Information verification method, information processing method and related devices

Abstract

Embodiments of the present application disclose an information verification method, an information processing method and related devices, which are used for verifying whether user information is legal. The information verification method comprises the following steps: receiving first encrypted information sent by a client; decrypting the first encrypted information based on a preset algorithm to obtain user information; calling a preset database to determine whether information consistent with the user information exists in the preset database; if the information consistent with the user information does not exist in the preset database, sending a verification failure prompt information to the client; and if the information consistent with the user information exists in the preset database, sending executable program information to the client to start an executable program of the client.

Description

TECHNICAL FIELD

[0001] Embodiments of the present application relate to the field of information security, and in particular to an information verification method, an information processing method and related devices. BACKGROUND

[0002] Web application is one of the most important application types in the market, which can be directly run through the browser of a computer, or run through the browser control in a mobile business application, as long as the device and operating system support the running of the browser. The Web application is the first choice for developing cross-platform applications.

[0003] The traditional desktop application runs completely dependent on the native operating system, while the Web application runs based on the client browser and the server Web server, which belongs to the B / S running architecture. In a real scenario, this architecture is usually deployed in the Internet environment. When a user needs to operate a certain function of the Web application, an HTTP(s) GET request is sent to the Web server to obtain the corresponding function; after the user operates a certain function, an HTTP(s) POST request is sent to the Web server to submit the content.

[0004] Since the Web application runs in the browser, it also needs to follow the security specifications of the browser, which includes the default prohibition of starting the client executable program. The reason for formulating such security specifications is that the Web application is an Internet application, which communicates with the Web server through the HTTP(s) protocol, and is vulnerable to third-party malicious attacks on the client and the server. However, this also eliminates the need for the Web application to access client resources, which is reasonable in many application scenarios.

[0005] The existing scheme for starting the client executable program process of the Web application in the browser is to use the client agent startup program technology. After the user issues a user instruction, the browser will send the executable program information directly to the agent startup program, and the agent startup program will start the executable program according to the executable program startup information. However, this technology lacks security authentication of the agent startup program, and there is a security risk when starting the executable program. SUMMARY

[0006] Embodiments of the present application provide an information verification method, an information processing method and related devices.

[0007] An information verification method applied to an authentication server, comprising:

[0008] receiving first encrypted information sent by a client;

[0009] decrypt the first encrypted information based on a preset algorithm to obtain user information;

[0010] invoke a preset database to determine whether information consistent with the user information exists in the preset database;

[0011] if the information consistent with the user information does not exist in the preset database, send a check failure prompt information to the client;

[0012] if the information consistent with the user information exists in the preset database, send an instruction to instruct the client to send executable program information to start an executable program of the client.

[0013] Optionally, if the information consistent with the user information exists in the preset database, before the instruction to instruct the client to send the executable program information is sent, the method further comprises:

[0014] receiving second encrypted information sent by a server, the second encrypted information being information generated by the server according to the user information and second signature corresponding to the user information;

[0015] determining whether the first encrypted information and the second encrypted information are the same, the first encrypted information being information generated according to the user information and first signature;

[0016] if the first encrypted information and the second encrypted information are the same, performing the step of sending an instruction to instruct the client to send executable program information.

[0017] Optionally, after the determination of whether the first encrypted information and the second encrypted information are the same, the method further comprises:

[0018] if the first encrypted information and the second encrypted information are not the same, sending a check failure prompt information to the client.

[0019] An information processing method applied to a client, comprising:

[0020] a receiving step of receiving an instruction sent by an authentication server;

[0021] a sending step of sending executable program information corresponding to an executable program to a server according to the instruction, so that the server forwards the executable program information to the client;

[0022] a starting step of starting the executable program according to the executable program information sent by the server.

[0023] Optionally, the client comprises a receiving module, a browser and a starting module, the receiving step is performed by the receiving module, the sending step is performed by the browser, and the starting step is performed by the starting module, and there is no interface opened for information interaction between the browser and the starting module.

