Account sharing method and device, equipment, storage medium and program product

Abstract

The invention discloses an account sharing method and device, equipment, a storage medium and a program product, which are used for realizing safe, convenient and efficient account sharing. The account sharing method comprises the following steps: an SIM card authentication platform receives an account sharing request from a service application platform, wherein the account sharing request carries sharing application information that a first user applies for sharing an account of a second user; the SIM card authentication platform sends an authorization notification message to the SIM card of the second user based on the sharing application information; and the SIM card authentication platform returns a sharing response message to the service application platform under the condition of receiving an authorization confirmation message returned by the SIM card, and the sharing response message comprises the password of the account number.

Description

Technical Field

[0001] The present application relates to the field of mobile communication processing technology, and in particular to an account sharing method, device, equipment, storage medium and program product. Background Art

[0002] In the era of mobile Internet, the account system of business application platforms cannot be interconnected. However, there are a lot of account sharing scenarios in real life: in order to facilitate user B to share rights and resources (such as watching TV series on a video website) or authorize user B to temporarily handle affairs, user A needs to allow user B to log in to his account.

[0003] Therefore, a safe and convenient account sharing solution is needed. Summary of the invention

[0004] The purpose of the embodiments of the present application is to provide an account sharing method, device, equipment, storage medium and program product for realizing safe, convenient and efficient account sharing.

[0005] In order to achieve the above objectives, the present application embodiment adopts the following technical solutions: In a first aspect, an embodiment of the present application provides an account sharing method, which is applied to a SIM card authentication platform, and the method includes: Receiving an account sharing request from a business application platform, the account sharing request carrying sharing application information of a first user applying to share an account of a second user; Based on the sharing application information, sending an authorization notification message to the SIM card of the second user; When receiving the authorization confirmation message returned by the SIM card, a sharing response message is returned to the service application platform, where the sharing response message includes the password of the account.

[0006] In a second aspect, an embodiment of the present application provides an account sharing method, which is applied to a business application platform, and the method includes: Sending an account sharing request to the SIM card authentication platform based on the sharing application information of the first user applying to share the account of the second user; Upon receiving the password of the account returned by the SIM card authentication platform, verifying the password, the password being sent to the service application platform based on the confirmation authorization message returned by the SIM card after the SIM card authentication platform sends an authorization notification message to the SIM card of the second user; When the password passes the verification, the account is authorized to log into the business application platform.

[0007] In a third aspect, an embodiment of the present application provides an account sharing method, which is applied to a user terminal, and the method includes: Displaying an authorization notification message received by the SIM card of the user terminal, wherein the authorization notification message is sent by the SIM card authentication platform to the SIM card after receiving an account sharing request from the service application platform, wherein the account sharing request carries sharing application information of the first user applying to share the account of the second user; In response to a confirmation operation on the authorization notification message, a confirmation authorization message is returned to the SIM card authentication platform through the SIM card, where the confirmation authorization message is used to authorize sharing the account with the first user.

[0008] In a fourth aspect, an embodiment of the present application provides an account sharing device, which is applied to a SIM card authentication platform, and the device includes: A first receiving unit, configured to receive an account sharing request from a business application platform, wherein the account sharing request carries sharing application information of a first user applying to share an account of a second user; A first sending unit, configured to send an authorization notification message to the SIM card of the second user based on the sharing application information; The first response unit is used to return a sharing response message to the service application platform when receiving the authorization confirmation message returned by the SIM card, wherein the sharing response message includes the password of the account.

[0009] In a fifth aspect, an embodiment of the present application provides an account sharing device, which is applied to a business application platform, and the device includes: A second sending unit, configured to send an account sharing request to the SIM card authentication platform based on the sharing application information of the first user applying to share the account of the second user; a verification unit, configured to verify the password of the account returned by the SIM card authentication platform upon receiving the password of the account, wherein the password is sent to the service application platform based on the confirmation authorization message returned by the SIM card after the SIM card authentication platform sends an authorization notification message to the SIM card of the second user; The authorization unit is used to authorize the account to log in to the business application platform when the password passes the verification.

[0010] In a sixth aspect, an embodiment of the present application provides an account sharing device, applied to a user terminal, the device comprising: A display unit, configured to display an authorization notification message received by the SIM card of the user terminal, wherein the authorization notification message is sent by the SIM card authentication platform to the SIM card after receiving an account sharing request from the service application platform, wherein the account sharing request carries sharing application information of the first user applying to share the account of the second user; The third sending unit is used to return a confirmation authorization message to the SIM card authentication platform through the SIM card in response to a confirmation operation on the authorization notification message, wherein the confirmation authorization message is used to authorize sharing the account with the first user.

[0011] In a seventh aspect, an embodiment of the present application provides an electronic device, including: processor; a memory for storing instructions executable by the processor; In which, the processor is configured to execute the instructions to implement the account sharing method as in the first aspect; or, the processor is configured to execute the instructions to implement the account sharing method as in the second aspect; or, the processor is configured to execute the instructions to implement the account sharing method as in the third aspect.

[0012] In an eighth aspect, an embodiment of the present application provides a computer-readable storage medium, which, when instructions in the storage medium are executed by a processor of an electronic device, enables the electronic device to execute an account sharing method as in the first aspect; or, when instructions in the storage medium are executed by a processor of an electronic device, enables the electronic device to execute an account sharing method as in the second aspect; or, when instructions in the storage medium are executed by a processor of an electronic device, enables the electronic device to execute an account sharing method as in the third aspect.

[0013] In the ninth aspect, an embodiment of the present application provides a computer program product, comprising a non-transitory computer-readable storage medium storing a computer program, wherein the computer program is operable to cause a computer to execute part or all of the steps in the account sharing method provided in the first aspect; or, the computer program is operable to cause a computer to execute part or all of the steps in the account sharing method provided in the second aspect; or, the computer program is operable to cause a computer to execute part or all of the steps in the account sharing method provided in the third aspect.

[0014] At least one of the above technical solutions adopted in the embodiments of the present application can achieve the following beneficial effects: When the first user applies to share the account of the second user, the service application platform sends an account sharing request carrying the sharing application information to the SIM card authentication platform; based on the sharing application information, the SIM card authentication platform sends an authorization notification message to the SIM card of the second user to notify the second user of authorization to share the account with the first user, and when receiving the confirmation authorization message returned by the SIM card, the SIM card authentication platform returns a sharing response message including the password of the account to the application platform, so that the service application platform authorizes the second user to log in using the account. In this way, by utilizing the communication between the SIM card authentication platform, the service application platform and the SIM card of the second user to whom the account belongs, it is possible to share the account of one user with another user, without the need for the two users to conduct complex communication. This not only improves the efficiency and convenience of account sharing, but also does not require users to tell each other sensitive information such as plain text passwords and verification codes during the entire account sharing process, effectively avoiding the risk of information leakage and theft, and improving the security of account sharing. BRIEF DESCRIPTION OF THE DRAWINGS The drawings described herein are used to provide a further understanding of the present application and constitute a part of the present application. The illustrative embodiments of the present application and their descriptions are used to explain the present application and do not constitute an improper limitation on the present application. In the drawings: Figure 1 A schematic diagram of an implementation environment applicable to an account sharing method provided in an embodiment of the present application; Figure 2 One of the flowcharts of an account sharing method provided by an embodiment of the present application; Figure 3 A second flowchart of an account sharing method provided for an embodiment of the present application; Figure 4 A schematic diagram of sharing application information provided for an embodiment of the present application; Figure 5 A schematic diagram of a key generation method provided for an embodiment of the present application; Figure 6 A schematic diagram of an authorization notification message provided for an embodiment of the present application; Figure 7 A schematic diagram of a shared authorization interface provided for an embodiment of the present application; Figure 8 A schematic diagram of a shared authorization interface provided for another embodiment of the present application; Fig. 9 A flowchart of a password modification method provided for an embodiment of the present application; Fig.10 A schematic diagram of an error notification message provided for an embodiment of the present application; Fig.11A schematic diagram of a password modification interface provided for an embodiment of the present application; Fig.12 A schematic diagram of an account configuration interface provided for an embodiment of the present application; Fig.13 A third flowchart of an account sharing method provided for an embodiment of the present application; Fig.14 A fourth flowchart of an account sharing method provided for an embodiment of the present application; Fig.15 A fifth flowchart of an account sharing method provided for an embodiment of the present application; Fig.16 One of the structural schematic diagrams of an account sharing device provided by an embodiment of the present application; Fig.17 A second structural diagram of an account sharing device provided in accordance with an embodiment of the present application; Fig.18 A third structural diagram of an account sharing device provided for an embodiment of the present application; Fig.19 A schematic diagram of the structure of an electronic device provided for one embodiment of the present application. DETAILED DESCRIPTION

[0015] In order to make the purpose, technical solution and advantages of the present application clearer, the technical solution of the present application will be clearly and completely described below in combination with the specific embodiments of the present application and the corresponding drawings. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of the present application.

[0016] The terms "first", "second", etc. in this specification and claims are used to distinguish similar objects, and are not used to describe a particular order or precedence. It should be understood that the data used in this way can be interchanged where appropriate, so that the embodiments of the present application can be implemented in an order other than those illustrated or described herein. In addition, "and / or" in this specification and claims means at least one of the connected objects, and the character " / " generally means that the objects associated with each other are in an "or" relationship.

[0017] There are three common account sharing solutions: The first is the account and password login method, that is, user A tells user B the account and password in advance, and user B logs in on the terminal device. However, this method has security risks such as password leakage and theft. In order to ensure the security of the account, the password needs to be changed frequently, which easily leads to password forgetting.

[0018] The second method is to scan the code to log in, that is, user B sends the QR code image to user A, and user A logs in to the application and scans the code to complete the login operation. However, this method requires user A to complete the code scanning operation in a short time, and the application needs to support multiple terminals to log in at the same time with a single account, which is not convenient in actual operation.

