Cross-platform authentication method and device, computer equipment and storage medium
The method enhances cross-platform authentication reliability by matching user information and requiring user verification to confirm account ownership, addressing security risks from inconsistent data across platforms.
Patent Information
- Application Number
- CN202411188019.3
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-08-27
- Publication Date
- 2024-12-24
AI Technical Summary
Existing cross-platform authentication methods face security risks due to inconsistent user information across different business platforms, leading to inaccuracies and reduced reliability.
A method that involves obtaining first user information, matching it with target user information using a preset list, determining a matching status, generating verification information if necessary, and granting access based on user input verification to ensure same-source account authentication.
Improves the reliability and accuracy of cross-platform authentication by ensuring secure and consistent user verification through additional verification steps when initial matching is inconclusive.
Smart Images

Figure CN119182534A_ABST
Abstract
Description
Technical Field
[0001] The present application relates to the field of identity authentication, and in particular to a cross-platform authentication method, apparatus, computer equipment and storage medium. Background Art
[0002] The same user may have registered accounts on different business platforms, and the information used on different business platforms may not be completely consistent. In order to provide convenience for users, mutual authentication is used between different business platforms to complete login, which can avoid users having to repeatedly enter login information. However, since the user information is not completely consistent, mutual authentication between business platforms may bring security risks. How to improve the accuracy and security of cross-platform authentication has become an urgent problem to be solved. Summary of the invention
[0003] The main purpose of this application is to provide a cross-platform authentication method, device, equipment and computer storage medium, aiming to improve the reliability and accuracy of cross-platform authentication.
[0004] In a first aspect, the present application provides a cross-platform authentication method, the cross-platform authentication method comprising the following steps:
[0005] In response to a cross-platform authentication request from a first service platform, first user information of the first service platform is obtained, and target user information corresponding to the first user information is matched according to a preset user information list;
[0006] determining a matching status between the target user information and the first user information, and generating information to be verified according to the target user information if it cannot be determined whether the target user information and the first user information belong to the same source account according to the matching status;
[0007] Acquire verification information input by the user based on the information to be verified, and if the verification information matches the information to be verified, determine that the target user information and the first user information belong to the same source account;
[0008] In a case where the target user information and the first user information belong to the same source account, the user corresponding to the first user information is granted permission to perform operations through the second user information corresponding to the target user information on the second business platform.
[0009] In a second aspect, the present application further provides a cross-platform authentication device, the cross-platform authentication device comprising:
[0010] an authentication request acquisition module, configured to respond to a cross-platform authentication request of a first service platform, acquire first user information of the first service platform, and match target user information corresponding to the first user information according to a preset user information list;
[0011] a matching status determination module, configured to determine a matching status between the target user information and the first user information, and to generate information to be verified based on the target user information if it cannot be determined whether the target user information and the first user information belong to the same source account based on the matching status;
[0012] a verification information acquisition module, configured to acquire verification information input by a user based on the information to be verified, and, if the verification information matches the information to be verified, determine that the target user information and the first user information belong to the same source account;
[0013] The user information authorization module is used to grant the user corresponding to the first user information the authority to perform operations through the second user information corresponding to the target user information on the second business platform when the target user information and the first user information belong to the same source account.
[0014] In a third aspect, the present application also provides a computer device, comprising a processor, a memory, and a computer program stored in the memory and executable by the processor, wherein when the computer program is executed by the processor, the cross-platform authentication method as described above is implemented.
[0015] In a fourth aspect, the present application also provides a computer-readable storage medium, on which a computer program is stored, wherein when the computer program is executed by a processor, the cross-platform authentication method as described above is implemented.
[0016] The present application provides a cross-platform authentication method, device, equipment and computer storage medium. The present application obtains the first user information of the first business platform in response to the cross-platform authentication request of the first business platform, and matches the target user information corresponding to the first user information according to the preset user information list; determines the matching status of the target user information and the first user information, and generates information to be verified according to the target user information when it is not possible to determine whether the target user information and the first user information belong to the same source account according to the matching status; obtains the verification information input by the user based on the information to be verified, and determines that the target user information and the first user information belong to the same source account when the verification information matches the information to be verified; when the target user information and the first user information belong to the same source account, grants the user corresponding to the first user information the permission to perform operations through the second user information corresponding to the target user information on the second business platform. After comparing the first user information and the target user information to determine the matching status of the two, further verification is performed through the information to be verified, thereby improving the reliability and accuracy of cross-platform authentication. BRIEF DESCRIPTION OF THE DRAWINGS
[0017] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings required for use in the description of the embodiments will be briefly introduced below. Obviously, the drawings described below are some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.
