Account login method

Abstract

The invention discloses an account login method, belongs to the technical field of information security, and is used for improving the security of an account password. The method comprises the following steps: in response to an account login operation of a user, splitting an encrypted ciphertext corresponding to a to-be-logged-in account into a plurality of sub-encrypted ciphertexts, and sending the sub-encrypted ciphertexts to terminal equipment of the user; receiving a target password uploaded by the terminal device, the target password being obtained by the terminal device by splicing the plurality of sub encrypted ciphertexts into the encrypted ciphertext through the SIM card according to a first sequence identifier and then decrypting the encrypted ciphertext; and logging in the account to be logged in through the target password.

Description

Technical Field

[0001] The present application belongs to the field of information security technology, and specifically relates to an account login method. Background Art

[0002] In the field of account login, the common way of browser website account login is account and password login. The system will authorize the browser to record the account password and store it in the browser's Cookies or LocalStorge local storage space. Through the browser security settings menu, entering the system power-on password can parse the ciphertext to obtain the account login password, which poses a significant security risk. This means that once an illegal user steals the device's power-on password, all account and password information stored in the browser can be stolen. If the user's device does not have a power-on password, all the original passwords of the browser can be stolen. In addition, the passwords are not controllable when they are handed over to the browser for management. It can be seen that the current account and password login process has the risk of account and password leakage. Summary of the invention

[0003] The embodiment of the present application provides an account login method, which can solve the risk of account password leakage.

[0004] In a first aspect, an embodiment of the present application provides an account login method, which is applied to a network device, and the method includes: in response to a user's account login operation, splitting the encrypted ciphertext corresponding to the account to be logged in into multiple sub-encrypted ciphertexts and sending them to the user's terminal device; receiving a target password uploaded by the terminal device, the target password being obtained by the terminal device after splicing multiple sub-encrypted ciphertexts into the encrypted ciphertext according to a first sequence identifier through a SIM card, and then decrypting the encrypted ciphertext; and logging in to the account to be logged in using the target password.

[0005] In the second aspect, an embodiment of the present application provides an account login method, which is applied to a terminal device, and the method includes: receiving multiple sub-encrypted ciphertexts sent by a network device, wherein the multiple sub-encrypted ciphertexts are obtained by the network device splitting the encrypted ciphertexts corresponding to the account to be logged in; after splicing the multiple sub-encrypted ciphertexts into the encrypted ciphertext according to a first sequence identifier through a SIM card, the encrypted ciphertext is decrypted to obtain a target password; and the target password is sent to the network device so that the network device logs in to the account to be logged in through the target password.

[0006] In the third aspect, an embodiment of the present application provides an account login device, which includes: a sending module, used to respond to the user's account login operation, split the encrypted ciphertext corresponding to the account to be logged in into multiple sub-encrypted ciphertexts and send them to the user's terminal device; an acquisition module, used to receive a target password uploaded by the terminal device, the target password is obtained by the terminal device after splicing multiple sub-encrypted ciphertexts into the encrypted ciphertext according to a first sequence identifier through a SIM card, and then decrypting the encrypted ciphertext; a login module, used to log in to the account to be logged in through the target password.

[0007] In a fourth aspect, an embodiment of the present application provides an account login device, which includes: a receiving module, used to receive multiple sub-encrypted ciphertexts sent by a network device, wherein the multiple sub-encrypted ciphertexts are obtained by the network device splitting the encrypted ciphertexts corresponding to the account to be logged in; a decryption module, used to splice the multiple sub-encrypted ciphertexts into the encrypted ciphertext according to a first sequence identifier through a SIM card, and then decrypt the encrypted ciphertext to obtain a target password; a sending module, used to send the target password to the network device, so that the network device logs in to the account to be logged in through the target password.

[0008] In a fifth aspect, an embodiment of the present application provides an electronic device, comprising a processor, a memory, and a program or instruction stored in the memory and executable on the processor, wherein the program or instruction, when executed by the processor, implements the steps of the method described in the first aspect or implements the steps of the method described in the second aspect.

[0009] In a sixth aspect, an embodiment of the present application provides a readable storage medium, on which a program or instruction is stored. When the program or instruction is executed by a processor, the steps of the method described in the first aspect or the steps of the method described in the second aspect are implemented.

[0010] In the seventh aspect, an embodiment of the present application provides a computer program product, which includes a computer program stored on a non-transitory computer-readable storage medium, and the computer program includes program instructions. When the program instructions are executed by a computer, the computer executes the steps of the method described in the first aspect or implements the steps of the method described in the second aspect.