[0019] The third method is SMS verification login, that is, user B first enters user A's mobile phone number, and then user A sends the received verification code to B, who then fills in the verification code to complete the account login. However, this method involves the privacy-sensitive information of the mobile phone number, and GSM (Global System for Mobile Communications) network SMS can be easily hijacked and monitored, and can be easily intercepted by the application risk control system in situations such as cross-terminal and cross-region.

[0020] In view of this, the embodiment of the present application proposes an account sharing method, in which the service application platform sends an account sharing request carrying sharing application information to the SIM (Subscriber Identity Module) card authentication platform when the first user applies to share the account of the second user; the SIM card authentication platform sends an authorization notification message to the SIM card of the second user based on the sharing application information to notify the second user to authorize the sharing of the account with the first user, and returns a sharing response message including the password of the account to the application platform when receiving the confirmation authorization message returned by the SIM card, so that the service application platform authorizes the second user to log in using the account. In this way, by utilizing the communication between the SIM card authentication platform, the service application platform and the SIM card of the second user to whom the account belongs, it is possible to share the account of one user with another user, without the need for the two users to conduct complex communication, which not only improves the efficiency and convenience of account sharing, but also does not require the user to tell the other party sensitive information such as plain text passwords and verification codes during the entire account sharing process, effectively avoiding the risk of information leakage and theft, and improving the security of account sharing.

[0021] The technical solutions provided by various embodiments of the present application are described in detail below in conjunction with the accompanying drawings.

[0022] In order to facilitate the understanding of the technical solution provided in the embodiments of the present application, firstly Figure 1 , the implementation environment to which the technical solution provided in the embodiment of the present application is applicable is described. It should be understood that the technical solution provided in the embodiment of the present application is applied to Figure 1 The implementation environment shown is only an exemplary description and should not be understood as a limitation on the implementation environment to which the technical solution is applicable.

[0023] like Figure 1As shown, an implementation environment applicable to the technical solution provided in the embodiment of the present application includes: a SIM card authentication platform, a business application platform, a user terminal and a blockchain network. Among them, a communication channel is established between the business application platform, the SIM card of the user terminal and the SIM card authentication platform, such that two-way communication and data interaction can be carried out between the two.

[0024] Among them, an effective communication channel can be established between the SIM card of the user terminal and the SIM card authentication platform, such as a text message channel, a BIP (Bearer Independent Protocol) channel or a machine-card channel, so as to use the communication channel to realize data interaction with the SIM card authentication platform. The SIM card can be a super SIM card. The super SIM card is a SIM card with super functions launched by operators. It is one of the three basic entrances of "number, card, and message" that are focused on in the 5G era. It has higher storage capacity, stronger data processing capabilities and more security features.

[0025] The SIM card authentication platform provides authentication services based on SIM cards. The authentication services can be realized through data interaction between the SIM card authentication platform and the SIM card.

[0026] The business application platform provides a wealth of service resources. An effective communication channel can also be established between the business application platform and the user terminal, such as a BIP (Bearer Independent Protocol) channel or a machine-card channel, so as to use the communication channel to achieve data interaction with the user terminal. Based on this, users can access the business application platform through the user terminal to obtain the required service resources.

[0027] In actual applications, there are often a large number of account sharing scenarios. For example, in order to facilitate user B to share service resources in the business application platform or authorize user B to temporarily handle transactions, user A needs to share his account with user B so that user B can use the account to access the business application platform.

[0028] The account sharing method proposed in the embodiment of the present application utilizes the communication and data interaction between the SIM card authentication platform, the business application platform, the user terminal and its SIM card to achieve safe, efficient and convenient account contribution. In addition, in order to facilitate the traceability, analysis and query of the borrowed account sharing process, the SIM card authentication platform and the business application platform can also store relevant information in the account sharing process, such as user information of each user, access operation information to the business application platform, etc., in the blockchain network.

[0029] Please refer to Figure 2, is a flowchart of an account sharing method provided by an embodiment of the present application, which describes a specific implementation method of interaction between a service application platform, a SIM card authentication platform and a user terminal. Figure 2 As shown, the method comprises the following steps: S202: The service application platform sends an account sharing request to the SIM card authentication platform based on the sharing application information of the first user sharing the second user's account.

[0030] The sharing application information includes: the identity information of the first user, the user ID of the second user, and the account number. The identity information of the first user is used to indicate the identity of the first user, and may include, but is not limited to, the name and mobile phone number of the first user. The user ID of the second user is used to uniquely identify the second user, and may include, but is not limited to, the name and mobile phone number of the second user.

[0031] Optionally, the shared application information may also include but is not limited to at least one of the following information: platform information of the business application platform, application authority information, application reason, login environment information of the first user, etc.

[0032] Among them, the platform information includes information used to identify the business application platform, such as but not limited to the name of the business application platform, the authentication application identity (ID) and its corresponding key, etc. The authentication application ID and its corresponding key are assigned to the business application platform by the SIM card authentication platform after the business application platform is authenticated. Exemplarily, the entity corresponding to the business application platform (such as the platform operating company, application development organization), etc. submits relevant documents and materials to the SIM card authentication platform as required, such as but not limited to the company's business license, corporate credit status, business application status, etc.; after that, the SIM card authentication platform reviews the relevant documents and materials to ensure that the business application platform meets the requirements for using SIM authentication; if the relevant documents and materials are reviewed and approved, it is determined that the business application platform has passed the authentication, and the SIM card authentication platform will assign a unique authentication application identity and its corresponding key and other information to the business application platform.

[0033] The permission application information is used to indicate the permission applied for by the first user. The permission application information may include at least one of the following information: the duration of the application to use the account, the resources to be accessed by the application to use the account, etc.

[0034] The application reason refers to the reason for applying to use the account filled in by the first user. The login environment information is used to indicate the environment when the first user uses the account to log in to the business application platform. The login environment information may include, for example, but is not limited to: the first user's IP (Internet Protocol) address, the device number of the first user's user terminal, the first user's geographic location information, etc.

[0035] In the above S202, the account sharing request is used to request to share the second user's account with the first user, so that the first user can use the account to log in to the business application platform and access resources in the business application platform. The account sharing request carries sharing application information.

[0036] In the embodiment of the present application, the above S202 can be implemented in various appropriate ways, which is not limited in the embodiment of the present application.

[0037] In one implementation, when a first user applies to share an account of a second user, the service application platform may send an account sharing request to the SIM card authentication platform.

[0038] In another implementation, before sending the account sharing request to the SIM card authentication platform, the service application platform also receives signature information from the first user, where the signature information is obtained by signing the shared application information based on the private key of the first user; the signature information is verified based on the public key of the first user to obtain the shared application information; and the shared application information is verified. Further, if the shared application information passes the verification, the account sharing request is sent to the SIM card authentication platform based on the shared application information.

[0039] As an example, the sharing application information is filled in by the first user in the account sharing portal provided by the business application platform when applying to share the second user's account. Figure 3 As shown, when the first user needs to borrow an account from the second user, he fills in the sharing application information through the user number terminal in the account sharing entrance provided by the business application platform; then, the user terminal of the first user encrypts the sharing application information based on the private key of the first user, obtains the signature information of the first user and sends it to the business application platform. The business application platform verifies the signature using the public key of the first user. If the verification passes, the sharing application information is obtained from the signature information. Next, the business application platform verifies the sharing application information, including but not limited to: whether the account applied for by the first user exists, whether the mobile phone number of the second user in the sharing application information meets the specification, whether the mobile phone number of the first user in the sharing application information meets the specification, and whether the application reason meets the specification. If the sharing application information fails to pass the verification, the business application platform ends the current account sharing process. If the sharing application information passes the verification, the business application platform encapsulates the sharing application information, etc., obtains the account sharing request, and sends the account sharing request to the SIM card authentication platform. Optionally, in order to ensure the security of data transmission, the business application platform can use encryption, electronic signature, etc. to encapsulate the sharing application information, etc. to obtain the account sharing request.

[0040] Figure 4An example of an account sharing portal is shown. Through the controls provided by the account sharing portal, the first user can fill in the name of the business application platform to be accessed, the first user's name and mobile phone number, the account to be used, the second user's mobile phone number, the application authority (i.e., the resource to be accessed), the application duration (the application duration for using the account), the application reason, and other sharing application information. After the first user completes the filling of the sharing application information, the "Signature Submission" control is triggered, and the user terminal of the first user signs the sharing application information based on the private key of the first user, obtains the signature information, and sends it to the SIM card authentication platform for verification.

[0041] In the above implementation, the shared application information is encrypted into signature information, and the service application platform first verifies the signature information to ensure that the first user is legitimate and to prevent illegal users from impersonating the first user. If the signature information passes the verification, it indicates that the first user is legitimate, and the shared application information is further verified to ensure that the shared application information complies with the specification. If both verifications pass, the service application platform sends an account sharing request to the SIM card authentication request, which can ensure the security of the account data and reduce the risk of account theft or misuse. In addition, the private key signature and public key verification method is an asymmetric encryption method. Based on this method, the shared application information is transmitted between the user terminal of the first user and the service application platform, which can further protect the privacy of user information and the security of data transmission.

[0042] In the above implementation, the public key and private key of the first user may be implemented using various key generation methods, which is not limited in the embodiments of the present application.

[0043] In order to avoid security risks such as leakage of traditional centralized keys, in one implementation, a distributed multi-key center joint generation method is adopted to generate the public key and private key of the first user, that is, multiple key centers are selected for joint generation at the same time, and each key center only generates part of the user's key, thereby ensuring that a single key center cannot know the final generated key.

[0044] Specifically, if Figure 5 As shown, the private key and public key of the first user are generated in the following manner: Step A1, randomly select multiple key centers, and obtain the first private key and the first public key of each key center.