[0018] Figure 1 A schematic diagram of a cross-platform authentication method provided in accordance with an embodiment of the present application;
[0019] Figure 2 A usage scenario diagram of a cross-platform authentication method provided in one embodiment of the present application;
[0020] Figure 3 A schematic block diagram of a cross-platform authentication device provided in an embodiment of the present application;
[0021] Figure 4 The present invention is a block diagram showing the structure of a computer device according to an embodiment of the present application. DETAILED DESCRIPTION
[0022] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.
[0023] The flowcharts shown in the accompanying drawings are only examples and do not necessarily include all the contents and operations / steps, nor must they be executed in the order described. For example, some operations / steps may also be decomposed, combined or partially merged, so the actual execution order may change according to actual conditions.
[0024] Embodiments of the present application provide a cross-platform authentication method, apparatus, computer device, and computer-readable storage medium.
[0025] In conjunction with the accompanying drawings, some embodiments of the present application are described in detail below. In the absence of conflict, the following embodiments and features in the embodiments can be combined with each other.
[0026] Please refer to Figure 1 , Figure 1 A flow chart of a cross-platform authentication method provided for an embodiment of the present application. The cross-platform authentication method can be used in a terminal or a server to implement cross-platform authentication between a first business platform and a second business platform. Among them, the terminal can be an electronic device such as a mobile phone, a tablet computer, a laptop computer, a desktop computer, a personal digital assistant, and a wearable device; the server can be an independent server, or a server cluster, or a cloud server that provides basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communications, middleware services, domain name services, security services, content delivery networks (Content Delivery Network, CDN), and big data and artificial intelligence platforms.
[0027] Please refer to Figure 2 , Figure 2 This is a usage scenario diagram provided by an embodiment of the present application. Figure 2 As shown, the first user information is obtained and the corresponding target user information is matched according to a preset user information list, the matching status of the first user information and the target user information is determined, and whether the first user information and the target user information belong to the same source account is determined according to the matching status. If it is impossible to determine whether the first user information and the target user information belong to the same source account according to the matching status, information to be verified is generated and verification information input by the user is obtained, and whether the first user information and the target user information belong to the same source account is determined according to the matching result of the information to be verified and the verification information.
[0028] like Figure 1 As shown, the cross-platform authentication method includes steps S101 to S104.
[0029] Step S101: In response to a cross-platform authentication request from a first service platform, first user information of the first service platform is obtained, and target user information corresponding to the first user information is matched according to a preset user information list.
[0030] Exemplarily, when a user registers an account on a first service platform, he needs to provide relevant information as the first user information of the first service platform. The first user information includes, for example, information such as ID number, mobile phone number, name, birthday, gender, etc., as the basis for identity authentication, user identification, and provision of personalized services. Some information items in the first user information are unique, such as the ID number. These information items can be used as the basis for identifying the same user on different service platforms. Therefore, the corresponding target user information can be matched in the preset user information list according to these information items, for example, the user information with the same ID number as the first user information is matched as the target user information.
[0031] Exemplarily, the cross-platform authentication method provided in the embodiment of the present application is applied to a single sign-on (Single Sign-On, SSO) platform. The SSO platform can establish a trust relationship between the applications of various business platforms belonging to the same enterprise or different enterprises, allowing them to share the user's identity information, so that the applications of all business platforms trust a central identity authentication service, and implement centralized identity authentication. Users do not need to log in repeatedly in the applications of each business platform, thereby reducing the complexity of account management. For subordinate business platforms, the SSO platform assigns an identity (Identity, ID) to the account of each business platform. If the user who registers the account is the same person, the SSO platform can assign the same ID to the accounts of the same user on different platforms. Taking the first business platform as an example, the ID can also be used as an information item in the first user information. When performing cross-platform authentication, the target user information corresponding to the first user information can also be matched according to the ID.