[0011] In an embodiment of the present application, in response to a user's account login operation, the encrypted ciphertext corresponding to the account to be logged in is split into multiple sub-encrypted ciphertexts and sent to the user's terminal device; a target password uploaded by the terminal device is received, and the target password is obtained by the terminal device by decrypting the encrypted ciphertext after splicing multiple sub-encrypted ciphertexts into the encrypted ciphertext according to a first sequence identifier through a SIM card; logging in to the account to be logged in through the target password can improve the security of the account password. BRIEF DESCRIPTION OF THE DRAWINGS

[0012] Figure 1 It is a schematic diagram of the overall architecture provided by the embodiment of the present application; Figure 2 This is a schematic diagram of a SIM login plug-in architecture provided in an embodiment of the present application; Figure 3 This is a schematic diagram of an account and password management platform architecture provided by an embodiment of the present application; Figure 4 It is a flowchart of an account login method provided in an embodiment of the present application; Figure 5 It is a schematic diagram of the structure of a response data packet provided in an embodiment of the present application; Figure 6 It is a flowchart of another account login method provided in an embodiment of the present application; Figure 7 It is a structural diagram of an account login device provided in an embodiment of the present application; Figure 8 It is a structural diagram of another account login device provided in an embodiment of the present application; Fig. 9 It is a structural schematic diagram of an electronic device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0013] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0014] The terms "first", "second", etc. in the specification and claims of the present application are used to distinguish similar objects, and are not used to describe a specific order or sequence. It should be understood that the data used in this way can be interchangeable under appropriate circumstances, so that the embodiments of the present application can be implemented in an order other than those illustrated or described here, and the objects distinguished by "first", "second", etc. are generally of one type, and the number of objects is not limited. For example, the first object can be one or more. In addition, "and / or" in the specification and claims represents at least one of the connected objects, and the character " / " generally indicates that the objects associated with each other are in an "or" relationship.

[0015] The following is a detailed description of an account login method provided by an embodiment of the present application through specific embodiments and application scenarios in conjunction with the accompanying drawings.

[0016] The overall architecture provided by the embodiment of the present application is as follows Figure 1 As shown, the overall architecture of this application includes: SIM login plug-in, account and password management platform, SMS gateway and SIM card of terminal device (mobile terminal). The SIM card in the embodiment of this application is a super SIM card with private key storage and national secret operation. Figure 2 As shown in the figure, the SIM login plug-in includes an information configuration module: after installing the plug-in, it automatically generates a public and private key pair and prompts you to configure information such as the mobile phone number, and associates the account and password management platform with the SIM card. Page monitoring module: monitors the user's operations on the website, and monitors the mouse click event and the focus and blur events of the Input input box through the JS event monitoring mechanism, thereby providing automated account display, filling and reporting functions. Account and password management module: through interaction with the account and password management platform, it provides the functions of obtaining the account and password list and reporting the account and password information, and selectively synchronizes the account and password information to the account and password management platform. National secret operation module: provides the implementation of the SM2 and SM4 national secret algorithms on JS, which can realize the encryption and decryption of account and password data. When reporting the account and password information, the account and password information is encrypted, and when polling the authentication result, the returned encrypted ciphertext is decrypted. Authentication polling module: after selecting the account, the encrypted password is sent to the terminal device carrying the SIM card through the SMS channel. After the SIM card is decrypted by the private key, the browser plug-in will obtain the authentication result through the https polling mechanism. Account and password cache module: The plug-in is combined with the browser's session storage space to avoid multiple requests to the SMS gateway. When a website obtains a password for the first time, it will be cached for a period of time before the website is closed.

[0017] like Figure 3As shown in the figure, the account and password management platform includes: account and password management module: provides query, addition and deletion interfaces for account and password information. The SIM login plug-in uses the interface provided by this module to simplify the user login process. Authentication result module: after the SIM card decrypts the ciphertext, it transmits the authentication result and decrypted data to the account and password management platform. This module is used to manage the authentication result and pass the authentication result to the plug-in. Data analysis module: analyzes the context environment reported by the account and password information, and provides security policies, including domain name security, whitelist security and access frequency analysis. Account and password level module: classifies the account and password into high and low levels. For low-level account and password, there is no need to enter a PIN code when decrypting through a SIM card; for high-level account and password information, a PIN code must be entered to decrypt, and strict requirements will be imposed on access specifications and data analysis of high-level account and password information. SMS gateway module: associates with the SMS gateway to realize interaction with the SIM card. Since SMS has a character length limit, in the scenario of batch decryption of multiple accounts, the batch decryption function is realized by optimizing the uplink and downlink SMS protocols.

[0018] The SMS gateway includes: Uplink SMS module: transmits the decrypted data of the SIM card to the network device via SMS to realize the SIM card decrypted data reporting function. Downlink SMS module: transmits the encrypted data of the platform to the terminal device via SMS, and the SIM card decrypts the data. Due to the character limit of SMS, in the decryption scenario of a large number of passwords, the encrypted data is transmitted in batches through SMS cascading. The platform realizes the marking order of sending multiple SMS messages, and the SIM card realizes the card application that supports the sending and parsing of multiple SMS messages.