[0045] Exemplarily, when the first user's key is generated or reset for the first time, K (K≥1) key centers are randomly selected, and the public key and private key of the kth (1≤k≤K) key center are and .

[0046] Step A2: for each key center, generate a key factor of the key center based on the first private key of the key center, and verify the key factor based on the first public key of the key center.

[0047] Exemplarily, each key center responds to the key factor generation request from the user terminal of the first user and returns the key factor through the following formula (1): (1) in, represents the key factor of the kth key center; A unique identifier of the first user, which may be the identifier of the first user in the blockchain network; It is generated based on bilinear mapping transformation and collision-resistant hash function when the system is initialized.

[0048] When the system is initialized, it is set to large prime numbers, and are two cyclic groups of order, It's a group Generators, bilinear mapping transformation Satisfies the following formula (2): (2) Further, select the collision-resistant hash function shown in the following formulas (3) to (4): (3) (4) in, .

[0049] For each key center, if the first public key of the key center and the key factor satisfy the condition shown in the following formula (5), it is determined that the key factor of the key center passes the verification.

[0050] (5) Step A3: If the number of key centers whose key factors correspond to the key factors in the multiple key centers is greater than or equal to the preset number threshold, the key factors of the multiple key centers are combined to generate the private key of the first user.

[0051] Exemplarily, if the number of key factors that pass verification is not less than L (K ≥ L), the key factors of the K key centers are combined by the following formula (6) to obtain the private key of the first user.

[0052] (6) in, represents the private key of the first user, represents the key factor of the kth key center, represents a key factor set, which contains the key factors of K key centers.

[0053] Optionally, if the number of key centers that pass the verification of the corresponding key factor is less than a preset number threshold, the above steps A1 to A2 are re-executed until the number of key centers that pass the verification of the corresponding key factor is greater than or equal to the preset number threshold.

[0054] Step A4: Generate a public key of the first user based on the private key of the first user.

[0055] For example, the first user's public key It can be generated by the following formula (7).

[0056] (7) S204: The SIM card authentication platform sends an authorization notification message to the SIM card of the second user based on the shared application information.

[0057] The authorization notification message is used to notify the second user of authorization to share the account with the second user. The authorization notification message may include sharing application information.

[0058] In one implementation, after receiving the account sharing request, the SIM card authentication platform may send an authorization notification message to the SIM card of the second user based on the sharing application information.

[0059] For example, the shared application information includes the mobile phone number of the second user, the SIM card authentication platform establishes a communication channel with the SIM card to which the mobile phone number belongs, and then sends an authorization notification message to the SIM card to which the mobile phone number belongs through the communication channel. For another example, the SIM card authentication platform stores the mobile phone number of the second user bound to the account, after the SIM card authentication platform obtains the mobile phone number locally, it establishes a communication channel with the SIM card to which the mobile phone number belongs, and then sends an authorization notification message to the SIM card to which the mobile phone number belongs.

[0060] In another implementation, the authorization notification message includes a first authorization notification message and a second authorization notification message, and different authorization notification messages have different effects. Exemplarily, the first authorization notification message is used to notify the second user to authorize sharing of the account with the first user, and the second authorization notification message is used to notify the second user to provide the password of the account when authorizing sharing of the account with the first user. Considering that the second user will pre-host the sharing authority information to the SIM card authentication platform for storage in advance, in order to improve processing efficiency, the SIM card authentication platform may choose to send the first authorization notification message or the second authorization notification message according to actual conditions. Among them, the shared authorization information may include the account and at least one of the following information: the password of the account, the second user's trust group information, the account's authorization authority information, etc. Among them, the trust group information includes the group trusted by the second user and the environmental conditions satisfied by the group members when using the account. The authorization authority information includes the duration of the second user's authorization to use the account, the resources authorized to use the account, etc.

[0061] Specifically, if Figure 3 As shown, the SIM card authentication platform queries the password of the account in the shared permission information of the account stored locally; if the password is queried, a first authorization notification message is sent to the SIM card of the second user; if the password is not queried, a second authorization notification message is sent to the SIM card of the second user.

[0062] Considering that some SIM cards may not support the authentication function in actual applications, sending an authorization notification message to the SIM card in this case will not only cause the SIM card authentication platform to wait too long due to the failure to get a response from the SIM card, but also consume a lot of processing resources. Figure 3 As shown, before the SIM card authentication platform queries the password of the account from the shared authorization information, it first queries whether the SIM card of the second user supports the authentication function based on the shared application information; if the SIM card supports the authentication function, the password of the account is queried from the shared authorization information, and then the subsequent account sharing process is executed. Optionally, if the SIM card does not support the authentication function, a prompt message is sent to the SIM card, and the prompt message is used to prompt the SIM card to upgrade; further, the current account sharing process is terminated.

[0063] In another implementation, considering that the above account sharing process requires that the SIM card authentication platform sends an authorization notification message to the second user's SIM card each time the first user applies to share the second user's account, it is relatively cumbersome for people trusted by the second user, such as relatives and friends. In order to facilitate account sharing and realize quick login of trusted people, the sharing permission information hosted by the second user in the SIM card authentication platform usually also includes trusted group information. Among them, the trusted group information includes the group trusted by the second user and the environmental conditions that the group members meet when using the account.

[0064] In this case, the sharing application information also includes the identity information and login environment information of the first user. Accordingly, before the above S204, the SIM card authentication platform queries whether there is the trusted group information of the second user in the shared authorization information, wherein the trusted group information includes the group trusted by the second user and the environmental conditions satisfied by the members of the group using the account; in the case where the trusted group information is queried, if it is determined that the first user is a member of the group based on the identity information of the first user, and it is determined that the login environment information satisfies the environmental conditions, then a sharing response message is returned to the business application platform without sending an authorization notification message to the SIM card of the second user. Accordingly, the above S204 includes: if the SIM card authentication platform fails to query the trusted group information, or cuts off the members of the group to which the first user does not belong based on the identity information of the first user, or the login environment information does not meet the environmental conditions, then an authorization notification message is sent to the SIM card of the second user.

[0065] Through the above implementation, there is no need to send the first authorization notification message to the SIM card of the second user. Instead, the password of the second user hosted on the SIM card authentication platform is directly returned, which not only enables convenient login of trusted group members, but also avoids frequent sending of authorization notification messages to the SIM card of the second user, causing interference to the second user and increasing resource consumption.

[0066] The embodiment of the present application shows a partial implementation of the above S204. Of course, it should be understood that the above S204 can also be implemented in other ways, which are not limited in the embodiment of the present application.

[0067] S206: The user terminal displays the authorization notification message received by the SIM card.

[0068] The user terminal displays the authorization notification message received by the SIM card, so that the second user can quickly understand the first user who applies for the account and the purpose of applying for the account according to the authorization notification message, so as to decide whether to authorize the account to be shared with the first user.

[0069] The user terminal may display the authorization notification message in various appropriate forms, such as but not limited to: displaying the authorization notification message in the form of a pop-up window, displaying the authorization notification message in a notification bar, displaying the authorization notification message in the form of a floating window, and so on.

[0070] S208: In response to the confirmation operation on the authorization notification message, the user terminal returns an authorization confirmation message to the SIM card authentication platform through the SIM card.

[0071] The confirmation authorization message is used to authorize sharing the account with the first user.

[0072] In the embodiment of the present application, when the user terminal receives the confirmation operation of the authorization notification message, it can determine that the second user is authorized to share the account with the first user, and then return a confirmation authorization message to the SIM card authentication platform through the SIM card, so that the SIM card authentication platform returns the account password to the business application platform.

[0073] In the embodiment of the present application, the user terminal may detect the confirmation operation of the authorization notification message in various appropriate ways, which may be specifically configured according to actual needs.

[0074] In one implementation, the authorization notification message also includes a shared authorization control. When the user terminal receives a trigger operation on the shared authorization control, it determines that a confirmation operation on the authorization notification message has been received. In this case, the operation of the second user authorizing account sharing can be simplified, thereby improving the convenience of account sharing.

[0075] In another implementation, the user terminal displays a shared authorization interface in response to a viewing operation on the authorization notification message, wherein the shared authorization interface includes: shared application information and shared authorization controls; and upon receiving a trigger operation on the shared authorization control, determines that a confirmation operation on the authorization notification message has been received.

[0076] The information included in the shared authorization interface is richer than the authorization notification message, so that the second user can understand the account sharing application in more detail. The shared authorization control can have various appropriate forms, such as but not limited to buttons, selection boxes, etc., which are not limited in the embodiments of the present application.

[0077] For example, Figure 6 An authorization notification message displayed in a pop-up window is shown, which includes a text describing the sharing application information, "Hello, Zhang San applies to use the business application platform APP#1 account admin for sharing, the expected duration is 2 hours.", a control "Reject" and a control "View". If the user terminal receives a trigger operation for the control "Reject", a rejection notification message is returned to the SIM card authentication platform through the SIM card to refuse to share the account with the first user.

[0078] If the user terminal receives a trigger operation for the control "View", it will display Figure 7 The shared authorization interface shown includes more detailed information, including: the name of the business application platform, the name of the first user, the mobile phone number of the first user, the account number, the application permission (i.e. the resources the first user applies to access), the application duration (i.e. the application duration for using the account), the application reason, the rejection sharing control "Reject", the identity authentication control "Identity Verification", and the authorization sharing control "Authorized Login".

[0079] If the user terminal receives a trigger operation on the authorization sharing control "authorized login", it is determined that a confirmation operation on the authorization notification message is detected.

[0080] Optionally, when the authorization notification message received by the SIM card is a second authorization notification message, the shared authorization interface further includes a control for inputting a password. In this case, the user terminal also receives the password input through the password input control as the password of the account. Accordingly, the user terminal encapsulates the password of the account in response to the confirmation operation of the authorization notification message, obtains a confirmation authorization message, and returns the confirmation authorization message to the SIM card authentication platform through the SIM card.