[0032] In some implementations, the acquiring the first user information of the first service platform and matching the target user information corresponding to the first user information according to a preset user information list includes:
[0033] Acquire first ciphertext information obtained by one-way encryption of the first user information, and match target user ciphertext information consistent with the first ciphertext information in a preset user ciphertext information list, wherein the target user ciphertext information is obtained by one-way encryption of the target user information.
[0034] Exemplarily, in order to ensure the security of user information, it is necessary to avoid plain text transmission of user information, and the first user information can be one-way encrypted. Specifically, the user information list can be stored in the SSO platform, and the SSO platform obtains the one-way encrypted first user information. The SSO platform encrypts the content in the user information list using the same one-way encryption algorithm as the first business platform to obtain a user ciphertext information list, and matches the first ciphertext information with the user ciphertext information list, thereby determining the target user ciphertext information that is consistent with the first ciphertext information.
[0035] Exemplarily, a one-way encryption algorithm has the characteristics of irreversibility and determinism. For example, the first user information can be encrypted to obtain the first ciphertext information, but the first user information cannot be reversed based on the first ciphertext information; the same first user information can obtain the same first ciphertext information through the same one-way encryption algorithm. Therefore, by comparing the first ciphertext information with the preset user ciphertext information list, it is possible to avoid ciphertext transmission of user information and ensure the security of user privacy, and to match the target user information that is consistent with the first user information.
[0036] Exemplarily, the one-way encryption algorithm may be a hash algorithm, such as MD4, MD5, SHA-0, SHA-1, SHA-2, etc., which is not limited here.
[0037] Step S102: determining a matching status between the target user information and the first user information. If it cannot be determined whether the target user information and the first user information belong to the same source account according to the matching status, generating information to be verified according to the target user information.
[0038] Exemplarily, after matching the target user information, the first user information and the target user information are compared item by item. It is understandable that the same user may use different user information on different platforms, such as using different phone numbers, etc., but it is also possible that different users use the identity information of relatives or friends to register. Therefore, it cannot be directly determined that the user corresponding to the target user information and the first user information is the same person. It is necessary to classify the matching status of the target user information and the first user information according to the actual situation, and if it is not possible to determine whether the target user information and the first user information belong to the same source account based on the matching status, further verification is performed through the information to be verified.
[0039] Wherein, the same-source account indicates an account that agrees to be registered by the user on different service platforms. In some implementations, determining the matching status between the target user information and the first user information includes:
[0040] When the target user information is consistent with the first user information, determining that a matching state between the target user information and the first user information is a first matching state;
[0041] When the target user sub-information preset in the target user information is consistent with the corresponding first user sub-information in the first user information, determining that the matching state between the target user information and the first user information is a second matching state;
[0042] When the matching state does not belong to the first matching state and the second matching state, the matching state is determined to be a third matching state.
[0043] Exemplarily, when all information items of the target user information and the first user information are completely consistent, it can be determined that the users corresponding to the target user information and the first user information are the same person; when only a preset information item is consistent between the target user information and the first user information, it means that the users corresponding to the target user information and the first user information may be the same person or different people, and further determination is required; when neither of the above two situations exists, it is determined that the users corresponding to the target user information and the first user information are different people.
[0044] The preset target user sub-information and the first user sub-information may be at least one of gender and birthday.
[0045] In some implementations, when it is not possible to determine whether the target user information and the first user information belong to the same source account according to the matching status, generating information to be verified according to the target user information includes:
[0046] When the matching state is the second matching state, information to be verified is generated according to the target user information.
[0047] Exemplarily, if the matching status does not meet the preset conditions, that is, it cannot be confirmed whether the first user information and the target user information belong to the same person or not according to the matching status, it is necessary to generate information to be verified according to the target user information so as to perform subsequent verification based on the information to be verified.
[0048] In some implementations, when it is not possible to determine whether the target user information and the first user information belong to the same source account according to the matching status, generating information to be verified according to the target user information includes:
[0049] When the matching status does not satisfy the preset condition, any one item of target user sub-information in the target user information is obtained, and at least one character in the target user sub-information is replaced with a mask character to obtain the information to be verified.