[0019] The SIM card includes: Private key storage module: The private key is stored in the SIM card and will never be taken out of the card, eliminating the possibility of the key being stolen. Data decryption module: After receiving the ciphertext through the SMS gateway, the SIM card will use the private key to decrypt it, and pass the decryption result to the account and password management platform through the SMS gateway, and then return it to the browser of the network device.

[0020] Figure 4 An account login method provided by an embodiment of the present application is shown. The method can be executed by a network device, and the network device is installed with the above-mentioned SIM login plug-in. The method includes the following steps: Step 402: In response to the user's account login operation, the encrypted ciphertext corresponding to the account to be logged in is split into multiple sub-encrypted ciphertexts and sent to the user's terminal device.

[0021] In the embodiment of the present application, it is necessary to install the SIM login plug-in on the network device in advance, and prepare the terminal device for loading the SIM card, and the SIM card is a super SIM card with private key storage and national secret operation. In addition, the SIM login plug-in needs to be configured with the mobile phone number information in advance, so as to bind it one by one with the corresponding SIM card.

[0022] In the embodiment of the present application, the SIM login plug-in needs to be pre-installed in the browser of the network device. The SIM login plug-in provides functions such as business website input monitoring, account and password collection and reporting, password decryption and automatic login.

[0023] Download the corresponding SIM login plug-in from the browser, and enter the plug-in configuration page after successful installation. Configure the mobile phone number on the configuration page. The mobile phone number corresponds to the SIM card one by one. Start the SIM login plug-in, the plug-in automatically generates a temporary public and private key pair and calls the account and password management platform interface to obtain the public key corresponding to the SIM card and save it.

[0024] In one implementation, before the encrypted ciphertext corresponding to the account to be logged in is split into multiple sub-encrypted ciphertexts and sent to the user's terminal device in response to the user's account login operation, it also includes: obtaining the account to be logged in while monitoring the user's operation of the account and password input box in the browser session.

[0025] Specifically, the SIM login plug-in can monitor the mouse click operation, the focus and blur operation of the Input tag through the JS event monitoring mechanism. If a focus event occurs, determine whether the HTML tag that triggers the event is an Input tag, and whether the Input tag is an account and password input box. If it is determined to be an account and password input box, the user's login account is determined, and the SIM login plug-in calls the platform's account information acquisition interface, displays the returned account information list on the page, and provides a drop-down box with a search function. After the user selects an account or a batch of accounts, the SIM login plug-in requests the platform's password acquisition interface, and the plug-in enters the polling state.

[0026] The account and password management platform stores all encrypted account passwords and interacts with the terminal device equipped with the SIM card through the SMS gateway. In the embodiment of the present application, due to the character limit of SMS, when the encrypted ciphertext is too long, the encrypted ciphertext can be split and marked in order, and the encrypted ciphertext corresponding to the account to be logged in can be split into multiple sub-encrypted ciphertexts, and the sub-encrypted ciphertexts corresponding to one or more accounts are packaged and sent to the terminal device through the SMS gateway, and will be sent multiple times in a marked manner. It is sent to the user identity module SIM card of the user's terminal device through the account and password management platform, thereby realizing batch data sending and decryption.

[0027] Step 404: Receive the target password uploaded by the terminal device.

[0028] Specifically, when the terminal device receives multiple sub-encrypted ciphertexts, it will confirm the integrity of the sub-encrypted ciphertexts according to the first sequence identifier through the SIM card, and then splice the multiple sub-encrypted ciphertexts into an encrypted ciphertext according to the first sequence identifier, and decrypt the encrypted ciphertext to obtain the target password. In this way, the SIM card can distinguish the order of the sub-encrypted ciphertexts and automatically splice the sub-encrypted ciphertexts. After obtaining the target password, the terminal device will send the target password to the network device, thereby ultimately achieving the technical effect of batch data decryption.

[0029] The SMS sending process and the decrypted data reporting process both involve SMS protocols and tag sequences, where the SMS protocol includes an uplink or downlink information header, an SMS security field, and a response data packet. The present application embodiment designs a response data packet, such as Figure 5 As shown, the newly added Mark field records the SMS mark order, and the Mark field is the above-mentioned first sequence mark, so as to realize batch data decryption. Since the Mark sequence mark field, that is, the sequence mark, is added in the response data packet, the SIM card can distinguish the SMS sequence and automatically splice the SMS, which can ensure the integrity of the information and finally realize the technical effect of batch data decryption. After receiving multiple encrypted ciphertexts, the user's terminal device can send the sub-encrypted ciphertext to the SIM card. After the SIM card splices the multiple sub-encrypted ciphertexts into the encrypted ciphertext according to the first sequence identifier, it decrypts the encrypted ciphertext to obtain the target password, and then the SIM card uploads the target password.

[0030] In one implementation, the target password is obtained by decrypting the encrypted ciphertext according to a SIM card private key with the authorization of the user.