[0081] For example, Figure 8 Another example of a shared authorization interface is shown, which also includes a password input control "Please enter password". In this way, the second user does not need to host the password to the SIM card authentication platform, but stores it locally on the SIM card, thereby further reducing the risk of password theft and leakage and improving account security.

[0082] It is worth noting that in actual applications, each control in the shared authorization interface provides an editing function so that the second user can flexibly modify the content of the shared application information. For example, the second user can modify the application permissions, application duration, etc. in the shared authorization interface to achieve more flexible account sharing.

[0083] Optionally, the shared authorization interface may also include an identity authentication control. In this case, the user terminal also responds to the triggering operation of the identity authentication control and returns an authentication request to the SIM card authentication platform, where the authentication request is used to request identity authentication of the first user; the SIM card authentication platform authenticates the first user and obtains the identity authentication result of the first user; the user terminal receives the identity authentication result returned by the SIM card authentication platform through the SIM card and displays the identity authentication result; thereafter, the user terminal responds to the confirmation operation of the authorization notification message and returns a confirmation authorization message to the SIM card authentication platform through the SIM card.

[0084] For example, Figure 7As shown, in response to the triggering operation of the identity authentication control "identity authentication", the user terminal requests the SIM card authentication platform to perform identity authentication on the first user Zhang San through the SIM card.

[0085] The SIM card authentication platform can authenticate the first user in various appropriate ways. As an example, the SIM card authentication platform searches for the identity document bound to the mobile phone number of the first user based on the mobile phone number of the first user, and verifies the name in the identity document and compares it with the name of the first user. If the comparison is consistent, it is determined that the first user has passed the identity authentication; otherwise, it is determined that the first user has not passed the identity authentication.

[0086] As another example, the SIM card authentication platform can also authenticate the first user by means of biometric verification methods such as face, voiceprint, fingerprint, etc. For example, the SIM card authentication platform sends an authentication notification message to the user terminal of the first user; the user terminal collects a face image in response to a confirmation operation on the authentication notification message, and returns the collected face image data to the SIM card authentication platform for identity authentication.

[0087] S210, when receiving the authorization confirmation message, the SIM card authentication platform returns a sharing response message to the service application platform.

[0088] The sharing response message includes the password of the account. Optionally, the sharing response message may also include authorization authority information.

[0089] In one implementation, if the account password exists in the SIM card authentication platform, the SIM card authentication platform obtains the account password locally after receiving the confirmation authorization message returned by the second user's SIM card, and encapsulates the password into a sharing response message and returns it to the business application platform.

[0090] In another implementation, if the password of the account does not exist in the SIM card authentication platform, the SIM card authentication platform parses the confirmation authorization message after receiving the confirmation authorization message returned by the SIM card of the second user, obtains the password of the account, and encapsulates the password into a sharing response message and returns it to the business application platform.

[0091] In another implementation, the sharing application information carried by the account sharing request includes application permission information, and the confirmation authorization message includes the authorization permission information of the second user. In this case, the SIM card authentication platform compares the application permission information with the authorization permission information for consistency; if the application permission information is inconsistent with the authorization permission information, such as the length of time the first user applies to use the account is inconsistent with the length of time the second user is authorized to use the account, or the resources the first user applies to access are inconsistent with the resources the second user is authorized to access, etc., then based on the account password and authorization permission information, a sharing response message is generated, and the sharing response message is returned to the business application platform. In this way, the second user can flexibly control the shared account permissions, further improving the security of account sharing.

[0092] S212, the business application platform verifies the password, and if the password passes the verification, authorizes the account to log in to the business application platform.

[0093] The business application platform compares the password returned by the SIM card authentication platform with the locally recorded password. If they are consistent, it is determined that the password returned by the SIM card authentication platform has passed the verification, and then the account is authorized to log in.

[0094] Alternatively, if Fig. 9 As shown, if the password returned by the SIM card authentication platform fails to pass the verification, the business application platform sends an error notification message to the SIM card authentication platform; the SIM card authentication platform forwards the error notification message to the SIM card of the second user, and the error notification message is used to prompt to change the password; when the user terminal receives the error notification message through the SIM card, the password modification interface is displayed, and the password modification interface includes a password modification control and a confirmation modification control; the user terminal receives the password entered through the password modification control as the modified password, and in response to the triggering operation of the confirmation modification control, returns the modified password to the SIM card authentication platform through the SIM card; the SIM card authentication platform receives the modified password returned by the SIM card, and returns the password to the business application platform; the business application platform verifies the password, and when the password passes the verification, authorizes the account to log in.

[0095] For example, Fig.10 An error notification message displayed in a pop-up window is shown, which includes the text "Hello, the password of the account admin you previously shared with Zhang San is incorrect, please change the password.", the control "Reject" and the control "Confirm". If the user terminal receives a trigger operation on the control "Reject", a rejection notification message is returned to the SIM card authentication platform through the SIM card to refuse to share the account with the first user.

[0096] If the user terminal receives a trigger operation for the control "View", it will display Fig.11The password modification interface shown includes more detailed content than the error notification message, including: the name of the business application platform, the name and mobile phone number of the first user, the account number, the password modification control "Please enter the password again", the rejection modification control "Return" and the confirmation modification control "Confirm". In this case, the second user can re-provide the password of the account through the password modification control and click the confirmation modification control "Confirm". If the user terminal receives a trigger operation for the confirmation modification control "Confirm", the modified password is returned to the SIM card authentication platform through the SIM card. In this way, in the case that the SIM card authentication platform fails to synchronize the password of the account in time or the password previously provided by the second user is wrong, the first user can also be authorized to use the account by asking the second user to re-enter the password, thereby improving the reliability and flexibility of account sharing.

[0097] Optionally, after authorizing the first user to log in with the account, the business application platform monitors the account's access operation information and writes the access operation information into the blockchain network. By leveraging the blockchain network's distributed ledger and other features that cannot be tampered with, the platform ensures that the first user's access operation behavior is traceable, verifiable, and traceable, thereby improving the credibility and security of the account sharing authorization process.

[0098] Optionally, the business application platform can also dynamically evaluate the first user's behavior of using the account to access resources, and respond in a timely manner when it is determined that there are high-risk or abnormal operations to protect the account rights and interests of the second user.

[0099] Specifically, after the authorized account logs in, the business application platform obtains the first access operation sequence of the account; performs anomaly detection on the first access operation sequence; and executes a preset response operation if the first access operation sequence is abnormal.

[0100] The first access operation sequence includes multiple first access operations arranged in time sequence. Based on a preset time interval, the business application platform periodically obtains the access operations of the account within a preset time period after the current time point, arranges these access operations in time sequence, and obtains the first access operation sequence. It is worth noting that since these access operations are performed by the first user, they are called first access operations to distinguish them from operations performed by the second user.

[0101] The response operation may include, but is not limited to, at least one of the following operations: denying the first user access to the service application platform using the account, sending an early warning notification message to the second user's SIM card, authenticating the first user, etc.

[0102] In the embodiment of the present application, the business application platform may perform abnormality detection on the first access operation sequence in various appropriate ways, which may be selected according to actual needs, and the embodiment of the present application does not limit this.

[0103] In one implementation, anomaly detection is performed on the first access operation sequence, including: comparing each first access operation with a preset sensitive access operation to obtain sensitive first access operations in the first access operation sequence; if the number of sensitive first access operations in the first access operation sequence is greater than the preset number, determining that the first access operation sequence is abnormal.

[0104] The sensitive access operations may be pre-set according to expert experience. For example, the sensitive access operations include: requesting to modify the password of an account, requesting to modify the authorization permission information of an account, requesting to view the identity information of a second user, and the like.

[0105] Exemplarily, assuming that the first access operation sequence is ,in, represents the mth first access operation performed by the first user, 1≤m≤M, and the preset number is 2. If the first first access operation , the second first access operation and the mth first access operation All of them are sensitive access operations, so the number of sensitive first access operations in the first access operation sequence is 3, which is greater than the preset number, and it is determined that the first access operation sequence is abnormal.

[0106] In the above implementation, anomaly detection is performed based on the number of sensitive first access operations in the first access operation sequence, which is more convenient and efficient to implement, and is particularly suitable for situations where the access operation information of the second user is missing or insufficient.

[0107] In another implementation, anomaly detection is performed on the first access operation sequence, including: step B1, obtaining a second access operation sequence of a second user using an account to access a business application platform; step B2, determining whether the first access operation sequence is abnormal based on a comparison result between the first access operation sequence and the second access operation sequence.

[0108] In the above step B1, the second access operation sequence includes multiple second access operations arranged in time sequence. The business application platform records the access operations of the second user when using the account to access. The business application platform can obtain access operations in the same time period and with the same resource permissions as the first access operation sequence from these records, and arrange these access operations in time sequence to obtain the second access operation sequence. It is worth noting that since these access operations are performed by the second user, they are called second access operations to distinguish them from the operations performed by the first user.

[0109] In the above step B2, as an example, the first access operation sequence and the second access operation sequence are input into a pre-trained detection model for comparison to obtain the similarity between the two. If the similarity is less than the preset similarity, the first access operation sequence is determined to be abnormal. The detection model is trained based on the sample access operation sequences and similarity labels of two users of the same account.

[0110] As another example, a first access operation sequence and a second access operation sequence are mapped based on a preset category sequence to obtain a category of each first access operation and a category of each second access operation; a first transition probability between the first category and the second category is determined based on the number of first access operations in the first category and the number of times the first access operation in the first category is adjacent to the first access operation in the second category, and the first category and the second category are two categories in the preset category sequence; a second transition probability between the first category and the second category is determined based on the number of second access operations in the first category and the number of times the second access operation in the first category is adjacent to the second access operation in the second category; if the first transition probability is less than the second transition probability, the first access operation sequence is determined to be abnormal.

