Application login processing method and device

Abstract

The embodiment of the invention provides an application login processing method and device, and the method comprises the steps: firstly, receiving a certificate obtaining request sent by an application program, secondly, querying an application login certificate stored in an SIM card of a user terminal, and finally, returning the application login certificate to the application program. According to the application login method and device, the application login certificate is stored in the SIM card, so that multiple applications can be safely shared, the application login efficiency is improved, meanwhile, the application login certificate is stored based on the SIM card, data migration is achieved, the application login convenience is improved, and the user experience is improved.

Description

Technical Field

[0001] This document relates to the field of data processing, and in particular to an application login processing method and device. Background Art

[0002] With the rapid popularization of the Internet and the development of smart terminals (such as smartphones, tablets, wearable devices, etc.), people's lifestyles have changed significantly. Smart terminals are no longer simple communication tools, but have become personal assistants that integrate multiple functions such as communication, entertainment, work, study, and health monitoring. More and more people are beginning to rely on applications (Apps) in smart terminals to complete their daily activities;

[0003] A SIM card is an integrated circuit card that stores a user's personal information, encryption keys, phone book and other important data. The super SIM card, which is an upgrade based on the SIM card, is more secure, can dynamically download applications, supports near-field communication, etc. How to use the characteristics of the super SIM card to simplify user access to applications is the future direction of the service provider's efforts. Summary of the invention

[0004] An embodiment of the present specification aims to provide an application login processing method and device to solve the problem of low application login security.

[0005] To solve the above technical problems, an embodiment of this specification is implemented as follows:

[0006] In a first aspect, an embodiment of this specification provides an application login processing method, which is applied to a SIM card application, and the method includes:

[0007] Receive the credential acquisition request sent by the application;

[0008] Querying the application login credentials stored in the SIM card of the user terminal;

[0009] The application login credential is returned to the application program; the application login credential is used to log in to the application program.

[0010] In a second aspect, another embodiment of the present specification provides an application login processing device, which runs on a SIM card application, and the device includes:

[0011] A request receiving module, configured to receive a credential acquisition request sent by an application;

[0012] a credential query module, configured to query the application login credentials stored in the SIM card of the user terminal;

[0013] The credential return module is configured to return the application login credential to the application program; the application login credential is used to log in to the application program.

[0014] In the third aspect, another embodiment of the present specification provides an application login processing device, comprising: a memory, a processor, and computer executable instructions stored on the memory and executable on the processor, wherein the computer executable instructions, when executed by the processor, implement the steps of the application login processing method as described in the first aspect above.

[0015] In a fourth aspect, another embodiment of the present specification provides a computer-readable storage medium, wherein the computer-readable storage medium is used to store computer-executable instructions, and when the computer-executable instructions are executed by a processor, the steps of the application login processing method described in the first aspect above are implemented.

[0016] In a fifth aspect, another embodiment of the present specification provides a computer program product, wherein the computer program product includes an application login processing program, and the application login processing program is executed by a processor to implement the steps of the application login processing method as described in the first aspect above.

[0017] The application login processing method provided in this embodiment first receives a credential acquisition request sent by an application, then queries the application login credentials stored in the SIM card of the user terminal, and finally returns the application login credentials to the application so as to log in to the application through the application login credentials. By storing the application login credentials in the SIM card, multiple applications can be securely shared, thereby improving the efficiency of application login. At the same time, by storing the application login credentials based on the SIM card, data migration is achieved, the convenience of application login is improved, and the user experience is improved. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] In order to more clearly illustrate the technical solutions in one or more embodiments of the present specification, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments recorded in the present specification. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative labor.

[0019] Figure 1 A processing flow chart of an application login processing method provided by an embodiment of this specification;

[0020] Figure 2 A flowchart for obtaining application login credentials provided in one embodiment of this specification;

[0021] Figure 3A schematic diagram of a login page provided for one embodiment of this specification;

[0022] Figure 4 An authentication flow chart provided for one embodiment of this specification;

[0023] Figure 5 An application login flow chart provided for one embodiment of this specification;

[0024] Figure 6 A processing flow chart of an application login processing method for a one-key login scenario provided by an embodiment of this specification;

[0025] Figure 7 A schematic diagram of an application login processing device provided in one embodiment of this specification;

[0026] Figure 8 A schematic diagram of the structure of an application login processing device provided in one embodiment of this specification. DETAILED DESCRIPTION

[0027] In order to enable those skilled in the art to better understand the technical solutions in one or more embodiments of this specification, the following will be combined with the drawings in one or more embodiments of this specification to clearly and completely describe the technical solutions in one or more embodiments of this specification. Obviously, the described embodiments are only part of the embodiments of this specification, not all of them. Based on one or more embodiments of this specification, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of this document.