[0031] Specifically, after obtaining the encrypted ciphertext, the terminal device can prompt the user to enter the PIN code. If the user enters the correct PIN code, the encrypted ciphertext can be decrypted using the SIM card private key to obtain the target password. The terminal device can return the decrypted data to the account and password management platform through the SMS gateway, and the network device can obtain the target password from the account and password management platform. The private key of the SIM card is not removed from the card, which is a hardware-level security level, which effectively improves the security of the account and password information. The account and password information stored in the browser cannot be cracked using the system's power-on password.

[0032] Step 406: Log in to the account to be logged in using the target password.

[0033] Specifically, after obtaining the target password, the target password can be used to log in to the account to be logged in.

[0034] The account login method provided by the embodiment of the present application, by responding to the user's account login operation, splits the encrypted ciphertext corresponding to the account to be logged in into multiple sub-encrypted ciphertexts and sends them to the user's terminal device; receives the target password uploaded by the terminal device, the target password is obtained by the terminal device through the SIM card splicing multiple sub-encrypted ciphertexts into encrypted ciphertext according to the first sequence identifier, and decrypts the encrypted ciphertext; logs in to the account to be logged in through the target password, and avoids plaintext transmission by encrypting the password and avoiding the scene limitation of managing the account and password through an external storage device, which can improve the security of the account password and solve the risk of account password leakage. Through the convenience of SIM cards that "everyone has" and the convenience of using browser plug-ins, the convenience of the user login process is improved, and it is no longer affected by changing browsers, clearing storage and changing devices. And by recording the order of sub-encrypted ciphertexts by sequential marking, the integrity of the encrypted ciphertext can be achieved, and batch data decryption can be achieved. .

[0035] In one implementation, the receiving the target password uploaded by the terminal device includes: receiving an encrypted password sent by an account and password management platform, wherein the encrypted password is obtained by the account and password management platform encrypting the target password uploaded by the terminal device using a private key; and decrypting the encrypted password using a public key corresponding to the private key to obtain the target password.

[0036] In one implementation, the target password received by the account and password management platform is obtained by splicing a plurality of sub-target passwords received from the terminal device by the account and password management platform according to the second sequence mark.

[0037] Specifically, after the terminal device obtains the target password, the SIM card will split the target password into multiple sub-target passwords and mark them in sequence, send the multiple sub-target passwords to the information gateway, and then send the multiple sub-target passwords to the account and password management platform through the information gateway. The account and password management platform can splice the multiple sub-target passwords received from the information gateway into the target password according to the second sequence mark, encrypt the target password using the public key generated by the SIM login plug-in, and then send it to the network device. In this way, by splitting the target password into multiple sub-target passwords and marking them in sequence, batch data decryption can be achieved.

[0038] After receiving the target password, the account and password management platform encrypts the target password uploaded by the SIM card by using the private key to obtain the encrypted password, and then sends the encrypted password to the SIM login plug-in of the network device. The SIM login plug-in receives the encrypted password sent by the account and password management platform, and then decrypts the encrypted password by using the public key corresponding to the private key to obtain the target password.

[0039] In one implementation, after receiving the encrypted password sent by the account and password management platform, the method further includes: The encrypted password is stored in the storage space of the browser session, and the user's account login operation is located in the browser session; and the expiration time of the encrypted password is associated with the browser session.

[0040] The SIM login plug-in receives the encrypted password, combines it with the browser session storage space to improve the cache strategy, decrypts it with a temporary private key to obtain the target password, and completes the automated login of the account and password. Specifically, the SIM login plug-in receives the encrypted password and stores it in the browser session storage space. The expiration time of the encrypted password is associated with the browser session, and closing the tab will automatically clear the ciphertext. The SIM card plug-in uses the temporary private key to decrypt the encrypted password to obtain the target password and complete the automated login. After the user logs in, the SIM card plug-in analyzes the account password. If it is found that the account password is filled in by the user himself and there is no record on the account and password management platform, the user is prompted to upload the account and ciphertext to the account and password management platform.

[0041] In one implementation, the step of splitting the encrypted ciphertext corresponding to the account to be logged in into multiple sub-encrypted ciphertexts and sending them to the user's terminal device includes: The multiple encrypted ciphertexts are sent to the SMS gateway through the account and password management platform, so that the SMS gateway sends the multiple encrypted ciphertexts to the terminal device according to the SMS protocol between the SMS gateway and the SIM card.

[0042] Specifically, the SIM login plug-in of the network device sends multiple copies of the encrypted ciphertext to the SMS gateway through the account and password management platform. After the SMS gateway receives the sub-encrypted ciphertext, it can send multiple sub-encrypted ciphertexts to the terminal device according to the SMS protocol (downlink SMS protocol) between the SIM card.

[0043] Figure 6 Another account login method provided by an embodiment of the present application is shown, and the method can be executed by a terminal device, and the method includes the following steps: Step 602: Receive multiple sub-encrypted ciphertexts sent by the network device.

