Certificate authentication method and device, computer equipment and storage medium

Abstract

The invention relates to a certificate authentication method and device, computer equipment, a storage medium and a computer program product. The method comprises the following steps: in response to a login request of an account, obtaining a certificate of the login request; verifying the certificate by using a preset national secret verification strategy to obtain a first verification result; under the condition that the first verification result is failed, verifying the certificate by using a preset international algorithm verification strategy to obtain a second verification result; acquiring an identity identifier input by an account, and judging whether the identity identifier is matched with the certificate according to the first verification result, the second verification result and the identity identifier; and under the condition that the identity identifier is matched with the certificate, executing a login request of the account number. By adopting the method, the accuracy and safety of certificate authentication can be effectively improved.

Description

Technical Field

[0001] The present application relates to the field of computer network security technology, and in particular to a certificate authentication method, apparatus, computer equipment, storage medium and computer program product. Background Art

[0002] With the continuous development of technology, digital certificates play an increasingly important role in information security. Digital certificates are not only used to verify identity, but also to ensure the security of information transmission, and the core lies in the encryption algorithm used. At present, the competition between the national secret algorithm (national cryptographic algorithm) and the international algorithm (such as RSA, ECDSA, etc.) is becoming more and more obvious, and the two represent different security standards and certification systems.

[0003] In traditional information security technology, digital certificates are usually authenticated based on national or international algorithms to improve the security of the overall authentication system. Although both algorithms have shown good security performance in their respective application scenarios, existing technologies can usually only identify one algorithm for digital certificate authentication, and cannot achieve compatible authentication based on national and international algorithms. This single authentication method limits the flexibility and adaptability of the system and cannot meet diverse security needs. Summary of the invention

[0004] Based on this, it is necessary to provide a certificate authentication method, apparatus, computer device, computer-readable storage medium and computer program product to address the above technical issues.

[0005] In a first aspect, the present application provides a certificate authentication method. The method comprises:

[0006] In response to a login request of an account, obtaining a certificate of the login request;

[0007] Using a preset national secret verification strategy, verify the certificate to obtain a first verification result;

[0008] If the first verification result is a failure, verify the certificate using a preset international algorithm verification strategy to obtain a second verification result;

[0009] Obtaining an identity identifier input by the account, and determining whether the identity identifier matches the certificate according to the first verification result, the second verification result, and the identity identifier;

[0010] In the event that the identity identifier matches the certificate, a login request for the account is executed.

[0011] In one embodiment, obtaining the certificate of the login request includes:

[0012] Using a preset certificate universal serial bus key, identifying certificate data from the login request;

[0013] The certificate data is parsed to obtain the certificate of the login request.

[0014] In one embodiment, the certificate data includes a serial identifier and a distinguishable identifier; and when the identity identifier matches the certificate, executing the login request of the account includes:

[0015] In the case where the identity identifier matches the certificate, matching the target identifier corresponding to the sequence identifier according to the sequence identifier of the certificate;

[0016] In the event that the target identifier matches the distinguishable identifier, a login request for the account is executed.

[0017] In one embodiment, when the target identifier matches the distinguishable identifier, executing the login request of the account includes:

[0018] In the case where the target identifier matches the distinguishable identifier, performing a first legitimacy check on the target identifier;

[0019] When the verification is passed, the login request of the account is executed.

[0020] In one embodiment, parsing the certificate data to obtain the certificate of the login request includes:

[0021] Using a preset conversion strategy, convert the certificate data into a standard data format;

[0022] The certificate data in the standard data format is parsed to obtain the certificate of the login request.

[0023] In one embodiment, the certificate includes a root certificate; and when the identity identifier matches the certificate, executing the login request of the account includes:

[0024] When the identity identifier matches the certificate, performing a second legitimacy check on the root certificate;

[0025] When the verification is passed, the login request of the account is executed.

[0026] In a second aspect, the present application also provides a certificate authentication device. The device comprises:

[0027] A certificate acquisition module, used to respond to a login request of an account and acquire a certificate of the login request;

[0028] The certificate verification module is used to verify the certificate using a preset national secret verification strategy to obtain a first verification result;

[0029] The certificate verification module is further configured to verify the certificate using a preset international algorithm verification strategy to obtain a second verification result when the first verification result is a failure;

[0030] A certificate matching module, used to obtain the identity identifier input by the account, and determine whether the identity identifier matches the certificate according to the first verification result, the second verification result and the identity identifier;

[0031] The account login module is used to execute the login request of the account when the identity identifier matches the certificate.