[0028] This specification provides an application login processing method embodiment:

[0029] Reference Figure 1 , which shows a processing flow chart of an application login processing method provided by this embodiment, refer to Figure 6 , which shows a processing flow chart of an application login processing method provided by this embodiment for a one-key login scenario.

[0030] Reference Figure 1 The application login processing method provided in this embodiment is applied to SIM card applications and specifically includes the following steps S102 to S108.

[0031] Step S102: receiving a credential acquisition request sent by an application.

[0032] The application login processing method provided in this embodiment can be applied to the one-click login of an application, or the password-free login scenario. In actual applications, when a user logs in to an application, it is usually necessary to enter verification information, such as a user name and a login password. This method is relatively cumbersome, and through one-click login, the user can log in to the application without entering verification information; in the one-click login scenario, usually any application initiates an application login credential acquisition request to the operator's login server. After any application receives the application login credential returned by the login server, the application login credential is stored in a private directory, such as data / data / packagename, or the application login credential is stored in a device shared directory, such as through an xml file, ContentProvider, etc., so that other applications can access the application login credential for one-click login. However, the above two storage methods for application login credentials will lead to a low one-click login success rate and poor security.

[0033] To this end, this embodiment provides a method for storing application login credentials in a SIM card. Based on the characteristics of the SIM card, the application login credentials stored in the SIM card can be shared by multiple applications. At the same time, the application login credentials stored in the SIM card can also be migrated, thereby improving the convenience of application login.

[0034] In this embodiment, the application login credential refers to an identity authentication credential associated with a user or other identifier that can uniquely characterize a user, such as the user's communication number. The application login credential can be used to quickly verify the user's identity when logging into the application without the need for a traditional username and password login, i.e., a one-click login credential. Optionally, the application login credential includes a randomly generated string or digital sequence, such as a number credential. It should be noted that the application login credential is issued by the operator's login server, which can also be referred to as a one-click login server.

[0035] The SIM card application is integrated in the SIM card, which can be a USIM (Universal Subscriber Identity Module) card or a super SIM card; the SIM card application is an application corresponding to the SIM card, which can be a USIM card application or a super SIM card application. Optionally, the one-key login SDK provided by the operator can be deployed in the application. When the application initiates the one-key login, the SIM card application receives the credential acquisition request sent by the application through the one-key login SDK.

[0036] During the specific execution process, before receiving the credential acquisition request sent by the application, other applications installed by the user terminal first log in with one click, obtain the application login credentials for one-click login from the operator's server, and send the application login credentials to the SIM card application. The SIM card application stores the application login credentials in the SIM card for the application to log in. In an optional implementation manner provided in this embodiment, the application login credentials are stored in the SIM card in the following manner:

[0037] Receiving application login credentials sent by other applications installed on the application terminal;

[0038] The application login credentials are stored in the SIM card.

[0039] Optionally, the application may be an application that is currently logging in, i.e., the application to be logged in. In addition, this embodiment also includes other applications other than the application. Other applications may be applications that have been logged in through one-click login in history, i.e., logged in applications. When other applications are logged in through one-click login, the application login credentials sent by the operator's login server are obtained and stored in the SIM card, so that the application to be logged in performs application login based on the application login credentials stored in the SIM card. It should be noted that the other applications and the application may be any application in the user terminal, and this embodiment does not limit this.

[0040] Specifically, other applications send a login request carrying AppID (Application IDentifier) ​​and package signature to the one-click login server through the one-click login SDK. The one-click login server performs login verification on the AppID and package signature contained in the login request and returns the application login credentials to other applications after the verification is passed. Other applications receive the application login credentials and mask number returned by the login server through the one-click login SDK, store the application login credentials to the SIM card through the one-click login SDK, and call the display component of the application to display the mask number.