[0044] Specifically, the terminal can receive multiple sub-encrypted ciphertexts sent by the network device, which are obtained by splitting the encrypted ciphertext corresponding to the account to be logged in by the network device. Specifically, due to the character limit of SMS, the network device will split the encrypted ciphertext corresponding to the account to be logged in into multiple sub-encrypted ciphertexts, and package the sub-encrypted ciphertexts corresponding to one or more accounts and send them to the terminal device through the SMS gateway, and will use the marking method to send them multiple times. The user identity module SIM card of the user's terminal device is sent to the user through the account and password management platform, so as to realize batch data sending and decryption.

[0045] Step 604: After splicing the plurality of sub-encrypted ciphertexts into the encrypted ciphertext according to the first sequence identifier through the SIM card, the encrypted ciphertext is decrypted to obtain the target password.

[0046] Specifically, when the terminal device receives multiple sub-encrypted ciphertexts, it will send the multiple sub-encrypted ciphertexts to the SIM card according to the SMS protocol requirements. When the SIM card receives multiple sub-encrypted ciphertexts, it will confirm the integrity of the sub-encrypted ciphertexts according to the first sequence identifier, and then splice the multiple sub-encrypted ciphertexts into encrypted ciphertexts according to the first sequence identifier, and decrypt the encrypted ciphertexts to obtain the target password. In this way, the SIM card can distinguish the order of the sub-encrypted ciphertexts and automatically splice the sub-encrypted ciphertexts, and finally achieve the technical effect of batch data decryption.

[0047] In one implementation, the method according to claim 8 is characterized in that decrypting the encrypted ciphertext to obtain the target password comprises: Under user authorization, the encrypted ciphertext is decrypted according to the SIM card private key to obtain the target password.

[0048] Specifically, the terminal device can prompt the user to enter a PIN code for authentication. If the PIN code entered by the user is correct, that is, the user authorizes, the encrypted ciphertext can be decrypted according to the SIM card private key to obtain the target password. Step 606: Send the target password to the network device, so that the network device logs in to the account to be logged in through the target password.

[0049] After obtaining the target password, the target password may be sent to a network device so that the network device logs in to the account to be logged in through the target password.

[0050] The account login method provided by the embodiment of the present application receives multiple sub-encrypted ciphertexts sent by a network device, wherein the multiple sub-encrypted ciphertexts are obtained by the network device splitting the encrypted ciphertexts corresponding to the account to be logged in; after splicing the multiple sub-encrypted ciphertexts into the encrypted ciphertext according to the first sequence identifier through the SIM card, the encrypted ciphertext is decrypted to obtain the target password; the target password is sent to the network device so that the network device logs in the account to be logged in through the target password, and the plaintext transmission is avoided by encrypting the password and transmitting it, and the scenario limitation of managing the account and password through an external storage device is avoided, which can improve the security of the account password and solve the risk of account password leakage. Through the convenience of SIM cards that "everyone has" and the convenience of using browser plug-ins, the convenience of the user login process is improved, and it is no longer affected by changing browsers, clearing storage and changing devices, and the order of sub-encrypted ciphertexts is recorded by sequential marking, so that the integrity of the encrypted ciphertext can be achieved, and batch data decryption can be achieved.

[0051] In one implementation, sending the target password to the network device includes: The target password is split into multiple sub-target passwords; the multiple sub-target passwords are sent to the account and password management platform, so that the account and password management platform will splice the multiple sub-target passwords received from the terminal device into the target password according to the second sequence mark; the target password is sent to the network device through the account and password management platform.

[0052] Specifically, after obtaining the target password, the SIM will split the target password into multiple sub-target passwords and mark them in sequence, send the multiple sub-target passwords to the information gateway, and then send the multiple sub-target passwords to the account and password management platform through the information gateway. The account and password management platform can splice the multiple sub-target passwords received from the information gateway into the target password according to the second sequence mark, encrypt the target password using the public key generated by the SIM login plug-in, and then send it to the network device. In this way, by splitting the target password into multiple sub-target passwords and marking them in sequence, batch data decryption can be achieved.

[0053] It should be noted that the account login method provided in the embodiment of the present application can be executed by an account login device or a control module in the account login device for executing the account login method. In the embodiment of the present application, the account login device provided in the embodiment of the present application is described by taking the account login method executed by the account login device as an example.

[0054] Figure 7 Schematic diagram of the structure of the account login device according to the embodiment of the present application. Figure 7 As shown, the account login device 700 includes: a sending module 710 , an acquisition module 720 and a login module 730 .

[0055] The sending module 710 is used to respond to the user's account login operation, split the encrypted ciphertext corresponding to the account to be logged in into multiple sub-encrypted ciphertexts and send them to the user identity module SIM card of the user's terminal device; the obtaining module 720 is used to obtain the target password uploaded by the SIM card, and the target password is obtained by the SIM card after splicing multiple sub-encrypted ciphertexts into the encrypted ciphertext according to the first sequence identifier and decrypting the encrypted ciphertext; the login module 730 is used to log in to the account to be logged in through the target password.