[0024] An authentication server comprises:

[0025] A first receiving unit is configured to receive first encrypted information sent by a client;

[0026] A decryption unit is configured to decrypt the first encrypted information based on a preset algorithm to obtain user information;

[0027] A judging unit is configured to call a preset database to determine whether information consistent with the user information exists in the preset database;

[0028] A first sending unit is configured to send a check failure prompt to the client if the information consistent with the user information does not exist in the preset database;

[0029] The first sending unit is configured to send executable program information to the client to start an executable program of the client if the information consistent with the user information exists in the preset database.

[0030] A computer device comprises:

[0031] A second receiving unit is configured to receive an instruction sent by an authentication server;

[0032] A second sending unit is configured to send executable program information corresponding to an executable program to a server according to the instruction, so that the server forwards the executable program information to the client;

[0033] A starting unit is configured to start the executable program according to the executable program information sent by the server.

[0034] An authentication server comprises:

[0035] A central processing unit, a memory and an input-output interface;

[0036] The memory is a transitory storage memory or a persistent storage memory;

[0037] The central processing unit is configured to communicate with the memory and perform instruction operation in the memory to execute the foregoing method.

[0038] A computer device comprises:

[0039] A central processing unit, a memory, and an input / output interface;

[0040] The memory is a volatile memory or a persistent memory;

[0041] The central processing unit is configured to communicate with the memory and execute instruction operations in the memory to perform the foregoing method.

[0042] A computer readable storage medium comprising instructions which, when executed on a computer, cause the computer to perform the foregoing method.

[0043] From the above technical solutions, the embodiments of the present application have the following advantages:

[0044] The first encrypted information sent by the client is received, and after the first encrypted information is decrypted based on a preset algorithm, user information is obtained. Then, it is judged whether information consistent with the user information exists in the preset database. If not, a verification failure prompt information is sent to the client. If yes, an instruction is sent to instruct the client to send executable program information. By receiving the first encrypted information sent by the proxy startup program of the client and obtaining the user information after decryption, the user information is compared. If there is consistent information in the database, it indicates that the user information is legal and accurate, and the proxy startup program is legal, and the browser can be instructed to send executable program information. If there is no consistent information in the database, it indicates that the user information is not legal and accurate, and the proxy startup program is not legal, and a verification failure prompt information is sent. In this way, the proxy startup program can be securely authenticated, and the security risk of starting the executable program is reduced. BRIEF DESCRIPTION OF DRAWINGS

[0045] Figure 1 An embodiment schematic diagram of the information verification method of the present application;

[0046] Figure 2 An embodiment schematic diagram of the information processing method of the present application;

[0047] Figure 3 Another embodiment schematic diagram of the present application;

[0048] Figure 4 A flowchart schematic diagram of the present application;

[0049] Figure 5 An embodiment schematic diagram of the authentication server of the present application;

[0050] Figure 6 Another embodiment schematic diagram of the authentication server of the present application;

[0051] Figure 7 An embodiment schematic diagram of the computer device of the present application;

[0052] Figure 8 Another embodiment of the computer device of the present application is shown. DETAILED DESCRIPTION

[0053] Embodiments of the present application provide an information verification method, an information processing method and related devices.

[0054] In the existing scheme, when the client agent launcher technology is used, the agent launcher is not authenticated, and the agent launcher can be replaced, and there is a security risk when starting the executable program. To solve the above problems, the present application provides an information verification method, an information processing method and related devices to verify the agent launcher of the client, and reduce the security risk when starting the executable program.

[0055] The information verification method and the information processing method of the present application are described below. Please refer to Figure 1 An embodiment of the information verification method of the present application is applied to an authentication server, which comprises:

[0056] 101. receiving first encrypted information sent by a client;

[0057] The first encrypted information sent by the client is received. The first encrypted information can be an encrypted string of a preset number of bits, such as a 32-bit encrypted string, or other forms, which are not limited here. The first encrypted information received by the authentication server has at least two cases. One possibility is that the legitimate agent launcher in the client sends it. First, the client sends user information to the server, the server digitally signs the user information, then encrypts the signature and the user information into an encrypted string and sends it to the client. The legitimate agent launcher in the client receives the encrypted string and forwards it to the authentication server. The other possibility is that the illegal agent launcher in the client sends it. The illegal agent launcher will simulate a false signature and generate an encrypted string with false user information, and send the encrypted string to the authentication server. The user information includes a username and a user password.