[0041] For example, see Figure 2As shown in the flow chart of obtaining application login credentials of other applications shown in the figure, after the user enters the login interface of other applications, the one-click login SDK carries the Appid and the package signature to initiate an application login credential acquisition request to the one-click login server. The login server returns the application login credential and the mask number to the one-click login SDK. The one-click login SDK returns the application login credential and the mask number to the other application, and initiates a request to store the application login credential to its SIM card application. Specifically, in the process of storing the application login credential, the one-click login SDK initiates a call to the SIM card application, calls the OMAPI interface to open the machine-card channel, sends the APDU command to interact with the SIM card after the opening is successful, stores the application login credential, and after the authentication is successful by the operating system of the user terminal, the SIM card application writes the application login credential into the SIM card; wherein APDU is an information unit transmitted between the smart card and the smart card reader, (command sent to the SIM card) instruction (defined in the ISO 7816-4 specification): CLA INS P1 P2 Lc Data Le. They respectively represent CLA: instruction category; INS: instruction code; P1, P2: parameters; Lc: length of Data; Le: number of data bytes to be answered when responding. In this embodiment, CLA and INS for storing numbers need to be specified.

[0042] In the specific execution process, after other applications obtain application login credentials from the login server and store the application login credentials in the SIM card through the SIM card application, the credential acquisition request sent by the application can be obtained. Specifically, in the process of obtaining the credential acquisition request sent by the application, the user can submit a one-click login request by clicking the login control configured on the login page of the application. In an optional implementation provided by this embodiment, the credential acquisition request sent by the application is received in the following manner: after the login control configured on the login page of the application is triggered, the credential acquisition request sent by the application is received. For example Figure 3 As shown in the displayed login page, after the "one-click login" control configured on the login page is triggered, the credential acquisition request sent by the application is accepted.

[0043] Step S104, querying the application login credentials stored in the SIM card of the user terminal.

[0044] After receiving the credential acquisition request sent by the application, in this step, the application login credentials stored in the SIM card of the user terminal are queried. Here, the application login credentials can be the credentials obtained from the operator's login server when other applications log in through one-click login.

[0045] In order to improve the security of application login and ensure that login is performed based on application login credentials when the application is authorized, the application may also be authenticated after receiving a credential acquisition request sent by the application. In an optional implementation manner provided in this embodiment, after receiving a credential acquisition request sent by the application, the application may be authenticated in the following manner:

[0046] Authenticate the application program according to the application identifier included in the credential acquisition request;

[0047] If the authentication is successful, query the application login credentials stored in the SIM card of the user terminal.

[0048] Specifically, after receiving the credential acquisition request sent by the application, the application identifier contained in the credential acquisition request is extracted, and the application is authenticated according to the application identifier. If the authentication is successful, it indicates that the application has been authorized. For an authorized application, the credential acquisition request of the application can be responded to, and the application login credentials stored in the SIM card of the user terminal can be queried. The application identifier includes at least one of the following: AppID (application identifier, ApplicationIDentifier), package signature (Package Signature).

[0049] Further, in the process of performing authentication processing according to the credential acquisition request, in order to make the authentication result more accurate, the authentication processing can be performed based on the authorized application list stored in the SIM card. In an optional implementation provided by this embodiment, the following method is used to authenticate the application according to the application identifier included in the credential acquisition request, including:

[0050] Extracting the application identifier contained in the credential acquisition request;

[0051] Based on the authorized application list stored in the SIM card, it is detected whether the application identifier is an authorized identifier, and if so, it is determined that the authentication is passed.

[0052] The authorized application list includes the application identifier of the authorized application. Specifically, in the process of authentication based on the authorized application list stored in the SIM card, the application identifier contained in the credential acquisition request can be extracted, and the authorized application list stored in the SIM card application can be obtained to detect whether the application identifier exists in the authorized application list stored in the SIM card. If so, it is determined that the authentication is passed; if not, it is determined that the authentication is not passed, and an unauthorized result is returned to the application, or no processing is performed.

[0053] Optionally, the authorized application list stored in the SIM card is stored in the SIM card when the user authenticates the SIM card application. In an optional implementation provided by this embodiment, the authorized application list is obtained in the following manner:

[0054] Sending a list acquisition instruction to a login server according to the user's authentication operation on the SIM card application;

[0055] Receive the authorized application list returned by the login server, and store the authorized application list in the SIM card.