[0056] In one implementation, the sending module 710 is used to receive an encrypted password sent by an account and password management platform, where the encrypted password is obtained by the account and password management platform encrypting the target password uploaded by the SIM card using a private key; and decrypting the encrypted password using a public key corresponding to the private key to obtain the target password.

[0057] In one implementation, the acquisition module 720 is used to store the encrypted password in the storage space of the browser session, and the user's account login operation is located in the browser session; and associate the expiration time of the encrypted password with the browser session.

[0058] In one implementation, the acquisition module 720 is used to acquire the account to be logged in when monitoring the user operating the account and password input box in the browser session.

[0059] In one implementation, the sending module 710 is used to send multiple copies of the encrypted ciphertext to the SMS gateway through the account and password management platform, so that the SMS gateway sends the multiple copies of the encrypted ciphertext to the SIM card according to the SMS protocol between the SMS gateway and the SIM card.

[0060] In one implementation, the target password received by the account and password management platform is obtained by splicing a plurality of sub-target passwords received from the SIM card by the account and password management platform according to the second sequence mark.

[0061] In one implementation, the target password is obtained by decrypting the encrypted ciphertext according to a SIM card private key with the authorization of the user.

[0062] The account login device in the embodiment of the present application can be a device, or a component, integrated circuit, or chip in a terminal. The device can be a mobile electronic device or a non-mobile electronic device. Exemplarily, the mobile electronic device can be a mobile phone, a tablet computer, a laptop computer, a PDA, an in-vehicle electronic device, a wearable device, an ultra-mobile personal computer (UMPC), a netbook, or a personal digital assistant (PDA), etc. The non-mobile electronic device can be a server, a network attached storage (NAS), a personal computer (PC), a television (TV), a teller machine or a self-service machine, etc., which is not specifically limited in the embodiment of the present application.

[0063] The account login device in the embodiment of the present application may be a device having an operating system. The operating system may be an Android operating system, an iOS operating system, or other possible operating systems, which are not specifically limited in the embodiment of the present application.

[0064] The account login device provided in the embodiment of the present application can achieve Figures 1 to 5To avoid repetition, the various processes implemented by the method embodiment are not described here.

[0065] Figure 8 Schematic diagram of the structure of the account login device according to the embodiment of the present application. Figure 8 As shown, the account login device 800 includes: a receiving module 810, a decryption module 820 and a sending module 830.

[0066] The receiving module 810 is used to receive multiple sub-encrypted ciphertexts sent by the network device, where the multiple sub-encrypted ciphertexts are obtained by the network device splitting the encrypted ciphertext corresponding to the account to be logged in; the decryption module 820 is used to splice the multiple sub-encrypted ciphertexts into the encrypted ciphertext according to the first sequence identifier through the SIM card, and then decrypt the encrypted ciphertext to obtain the target password; the sending module 830 is used to send the target password to the network device, so that the network device can log in to the account to be logged in through the target password.

[0067] In one implementation, the decryption module 820 is used to decrypt the encrypted ciphertext according to the SIM card private key to obtain the target password under user authorization.

[0068] In one implementation, the sending module is used to split the target password into multiple sub-target passwords; send the multiple sub-target passwords to the account and password management platform, so that the account and password management platform will splice the multiple sub-target passwords received from the terminal device into the target password according to the second sequence mark; and send the target password to the network device through the account and password management platform.

[0069] The account login device in the embodiment of the present application can be a device, or a component, integrated circuit, or chip in a terminal. The device can be a mobile electronic device or a non-mobile electronic device. Exemplarily, the mobile electronic device can be a mobile phone, a tablet computer, a laptop computer, a PDA, an in-vehicle electronic device, a wearable device, an ultra-mobile personal computer (UMPC), a netbook, or a personal digital assistant (PDA), etc. The non-mobile electronic device can be a server, a network attached storage (NAS), a personal computer (PC), a television (TV), a teller machine or a self-service machine, etc., which is not specifically limited in the embodiment of the present application.

[0070] The account login device in the embodiment of the present application may be a device having an operating system. The operating system may be an Android operating system, an iOS operating system, or other possible operating systems, which are not specifically limited in the embodiment of the present application.

[0071] The account login device provided in the embodiment of the present application can achieve Figure 6 To avoid repetition, the various processes implemented by the method embodiment are not described here.

[0072] Alternatively, if Fig. 9 As shown, an embodiment of the present application further provides an electronic device 900, including a processor 901 and a memory 902, wherein the memory 902 stores a program or instruction that can be executed on the processor 901, and the program or instruction is implemented when executed by the processor 901: in response to the user's account login operation, the encrypted ciphertext corresponding to the account to be logged in is split into multiple sub-encrypted ciphertexts and sent to the user's terminal device; a target password uploaded by the terminal device is received, and the target password is obtained by the terminal device after splicing multiple sub-encrypted ciphertexts into the encrypted ciphertext according to the first sequence identifier through the SIM card, and then decrypting the encrypted ciphertext; and logging in to the account to be logged in through the target password.