[0058] 102. decrypting the first encrypted information based on a preset algorithm to obtain user information;

[0059] The first encrypted information is decrypted based on a preset algorithm to obtain user information. Specifically, the preset algorithm can be a symmetric key, which is used to decrypt the first encrypted information to obtain the user information, or other types of decryption algorithms, which are not limited here.

[0060] 103. calling a preset database to determine whether there is information consistent with the user information in the preset database, if not, step 104 is executed, if yes, step 105 is executed;

[0061] The preset database is a database that was built before the verification. This database stores valid user information in advance. For example, the user information includes a username and a password. If the username is Zhang San and the password is 123, then the preset database is searched to see if "Zhang San" and the corresponding "123" exist. If the matching information exists, it means that the user information is valid and step 105 is executed. If the matching information does not exist, it means that the user information is invalid and step 104 is executed.

[0062] 104. Send a verification failure message to the client;

[0063] If no matching information is found in the preset database, a verification failure message is sent to the client, indicating that the proxy startup program in the user's client is illegal, and the executable program startup operation is no longer performed.

[0064] 105. Issue a command to instruct the client to send executable program information in order to start the client's executable program.

[0065] The system issues a command instructing the client to send executable program information to launch the client's executable program. Specifically, in one implementation, the client's legitimate proxy launcher, the server's legitimate proxy launcher, and the authentication server form an independent subsystem. In this subsystem, the server's proxy launcher exposes Web API interfaces, while the client's proxy launcher cannot interact with the browser. Based on the subsystem described above, the client's browser needs to send the executable program information to the server's proxy launcher, which then forwards it to the client's proxy launcher. The client's proxy launcher then launches the executable program based on this executable program information. It is understood that other implementation methods are also possible, and specific implementations are not limited here.

[0066] In the embodiment of the present application, the first encrypted information sent by the client is received, and the user information is obtained after the first encrypted information is decrypted based on a preset algorithm. Then, it is judged whether the information consistent with the user information exists in the preset database. If not, the client is sent a check failure prompt information. If yes, an instruction is sent to instruct the client to send executable program information. The first encrypted information sent by the proxy start program of the client is received, and the user information is obtained after decryption. The user information is compared. If the information consistent with the user information exists in the database, it indicates that the user information is legal and accurate, and the proxy start program is legal. The browser can be instructed to send executable program information. If the information consistent with the user information does not exist in the database, it indicates that the user information is not legal and accurate, and the proxy start program is not legal. A check failure prompt information is sent. In this way, the proxy start program can be securely authenticated, and the security risk of starting the executable program is reduced.

[0067] Please refer to Figure 2 An embodiment of the information processing method of the present application is applied to a client and includes the following steps.

[0068] 201. An instruction sent by an authentication server is received.

[0069] The client receives the instruction sent by the authentication server. The instruction is used to instruct the browser of the client to send executable program information.

[0070] 202. The executable program information corresponding to the executable program is sent to a server according to the instruction, so that the server forwards the executable program information to the client.

[0071] The client sends the executable program information corresponding to the executable program to the server according to the instruction, so that the server forwards the executable program information to the client. Specifically, the server can be a separate Web server, or a Web server + proxy start program. The specific form is not limited here. When the server is a separate Web server, and the proxy start program is integrated in the Web server, the server directly forwards the executable program information to the proxy start program of the client after receiving the executable program information. When the server is a Web server + proxy start program, the Web server first receives the executable program information, and then forwards it to the proxy start program of the server. The proxy start program of the server forwards the executable program information to the proxy start program of the client.

[0072] 203. The executable program is started according to the executable program information sent by the server.

[0073] The client starts the executable program according to the executable program information sent by the server. Specifically, the agent starting program of the client starts the executable program after receiving the executable program information. The executable program can be a file such as a Word document, and the specific type is not limited here. For example, if the executable program information is the client path and name of a Word document and the like, the Word document can be found and started according to the executable program information.