[0056] Specifically, when the user initiates authentication of the SIM card application, a permission table acquisition instruction may be sent to the login server, an authorized application list returned by the login server may be received, and the authorized application list may be written to the SIM card for storage. Alternatively, when the SIM card application spontaneously performs authentication, a permission table acquisition instruction may be sent to the login server, an authorized application list returned by the login server may be received, and the authorized application list may be written to the SIM card for storage. This embodiment is not limited here.

[0057] Furthermore, in order to improve data security, the login server may also encrypt the authorized application list in the process of receiving the authorized application list returned by the login server. In an optional implementation provided by this embodiment, the authorized application list returned by the login server is received in the following manner, including:

[0058] Receiving the encrypted authorized application list returned by the login server;

[0059] The encrypted authorized application list is decrypted based on a private key to obtain the authorized application list.

[0060] Specifically, during the process of transmitting the authorized application list to the login server, the authorized application list can be encrypted based on the public key of the national secret algorithm. Correspondingly, the SIM card application receives the encrypted authorized application list returned by the login server, decrypts the encrypted authorized application list based on the private key, and obtains the authorized application list. Here, since the super SIM card has a national secret security chip, it can provide key storage and encryption and decryption computing capabilities, and the key does not leave the card, ensuring that the key and sensitive data are not abnormally read or tampered with.

[0061] In addition, when the application is authenticated according to the application identifier included in the credential acquisition request and the authentication is passed, the operation rights of the application for the SIM card application can be partially opened according to the authentication result to perform refined management. In an optional implementation manner provided in this embodiment, the operation rights of the application for the SIM card application are partially opened according to the authentication result in the following manner:

[0062] If the operation permission of the application program for the SIM card application is a read permission, the application program is subjected to permission opening processing according to the permission rule of the read permission;

[0063] If the operation permission of the application program for the SIM card application is write permission, permission opening processing is performed on the application program according to the permission rule of the write permission.

[0064] Specifically, when the authentication is passed, the operation permissions can also be finely managed based on the authentication results. As shown in Table 1 below: Determine whether it has permission by bit &; for example, read permission (Read Permission), the application has read permission, which can be expressed as: Permission&1==1, where Permission represents the permission bit mask, and 1 is the bit used to check the read permission. For example, if the application has write permission, it can be expressed as: Permission&2==2. In addition, in order to manage read permissions for different applications, for example, the application login credentials of application A only allow the application of application A to access.

[0065]

[0066] Table 1

[0067] It should be noted that the above-mentioned authentication process for the application can also be performed by the operating system of the user terminal. The specific authentication process step can be that after the step of receiving the credential acquisition request sent by the application is executed, the operating system performs authentication processing on the application based on the application identifier contained in the credential acquisition request. After the authentication is passed, the SIM card application queries the application login credentials stored in the SIM card of the user terminal. The specific authentication process of the operating system can refer to the above, and this embodiment is not limited here. In addition, the SIM card application can also call the operating system for authentication processing.

[0068] For example, Figure 4 As shown in the authentication flow chart, if the application needs to obtain the application login credentials in the SIM card, the operating system authenticates the application. If the application identifier of the application is in the authorized application list stored in the SIM card, the authentication is successful, wherein the authorized application list of the SIM card is obtained by the SIM card application from the login server and stored in the SIM card.

[0069] In specific implementation, after querying the application login credentials stored in the SIM card, in order to manage the application login credentials later, the credential content can also be edited so that anomalies can be traced when the application login credentials are subsequently verified. In an optional implementation manner provided in this embodiment, the credential content of the application login credentials is edited in the following manner:

[0070] Edit the credential content of the queried application login credential to obtain the credential editing result;

[0071] Encrypting the credential editing result based on the public key to obtain an encrypted credential;

[0072] Furthermore, in the process of editing the credential content of the application login credential, an identifier capable of being traced may be written into the credential data of the application login credential. In an optional implementation provided by this embodiment, the credential content of the queried application login credential is edited in the following manner, including:

[0073] A time parameter, an application identifier of the application program and / or a user identifier are written into the credential data of the application login credential.