[0073] In one implementation, an encrypted password sent by an account and password management platform is received, where the encrypted password is obtained by the account and password management platform encrypting a target password uploaded by the terminal device using a private key; the encrypted password is decrypted using a public key corresponding to the private key to obtain the target password.

[0074] In one implementation, after receiving the encrypted password sent by the account and password management platform, the encrypted password is stored in the storage space of the browser session, and the user's account login operation is located in the browser session; the expiration time of the encrypted password is associated with the browser session.

[0075] In one implementation, in response to the user's account login operation, before splitting the encrypted ciphertext corresponding to the account to be logged in into multiple sub-encrypted ciphertexts and sending them to the user's terminal device, the account to be logged in is obtained by monitoring the user's operation of the account and password input box in the browser session.

[0076] In one implementation, the target password received by the account and password management platform is obtained by splicing a plurality of sub-target passwords received from the terminal device by the account and password management platform according to the second sequence mark.

[0077] In one implementation, the target password is obtained by decrypting the encrypted ciphertext according to a SIM card private key with the authorization of the user.

[0078] In one implementation, the multiple encrypted ciphertexts are sent to a text message gateway via an account and password management platform, so that the text message gateway sends the multiple encrypted ciphertexts to the terminal device according to a text message protocol between the gateway and the SIM card.

[0079] Alternatively, when the program or instruction is executed by the processor 901, it is implemented as follows: receiving multiple sub-encrypted ciphertexts sent by a network device, wherein the multiple sub-encrypted ciphertexts are obtained by the network device by splitting the encrypted ciphertext corresponding to the account to be logged in; after splicing the multiple sub-encrypted ciphertexts into the encrypted ciphertext according to the first sequence identifier through the SIM card, the encrypted ciphertext is decrypted to obtain a target password; and the target password is sent to the network device, so that the network device logs in to the account to be logged in through the target password.

[0080] In one implementation, with user authorization, the encrypted ciphertext is decrypted according to a SIM card private key to obtain the target password.

[0081] In one implementation, the target password is split into multiple sub-target passwords; the multiple sub-target passwords are sent to an account and password management platform, so that the account and password management platform splices the multiple sub-target passwords received from the terminal device into the target password according to a second sequence mark; and the target password is sent to the network device through the account and password management platform.

[0082] The specific execution steps can refer to the various steps of the above-mentioned account login method implementation example, and can achieve the same technical effect. To avoid repetition, they will not be repeated here.

[0083] It should be noted that the electronic devices in the embodiments of the present application include: servers, terminals, or other devices except terminals.

[0084] The above electronic device structure does not constitute a limitation on the electronic device. The electronic device may include more or fewer components than shown in the figure, or combine certain components, or arrange the components differently. For example, the input unit may include a graphics processing unit (GPU) and a microphone, and the display unit may be configured with a display panel in the form of a liquid crystal display, an organic light-emitting diode, etc. The user input unit includes a touch panel and at least one of other input devices. The touch panel is also called a touch screen. Other input devices may include, but are not limited to, a physical keyboard, function keys (such as volume control keys, switch keys, etc.), a trackball, a mouse, and a joystick, which will not be repeated here.

[0085] The memory can be used to store software programs and various data. The memory may mainly include a first storage area for storing programs or instructions and a second storage area for storing data, wherein the first storage area may store an operating system, an application program or instructions required for at least one function (such as a sound playback function, an image playback function, etc.), etc. In addition, the memory may include a volatile memory or a non-volatile memory, or the memory may include both volatile and non-volatile memories. Among them, the non-volatile memory may be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), or a flash memory. Volatile memory can be random access memory (RAM), static random access memory (SRAM), dynamic random access memory (DRAM), synchronous dynamic random access memory (SDRAM), double data rate synchronous dynamic random access memory (DDRSDRAM), enhanced synchronous dynamic random access memory (ESDRAM), synchronous link dynamic random access memory (SLDRAM) and direct memory bus random access memory (DRRAM).

[0086] The processor may include one or more processing units; optionally, the processor integrates an application processor and a modem processor, wherein the application processor mainly processes operations related to the operating system, user interface, and application programs, and the modem processor mainly processes wireless communication signals, such as a baseband processor. It is understandable that the modem processor may not be integrated into the processor.

[0087] An embodiment of the present application also provides a readable storage medium, on which a program or instruction is stored. When the program or instruction is executed by a processor, each process of the above-mentioned account login method embodiment is implemented, and the same technical effect can be achieved. To avoid repetition, it will not be repeated here.

[0088] The processor is the processor in the electronic device described in the above embodiment. The readable storage medium includes a computer readable storage medium, such as ROM, RAM, magnetic disk or optical disk.

[0089] An embodiment of the present application also provides a computer program product, which includes a computer program stored on a non-transitory computer-readable storage medium, and the computer program includes program instructions. When the program instructions are executed by a computer, the computer executes the various processes of the above-mentioned account login method embodiment and can achieve the same technical effect. To avoid repetition, it will not be repeated here.