[0111] The preset category sequence includes multiple categories, such as but not limited to: click, delete, modify, return, etc.

[0112] It can be understood that the first transition probability represents the probability that the first user performs the first access operation of the second category after performing the first access operation of the first category, and the second transition probability represents the probability that the second user performs the second access operation of the second category after performing the first access operation of the first category. Under normal access conditions, there will not be too much difference in the access operations between the first user and the second user, so the difference between the first transition probability and the second transition probability is small; but under abnormal access conditions, there are large differences in the access operations between the first user and the second user, so the difference between the first transition probability and the second transition probability is large. Based on this, based on the difference between the first transition probability and the second transition probability, it is possible to accurately determine whether the first access operation sequence is abnormal. Compared with the method of performing anomaly detection through a detection model, this anomaly detection method does not require model training and model deployment, is more convenient and efficient, and can save a lot of computing resources.

[0113] For example, the first access operation Each first access operation and the preset operation category sequence Mapping is performed, that is, determining the category of each first access operation to obtain the first category sequence , Based on this, the first transition probability between the first category and the second category can be determined by the following formula (8).

[0114] (8) in, Represents the i-th category in the preset category sequence With the jth category The first transition probability between represents the number of first access operations of the first category, Indicates the number of times a first access operation of a first category is adjacent to a first access operation of a second category.

[0115] It is worth noting that the second transition probability between the first category and the second category can also be calculated in the above manner, which will not be described in detail. In practical applications, multiple second access operation sequences can be obtained. In this case, a second transition probability can be calculated for each second access operation sequence in the above manner; then, all second transition probabilities are averaged to obtain the final second transition probability, as shown in the following formula (9).

[0116] (9) in, represents the final calculated second transition probability, represents the number of second access operation sequences, represents the second transition probability calculated based on the first second access operation sequence, represents the second transition probability calculated based on the second second access operation sequence, represents the second transition probability calculated based on the Nth second access operation sequence.

[0117] In another embodiment of the present application, in order to prevent the SIM card authentication platform from frequently sending authorization notification messages to the second user's SIM card, the second user may also host the account and authorization authority information to the SIM card authentication platform through the SIM card.

[0118] Specifically, before the above S202, the user terminal of the second user may also display a sharing configuration interface, which includes an account configuration control for configuring the sharing authorization information of the account; and send the sharing authorization information received by the account configuration control to the SIM card authentication platform through the SIM card.

[0119] For example, Fig.12As shown, the configuration controls in the sharing configuration interface include: a control "Account" for configuring an account, a control "Application" for configuring a business application platform that allows an account to log in, a control "Password" for configuring an account password, a control "Mobile" for configuring the second user's mobile phone number, a control "Sharing Permission" for configuring the resources that the account is allowed to access, a control "Sharing Duration" for configuring the duration of the account allowed to be used, a control "Remarks" for configuring related description texts, a control "Cancel" for canceling the configuration, and a control "Confirm" for confirming the configuration. If the user terminal receives a trigger operation for the control "Confirm", the sharing authorization information entered by the second user through the above controls is uploaded to the SIM card authentication platform through the SIM card.

[0120] One or more embodiments of the present application provide an account sharing method, in which the service application platform sends an account sharing request carrying sharing application information to the SIM card authentication platform when the first user applies to share the account of the second user; based on the sharing application information, the SIM card authentication platform sends an authorization notification message to the SIM card of the second user to notify the second user of authorization to share the account with the first user, and returns a sharing response message including the password of the account to the application platform when receiving the confirmation authorization message returned by the SIM card, so that the service application platform authorizes the second user to log in using the account. In this way, by utilizing the communication between the SIM card authentication platform, the service application platform and the SIM card of the second user to whom the account belongs, it is possible to share the account of one user with another user, without the need for the two users to conduct complex communication, which not only improves the efficiency and convenience of account sharing, but also does not require the user to tell the other party sensitive information such as plain text passwords and verification codes during the entire account sharing process, effectively avoiding the risk of information leakage and theft, and improving the security of account sharing.

[0121] Please refer to Fig.13 , is a flow chart of an account sharing method provided by another embodiment of the present application, the method is applied to a SIM card authentication platform, that is, the execution subject of the method can be a SIM card authentication platform, and the method includes the following steps: S1302: Receive an account sharing request from a business application platform.

[0122] The account sharing request carries sharing application information of the first user applying to share the account of the second user.

[0123] S1304: Send an authorization notification message to the SIM card of the second user based on the sharing application information.

[0124] In one implementation, the above S1304 includes: based on the sharing application information, querying the password of the number in the sharing authorization information of the account stored in the SIM card authentication platform; when the password is queried, sending a first authorization notification message to the SIM card of the second user, and the first authorization notification message is used to notify the second user to authorize sharing the account with the first user; when the password is not queried, sending a second authorization notification message to the SIM card of the second user, and the second authorization notification message is used to notify the second user to provide the password of the account when authorizing sharing the account with the first user.

[0125] In another implementation, before querying the password of the account in the shared authorization information of the account stored in the SIM card authentication platform based on the shared application information, it also includes: querying whether the SIM card of the second user supports the authorization function based on the shared application information; if the SIM card does not support the authorization function, sending a prompt message to the SIM card, the prompt message is used to prompt the SIM card to upgrade.

[0126] When the shared application information includes the identity information and login environment information of the first user, before sending the first authorization notification message to the SIM card of the second user, it also includes: querying whether there is the trusted group information of the second user in the shared authorization information, the trusted group information including the group trusted by the second user and the environmental conditions satisfied by the members of the group using the account; when the trusted group information is queried, determining whether the first user of the account is a member of the group based on the identity information of the first user, and determining whether the login environment information satisfies the environmental conditions; when the first user is a member of the group and the login environment information satisfies the environmental conditions, returning the password to the business application platform.

[0127] In another implementation, before the above S1304, it also includes: in the shared authorization information of the account stored in the SIM card authentication platform, querying whether there is the second user's trust group information, the trust group information includes the group trusted by the second user and the environmental conditions satisfied by the group members to use the account; in the case of querying the trust group information, if it is determined based on the identity information of the first user that the first user is a member of the group, and it is determined that the login environment information meets the environmental conditions, then, a sharing response message is returned to the business application platform. Correspondingly, in the above S1304, if the trust group information is not queried, or it is determined based on the identity information of the first user that the first user is not a member of the group, or the login environment information does not meet the environmental conditions, then an authorization notification message is sent to the SIM card of the second user.

[0128] S1306: Upon receiving the authorization confirmation message returned by the SIM card, a sharing response message is returned to the service application platform.

[0129] The sharing response message includes the password of the account.

[0130] In one implementation, the sharing application information includes application permission information, and the confirmation authorization message includes the authorization permission information of the second user. Returning a sharing response message to the business application platform includes: comparing the application permission information with the authorization permission information for consistency; if the application permission information is inconsistent with the authorization permission information, generating a sharing response message based on the account password and the authorization permission information; and returning the sharing response message to the business application platform.

[0131] In another implementation, after receiving the confirmation authorization message returned by the SIM card and returning the sharing response message to the business application platform, it also includes: upon receiving an error notification message sent by the business application platform, forwarding the error notification message to the SIM card, the error notification message is used to prompt to modify the password; receiving the modified password returned by the SIM card; and returning the modified password to the business application platform.

[0132] The specific implementation of each step from S1302 to S1306 can be found in Figure 2 The specific implementation methods of the corresponding steps in the illustrated embodiment will not be repeated here.

[0133] Please refer to Fig.14 , is a flow chart of an account sharing method provided by another embodiment of the present application, the method is applied to a business application platform, that is, the execution subject of the method can be a business application platform, and the method includes the following steps: S1402: Send an account sharing request to a SIM card authentication platform based on sharing application information of a first user applying to share an account of a second user.

[0134] S1404: Upon receiving the password of the account returned by the SIM card authentication platform, verify the password.

[0135] The password is sent to the service application platform based on the confirmation authorization message returned by the SIM card after the SIM card authentication platform sends an authorization notification message to the SIM card of the second user.

[0136] S1406: When the password passes the verification, the account is authorized to log in to the business application platform.

[0137] In another embodiment, after verifying the password, it also includes: if the password fails the verification, sending an error notification message to the SIM card authentication platform; receiving the modified password returned by the business application platform; verifying the modified password, and if the modified password passes the verification, authorizing the account to log in to the business application platform.

[0138] In another embodiment, before sending an account sharing request to a SIM card authentication platform based on sharing application information of a first user applying to share an account of a second user, it also includes: receiving signature information from the first user, the signature information being obtained by signing the sharing application information of the first user applying to share an account of the second user based on a private key of the first user; verifying the signature information based on a public key of the first user to obtain the sharing application information; verifying the sharing application information; sending an account sharing request to the SIM card authentication platform based on the sharing application information of the first user applying to share an account of the second user, including: when the sharing application information passes the verification, sending the account sharing request to the SIM card authentication platform based on the sharing application information.

[0139] In another embodiment, the private key and public key of the first user are generated in the following manner: randomly select multiple key centers and obtain the first private key and the first public key of each key center; for each key center, generate the key factor of the key center based on the first private key of the key center, and verify the key factor based on the first public key of the key center; if the number of key centers whose corresponding key factors among the multiple key centers pass the verification is greater than or equal to a preset number threshold, combine the key factors of the multiple key centers to generate the private key of the first user; based on the private key of the first user, generate the public key of the first user.

[0140] In another embodiment, after authorizing the account to log in to the business application platform, it also includes: obtaining a first access operation sequence of the account, the first access operation sequence including multiple first access operations arranged based on a time sequence; performing anomaly detection on the first access operation sequence; if the first access operation sequence is abnormal, executing a preset response operation.