[0050] Exemplarily, a mask character, such as at least one *, may be set in the target user sub-information to mask at least one character in the target user sub-information. Specifically, one item may be randomly selected from the target user information as the target user sub-information for generating the information to be verified. The at least one character replaced with the mask character may be, for example, the last 4 digits of the mobile phone number in the target user sub-information, but is not limited thereto and is not limited here.
[0051] Exemplarily, the information to be verified may also be an input box for the user to enter a verification code, and identity verification is performed by sending a verification code via text message to a mobile phone number reserved by the user. Of course, it is not limited to this and is not limited here.
[0052] Step S103: obtaining verification information input by the user based on the information to be verified, and when the verification information matches the information to be verified, determining that the target user information and the first user information belong to the same source account.
[0053] For example, if it is impossible to determine whether the target user information and the first user information belong to the same person based on their matching status, further verification is required to confirm whether the first user information and the second user information corresponding to the target user information on the second business platform belong to the same person based on the verification information input by the user based on the information to be verified.
[0054] The obtaining verification information input by the user based on the information to be verified, and determining that the target user information and the first user information belong to the same source account when the verification information matches the information to be verified, includes:
[0055] Obtaining verification information input by the user according to the mask character for completing the information to be verified;
[0056] If the verification information is consistent with at least one character corresponding to the mask character in the target user sub-information, it is determined that the verification information matches the information to be verified.
[0057] Exemplarily, the verification information input by the user according to the position of the mask character is obtained, and the verification information is used to supplement the information to be verified. For example, if the second user sub-information used to generate the information to be verified is a mobile phone number, and the mask character is located at the last 4 digits of the information to be verified, the user needs to enter the last 4 digits of the mobile phone number reserved when the account is registered on the second service platform to verify that the user is the user of the account.
[0058] Of course, the present invention is not limited thereto. The verification information may also be characters input by the user according to the received verification code, which is not limited here.
[0059] Step S104: When the target user information and the first user information belong to the same source account, grant the user corresponding to the first user information the authority to perform operations through the second user information corresponding to the target user information on the second business platform.
[0060] Exemplarily, when the matching status of the target user information and the first user information is the first user status, it can be determined that the target user information and the first user information belong to the same account; or, when the verification information input by the user in step S103 matches the information to be verified, it can also be determined that the target user information and the first user information belong to the same account.
[0061] For example, if the target user information and the first user information belong to the same source account, it means that the cross-platform authentication request of the first business platform is authenticated, and the user is allowed to perform operations on the second business platform through the second user information corresponding to the target user information. Specifically, the user can jump from the first business platform to the second business platform and directly operate the second business platform as the second user information.
[0062] Exemplarily, if the target user information and the first user information belong to non-same-source accounts, that is, the matching status of the target user information and the first user information is the third matching status or the verification message in step S103 does not match the information to be verified, then the cross-platform authentication request of the first business platform fails the authentication, and the user can only access the second business platform through the original first user information.
[0063] In some embodiments, the method further comprises:
[0064] In a case where the target user information and the first user information belong to the same source account, the first user information is added to the user information list as the same source account corresponding to the target user information.
[0065] Exemplarily, after determining that the target user information and the first user information belong to the same source account, the first user information is directly added to the user information list as the same source account corresponding to the target user information. When the user subsequently needs to perform cross-platform authentication, the account corresponding to the first user information on each business platform can be directly determined based on the user information list, thereby improving the efficiency of cross-platform authentication.
[0066] The cross-platform authentication method provided in the above embodiment obtains the first user information of the first business platform by responding to the cross-platform authentication request of the first business platform, and matches the target user information corresponding to the first user information according to the preset user information list; determines the matching status of the target user information and the first user information, and generates information to be verified according to the target user information when it cannot be determined whether the target user information and the first user information belong to the same source account according to the matching status; obtains the verification information input by the user based on the information to be verified, and determines that the target user information and the first user information belong to the same source account when the verification information matches the information to be verified; and grants the user corresponding to the first user information the permission to perform operations through the second user information corresponding to the target user information on the second business platform when the target user information and the first user information belong to the same source account. After comparing the first user information and the target user information to determine the matching status of the two, further verification is performed through the information to be verified, thereby improving the reliability and accuracy of cross-platform authentication.