[0090] It should be noted that, in this article, the terms "comprise", "include" or any other variant thereof are intended to cover non-exclusive inclusion, so that the process, method, article or device including a series of elements includes not only those elements, but also includes other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprise one..." do not exclude the presence of other identical elements in the process, method, article or device including the element. In addition, it should be pointed out that the scope of the methods and devices in the embodiments of the present application is not limited to performing functions in the order shown or discussed, and may also include performing functions in a substantially simultaneous manner or in reverse order according to the functions involved, for example, the described method may be performed in an order different from that described, and various steps may also be added, omitted, or combined. In addition, the features described with reference to certain examples may be combined in other examples.

[0091] Through the description of the above implementation methods, those skilled in the art can clearly understand that the above-mentioned embodiment methods can be implemented by means of software plus a necessary general hardware platform, and of course by hardware, but in many cases the former is a better implementation method. Based on such an understanding, the technical solution of the present application, or the part that contributes to the prior art, can be embodied in the form of a computer software product, which is stored in a storage medium (such as ROM / RAM, a magnetic disk, or an optical disk), and includes a number of instructions for enabling a terminal (which can be a mobile phone, a computer, a server, or a network device, etc.) to execute the methods described in each embodiment of the present application.

[0092] The embodiments of the present application are described above in conjunction with the accompanying drawings, but the present application is not limited to the above-mentioned specific implementation methods. The above-mentioned specific implementation methods are merely illustrative and not restrictive. Under the guidance of the present application, ordinary technicians in this field can also make many forms without departing from the purpose of the present application and the scope of protection of the claims, all of which are within the protection of the present application.

Claims

1. An account login method, characterized in that: Applied to network equipment, including: In response to the user's account login operation, the encrypted ciphertext corresponding to the account to be logged in is split into multiple sub-encrypted ciphertexts and sent to the user's terminal device; receiving a target password uploaded by the terminal device, wherein the target password is obtained by the terminal device decrypting the encrypted ciphertext after splicing a plurality of sub-encrypted ciphertexts into the encrypted ciphertext according to a first sequence identifier through a SIM card; Log in to the account to be logged in through the target password.

2. The method according to claim 1, characterized in that The obtaining of the target password uploaded by the terminal device includes: Receiving an encrypted password sent by the account and password management platform, wherein the encrypted password is obtained by encrypting the target password uploaded by the terminal device by the account and password management platform using a private key; The encrypted password is decrypted using the public key corresponding to the private key to obtain the target password.

3. The method according to claim 2, characterized in that After receiving the encrypted password sent by the account and password management platform, the method further includes: The encrypted password is stored in the storage space of the browser session, and the user's account login operation is located in the browser session; An expiration time of the encrypted password is associated with the browser session.

4. The method according to claim 1, characterized in that: Before the method of responding to the user's account login operation and splitting the encrypted ciphertext corresponding to the account to be logged in into multiple sub-encrypted ciphertexts and sending them to the user's terminal device, it also includes: In the case of monitoring the user operating the account and password input box in the browser session, the account to be logged in is obtained.

5. The method according to claim 2, characterized in that: The target password received by the account and password management platform is obtained by splicing a plurality of sub-target passwords received from the terminal device by the account and password management platform according to the second sequence mark.

6. The method according to claim 1, characterized in that The target password is obtained by decrypting the encrypted ciphertext according to the SIM card private key under the authorization of the user.

7. The method according to claim 1, characterized in that The step of splitting the encrypted ciphertext corresponding to the account to be logged in into multiple sub-encrypted ciphertexts and sending them to the user's terminal device includes: The multiple encrypted ciphertexts are sent to the SMS gateway through the account and password management platform, so that the SMS gateway sends the multiple encrypted ciphertexts to the terminal device according to the SMS protocol between the SMS gateway and the SIM card.

8. An account login method, characterized in that: Applied to terminal equipment, including: Receiving multiple sub-encrypted ciphertexts sent by a network device, wherein the multiple sub-encrypted ciphertexts are obtained by splitting the encrypted ciphertexts corresponding to the account to be logged in by the network device; After splicing the plurality of sub-encrypted ciphertexts into the encrypted ciphertext according to the first sequence identifier through the SIM card, the encrypted ciphertext is decrypted to obtain the target password; The target password is sent to the network device, so that the network device logs in to the account to be logged in through the target password.

9. The method according to claim 8, characterized in that Decrypting the encrypted ciphertext to obtain the target password includes: Under user authorization, the encrypted ciphertext is decrypted according to the SIM card private key to obtain the target password.

10. The method according to claim 8, characterized in that The sending the target password to the network device comprises: Splitting the target password into multiple sub-target passwords; Sending the multiple sub-target passwords to the account and password management platform, so that the account and password management platform can splice the multiple sub-target passwords received from the terminal device into the target password according to the second sequence mark; The target password is sent to the network device through the account and password management platform.

Images