[0141] In another embodiment, the response operation includes at least one of the following operations: denying the account access to the service application platform, sending an early warning notification message to the SIM card of the second user, and performing identity verification on the first user.

[0142] In another embodiment, anomaly detection is performed on the first access operation sequence, including: comparing each first access operation with a preset sensitive access operation to obtain sensitive first access operations in the first access operation sequence; if the number of sensitive first access operations in the first access operation sequence is greater than the preset number, determining that the first access operation sequence is abnormal.

[0143] In another embodiment, anomaly detection is performed on the first access operation sequence, including: obtaining a second access operation sequence of a second user using an account to access the business application platform, the second access operation sequence including multiple second access operations arranged in time sequence; based on a comparison result between the first access operation sequence and the second access operation sequence, determining whether the first access operation sequence is abnormal.

[0144] In another embodiment, based on the comparison result between the first access operation sequence and the second access operation sequence, determining whether the first access operation sequence is abnormal includes: mapping the first access operation sequence and the second access operation sequence based on a preset category sequence to obtain the category of each first access operation and the category of each second access operation; determining a first transition probability between the first category and the second category based on the number of first access operations in the first category and the number of times the first access operation in the first category is adjacent to the first access operation in the second category, the first category and the second category being two categories in the preset category sequence; determining a second transition probability between the first category and the second category based on the number of second access operations in the first category and the number of times the second access operation in the first category is adjacent to the second access operation in the second category; if the first transition probability is less than the second transition probability, determining that the first access operation sequence is abnormal.

[0145] The specific implementation of each step from S1402 to S1406 can be found in Figure 2 The specific implementation methods of the corresponding steps in the illustrated embodiment will not be repeated here.

[0146] Please refer to Fig.15 , is a flow chart of an account sharing method provided by another embodiment of the present application, the method is applied to a user terminal, that is, the execution subject of the method can be a user terminal, and the method includes the following steps: S1502, displaying the authorization notification message received by the SIM card of the user terminal.

[0147] The authorization notification message is sent by the SIM card authentication platform to the SIM card after receiving the account sharing request from the service application platform. The account sharing request carries the sharing application information of the first user applying to share the account of the second user.

[0148] S1504: In response to the confirmation operation on the authorization notification message, a confirmation authorization message is returned to the SIM card authentication platform via the SIM card.

[0149] The confirmation authorization message is used to authorize sharing the account with the first user.

[0150] In another embodiment, in response to a confirmation operation on the authorization notification message, before returning a confirmation authorization message to the SIM card authentication platform through the SIM card, it also includes: in response to a viewing operation on the authorization notification message, displaying a shared authorization interface, the shared authorization interface including: shared application information and shared authorization controls; when a trigger operation on the shared authorization control is received, determining that a confirmation operation on the authorization notification message has been received.

[0151] In another embodiment, when the authorization notification message is the second authorization notification message, the shared authorization interface further includes a password input control.

[0152] Before returning a confirmation authorization message to the SIM card authentication platform through the SIM card in response to the confirmation operation of the authorization notification message, the method further includes: receiving a password input through the password input control as the password of the account. Returning a confirmation authorization message to the SIM card authentication platform through the SIM card in response to the confirmation operation of the authorization notification message includes: encapsulating the password of the account to obtain a confirmation authorization message in response to the confirmation operation of the authorization notification message; and returning the confirmation authorization message to the SIM card authentication platform through the SIM card.

[0153] In another embodiment, the shared authorization interface further includes an identity authentication control.

[0154] After displaying the shared authorization interface in response to a viewing operation on the authorization notification message, the method also includes: in response to a triggering operation on the identity authentication control, returning an authentication request to the SIM card authentication platform through the SIM card, wherein the authentication request is used to request identity authentication for the first user; receiving the identity authentication result returned by the SIM card authentication platform through the SIM card, and displaying the identity authentication result.

[0155] In another embodiment, after returning a confirmation authorization message to the SIM card authentication platform through the SIM card in response to a confirmation operation on the authorization notification message, it also includes: when the SIM card receives an error notification message from the SIM card authentication platform, a password modification interface is displayed, the error notification message is used to prompt to modify the password, and the password modification interface includes a password modification control and a confirmation modification control; receiving a password entered through the password modification control as the modified password; and in response to a trigger operation on the confirmation modification control, returning the modified password to the SIM card authentication platform through the SIM card.

[0156] In another embodiment, before displaying the authorization notification message received by the SIM card of the user terminal, it also includes: displaying a sharing configuration interface, the sharing configuration interface includes an account configuration control, and the account configuration control is used to configure the sharing authorization information of the account; sending the sharing authorization information received by the account configuration control to the SIM card authentication platform through the SIM card.

[0157] In another embodiment, the shared authorization information includes an account and at least one of the following information: a password of the account, trust group information of the second user, and authorization permission information of the account.

[0158] The specific implementation of each step from S1502 to S1506 can be found in Figure 2 The specific implementation methods of the corresponding steps in the illustrated embodiment will not be repeated here.

[0159] The above is a description of a specific embodiment of the specification. Other embodiments are within the scope of the appended claims. In some cases, the actions or steps recorded in the claims can be performed in an order different from that in the embodiments and still achieve the desired results. In addition, the processes depicted in the drawings do not necessarily require the specific order or continuous order shown to achieve the desired results. In some embodiments, multitasking and parallel processing are also possible or may be advantageous.

[0160] Please refer to Fig.16 , is a schematic diagram of the structure of an account sharing device provided by an embodiment of the present application, and the device is applied to a SIM card authentication platform. Fig.16 As shown, in a software implementation, the account sharing device 1600 includes: The first receiving unit 1610 is configured to receive an account sharing request from a business application platform, wherein the account sharing request carries sharing application information of a first user applying to share an account of a second user; A first sending unit 1620 is configured to send an authorization notification message to the SIM card of the second user based on the sharing application information; The first responding unit 1630 is configured to return a sharing response message to the service application platform upon receiving the authorization confirmation message returned by the SIM card, wherein the sharing response message includes the password of the account.

[0161] Obviously, the account sharing device 1600 provided in the embodiment of the present application can be used as the above Fig.13 The account sharing method shown in FIG. Fig.13 Since the principle is the same, the functions realized are not described again here.

[0162] Please refer to Fig.17 , is a schematic diagram of the structure of an account sharing device provided by an embodiment of the present application, and the device is applied to a business application platform. Fig.17 As shown, in a software implementation, the account sharing device 1700 includes: The second sending unit 1710 is used to send an account sharing request to the SIM card authentication platform based on the sharing application information of the first user applying to share the account of the second user; The verification unit 1720 is configured to verify the password of the account returned by the SIM card authentication platform when receiving the password of the account, where the password is sent to the service application platform based on the confirmation authorization message returned by the SIM card after the SIM card authentication platform sends an authorization notification message to the SIM card of the second user; The authorization unit 1730 is used to authorize the account to log in to the business application platform when the password passes the verification.

[0163] Obviously, the account sharing device 1700 provided in the embodiment of the present application can be used as the above Fig.14 The account sharing method shown in FIG. Fig.14 Since the principle is the same, the functions realized are not described again here.

[0164] Please refer to Fig.18 , is a schematic diagram of the structure of an account sharing device provided by an embodiment of the present application, and the device is applied to a user terminal. Fig.18 As shown, in a software implementation, the account sharing device 1800 includes: The display unit 1810 is used to display the authorization notification message received by the SIM card of the user terminal, where the authorization notification message is sent by the SIM card authentication platform to the SIM card after receiving the account sharing request from the service application platform, where the account sharing request carries the sharing application information of the first user applying to share the account of the second user; The third sending unit 1820 is used to return a confirmation authorization message to the SIM card authentication platform through the SIM card in response to a confirmation operation on the authorization notification message, where the confirmation authorization message is used to authorize sharing the account with the first user.

[0165] Obviously, the account sharing device 1800 provided in the embodiment of the present application can be used as the above Fig.15 The account sharing method shown in FIG. Fig.15 Since the principle is the same, the functions realized are not described again here.

[0166] Fig.19 This is a schematic diagram of the structure of an electronic device according to an embodiment of the present application. Fig.19At the hardware level, the electronic device includes a processor, and optionally also includes an internal bus, a network interface, and a memory. The memory may include a memory, such as a high-speed random access memory (RAM), and may also include a non-volatile memory (non-volatile memory), such as at least one disk storage. Of course, the electronic device may also include hardware required for other services.

[0167] The processor, network interface and memory can be interconnected through an internal bus, which can be an ISA (Industry Standard Architecture) bus, a PCI (Peripheral Component Interconnect) bus or an EISA (Extended Industry Standard Architecture) bus. The bus can be divided into an address bus, a data bus, a control bus, etc. For ease of representation, Fig.19 Only one bidirectional arrow is used in the diagram, but this does not mean that there is only one bus or only one type of bus.

[0168] The memory is used to store the program. Specifically, the program may include a program code, and the program code includes a computer operation instruction. The memory may include a memory and a non-volatile memory, and provides instructions and data to the processor.

[0169] The processor reads the corresponding computer program from the non-volatile memory into the memory and then runs it, forming an account sharing device at the logical level. The processor executes the program stored in the memory and is specifically used to perform the following operations: Receiving an account sharing request from a business application platform, the account sharing request carrying sharing application information of a first user applying to share an account of a second user; Based on the sharing application information, sending an authorization notification message to the SIM card of the second user; When receiving the authorization confirmation message returned by the SIM card, a sharing response message is returned to the service application platform, where the sharing response message includes the password of the account.