[0032] In one embodiment, the certificate acquisition module includes:

[0033] A data acquisition submodule, used to identify and obtain certificate data from the login request using a preset certificate universal serial bus key;

[0034] The certificate confirmation submodule is used to parse the certificate data to obtain the certificate of the login request.

[0035] In one embodiment, the certificate data includes a serial identifier and a distinguishable identifier; the account login module includes:

[0036] An identification matching submodule, used for matching a target identification corresponding to the sequence identification according to the sequence identification of the certificate when the identity identification matches the certificate;

[0037] The account login submodule is used to execute the login request of the account when the target identifier matches the distinguishable identifier.

[0038] In one embodiment, the account login submodule includes:

[0039] An identification verification unit, configured to perform a first legitimacy verification on the target identification when the target identification matches the distinguishable identification;

[0040] The account login unit is used to execute the login request of the account when the verification passes.

[0041] In one embodiment, the certificate confirmation submodule includes:

[0042] A format conversion unit, used to convert the certificate data into a standard data format using a preset conversion strategy;

[0043] The certificate confirmation unit is used to parse the certificate data in the standard data format to obtain the certificate of the login request.

[0044] In one embodiment, the certificate includes a root certificate; the account login module includes:

[0045] A certificate verification submodule, configured to perform a second legitimacy verification on the root certificate when the identity identifier matches the certificate;

[0046] The account login submodule is used to execute the login request of the account if the verification passes.

[0047] In a third aspect, the present application further provides a computer device, wherein the computer device comprises a memory and a processor, wherein the memory stores a computer program, and when the processor executes the computer program, the certificate authentication method as described in any one of the embodiments of the present disclosure is implemented.

[0048] In a fourth aspect, the present application further provides a computer-readable storage medium having a computer program stored thereon, wherein when the computer program is executed by a processor, the certificate authentication method as described in any one of the embodiments of the present disclosure is implemented.

[0049] In a fifth aspect, the present application further provides a computer program product, wherein the computer program product includes a computer program, and when the computer program is executed by a processor, the certificate authentication method as described in any one of the embodiments of the present disclosure is implemented.

[0050] The certificate authentication method, device, computer equipment, storage medium and computer program product above verify the obtained certificate of the login request by using the national secret verification strategy and the international algorithm verification strategy, obtain the verification result, obtain the identity identifier and compare it with the verification result, and execute the login request of the account when the obtained identity identifier matches the certificate. By using two different verification strategies (national secret verification strategy and international algorithm verification strategy) to enhance security, the system can ensure accurate judgment of the account identity. This double verification mechanism ensures that even if the local verification standard fails, the internationally recognized standard can still be used for supplementary verification, thereby greatly improving security. In this way, even if the attacker can forge certain certificates, the system can still cross-check through different verification methods to reduce the risk of identity verification being breached. In addition, after the verification is completed, the system will combine the identity identifier input by the account and the results of the two verifications to further determine whether the identity identifier matches the certificate. This comprehensive evaluation method ensures that only accounts that have been strictly verified can successfully log in, thereby effectively improving the level of account security. BRIEF DESCRIPTION OF THE DRAWINGS

[0051] FIG1 is a schematic diagram of a flow chart of a certificate authentication method in an embodiment;

[0052] FIG2 is a schematic diagram of a first process of obtaining a certificate in one embodiment;

[0053] FIG3 is a schematic diagram of a first process of account login in one embodiment;

[0054] FIG4 is a schematic diagram of a second process of account login in one embodiment;

[0055] FIG5 is a schematic diagram of a second process of obtaining a certificate in one embodiment;

[0056] FIG6 is a schematic diagram of a third process of account login in one embodiment;

[0057] FIG7 is a schematic diagram of a flow chart of a certificate authentication method implemented in one embodiment;

[0058] FIG8 is a structural block diagram of a certificate authentication device in one embodiment;

[0059] FIG. 9 is a diagram showing the internal structure of a computer device in one embodiment. DETAILED DESCRIPTION

[0060] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0061] In one embodiment, as shown in FIG1 , a certificate authentication method is provided. This embodiment is illustrated by applying the method to a terminal. It is understandable that the method can also be applied to a server, or to a system including a terminal and a server, and is implemented through the interaction between the terminal and the server. In this embodiment, the method includes the following steps:

[0062] Step S100, in response to a login request of an account, obtaining a certificate of the login request.