[0067] See also Figure 3 , Figure 3 It is a schematic diagram of a cross-platform authentication device provided in an embodiment of the present application. The cross-platform authentication device can be configured in a server or a terminal to execute the aforementioned cross-platform authentication method.
[0068] like Figure 3 As shown, the cross-platform authentication device includes: an authentication request acquisition module 110 , a matching status determination module 120 , a verification information acquisition module 130 , and a user information authorization module 140 .
[0069] The authentication request acquisition module 110 is used to respond to the cross-platform authentication request of the first service platform, acquire the first user information of the first service platform, and match the target user information corresponding to the first user information according to a preset user information list;
[0070] A matching status determination module 120, configured to determine a matching status between the target user information and the first user information, and to generate information to be verified based on the target user information if it cannot be determined whether the target user information and the first user information belong to the same source account based on the matching status;
[0071] A verification information acquisition module 130, configured to acquire verification information input by a user based on the information to be verified, and, if the verification information matches the information to be verified, determine that the target user information and the first user information belong to the same source account;
[0072] The user information authorization module 140 is used to grant the user corresponding to the first user information the authority to perform operations through the second user information corresponding to the target user information on the second business platform when the target user information and the first user information belong to the same source account.
[0073] It should be noted that those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the above-described devices and modules and units can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.
[0074] The method and apparatus of the present application can be used in many general or special computing system environments or configurations. For example: personal computers, server computers, handheld or portable devices, tablet devices, multiprocessor systems, microprocessor-based systems, set-top boxes, programmable consumer electronic devices, network PCs, minicomputers, mainframe computers, distributed computing environments including any of the above systems or devices, etc. The present application can be described in the general context of computer-executable instructions executed by a computer, such as program modules. Generally, program modules include routines, programs, objects, components, data structures, etc. that perform specific tasks or implement specific abstract data types. The present application can also be practiced in distributed computing environments, in which tasks are performed by remote processing devices connected through a communication network. In a distributed computing environment, program modules can be located in local and remote computer storage media including storage devices.
[0075] Exemplarily, the above method and apparatus may be implemented in the form of a computer program. The computer program may be implemented in Figure 4 Runs on the computer device shown.
[0076] See also Figure 4 , Figure 4 A schematic block diagram of the structure of a computer device provided in an embodiment of the present application. The computer device may be a server or a terminal.
[0077] like Figure 4 As shown, the computer device includes a processor, a memory, and a network interface connected via a system bus, wherein the memory may include a storage medium and an internal memory.
[0078] The storage medium can store an operating system and a computer program. The computer program includes program instructions, and when the program instructions are executed, the processor can execute any cross-platform authentication method.
[0079] The processor is used to provide computing and control capabilities and support the operation of the entire computer equipment.
[0080] The internal memory provides an environment for the operation of the computer program in the storage medium. When the computer program is executed by the processor, the processor can execute any cross-platform authentication method.
[0081] The network interface is used for network communication, such as sending assigned tasks, etc. Those skilled in the art will appreciate that Figure 4 The structure shown in the figure is only a block diagram of a part of the structure related to the solution of the present application, and does not constitute a limitation on the computer device to which the solution of the present application is applied. The specific computer device may include more or fewer components than those shown in the figure, or combine certain components, or have a different arrangement of components.
[0082] It should be understood that the processor may be a central processing unit (CPU), and the processor may also be other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field-programmable gate arrays (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. Among them, the general-purpose processor may be a microprocessor or the processor may also be any conventional processor, etc.
[0083] In one embodiment, the processor is used to run a computer program stored in the memory to implement the following steps:
[0084] In response to a cross-platform authentication request from a first service platform, first user information of the first service platform is obtained, and target user information corresponding to the first user information is matched according to a preset user information list;
[0085] determining a matching status between the target user information and the first user information, and generating information to be verified according to the target user information if it cannot be determined whether the target user information and the first user information belong to the same source account according to the matching status;
[0086] Acquire verification information input by the user based on the information to be verified, and if the verification information matches the information to be verified, determine that the target user information and the first user information belong to the same source account;
[0087] In a case where the target user information and the first user information belong to the same source account, the user corresponding to the first user information is granted permission to perform operations through the second user information corresponding to the target user information on the second business platform.