[0074] In this embodiment, the instruction sent by the authentication server is received, and then the executable program information corresponding to the executable program is sent to the server according to the instruction, so that the server forwards the executable program information to the client. Finally, the executable program is started according to the executable program information sent by the server. In the independent subsystem formed by the agent starting program of the client, the server and the authentication server, only the agent starting program of the client can open the executable program, and the agent starting program of the client only interacts with the authentication server and the server, and the API interface of the Web of the server is exposed to the outside, so the executable program information needs to be sent to the server by the browser of the client first, and then forwarded to the agent starting program of the client by the server, so as to start the executable program. In this way, the browser and the agent starting program of the client can be separated, and the security can be improved.

[0075] The whole process of the information verification method and the information processing method of the present application will be described below. Please refer to Figure 3 Another embodiment of the present application comprises:

[0076] 301. receiving the first encrypted information sent by the client;

[0077] The authentication server receives the first encrypted information sent by the client. The first encrypted information can be an encrypted string of a preset number of bits, such as a 32-bit encrypted string, or other forms, and the specific form is not limited here. The first encrypted information received by the authentication server has at least two cases. One possibility is that the first encrypted information is sent by a legal agent starting program in the client. First, the client sends user information to the server, the server digitally signs the user information, then encrypts the signature and the user information into an encrypted string and sends it to the client, and the legal agent starting program in the client receives the encrypted string and forwards it to the authentication server. The other possibility is that the first encrypted information is sent by an illegal agent starting program in the client. The illegal agent starting program simulates a fake signature and generates an encrypted string with real or fake user information, and sends the encrypted string to the authentication server. The user information includes a user name and a user password.

[0078] 302. decrypting the first encrypted information based on a preset algorithm to obtain user information;

[0079] The first encrypted information is decrypted based on a preset algorithm to obtain the user information. Specifically, the preset algorithm can be a symmetric key, and the first encrypted information is decrypted based on the symmetric key to obtain the user information, or the preset algorithm can be another type of decryption algorithm, which is not limited herein.

[0080] 303、Call the preset database to determine whether the preset database contains information consistent with the user information, if not, execute step 304, if yes, execute step 305;

[0081] The preset database is a database built before verification, and the database pre-stores legal user information. For example, the user information includes a username and a user password, the username is Zhang San, and the user password is 123. The preset database is searched to see whether there is "Zhang San" and the corresponding "123". If there is consistent and correct information, it means that the user information is legal, and step 305 is executed. If there is no consistent information, it means that the user information is not legal, and step 304 is executed.

[0082] 304, send a verification failure prompt information to the client;

[0083] When the preset database does not contain information consistent with the user information, or the first encrypted information and the second encrypted information are different, a verification failure prompt information is sent to the client to prompt that the agent starting program in the client is illegal, and the executable program starting operation is not performed.

[0084] 305, receive the second encrypted information sent by the server;

[0085] The second encrypted information sent by the server is received. The second encrypted information is information generated by the server based on the user information and a second signature corresponding to the user information. The second signature is a digital signature generated by the server based on the user information. Specifically, a user digest corresponding to the user information is generated by a hash algorithm, and the user digest is encrypted to obtain the second signature. The second signature and the user information are encrypted together to obtain the second encrypted information. The second encrypted information can be an encrypted string or other forms, which are not limited herein.

[0086] 306, determine whether the first encrypted information and the second encrypted information are the same, if not, execute step 304, if yes, execute step 307;

[0087] The first encrypted information is information generated according to the user information and the first signature. Specifically, the first signature of the first encrypted information can be the same as the second signature, or can be a signature simulated by the agent launcher. In an embodiment, the encrypted information is a 32-bit encrypted string. If the string corresponding to the first encrypted information is the same as the string corresponding to the second encrypted information, step 307 is performed; otherwise, step 304 is performed.

[0088] 307. issuing an instruction to instruct the client to send the executable program information;

[0089] The authentication server issues an instruction to instruct the client to send the executable program information to start the executable program of the client. The instruction is used to instruct the browser of the client to send the executable program information.