[0063] In an exemplary embodiment, the certificate of the login request may include a national encryption certificate or an international algorithm certificate, etc.

[0064] Step S200, using a preset national encryption verification strategy, verify the certificate to obtain a first verification result.

[0065] In an exemplary embodiment, before verifying the certificate, it may include using the certificate Ukey of the national encryption or international algorithm to read the content of the certificate, and then using the national encryption online verification service OSCP to verify the correctness of the national encryption certificate.

[0066] Step S300: When the first verification result is a failure, the certificate is verified using a preset international algorithm verification strategy to obtain a second verification result.

[0067] In an exemplary embodiment, the failure of the first verification result may include the failure of verification using the national secret online verification service OSCP, etc.; in the event of the failure of the first verification, the international algorithm certificate verification service OSCP may be used for verification to obtain a second verification result.

[0068] Step S400, obtaining the identity identifier input by the account, and judging whether the identity identifier matches the certificate according to the first verification result, the second verification result and the identity identifier.

[0069] In an exemplary embodiment, the identity identifier may include a Pin code, etc., and determining whether the identity identifier matches the certificate may include using the identity identifier to verify whether the signature value of the certificate is correct, etc.

[0070] Step S500, when the identity identifier matches the certificate, executing the login request of the account.

[0071] In an exemplary embodiment, when the identity identifier matches the certificate, a client authentication credential may be issued, and the client authentication credential may be used to execute a login request for an account.

[0072] In the above certificate authentication method, the certificate of the obtained login request is verified by using the national secret verification strategy and the international algorithm verification strategy to obtain the verification result, and the identity is obtained and compared with the verification result. When the obtained identity matches the certificate, the login request of the account is executed. By using two different verification strategies (national secret verification strategy and international algorithm verification strategy) to enhance security, the system can ensure accurate judgment of the account identity. This double verification mechanism ensures that even if the local verification standard fails, the internationally recognized standard can still be used for supplementary verification, thereby greatly improving security. In this way, even if the attacker can forge certain certificates, the system can still cross-check through different verification methods to reduce the risk of identity verification being breached. In addition, after the verification is completed, the system will combine the identity input by the account and the results of the two verifications to further determine whether the identity matches the certificate. This comprehensive evaluation method ensures that only accounts that have been strictly verified can successfully log in, thereby effectively improving the level of account security.

[0073] In one embodiment, as shown in FIG2 , obtaining the certificate of the login request includes:

[0074] Step S101, using a preset certificate USB key, identifying and obtaining certificate data from the login request.

[0075] Step S102, parsing the certificate data to obtain the certificate of the login request.

[0076] In an exemplary embodiment, the certificate universal serial bus key may include a certificate Ukey of a national secret or international algorithm, and the certificate content is read through the certificate Ukey to obtain the content in the certificate. After obtaining the certificate content, the certificate content after conversion may be parsed according to the unified standard P7 certificate format to obtain the certificate serial number, DN value, and certificate, etc.

[0077] In this embodiment, the certificate data is identified from the login request through the universal serial bus key, and the certificate data is parsed to obtain the certificate of the login request. The security and convenience of identity authentication can be further enhanced. By using the USB key, the system can not only quickly identify and obtain the certificate data, but also ensure the source and integrity of the certificate to avoid the risk of forgery or tampering. In addition, the system uses a physical USB key for identity authentication, which increases the difficulty of identity confirmation and makes unauthorized access more challenging. A higher level of security protection is achieved, while improving the login experience of the account, ensuring that only the legitimate account of the corresponding USB key can successfully log in, thereby more effectively protecting the user's sensitive information.

[0078] In one embodiment, as shown in FIG. 3 , the certificate data includes a serial identifier and a distinguishable identifier; and when the identity identifier matches the certificate, executing the login request of the account includes:

[0079] Step S111, when the identity identifier matches the certificate, matching the target identifier corresponding to the serial identifier according to the serial identifier of the certificate.

[0080] Step S112, when the target identifier matches the distinguishable identifier, executing the login request of the account.

[0081] In an exemplary embodiment, the distinguishable identifier may include the DN value of the certificate, etc., and the distinguishable identifier can be queried based on the serial number of the certificate to see whether it exists in the account identifier corresponding to the certificate. If it exists, the login request of the account is executed; if it does not exist, the login fails, etc.