[0170] Alternatively, the processor reads the corresponding computer program from the non-volatile memory into the memory and then runs it, forming an account sharing device at the logical level. The processor executes the program stored in the memory and is specifically used to perform the following operations: Sending an account sharing request to the SIM card authentication platform based on the sharing application information of the first user applying to share the account of the second user; Upon receiving the password of the account returned by the SIM card authentication platform, verifying the password, the password being sent to the service application platform based on the confirmation authorization message returned by the SIM card after the SIM card authentication platform sends an authorization notification message to the SIM card of the second user; When the password passes the verification, the account is authorized to log into the business application platform.

[0171] Alternatively, the processor reads the corresponding computer program from the non-volatile memory into the memory and then runs it, forming an account sharing device at the logical level. The processor executes the program stored in the memory and is specifically used to perform the following operations: Displaying an authorization notification message received by the SIM card of the user terminal, wherein the authorization notification message is sent by the SIM card authentication platform to the SIM card after receiving an account sharing request from the service application platform, wherein the account sharing request carries sharing application information of the first user applying to share the account of the second user; In response to a confirmation operation on the authorization notification message, a confirmation authorization message is returned to the SIM card authentication platform through the SIM card, where the confirmation authorization message is used to authorize sharing the account with the first user.

[0172] The above application Fig.13 The method performed by the account sharing device disclosed in the embodiment shown, or the above-mentioned method of the present application Fig.14 The method performed by the account sharing device disclosed in the embodiment shown, or the above-mentioned method of the present application Fig.15The method performed by the account sharing device disclosed in the illustrated embodiment can be applied to a processor or implemented by a processor. The processor may be an integrated circuit chip with signal processing capabilities. In the implementation process, each step of the above method can be completed by an integrated logic circuit of hardware in the processor or instructions in the form of software. The above processor may be a general-purpose processor, including a central processing unit (CPU), a network processor (NP), etc.; it can also be a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a field-programmable gate array (FPGA) or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components. The methods, steps and logic block diagrams disclosed in the embodiments of the present application can be implemented or executed. The general-purpose processor may be a microprocessor or the processor may also be any conventional processor, etc. The steps of the method disclosed in the embodiments of the present application can be directly embodied as being executed by a hardware decoding processor, or executed by a combination of hardware and software modules in a decoding processor. The software module can be located in a storage medium mature in the art such as a random access memory, a flash memory, a read-only memory, a programmable read-only memory, or an electrically erasable programmable memory, a register, etc. The storage medium is located in the memory, and the processor reads the information in the memory and completes the steps of the above method in combination with its hardware.

[0173] The electronic device may also perform Fig.13 Method, and realize the account sharing device in Fig.16 Alternatively, the electronic device may also perform the functions of the embodiments shown. Fig.14 Method, and realize the account sharing device in Fig.17 Alternatively, the electronic device may also perform the functions of the embodiments shown. Fig.15 Method, and realize the account sharing device in Fig.18 The functions of the illustrated embodiment will not be described in detail in the embodiments of the present application.

[0174] Of course, in addition to software implementation, the electronic device of the present application does not exclude other implementation methods, such as logic devices or a combination of software and hardware, etc. That is to say, the execution subject of the following processing flow is not limited to each logic unit, but can also be hardware or logic devices.

[0175] The embodiment of the present application also provides a computer-readable storage medium, which stores one or more programs, wherein the one or more programs include instructions, which, when executed by a portable electronic device including a plurality of application programs, enable the portable electronic device to execute Fig.13 The method of the embodiment shown is specifically used to perform the following operations: Receiving an account sharing request from a business application platform, the account sharing request carrying sharing application information of a first user applying to share an account of a second user; Based on the sharing application information, sending an authorization notification message to the SIM card of the second user; When receiving the authorization confirmation message returned by the SIM card, a sharing response message is returned to the service application platform, where the sharing response message includes the password of the account.

[0176] Alternatively, the one or more programs include instructions that, when executed by a portable electronic device including a plurality of application programs, enable the portable electronic device to execute Fig.14 The method of the embodiment shown is specifically used to perform the following operations: Sending an account sharing request to the SIM card authentication platform based on the sharing application information of the first user applying to share the account of the second user; Upon receiving the password of the account returned by the SIM card authentication platform, verifying the password, the password being sent to the service application platform based on the confirmation authorization message returned by the SIM card after the SIM card authentication platform sends an authorization notification message to the SIM card of the second user; When the password passes the verification, the account is authorized to log into the business application platform.

[0177] Alternatively, the one or more programs include instructions that, when executed by a portable electronic device including a plurality of application programs, enable the portable electronic device to execute Fig.15 The method of the embodiment shown is specifically used to perform the following operations: Displaying an authorization notification message received by the SIM card of the user terminal, wherein the authorization notification message is sent by the SIM card authentication platform to the SIM card after receiving an account sharing request from the service application platform, wherein the account sharing request carries sharing application information of the first user applying to share the account of the second user; In response to a confirmation operation on the authorization notification message, a confirmation authorization message is returned to the SIM card authentication platform through the SIM card, where the confirmation authorization message is used to authorize sharing the account with the first user.

[0178] An embodiment of the present application also provides a computer program product, which includes a non-transitory computer-readable storage medium storing a computer program, wherein the computer program is operable to cause a computer to execute part or all of the steps in the account sharing method provided in the embodiment of the present application; or, the computer program is operable to cause a computer to execute part or all of the steps in the account sharing method provided in the embodiment of the present application; or, the computer program is operable to cause a computer to execute part or all of the steps in the account sharing method provided in the embodiment of the present application.

[0179] In short, the above description is only a preferred embodiment of the present application and is not intended to limit the protection scope of the present application. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application shall be included in the protection scope of the present application.

[0180] The systems, devices, modules or units described in the above embodiments may be implemented by computer chips or entities, or by products with certain functions. A typical implementation device is a computer. Specifically, the computer may be, for example, a personal computer, a laptop computer, a cellular phone, a camera phone, a smart phone, a personal digital assistant, a media player, a navigation device, an email device, a game console, a tablet computer, a wearable device, or a combination of any of these devices.

[0181] Computer readable media include permanent and non-permanent, removable and non-removable media that can be implemented by any method or technology to store information. Information can be computer readable instructions, data structures, program modules or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, compact disk read-only memory (CD-ROM), digital versatile disk (DVD) or other optical storage, magnetic cassettes, magnetic tape disk storage or other magnetic storage devices or any other non-transmission media that can be used to store information that can be accessed by a computing device. As defined herein, computer readable media does not include temporary computer readable media (transitory media), such as modulated data signals and carrier waves.

[0182] It should also be noted that the terms "include", "comprising" or any other variation thereof are intended to cover non-exclusive inclusion, so that a process, method, commodity or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, commodity or device. In the absence of further restrictions, an element defined by the sentence "comprising a ..." does not exclude the presence of other identical elements in the process, method, commodity or device including the element.

[0183] Each embodiment in this specification is described in a progressive manner, and the same or similar parts between the embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the system embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.

Claims

1. An account sharing method, characterized in that: Applied to a SIM card authentication platform, the method comprises: Receiving an account sharing request from a business application platform, the account sharing request carrying sharing application information of a first user applying to share an account of a second user; Based on the sharing application information, sending an authorization notification message to the SIM card of the second user; When receiving the authorization confirmation message returned by the SIM card, a sharing response message is returned to the service application platform, where the sharing response message includes the password of the account.

2. The method according to claim 1, characterized in that The sending an authorization notification message to the SIM card of the second user based on the sharing application information includes: Based on the sharing application information, querying the password of the account in the sharing authorization information of the account stored in the SIM card authentication platform; When the password is found, sending a first authorization notification message to the SIM card of the second user, where the first authorization notification message is used to notify the second user of authorization to share the account with the first user; If the password is not found, a second authorization notification message is sent to the SIM card of the second user, where the second authorization notification message is used to notify the second user to provide the password of the account when authorizing the sharing of the account with the first user.

3. The method according to claim 2, characterized in that Before querying the password of the account in the shared authorization information of the account stored in the SIM card authentication platform based on the shared application information, the method further includes: Based on the sharing application information, query whether the SIM card of the second user supports the authorization function; In the case that the SIM card does not support the authorization function, a prompt message is sent to the SIM card, where the prompt message is used to prompt the SIM card to be upgraded.

4. The method according to claim 1, characterized in that: The sharing application information includes the identity information and login environment information of the first user; Before sending the authorization notification message to the SIM card of the second user based on the sharing application information, the method further includes: In the shared authorization information of the account stored in the SIM card authentication platform, query whether there is the trusted group information of the second user, the trusted group information including the group trusted by the second user and the environmental conditions satisfied by the members of the group to use the account; In the case where the trust group information is queried, if it is determined based on the identity information that the first user is a member of the group and the login environment information meets the environment condition, returning a sharing response message to the business application platform; The sending an authorization notification message to the SIM card of the second user based on the sharing application information includes: If the trusted group information is not found, or it is determined based on the identity information that the first user is not a member of the group, or the login environment information does not meet the environment condition, an authorization notification message is sent to the SIM card of the second user.

5. The method according to claim 1, characterized in that In the case of receiving the authorization confirmation message returned by the SIM card, before returning the sharing response message to the service application platform, the method further includes: If the authentication request returned by the SIM card is received, the identity of the first user is authenticated to obtain the identity authentication result of the first user; Sending the identity authentication result to the SIM card includes.

6. The method according to claim 1, characterized in that The sharing application information includes application authority information, and the authorization confirmation message includes authorization authority information of the second user; The returning a sharing response message to the business application platform includes: Comparing the application permission information with the authorization permission information for consistency; If the application permission information is inconsistent with the authorization permission information, generating a sharing response message based on the password of the account and the authorization permission information; Return the sharing response message to the business application platform.

7. The method according to claim 1, characterized in that In the case of receiving the authorization confirmation message returned by the SIM card, after returning the sharing response message to the service application platform, the method further includes: When receiving an error notification message sent by the service application platform, forwarding the error notification message to the SIM card, wherein the error notification message is used to prompt to modify the password; Receiving the modified password returned by the SIM card; The modified password is returned to the business application platform.