[0090] 308. sending the executable program information corresponding to the executable program to the server according to the instruction, so that the server forwards the executable program information to the client;

[0091] The client sends the executable program information corresponding to the executable program to the server according to the instruction, so that the server forwards the executable program information to the client. Specifically, the server can be a separate Web server, or can be in the form of a Web server + agent launcher. When the server is a separate Web server and the agent launcher is integrated in the Web server, the server forwards the executable program information to the agent launcher of the client after receiving the executable program information. When the server is a Web server + agent launcher, the Web server receives the executable program information first, and then forwards the executable program information to the agent launcher of the server, which forwards the executable program information to the agent launcher of the client.

[0092] 309. starting the executable program according to the executable program information sent by the server.

[0093] The client starts the executable program according to the executable program information sent by the server. Specifically, the agent launcher of the client starts the executable program after receiving the executable program information. The executable program can be a file such as a Word document, and the specific form is not limited herein. For example, if the executable program information is the path and name of a Word document, the Word document can be found and started according to the executable program information.

[0094] For ease of understanding, the flow of the embodiment is described below by way of example. Please refer to Figure 4The server in the figure is composed of a web server + agent starter, a-1 to a-5 are verification processes, b-1 to b-4 are starting processes, verification first and then starting, the agent starter of the client in the figure is legal. The user issues a user instruction, and inputs user information in the browser, the browser sends the user information to the web server, the web server forwards the user information to the agent starter of the server that exposes the API interface of the web to the outside, the agent starter of the server signs the user information, and generates second encrypted information, and sends the second encrypted information to the agent starter of the client and the authentication server respectively. The agent starter of the client sends the second encrypted information (since the agent starter is legal, the second encrypted information is the first encrypted information) to the authentication server. The authentication server first performs a first verification, and verifies whether the user information encrypted by the first encrypted information is accurate, if yes, a second verification is performed, that is, the first encrypted information and the second encrypted information are compared, and if they are completely the same, it is proved that the agent starter of the client is legal. An instruction is issued to let the browser send executable program information to the web server (since there is no information interaction interface between the browser and the agent starter of the client, it is necessary to send to the agent starter of the server for forwarding), the web server forwards to the agent starter of the server, and finally to the agent starter of the client, and the agent starter of the client starts the executable program according to the executable program information. The pseudo agent starter cannot obtain the signature, and is finally verified in the second verification.

[0095] In this embodiment, the first encrypted information sent by the client is received, the first encrypted information is decrypted based on a preset algorithm to obtain user information. Then, it is judged whether the preset database has information consistent with the user information. If not, a check failure prompt information is sent to the client. If yes, a second check is performed. If the check is successful, an instruction is sent to the client to send executable program information. The first encrypted information sent by the agent starting program of the client is received, and the user information is obtained after decryption. The user information is compared. If the database has consistent information, the first encrypted information and the second encrypted information are compared. If they are the same, the user information is legal and accurate, and the agent starting program is legal. The browser can send executable program information. If the database has no consistent information, the user information is not legal and accurate, and the agent starting program is not legal. A check failure prompt information is sent. In this way, the agent starting program can be securely authenticated, and the security risk of starting the executable program is reduced. In addition, in the independent subsystem formed by the agent starting program of the client, the agent starting program of the server and the authentication server, only the agent starting program of the client can open the executable program. The agent starting program of the client only interacts with the authentication server and the agent starting program of the server. The API interface of the Web of the agent starting program of the server is exposed to the outside. Therefore, the client's browser needs to send the executable program information to the server first, and then the server forwards the executable program information to the agent starting program of the client, so as to start the executable program. In this way, the browser and the agent starting program of the client can be "separated", and the security is improved. Moreover, the above-mentioned subsystem is independent, can cross operating systems and browsers, has high portability, and is convenient for users.

[0096] The authentication server and the computer device of the present application will be described below. Please refer to Figure 5 An embodiment of the authentication server of the present application comprises:

[0097] The first receiving unit 501 is configured to receive the first encrypted information sent by the client.

[0098] The decryption unit 502 is configured to decrypt the first encrypted information based on a preset algorithm to obtain user information.

[0099] The judging unit 503 is configured to call the preset database to judge whether the preset database has information consistent with the user information.

