module is used to authenticate the target user terminal in response to the authentication result of passing the authentication.

9. An electronic device, characterized in that: The method comprises a processor, a memory, and a computer program stored in the memory and capable of running on the processor, wherein when the computer program is executed by the processor, the method for authenticating the service platform according to any one of claims 1 to 6 is implemented.

10. A computer-readable storage medium, characterized in that The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the authentication method of the service platform according to any one of claims 1 to 6 is implemented.

Images