[0082] In this embodiment, by matching the target identifier corresponding to the serial identifier according to the serial identifier of the certificate, the login request of the account is executed when the target identifier matches the distinguishable identifier. The accuracy and security of identity authentication can be significantly improved. After confirming that the identity identifier matches the certificate, the corresponding target identifier is further searched according to the serial identifier of the certificate, and ensuring that the target identifier matches the distinguishable identifier, the system can effectively filter out potential illegal access requests. This hierarchical verification mechanism adds an additional level of inspection, so that even if the identity identifier and certificate appear to be valid in the initial verification, a stricter match is still required to confirm the true identity of the account. This not only enhances security and prevents various attack methods (such as replay attacks), but also improves the reliability of the system.

[0083] In one embodiment, as shown in FIG. 4 , when the target identifier matches the distinguishable identifier, executing the login request of the account includes:

[0084] Step S121: When the target identifier matches the distinguishable identifier, a first legitimacy check is performed on the target identifier.

[0085] Step S122: If the verification passes, execute the login request of the account.

[0086] In an exemplary embodiment, the target identifier may include an account corresponding to a certificate, etc.; the first legitimacy check may include verifying the account corresponding to the certificate, determining whether the account is in a normal state, whether it can be used, and then determining whether to execute a login request for the account, etc.

[0087] In this embodiment, by performing a first legitimacy check on the target identifier, the login request of the account is executed if the check passes. This further ensures that the status of the account is normal, thereby enhancing the overall security and reliability of the system. By performing the first legitimacy check after the target identifier matches the distinguishable identifier, the system can effectively identify and exclude disabled, locked or abnormal accounts. This additional verification step ensures that only accounts with valid status can successfully log in, reducing potential security risks. In addition, it also improves the system's ability to monitor user status and grasp the security status of the account in real time.

[0088] In one embodiment, as shown in FIG. 5 , parsing the certificate data to obtain the certificate of the login request includes:

[0089] Step S131, using a preset conversion strategy, converting the certificate data into a standard data format.

[0090] Step S132: Parse the certificate data in the standard data format to obtain the certificate of the login request.

[0091] In an exemplary embodiment, the conversion strategy may include converting the certificate data (certificate content) into the P7 format and parsing the certificate to obtain the certificate serial number, DN value, and certificate.

[0092] In this embodiment, the certificate for the login request is obtained by converting the certificate into a standard book format and parsing it. The compatibility and flexibility of the system are greatly improved. By unifying the format of the certificate, the system can more effectively parse and process certificates from different sources, reducing verification failures caused by inconsistent formats. This preset conversion strategy allows the system to adapt to a variety of certificate types, simplifies the certificate management and verification process, and ensures data consistency and security. In addition, the standardized certificate format helps to achieve better interoperability between different platforms and systems, reduces the complexity of integration, and makes the login process smoother and more reliable.

[0093] In one embodiment, as shown in FIG6 , the certificate includes a root certificate; and when the identity identifier matches the certificate, executing the login request of the account includes:

[0094] Step S501: When the identity identifier matches the certificate, a second legitimacy check is performed on the root certificate.

[0095] Step S502: If the verification passes, execute the login request of the account.

[0096] In an exemplary embodiment, it can be checked whether the root certificate of Zhenghao Su is valid. Specifically, it can include determining whether the root certificate is issued by a trusted certificate authority (such as CA, etc.) and is not expired. If so, it passes a second legitimacy check, etc.

[0097] In an exemplary embodiment, the second legitimacy check may include determining the validity of the root certificate, querying a certificate revocation list (CRL), etc., confirming that the root certificate has not been revoked, etc.

[0098] In this embodiment, a second legitimacy check is performed on the root certificate, and if the check passes, the account login request is executed. The security of the entire system can be further enhanced. Through this check, the system can ensure that the certificate used by the account not only matches the identity identifier, but also comes from a trusted root certificate. This additional step effectively reduces the security risks caused by the account certificate being untrusted or revoked, ensuring that only accounts with legitimate certificates can successfully log in.