[0100] The first sending unit 504 is configured to send a check failure prompt information to the client if the preset database has no information consistent with the user information.

[0101] The first sending unit 504 is configured to send an executable program information to the client if the information consistent with the user information exists in the preset database.

[0102] In the embodiment, the first receiving unit 501 receives the first encrypted information sent by the client, and the decryption unit 502 decrypts the first encrypted information based on a preset algorithm to obtain the user information. Then, the judging unit 503 calls the preset database to determine whether the information consistent with the user information exists in the preset database. If not, the first sending unit 504 sends a check failure prompt information to the client. If yes, the first sending unit 504 sends an instruction to the client to send the executable program information. By receiving the first encrypted information sent by the proxy start program of the client and obtaining the user information after decryption, the user information is compared. If the information consistent with the user information exists in the database, it indicates that the user information is legal and accurate, and the proxy start program is legal. The browser can be instructed to send the executable program information. If the information consistent with the user information does not exist in the database, it indicates that the user information is not legal and accurate, and the proxy start program is not legal. A check failure prompt information is sent. In this way, the proxy start program can be securely authenticated, and the security risk of starting the executable program can be reduced.

[0103] The functions and processes performed by each unit in the authentication server in the embodiment are similar to those performed by the authentication server in the foregoing Figure 1 、 Figure 3 and Figure 4 , and will not be described here.

[0104] Figure 6 FIG. 6 is a structural schematic diagram of an authentication server according to an embodiment of the present application. The authentication server 600 can include one or more central processing units (CPUs) 601 and a memory 605, and the memory 605 stores one or more application programs or data.

[0105] The memory 605 can be a volatile memory or a persistent memory. The program stored in the memory 605 can include one or more modules, and each module can include a series of instruction operations in the authentication server. Further, the central processing unit 601 can be configured to communicate with the memory 605 and execute the series of instruction operations in the memory 605 on the authentication server 600.

[0106] The authentication server 600 can also include one or more power supplies 602, one or more wired or wireless network interfaces 603, one or more input / output interfaces 604, and / or one or more operating systems, such as Windows Server™, Mac OS X™, Unix™, Linux™, FreeBSD™, etc.

[0107] The central processing unit 601 can perform the operations of the authentication server in the embodiments shown in FIGS. 1, 2, and 3, which are not repeated here. Figure 1 、 Figure 3 and Figure 4 The central processing unit 601 can perform the operations of the authentication server in the embodiments shown in FIGS. 1, 2, and 3, which are not repeated here.

[0108] Referring to FIG. 7, an embodiment of the computer device of the present application includes: Figure 7

[0109] The second receiving unit 701 receives the instruction sent by the authentication server.

[0110] The second sending unit 702 sends the executable program information corresponding to the executable program to the server according to the instruction, so that the server forwards the executable program information to the client.

[0111] The starting unit 703 starts the executable program according to the executable program information sent by the server.

[0112] In this embodiment, the second receiving unit 701 receives the instruction sent by the authentication server, and then the second sending unit 702 sends the executable program information corresponding to the executable program to the server according to the instruction, so that the server forwards the executable program information to the client. Finally, the starting unit 703 starts the executable program according to the executable program information sent by the server. In the independent subsystem formed by the proxy starting program of the client, the server, and the authentication server, only the proxy starting program of the client can open the executable program, and the proxy starting program of the client only interacts with the authentication server and the server, and the API interface of the Web of the server is exposed to the outside, so the executable program information needs to be sent to the server by the browser of the client first, and then forwarded to the proxy starting program of the client by the server, so as to start the executable program. In this way, the browser and the proxy starting program of the client can be separated, and the security is improved.

[0113] The functions and processes performed by each unit in the computer device of this embodiment are similar to those performed by the computer device in the embodiments shown in FIGS. 1, 2, and 3, which are not repeated here. Figure 2 、 Figure 3 and Figure 4 The functions and processes performed by each unit in the computer device of this embodiment are similar to those performed by the computer device in the embodiments shown in FIGS. 1, 2, and 3, which are not repeated here.

[0114] Figure 8 ​is a schematic diagram of a computer device structure provided by an embodiment of the present application. The computer device 800 can include one or more central processing units (CPUs) 801 and a memory 805, which stores one or more application programs or data.