[0074] Optionally, the time parameter may be a timestamp, the application identifier of the application may be Appid (Application Identifier), and the user identifier may be imsi (International Mobile Subscriber Identity).

[0075] Step S106: Return the application login credentials to the application program.

[0076] After the application login credentials stored in the SIM card of the user terminal are queried, in this step, the application login credentials are returned to the application. Optionally, the application login credentials are used to log in to the application.

[0077] During the specific execution process, the credential content of the queried application login credential is edited to obtain the credential editing result, the credential editing result is encrypted based on the public key, and the encrypted credential is obtained. Optionally, the encrypted credential is returned to the application.

[0078] The following Figure 5 As an example, the application login processing method provided in this embodiment is generally described. Figure 5As shown in the login flow chart of the application, the application initiates a one-click login request, and the one-click login SDK sends a credential acquisition request to the SIM card application. After successful authentication, the SIM card application reads the application login credentials stored in the super SIM card, edits and encrypts the application login credentials, obtains the encrypted credentials, and returns the encrypted credentials to the one-click login SDK. The one-click login SDK returns the received encrypted credentials to the application, and the application initiates a one-click login verification request to the login server (requesting to obtain a login token). The login server uses the private key in the public-private key pair to decrypt the encrypted credentials, and checks whether the package signature and Appid are consistent. If they are consistent, a token is returned, and the one-click login is successful using the token.

[0079] To sum up, the application login processing method provided in this embodiment first receives a credential acquisition request sent by an application, then queries the application login credentials stored in the SIM card of the user terminal, and finally returns the application login credentials to the application so as to log in to the application through the application login credentials. By storing the application login credentials in the SIM card, multiple applications can be securely shared, thereby improving the efficiency of application login. At the same time, by storing the application login credentials based on the SIM card, data migration is achieved, the convenience of application login is improved, and the user experience is improved.

[0080] The following combination Figure 6 , taking the application login processing method provided by this embodiment in the one-key login scenario as an example, the application login processing method provided by this embodiment is further described. Figure 6 The application login processing method applied to the one-key login scenario specifically includes steps S602 to S614.

[0081] Step S602: After the login control configured on the login page of the application is triggered, a credential acquisition request sent by the application is received.

[0082] Prior to this, according to the user's authentication operation on the SIM card application, a list acquisition instruction is sent to the login server; the authorized application list returned by the login server is received, and the authorized application list is stored in the SIM card.

[0083] Receive application login credentials sent by other applications installed on the application terminal; store the application login credentials in the SIM card.

[0084] Step S604: extract the application identifier contained in the credential acquisition request.

[0085] Step S606: based on the authorized application list stored in the SIM card, detect whether the application identifier is an authorized identifier, and if so, determine that the authentication is successful.

[0086] Step S608: query the application login credentials stored in the SIM card of the user terminal.

[0087] Step S610, writing a time parameter, an application identifier of the application program and / or a user identifier into the credential data of the application login credential, and obtaining a credential editing result.

[0088] Step S612: encrypt the certificate editing result based on the public key to obtain an encrypted certificate.

[0089] Step S614, returning the encrypted credentials to the application.

[0090] Optionally, encrypted credentials are used for one-click login to the application.

[0091] Figure 7 A schematic diagram of an application login processing device provided by an embodiment of the present invention is shown in FIG. Figure 7 As shown, the device comprises:

[0092] The request receiving module 702 is configured to receive a credential acquisition request sent by an application;

[0093] The credential query module 704 is configured to query the application login credentials stored in the SIM card of the user terminal;

[0094] The application login module 706 is configured to return the application login credential to the application program, so that the application program performs application login based on the application login credential.

[0095] The application login processing device provided in this embodiment first runs the request receiving module 702 to receive the credential acquisition request sent by the application, then runs the credential query module 704 to query the application login credential stored in the SIM card of the user terminal, and finally runs the application login module 706 to return the application login credential to the application, so that the application performs application login based on the application login credential. By storing the application login credential in the SIM card, multiple applications can be securely shared, thereby improving the efficiency of application login. At the same time, by storing the application login credential based on the SIM card, data migration is achieved, the convenience of application login is improved, and the user experience is improved.