[0099] In an exemplary embodiment, the certificate authentication method may be applied to a zero-trust client, and may be specifically applied to the flowchart shown in FIG. 7 , which specifically includes:

[0100] Step S901, the account inserts the certificate Ukey into the zero-trust client and enters the Pin code;

[0101] Step S902, reading the certificate content through the certificate plug-in;

[0102] Step S903, after the authentication service obtains the certificate content in P7 format;

[0103] Step S904, verify the validity of the certificate through the National Encryption Certificate Verification Service OSCP; if yes, proceed to step S906, if not, proceed to step S905;

[0104] Step S905, verify whether the certificate of the international algorithm certificate verification service OSCP is a qualified certificate of the international algorithm; and proceed to step S907;

[0105] Step S906, after the authentication service obtains the certificate content in P7 format;

[0106] Step S907, checking whether the root certificate of the algorithm is legal;

[0107] Step S908, verify whether the certificate is bound to a legitimate and normal user;

[0108] Step S909: Login is successful and zero-trust client authentication credentials are issued.

[0109] It should be understood that, although the various steps in the flowcharts involved in the above-mentioned embodiments are displayed in sequence according to the indication of the arrows, these steps are not necessarily executed in sequence according to the order indicated by the arrows. Unless there is a clear explanation in this article, the execution of these steps does not have a strict order restriction, and these steps can be executed in other orders. Moreover, at least a part of the steps in the flowcharts involved in the above-mentioned embodiments can include multiple steps or multiple stages, and these steps or stages are not necessarily executed at the same time, but can be executed at different times, and the execution order of these steps or stages is not necessarily to be carried out in sequence, but can be executed in turn or alternately with other steps or at least a part of the steps or stages in other steps.

[0110] Based on the same inventive concept, the embodiment of the present application also provides a certificate authentication device for implementing the certificate authentication method involved above. The implementation scheme for solving the problem provided by the device is similar to the implementation scheme recorded in the above method, so the specific limitations in one or more certificate authentication device embodiments provided below can refer to the limitations on the certificate authentication method above, and will not be repeated here.

[0111] In one embodiment, as shown in FIG8 , a certificate authentication device 100 is provided, including: a certificate acquisition module 101, a certificate verification module 102, a certificate matching module 103 and an account login module 104, wherein:

[0112] A certificate acquisition module, used to respond to a login request of an account and acquire a certificate of the login request;

[0113] The certificate verification module is used to verify the certificate using a preset national secret verification strategy to obtain a first verification result;

[0114] The certificate verification module is further configured to verify the certificate using a preset international algorithm verification strategy to obtain a second verification result when the first verification result is a failure;

[0115] A certificate matching module, used to obtain the identity identifier input by the account, and determine whether the identity identifier matches the certificate according to the first verification result, the second verification result and the identity identifier;

[0116] The account login module is used to execute the login request of the account when the identity identifier matches the certificate.

[0117] In one embodiment, the certificate acquisition module includes:

[0118] A data acquisition submodule, used to identify and obtain certificate data from the login request using a preset certificate universal serial bus key;

[0119] The certificate confirmation submodule is used to parse the certificate data to obtain the certificate of the login request.

[0120] In one embodiment, the certificate data includes a serial identifier and a distinguishable identifier; the account login module includes:

[0121] An identification matching submodule, used for matching a target identification corresponding to the sequence identification according to the sequence identification of the certificate when the identity identification matches the certificate;

[0122] The account login submodule is used to execute the login request of the account when the target identifier matches the distinguishable identifier.

[0123] In one embodiment, the account login submodule includes:

[0124] An identification verification unit, configured to perform a first legitimacy verification on the target identification when the target identification matches the distinguishable identification;

[0125] The account login unit is used to execute the login request of the account when the verification passes.

[0126] In one embodiment, the certificate confirmation submodule includes:

[0127] A format conversion unit, used to convert the certificate data into a standard data format using a preset conversion strategy;

[0128] The certificate confirmation unit is used to parse the certificate data in the standard data format to obtain the certificate of the login request.

[0129] In one embodiment, the certificate includes a root certificate; the account login module includes:

[0130] A certificate verification submodule, configured to perform a second legitimacy verification on the root certificate when the identity identifier matches the certificate;

[0131] The account login submodule is used to execute the login request of the account if the verification passes.

[0132] Each module in the above-mentioned certificate authentication device can be implemented in whole or in part by software, hardware or a combination thereof. Each module can be embedded in or independent of a processor in a computer device in the form of hardware, or can be stored in a memory in a computer device in the form of software, so that the processor can call and execute the operations corresponding to each module above.