[0115] The memory 805 can be volatile memory or persistent memory. The programs stored in the memory 805 can include one or more modules, each of which can include a series of instruction operations in the computer device. Further, the central processing unit 801 can be configured to communicate with the memory 805 and execute the series of instruction operations in the memory 805 on the computer device 800.

[0116] The computer device 800 can also include one or more power supplies 802, one or more wired or wireless network interfaces 803, one or more input / output interfaces 804, and / or one or more operating systems, such as Windows Server™, Mac OS X™, Unix™, Linux™, FreeBSD™, etc.

[0117] The central processing unit 801 can perform the operations of the computer device in the embodiments shown in the foregoing Figure 2 、 Figure 3 and Figure 4 , and specific details are not repeated here.

[0118] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the foregoing method embodiments, which are not repeated here.

[0119] It should be noted that although the steps in the flowcharts involved in each embodiment are drawn in sequence according to the arrows, unless otherwise stated herein, the execution of these steps has no strict order limitation, and these steps can be executed in other orders. Moreover, at least one of the steps in the flowcharts involved in each embodiment can include multiple steps or multiple stages, which do not necessarily be executed at the same time, but can be executed at different times, and the execution order of these steps or stages is not necessarily sequential, but can be executed in rotation or alternation with other steps or steps or stages in other steps.

[0120] In several embodiments provided in the present application, it should be understood that the disclosed system, device and method can be implemented in other manners. For example, the described device embodiments are merely schematic. For example, the division of the units is only a logical function division. There can be another division manner for the actual implementation, for example, multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. In addition, the displayed or discussed mutual couplings or direct couplings or communication connections between different units, can be indirect couplings or communication connections through some interfaces, devices or units, and can be in electrical, mechanical or other forms.

[0121] The units described as separated components can or can not be physically separated, and the components displayed as units can or can not be physical units, i.e., can be located in one place, or can be distributed on a plurality of network units. Some or all of the units can be selected according to actual needs to achieve the purposes of the embodiments of the present application.

[0122] In addition, each functional unit in the embodiments of the present application can be integrated in one processing unit, or each unit can exist physically, or two or more units can be integrated in one unit. The integrated unit can be implemented in the form of hardware, or in the form of software functional units.

[0123] When the integrated unit is implemented in the form of software functional units and sold or used as an independent product, it can be stored in a computer readable storage medium. Based on such an understanding, the technical solutions of the present application essentially, or the part that makes a contribution to the prior art, or all or part of the technical solutions can be embodied in the form of a software product. The computer software product is stored in a storage medium, and includes several instructions for causing a computer device (which can be a personal computer, a server, or a network device, etc.) to execute all or part of the steps of the methods described in the embodiments of the present application. The foregoing storage medium includes: U disk, mobile hard disk, read-only memory (ROM, read-only memory), random access memory (RAM, random access memory), magnetic disk or optical disk, and various other media that can store program codes.

Claims

1. An information verification method, applied to an authentication server, characterized in that, include: The client's proxy launcher sends the first encrypted information corresponding to the user information; The first encrypted information is decrypted based on a preset algorithm to obtain user information; Call a preset database to determine whether there is information in the preset database that matches the user information; The server receives a second encrypted message sent by the proxy startup program of the server, wherein the second encrypted message is information generated by the proxy startup program of the server based on the user information and a second signature corresponding to the user information; If no information matching the user information is found in the preset database, a verification failure message is sent to the client. If information matching the user information exists in the preset database, it is determined whether the first encrypted information and the second encrypted information are the same. If the first encrypted information and the second encrypted information are the same, an instruction is issued to instruct the client's browser to send executable program information to the client's proxy launcher through the server's proxy launcher, so that the client's proxy launcher can launch the client's executable program according to the executable program information.

2. The information verification method according to claim 1, characterized in that, After determining whether the first encrypted information and the second encrypted information are the same, the method further includes: If the first encrypted information and the second encrypted information are different, a verification failure message is sent to the client.