[0096] The application login processing device provided in one embodiment of this specification can implement each process in the aforementioned method embodiment and achieve the same functions and effects, which will not be repeated here.

[0097] Furthermore, an embodiment of the present specification also provides an application login processing device, Figure 8 A schematic diagram of the structure of an application login processing device provided in an embodiment of this specification, such as Figure 8As shown, the device includes: a memory 801, a processor 802, a bus 803 and a communication interface 804. The memory 801, the processor 802 and the communication interface 804 communicate through the bus 803, and the communication interface 804 may include an input and output interface, which includes but is not limited to a keyboard, a mouse, a display, a microphone, a loudspeaker, etc.

[0098] Figure 8 In the embodiment, the memory 801 stores computer executable instructions that can be run on the processor 802, and when the computer executable instructions are executed by the processor 802, the following process is implemented:

[0099] Receive the credential acquisition request sent by the application;

[0100] Querying the application login credentials stored in the SIM card of the user terminal;

[0101] The application login credential is returned to the application program; the application login credential is used to log in to the application program.

[0102] The application login processing device provided in this embodiment, through the cooperation of the memory 801, the processor 802, the bus 803 and the communication interface 804, first receives the credential acquisition request sent by the application, then queries the application login credential stored in the SIM card of the user terminal, and finally returns the application login credential to the application so as to log in to the application through the application login credential. By storing the application login credential in the SIM card, multiple applications can be securely shared, thereby improving the efficiency of application login. At the same time, by storing the application login credential based on the SIM card, data migration is achieved, the convenience of application login is improved, and the user experience is improved.

[0103] The application login processing device provided in one embodiment of this specification can implement each process in the aforementioned method embodiment and achieve the same functions and effects, which will not be repeated here.

[0104] Furthermore, another embodiment of the present specification provides a computer-readable storage medium, wherein the computer-readable storage medium is used to store computer-executable instructions, and when the computer-executable instructions are executed by a processor, the following process is implemented:

[0105] Receive the credential acquisition request sent by the application;

[0106] Querying the application login credentials stored in the SIM card of the user terminal;

[0107] The application login credential is returned to the application program; the application login credential is used to log in to the application program.

[0108] The computer-readable storage medium provided in this embodiment first receives a credential acquisition request sent by an application, then queries the application login credentials stored in the SIM card of the user terminal, and finally returns the application login credentials to the application so as to log in to the application through the application login credentials. By storing the application login credentials in the SIM card, multiple applications can be securely shared, thereby improving the efficiency of application login. At the same time, by storing the application login credentials based on the SIM card, data migration is achieved, the convenience of application login is improved, and the user experience is improved.

[0109] The computer-readable storage medium includes a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk, etc.

[0110] The computer-readable storage medium provided in an embodiment of this specification can implement each process in the aforementioned method embodiment and achieve the same functions and effects, which will not be repeated here.

[0111] Furthermore, another embodiment of the present specification also provides a computer program product, which implements the following process when executed by a processor:

[0112] Receive the credential acquisition request sent by the application;

[0113] Querying the application login credentials stored in the SIM card of the user terminal;

[0114] The application login credential is returned to the application program; the application login credential is used to log in to the application program.

[0115] The computer program product provided in this embodiment first receives a credential acquisition request sent by an application, then queries the application login credential stored in the SIM card of the user terminal, and finally returns the application login credential to the application so as to log in to the application through the application login credential. By storing the application login credential in the SIM card, multiple applications can be securely shared, thereby improving the efficiency of application login. At the same time, by storing the application login credential based on the SIM card, data migration is achieved, the convenience of application login is improved, and the user experience is improved.

[0116] The computer program product provided in one embodiment of this specification can implement each process in the aforementioned method embodiment and achieve the same functions and effects, which will not be repeated here.

[0117] Those skilled in the art will appreciate that embodiments of the present invention may be provided as methods, systems, or computer program products. Therefore, the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the present invention may take the form of a computer program product implemented on one or more computer-readable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0118] The present invention is described with reference to flowcharts and / or block diagrams of methods, devices (systems), and computer program products according to embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0119] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0120] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 A step that specifies a function in one or more boxes.

[0121] In a typical configuration, a computing device includes one or more processors (CPU), input / output interfaces, network interfaces, and memory.