[0133] In one embodiment, a computer device is provided, which may be a server, and its internal structure diagram may be shown in FIG9. The computer device includes a processor, a memory, an input / output interface (Input / Output, referred to as I / O) and a communication interface. The processor, the memory and the input / output interface are connected via a system bus, and the communication interface is connected to the system bus via the input / output interface. The processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program and a database. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The database of the computer device is used to store certificate data. The input / output interface of the computer device is used to exchange information between the processor and an external device. The communication interface of the computer device is used to communicate with an external terminal through a network connection. When the computer program is executed by the processor, a certificate authentication method is implemented.

[0134] Those skilled in the art will understand that the structure shown in FIG. 9 is merely a block diagram of a partial structure related to the solution of the present application, and does not constitute a limitation on the computer device to which the solution of the present application is applied. The specific computer device may include more or fewer components than shown in the figure, or combine certain components, or have a different arrangement of components.

[0135] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of relevant data must comply with relevant laws, regulations and standards of relevant countries and regions.

[0136] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to the memory, database or other medium used in the embodiments provided in this application can include at least one of non-volatile and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetoresistive random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. As an illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM). The database involved in each embodiment provided in this application may include at least one of a relational database and a non-relational database. Non-relational databases may include distributed databases based on blockchains, etc., but are not limited to this. The processor involved in each embodiment provided in this application may be a general-purpose processor, a central processing unit, a graphics processor, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, etc., but are not limited to this.

[0137] The technical features of the above embodiments may be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0138] The above-described embodiments only express several implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the present application. It should be pointed out that, for a person of ordinary skill in the art, several variations and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the present application shall be subject to the attached claims.

Claims

1. A certificate authentication method, characterized in that: The method comprises: In response to a login request of an account, obtaining a certificate of the login request; Using a preset national secret verification strategy, verify the certificate to obtain a first verification result; If the first verification result is a failure, verify the certificate using a preset international algorithm verification strategy to obtain a second verification result; Obtaining an identity identifier input by the account, and determining whether the identity identifier matches the certificate according to the first verification result, the second verification result, and the identity identifier; In the event that the identity identifier matches the certificate, a login request for the account is executed.

2. The method according to claim 1, characterized in that: The obtaining of the certificate of the login request includes: Using a preset certificate universal serial bus key, identifying certificate data from the login request; The certificate data is parsed to obtain the certificate of the login request.

3. The method according to claim 2, characterized in that The certificate data includes a serial identifier and a distinguishable identifier; and when the identity identifier matches the certificate, executing the login request of the account includes: In the case where the identity identifier matches the certificate, matching the target identifier corresponding to the sequence identifier according to the sequence identifier of the certificate; In the event that the target identifier matches the distinguishable identifier, a login request for the account is executed.

4. The method according to claim 3, characterized in that: The executing the login request of the account when the target identifier matches the distinguishable identifier includes: In the case where the target identifier matches the distinguishable identifier, performing a first legitimacy check on the target identifier; When the verification is passed, the login request of the account is executed.

5. The method according to claim 2, characterized in that: The parsing of the certificate data to obtain the certificate of the login request includes: Using a preset conversion strategy, convert the certificate data into a standard data format; The certificate data in the standard data format is parsed to obtain the certificate of the login request.

6. The method according to claim 1, characterized in that The certificate includes a root certificate; and when the identity identifier matches the certificate, executing the login request of the account includes: In the case where the identity identifier and the certificate match, performing a second legitimacy check on the root certificate; When the verification is passed, the login request of the account is executed.

7. A certificate authentication device, characterized in that: The device comprises: A certificate acquisition module, used to respond to a login request of an account and acquire a certificate of the login request; The certificate verification module is used to verify the certificate using a preset national secret verification strategy to obtain a first verification result; The certificate verification module is further configured to verify the certificate using a preset international algorithm verification strategy to obtain a second verification result when the first verification result is a failure; A certificate matching module, used to obtain the identity identifier input by the account, and determine whether the identity identifier matches the certificate according to the first verification result, the second verification result and the identity identifier; The account login module is used to execute the login request of the account when the identity identifier matches the certificate.

8. A computer device comprising a memory and a processor, wherein the memory stores a computer program, wherein: When the processor executes the computer program, the steps of the method according to any one of claims 1 to 6 are implemented.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 6 are implemented.

10. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 6 are implemented.

Images