[0088] In some implementations, the processor, in the process of acquiring the first user information of the first service platform and matching the target user information corresponding to the first user information according to a preset user information list, is used to implement:
[0089] Acquire first ciphertext information obtained by one-way encryption of the first user information, and match target user ciphertext information consistent with the first ciphertext information in a preset user ciphertext information list, wherein the target user ciphertext information is obtained by one-way encryption of the target user information.
[0090] In some implementations, the processor, in the process of determining the matching status between the target user information and the first user information, is configured to implement:
[0091] When the target user information is consistent with the first user information, determining that a matching state between the target user information and the first user information is a first matching state;
[0092] When the target user sub-information preset in the target user information is consistent with the corresponding first user sub-information in the first user information, determining that the matching state between the target user information and the first user information is a second matching state;
[0093] When the matching state does not belong to the first matching state and the second matching state, the matching state is determined to be a third matching state.
[0094] In some implementations, the processor, in the process of generating the information to be verified according to the target user information when it cannot be determined whether the target user information and the first user information belong to the same source account according to the matching status, is configured to implement:
[0095] When the matching state is the second matching state, information to be verified is generated according to the target user information.
[0096] In some implementations, the processor, in the process of generating the information to be verified according to the target user information when it cannot be determined whether the target user information and the first user information belong to the same source account according to the matching status, is configured to implement:
[0097] When the matching status does not satisfy the preset condition, any one item of target user sub-information in the target user information is obtained, and at least one character in the target user sub-information is replaced with a mask character to obtain the information to be verified.
[0098] In some implementations, the processor, in the process of obtaining verification information input by the user based on the information to be verified, and determining that the target user information and the first user information belong to the same source account when the verification information matches the information to be verified, is used to implement:
[0099] Obtaining verification information input by the user according to the mask character for completing the information to be verified;
[0100] If the verification information is consistent with at least one character corresponding to the mask character in the target user sub-information, it is determined that the verification information matches the information to be verified.
[0101] In some implementations, the processor, in the process of implementing the cross-platform authentication method, is used to implement:
[0102] If the target user information and the first user information belong to the same source account, the first user information is added to the user information list as the same source account corresponding to the target user information.
[0103] It should be noted that technical personnel in the relevant field can clearly understand that for the convenience and brevity of description, the specific working process of the cross-platform authentication described above can refer to the corresponding process in the aforementioned cross-platform authentication control method embodiment, and will not be repeated here.
[0104] An embodiment of the present application further provides a computer-readable storage medium, on which a computer program is stored. The computer program includes program instructions. The method implemented when the program instructions are executed can refer to the various embodiments of the cross-platform authentication method of the present application.
[0105] The computer-readable storage medium may be an internal storage unit of the computer device described in the foregoing embodiment, such as a hard disk or memory of the computer device. The computer-readable storage medium may also be an external storage device of the computer device, such as a plug-in hard disk, a smart memory card (SmartMedia Card, SMC), a secure digital (Secure Digital, SD) card, a flash card (Flash Card), etc., equipped on the computer device.
[0106] It should be understood that the terms used in this application specification are only for the purpose of describing specific embodiments and are not intended to limit the application. As used in this application specification and the appended claims, unless the context clearly indicates otherwise, the singular forms "a", "an" and "the" are intended to include plural forms.
[0107] It should also be understood that the term "and / or" used in the specification of this application and the appended claims refers to any combination of one or more of the associated listed items and all possible combinations, including these combinations. It should be noted that, in this article, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or system including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or system. In the absence of further restrictions, an element defined by the sentence "including a..." does not exclude the presence of other identical elements in the process, method, article or system including the element.
[0108] The serial numbers of the embodiments of the present application are only for description and do not represent the advantages and disadvantages of the embodiments. The above description is only a specific implementation mode of the present application, but the protection scope of the present application is not limited thereto. Any technician familiar with the technical field can easily think of various equivalent modifications or replacements within the technical scope disclosed in the present application, and these modifications or replacements should be included in the protection scope of the present application. Therefore, the protection scope of the present application shall be based on the protection scope of the claims.