[0122] Memory may include non-permanent storage in a computer-readable storage medium, random access memory (RAM) and / or non-volatile memory in the form of read-only memory (ROM) or flash RAM. Memory is an example of a computer-readable storage medium.

[0123] Computer-readable storage media include permanent and non-permanent, removable and non-removable media that can be implemented by any method or technology to store information. Information can be computer-readable instructions, data structures, program modules or other data. Examples of computer-readable storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, compact disk read-only memory (CD-ROM), digital versatile disk (DVD) or other optical storage, magnetic cassettes, magnetic tape disk storage or other magnetic storage devices or any other non-transmission media that can be used to store information that can be accessed by a computing device. As defined herein, computer-readable storage media does not include temporary computer-readable media (transitory media), such as modulated data signals and carrier waves.

[0124] It should also be noted that the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, commodity or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, commodity or device. In the absence of more restrictions, the elements defined by the sentence "comprises a ..." do not exclude the existence of other identical elements in the process, method, commodity or device including the elements.

[0125] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems or computer program products. Therefore, the present application may adopt the form of a complete hardware embodiment, a complete software embodiment or an embodiment in combination with software and hardware. Moreover, the present application may adopt the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) that contain computer-usable program code.

[0126] The above is only an embodiment of the present application and is not intended to limit the present application. For those skilled in the art, the present application may have various changes and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application should be included in the scope of the claims of the present application.

Claims

1. An application login processing method, characterized in that: Applied to SIM card application, the method comprises: Receive the credential acquisition request sent by the application; Querying the application login credentials stored in the SIM card of the user terminal; The application login credential is returned to the application program; the application login credential is used to log in to the application program.

2. The application login processing method according to claim 1, characterized in that: The querying of the application login credentials stored in the SIM card of the user terminal includes: Authenticate the application program according to the application identifier included in the credential acquisition request; If the authentication is successful, query the application login credentials stored in the SIM card of the user terminal.

3. The application login processing method according to claim 2, characterized in that: The authenticating the application program according to the application identifier included in the credential acquisition request includes: Extracting the application identifier contained in the credential acquisition request; Based on the authorized application list stored in the SIM card, it is detected whether the application identifier is an authorized identifier, and if so, it is determined that the authentication is passed.

4. The application login processing method according to claim 3, characterized in that: Before the step of receiving the credential acquisition request sent by the application is executed, the method further includes: Sending a list acquisition instruction to a login server according to the user's authentication operation on the SIM card application; Receive the authorized application list returned by the login server, and store the authorized application list in the SIM card.

5. The application login processing method according to claim 4, characterized in that: The receiving the authorized application list returned by the login server includes: Receiving the encrypted authorized application list returned by the login server; The encrypted authorized application list is decrypted based on a private key to obtain the authorized application list.

6. The application login processing method according to claim 2, characterized in that: If the result of the sub-step of authenticating the application program according to the application identifier included in the credential acquisition request is that the authentication is successful, the following operation is further performed: If the operation permission of the application program for the SIM card application is a read permission, the application program is subjected to permission opening processing according to the permission rule of the read permission; If the operation permission of the application program for the SIM card application is write permission, permission opening processing is performed on the application program according to the permission rule of the write permission.

7. The application login processing method according to claim 1, characterized in that: Before the step of receiving the credential acquisition request sent by the application is executed, the method further includes: Receiving the application login credentials sent by other applications installed on the application terminal; The application login credentials are stored in the SIM card.

8. The application login processing method according to claim 1, characterized in that: After the step of querying the application login credentials stored in the SIM card of the user terminal is executed, and before the step of returning the application login credentials to the application program is executed, the method further includes: Edit the credential content of the queried application login credential to obtain the credential editing result; Encrypting the credential editing result based on the public key to obtain an encrypted credential; Accordingly, returning the application login credentials to the application program includes: The encrypted credentials are returned to the application.

9. The application login processing method according to claim 8, characterized in that: The editing of the credential content of the queried application login credential includes: A time parameter, an application identifier of the application program and / or a user identifier are written into the credential data of the application login credential.

10. The application login processing method according to claim 1, characterized in that: The receiving the credential acquisition request sent by the application comprises: After the login control configured on the login page of the application is triggered, the credential acquisition request sent by the application is received.

Images