3. An information processing method applied to a client, characterized in that, include: Sending steps: The client's browser sends the user information to the server's proxy launcher; The user information is used to: sign the user information to generate encrypted information and send the encrypted information to the proxy startup program on the client, and send the encrypted information as second encrypted information to the authentication server; Receiving step: The client's proxy startup program receives encrypted information sent by the server's proxy startup program; Sending steps: The client's proxy startup program sends the encrypted information sent by the server's proxy startup program as the first encrypted information to the authentication server; wherein the first encrypted information enables the authentication server to decrypt the first encrypted information based on a preset algorithm to obtain user information; A preset database is invoked to determine whether information consistent with the user information exists in the preset database. If information consistent with the user information exists in the preset database, it is determined whether the first encrypted information and the second encrypted information are the same. If the first encrypted information and the second encrypted information are the same, an instruction is issued. Receiving step: The client's browser receives the instruction sent by the authentication server; Sending steps: The client's browser sends the executable program information corresponding to the executable program to the server's proxy launcher according to the instruction, so that the server's proxy launcher forwards the executable program information to the client's proxy launcher; Startup steps: The client's proxy startup program starts the executable program based on the executable program information sent by the server.

4. The information processing method according to claim 3, characterized in that, There is no open interface for information exchange between the browser and the client's proxy launcher.

5. An authentication server, characterized in that, include: The first receiving unit is used to receive the first encrypted information corresponding to the user information sent by the client's agent startup program; And receive second encrypted information sent by the proxy startup program of the server, wherein the second encrypted information is information generated by the proxy startup program of the server based on user information and a second signature corresponding to the user information; The decryption unit is used to decrypt the first encrypted information based on a preset algorithm to obtain user information; A judgment unit is used to call a preset database to determine whether there is information in the preset database that matches the user information; The first sending unit is used to send a verification failure message to the client if there is no information in the preset database that matches the user information. The first sending unit is configured to determine whether the first encrypted information and the second encrypted information are the same if information consistent with the user information exists in the preset database; if the first encrypted information and the second encrypted information are the same, issue an instruction to instruct the client's browser to send executable program information to the client's proxy launcher through the server's proxy launcher, so that the client's proxy launcher can launch the client's executable program according to the executable program information.

6. A computer device, characterized in that, include: The second sending unit is used for the browser of the computer device to send user information to the proxy startup program of the server; The user information is used to: sign the user information to generate encrypted information and send the encrypted information to the proxy startup program of the computer device; and send the encrypted information as second encrypted information to the authentication server. The second receiving unit is used for the proxy startup program of the computer device to receive encrypted information sent by the proxy startup program of the server. The second sending unit is further configured to send the encrypted information sent by the proxy startup program of the computer device to the authentication server as first encrypted information; wherein the first encrypted information enables the authentication server to decrypt the first encrypted information based on a preset algorithm to obtain user information; A preset database is invoked to determine whether information consistent with the user information exists in the preset database. If information consistent with the user information exists in the preset database, it is determined whether the first encrypted information and the second encrypted information are the same. If the first encrypted information and the second encrypted information are the same, an instruction is issued. The second receiving unit is used for the browser of the computer device to receive instructions sent by the authentication server; The second sending unit is used for the browser of the computer device to send executable program information corresponding to the executable program to the proxy launcher of the server according to the instruction, so that the proxy launcher of the server forwards the executable program information to the proxy launcher of the computer device. A startup unit is used for a computer device's proxy startup program to start the executable program based on the executable program information sent by the server.

7. An authentication server, characterized in that, include: Central processing unit, memory, and input / output interfaces; The memory is either a short-term storage memory or a persistent storage memory; The central processing unit is configured to communicate with the memory and execute instructions in the memory to perform the method of any one of claims 1 to 2.

8. A computer device, characterized in that, include: Central processing unit, memory, and input / output interfaces; The memory is either a short-term storage memory or a persistent storage memory; The central processing unit is configured to communicate with the memory and execute instructions in the memory to perform the method of any one of claims 3 to 4.

9. A computer-readable storage medium, characterized in that, Includes instructions that, when executed on a computer, cause the computer to perform the method as described in any one of claims 1 to 2 or any one of claims 3 to 4.

Images