Claims
1. A cross-platform authentication method, characterized in that: The method comprises: In response to a cross-platform authentication request from a first service platform, first user information of the first service platform is obtained, and target user information corresponding to the first user information is matched according to a preset user information list; determining a matching status between the target user information and the first user information, and generating information to be verified according to the target user information if it cannot be determined whether the target user information and the first user information belong to the same source account according to the matching status; Acquire verification information input by the user based on the information to be verified, and if the verification information matches the information to be verified, determine that the target user information and the first user information belong to the same source account; In a case where the target user information and the first user information belong to the same source account, the user corresponding to the first user information is granted permission to perform operations through the second user information corresponding to the target user information on the second business platform.
2. The cross-platform authentication method according to claim 1, characterized in that: The acquiring the first user information of the first service platform and matching the target user information corresponding to the first user information according to a preset user information list includes: Obtain first ciphertext information obtained after one-way encryption of the first user information, and match target user ciphertext information consistent with the first ciphertext information in a preset user ciphertext information list, wherein the target user ciphertext information is obtained by one-way encryption of the target user information.
3. The cross-platform authentication method according to claim 1, characterized in that: The determining a matching status between the target user information and the first user information includes: When the target user information is consistent with the first user information, determining that a matching state between the target user information and the first user information is a first matching state; When the target user sub-information preset in the target user information is consistent with the corresponding first user sub-information in the first user information, determining that the matching state between the target user information and the first user information is a second matching state; When the matching state does not belong to the first matching state and the second matching state, the matching state is determined to be a third matching state.
4. The cross-platform authentication method according to claim 3, characterized in that: In the case that it is not possible to determine whether the target user information and the first user information belong to the same source account according to the matching status, generating information to be verified according to the target user information includes: When the matching state is the second matching state, information to be verified is generated according to the target user information.
5. The cross-platform authentication method according to claim 1, characterized in that: In the case that it is not possible to determine whether the target user information and the first user information belong to the same source account according to the matching status, generating information to be verified according to the target user information includes: When the matching status does not satisfy the preset condition, any one item of target user sub-information in the target user information is obtained, and at least one character in the target user sub-information is replaced with a mask character to obtain the information to be verified.
6. The cross-platform authentication method according to claim 5, characterized in that: The obtaining verification information input by the user based on the information to be verified, and determining that the target user information and the first user information belong to the same source account when the verification information matches the information to be verified, includes: Obtaining verification information input by the user according to the mask character for completing the information to be verified; If the verification information is consistent with at least one character corresponding to the mask character in the target user sub-information, it is determined that the verification information matches the information to be verified.
7. The cross-platform authentication method according to claim 1, characterized in that: The method further comprises: In a case where the target user information and the first user information belong to the same source account, the first user information is added to the user information list as the same source account corresponding to the target user information.
8. A cross-platform authentication device, characterized in that: The cross-platform authentication device comprises: an authentication request acquisition module, configured to respond to a cross-platform authentication request of a first service platform, acquire first user information of the first service platform, and match target user information corresponding to the first user information according to a preset user information list; a matching status determination module, configured to determine a matching status between the target user information and the first user information, and to generate information to be verified based on the target user information if it cannot be determined whether the target user information and the first user information belong to the same source account based on the matching status; a verification information acquisition module, configured to acquire verification information input by a user based on the information to be verified, and, if the verification information matches the information to be verified, determine that the target user information and the first user information belong to the same source account; The user information authorization module is used to grant the user corresponding to the first user information the authority to perform operations through the second user information corresponding to the target user information on the second business platform when the target user information and the first user information belong to the same source account.
9. A computer device, characterized in that: The computer device includes a processor, a memory, and a computer program stored in the memory and executable by the processor, wherein when the computer program is executed by the processor, the steps of the cross-platform authentication method according to any one of claims 1 to 7 are implemented.
10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, wherein when the computer program is executed by a processor, the steps of the cross-platform authentication method according to any one of claims 1 to 7 are implemented.