8. An account sharing method, characterized in that: Applied to a business application platform, the method includes: Sending an account sharing request to the SIM card authentication platform based on the sharing application information of the first user applying to share the account of the second user; Upon receiving the password of the account returned by the SIM card authentication platform, verifying the password, the password being sent to the service application platform based on the confirmation authorization message returned by the SIM card after the SIM card authentication platform sends an authorization notification message to the SIM card of the second user; When the password passes the verification, the account is authorized to log into the business application platform.

9. The method according to claim 8, characterized in that After verifying the password, the method further includes: If the password fails to pass the verification, an error notification message is sent to the SIM card authentication platform; Receiving the modified password returned by the business application platform; The modified password is verified, and if the modified password passes the verification, the account is authorized to log in to the business application platform.

10. The method according to claim 8, characterized in that Before sending the account sharing request to the SIM card authentication platform based on the sharing application information of the first user applying to share the account of the second user, the method further includes: Receiving signature information from the first user, where the signature information is obtained by signing, based on the private key of the first user, sharing application information of the first user applying to share the account of the second user; Verify the signature information based on the public key of the first user to obtain the sharing application information; Verifying the sharing application information; The sending an account sharing request to the SIM card authentication platform based on the sharing application information of the first user applying to share the account of the second user includes: In the case where the sharing application information passes the verification, an account sharing request is sent to the SIM card authentication platform based on the sharing application information.

11. The method according to claim 10, characterized in that The private key and public key of the first user are generated in the following manner: Randomly select multiple key centers and obtain the first private key and the first public key of each key center; For each key center, generating a key factor of the key center based on a first private key of the key center, and verifying the key factor based on a first public key of the key center; If the number of key centers whose key factors among the multiple key centers pass the verification is greater than or equal to a preset number threshold, combining the key factors of the multiple key centers to generate the private key of the first user; Based on the private key of the first user, a public key of the first user is generated.

12. The method according to claim 8, characterized in that After authorizing the account to log in to the business application platform, the method further includes: Acquire a first access operation sequence of the account, wherein the first access operation sequence includes a plurality of first access operations arranged in time sequence; Performing abnormality detection on the first access operation sequence; If the first access operation sequence is abnormal, a preset response operation is executed.

13. The method according to claim 12, characterized in that The response operation includes at least one of the following operations: denying the account access to the business application platform, sending an early warning notification message to the SIM card of the second user, and authenticating the first user.

14. The method according to claim 12, characterized in that The performing abnormality detection on the first access operation sequence includes: Comparing each first access operation with a preset sensitive access operation to obtain a sensitive first access operation in the first access operation sequence; If the number of sensitive first access operations in the first access operation sequence is greater than a preset number, it is determined that the first access operation sequence is abnormal.

15. The method according to claim 12, characterized in that The performing abnormality detection on the first access operation sequence includes: Acquire a second access operation sequence of the second user using the account to access the business application platform, where the second access operation sequence includes a plurality of second access operations arranged in time sequence; Based on a comparison result between the first access operation sequence and the second access operation sequence, it is determined whether the first access operation sequence is abnormal.

16. The method according to claim 15, characterized in that The determining whether the first access operation sequence is abnormal based on a comparison result between the first access operation sequence and the second access operation sequence includes: Mapping the first access operation sequence and the second access operation sequence based on a preset category sequence to obtain a category of each first access operation and a category of each second access operation; determining a first transition probability between the first category and the second category based on the number of first access operations of the first category and the number of times the first access operation of the first category is adjacent to the first access operation of the second category, wherein the first category and the second category are two categories in the preset category sequence; determining a second transition probability between the first category and the second category based on the number of second access operations of the first category and the number of times the second access operations of the first category are adjacent to the second access operations of the second category; If the first transition probability is less than the second transition probability, it is determined that the first access operation sequence is abnormal.

17. An account sharing method, characterized in that: Applied to a user terminal, the method comprises: Displaying an authorization notification message received by the SIM card of the user terminal, wherein the authorization notification message is sent by the SIM card authentication platform to the SIM card after receiving an account sharing request from the service application platform, wherein the account sharing request carries sharing application information of the first user applying to share the account of the second user; In response to a confirmation operation on the authorization notification message, a confirmation authorization message is returned to the SIM card authentication platform through the SIM card, where the confirmation authorization message is used to authorize sharing the account with the first user.

18. The method according to claim 17, characterized in that Before returning a confirmation authorization message to the SIM card authentication platform through the SIM card in response to the confirmation operation of the authorization notification message, the method further includes: In response to a viewing operation on the authorization notification message, displaying a sharing authorization interface, the sharing authorization interface including: the sharing application information and a sharing authorization control; In case of receiving a trigger operation on the shared authorization control, it is determined that a confirmation operation on the authorization notification message is received.

19. The method according to claim 18, characterized in that In the case where the authorization notification message is a second authorization notification message, the shared authorization interface further includes a password input control; Before returning a confirmation authorization message to the SIM card authentication platform through the SIM card in response to the confirmation operation of the authorization notification message, the method further includes: receiving a password input through the password input control as the password of the account; In response to the confirmation operation on the authorization notification message, returning a confirmation authorization message to the SIM card authentication platform through the SIM card, comprises: In response to a confirmation operation on the authorization communication message, encapsulate the password of the account to obtain a confirmation authorization message; A confirmation authorization message is returned to the SIM card authentication platform through the SIM card.

20. The method according to claim 18, characterized in that The shared authorization interface also includes an identity authentication control; After displaying the shared authorization interface in response to the viewing operation on the authorization notification message, the method further includes: In response to a triggering operation on the identity authentication control, returning an authentication request to the SIM card authentication platform through the SIM card, wherein the authentication request is used to request identity authentication of the first user; The identity authentication result returned by the SIM card authentication platform is received through the SIM card, and the identity authentication result is displayed.

21. The method according to claim 17, characterized in that After returning a confirmation authorization message to the SIM card authentication platform through the SIM card in response to the confirmation operation of the authorization notification message, the method further includes: In the case where the SIM card receives an error notification message from the SIM card authentication platform, a password modification interface is displayed, wherein the error notification message is used to prompt the user to modify the password, and the password modification interface includes a password modification control and a confirmation modification control; receiving a password input through the password modification control as a modified password; In response to the triggering operation of the confirmation modification control, the modified password is returned to the SIM card authentication platform through the SIM card.

22. The method according to claim 17, characterized in that Before displaying the authorization notification message received by the SIM card of the user terminal, the method further includes: Displaying a sharing configuration interface, the sharing configuration interface including an account configuration control, the account configuration control being used to configure sharing authorization information of the account; The shared authorization information received by the account configuration control is sent to the SIM card authentication platform through the SIM card.

23. The method according to claim 22, characterized in that The shared authorization information includes the account and at least one of the following information: a password of the account, trust group information of the second user, and authorization permission information of the account.

24. An account sharing device, characterized in that: Applied to a SIM card authentication platform, the device comprises: A first receiving unit, configured to receive an account sharing request from a business application platform, wherein the account sharing request carries sharing application information of a first user applying to share an account of a second user; A first sending unit, configured to send an authorization notification message to the SIM card of the second user based on the sharing application information; The first response unit is used to return a sharing response message to the service application platform when receiving the authorization confirmation message returned by the SIM card, wherein the sharing response message includes the password of the account.

25. An account sharing device, characterized in that: Applied to a business application platform, the device comprises: A second sending unit, configured to send an account sharing request to the SIM card authentication platform based on the sharing application information of the first user applying to share the account of the second user; a verification unit, configured to verify the password of the account returned by the SIM card authentication platform upon receiving the password of the account, wherein the password is sent to the service application platform based on the confirmation authorization message returned by the SIM card after the SIM card authentication platform sends an authorization notification message to the SIM card of the second user; The authorization unit is used to authorize the account to log in to the business application platform when the password passes the verification.

26. An account sharing device, characterized in that: Applied to a user terminal, the device comprises: A display unit, configured to display an authorization notification message received by the SIM card of the user terminal, wherein the authorization notification message is sent by the SIM card authentication platform to the SIM card after receiving an account sharing request from the service application platform, wherein the account sharing request carries sharing application information of the first user applying to share the account of the second user; The third sending unit is used to return a confirmation authorization message to the SIM card authentication platform through the SIM card in response to a confirmation operation on the authorization notification message, wherein the confirmation authorization message is used to authorize sharing the account with the first user.

27. An electronic device, characterized in that: include: processor; a memory for storing instructions executable by the processor; The processor is configured to execute the instructions to implement the account sharing method as described in any one of claims 1 to 7; or, the processor is configured to execute the instructions to implement the account sharing method as described in any one of claims 8 to 16; or, the processor is configured to execute the instructions to implement the account sharing method as described in any one of claims 17 to 23.

28. A computer-readable storage medium, characterized in that: When the instructions in the storage medium are executed by the processor of the electronic device, the electronic device is enabled to execute the account sharing method as described in any one of claims 1 to 7; or, when the instructions in the storage medium are executed by the processor of the electronic device, the electronic device is enabled to execute the account sharing method as described in any one of claims 8 to 16; or, when the instructions in the storage medium are executed by the processor of the electronic device, the electronic device is enabled to execute the account sharing method as described in any one of claims 17 to 23.

29. A computer program product, characterized in that The computer program product includes a non-transitory computer-readable storage medium storing a computer program, and the computer program is operable to cause a computer to execute part or all of the steps in the account sharing method as described in any one of claims 1 to 7; or, the computer program is operable to cause a computer to execute part or all of the steps in the account sharing method as described in any one of claims 8 to 16; or, the computer program is operable to cause a computer to execute part or all of the steps in the account sharing method as described in any one of claims 17 to 23.

Images