Body checking method and terminal equipment

Abstract

The embodiment of the invention discloses an identity verification method, which provides a unified identity verification interface for a service system in a swan-mong system, and an identity verification client deployed in swan-mong terminal equipment executes a specific identity verification product module to realize collection of user information aiming at different service requirements. And the verification server side verifies the user information, so that an efficient verification process is realized, and the intelligent and automatic levels of verification are improved. According to the method, nuclear body products are modularized, so that the coupling between the nuclear body products is reduced, the socket capability is provided for the nuclear body capability of a swan system, and the expandability of the nuclear body products is improved. The terminal equipment disclosed by the embodiment of the specification also has the above beneficial effects.

Description

Technical Field

[0001] The present invention relates to the field of computing and technology, and in particular to an authentication method and terminal equipment. Background Art

[0002] In transaction business scenarios, authentication capability is an important capability to ensure transaction security. Hongmeng system only supports Hongmeng kernel and Hongmeng system applications, and is not compatible with Android or iOS applications. Therefore, the existing authentication technology solutions for Android or iOS can no longer be used on Hongmeng operating system. The industry urgently needs a set of authentication solutions that can be applied to Hongmeng application framework. Summary of the invention

[0003] One or more embodiments of the present specification provide an authentication method and a terminal device, which is applicable to the Hongmeng application framework and can realize an efficient authentication process.

[0004] In a first aspect, a verification method is provided, which is applicable to a Hongmeng terminal device, and the Hongmeng terminal device is deployed with a verification client; the method comprises: In response to the authentication request initiated by the business system for the target business, the authentication client requests the authentication server to obtain authentication product information adapted to the target business; The authentication client is routed to the corresponding authentication product module according to the authentication product information to render an interactive page, and uses the interactive page to obtain user information of the target user; The authentication client sends the user information to the authentication server for authentication verification, and feeds back the authentication result returned by the authentication server to the business system.

[0005] As an optional implementation manner of the method of the first aspect, the method further includes: The business system initiates an initialization request to the authentication service end for the target business, and obtains a unique identifier issued by the authentication service end, wherein the unique identifier is associated with the authentication product information generated by the authentication service end for the target business; The business system initiates the authentication request carrying the unique identifier to the authentication client for the target business, so that the authentication client can request the authentication server to obtain the authentication product information based on the unique identifier.

[0006] As an optional implementation manner of the method of the first aspect, the authentication product information includes authentication product description information and copy data; the authentication client selects a pre-built authentication product module according to the authentication product information to render an interactive page, specifically including: The authentication client is routed to the corresponding authentication product module according to the authentication product description information, and inputs the copy data into the authentication product module to render the interactive page.

[0007] As an optional implementation manner of the method of the first aspect, the method further includes: Generate corresponding authentication product modules in advance according to different business types, and deploy the authentication product modules on the authentication client.

[0008] As an optional implementation manner of the method described in the first aspect, the identity client includes an identity interface, an identity access layer, and an identity decision engine implemented using the technical framework of the Hongmeng ecosystem; The authentication interface is configured to provide the business system with a unified interface for accessing the authentication decision engine; The identity access layer is configured to jump to the identity decision engine in response to an access request initiated by the business system through the identity interface; The authentication decision engine is configured to, in response to the authentication request, request the authentication server to obtain the authentication product information, and select a corresponding authentication product module according to the authentication product information to render the interactive page; The authentication decision engine is also configured to send the user information of the target user obtained by using the interactive page to the authentication server for authentication verification, and feed back the authentication result returned by the authentication server to the business system.

[0009] Specifically, the method further includes: The core interface is exposed to the business system by utilizing the microservice capabilities of the Hongmeng system.

[0010] Specifically, the method further includes: The core access layer is built using the ArkTS language of the Hongmeng system, and the interaction between the core access layer and the core interface is realized through micro-front-end technology.

[0011] Specifically, the method further includes: The identity decision engine is built using the ArkTS language of the Hongmeng system, and the interactive page is implemented through the ArkUI framework.

[0012] In a second aspect, another authentication method is provided, which is applicable to an authentication server, and the method includes: In response to a request for obtaining authentication product information for a target business initiated by an authentication client, the authentication product information adapted to the target business is sent to the authentication client, so that the authentication client can select a pre-built authentication product module based on the authentication product information to render an interactive page, and use the interactive page to obtain user information of the target user; In response to the authentication verification request initiated by the authentication client, the user information uploaded by the authentication client is authenticated and the authentication result is returned to the authentication client.

[0013] As an optional implementation manner of the method of the second aspect, the method further includes: In response to an initialization request initiated by the business system for the target business, determine authentication product information adapted to the target business; Generate a unique identifier for the target business, and store the authentication product information in association with the unique identifier; The unique identifier is returned to the business system so that the business system can carry the unique identifier in the authentication request initiated to the authentication client, and the authentication client can obtain the authentication product information from the authentication server based on the unique identifier.

[0014] As an optional implementation manner of the method of the second aspect, the method further includes: The authentication product information of the authentication product modules for different business types is stored in advance in the authentication service end.

[0015] In a third aspect, a terminal device is provided, wherein the terminal device adopts the Hongmeng system and is deployed with a core identity client; the core identity client is used to: In response to the authentication request initiated by the business system for the target business, request the authentication service end to obtain authentication product information adapted to the target business; Routing to a corresponding authentication product module according to the authentication product information to render an interactive page, and using the interactive page to obtain user information of the target user; The user information is sent to the authentication server for authentication verification, and the authentication result returned by the authentication server is fed back to the business system.

[0016] As an optional implementation of the terminal device described in the third aspect, wherein: Before initiating the authentication request, the business system initiates an initialization request to the authentication server for the target business in advance to obtain a unique identifier issued by the authentication server, wherein the unique identifier is associated with the authentication product information generated by the authentication server for the target business; When the business system initiates the authentication request, the unique identifier is carried in the authentication request, so that the authentication client can request the authentication server to obtain the authentication product information based on the unique identifier.

[0017] As an optional implementation of the terminal device described in the third aspect, the authentication product information includes authentication product description information and copy data; the authentication client is specifically used to route to the corresponding authentication product module according to the authentication product description information, and input the copy data into the authentication product module to render the interactive page.

[0018] As an optional implementation of the terminal device described in the third aspect, the authentication client is pre-deployed with authentication product modules for different business types.

[0019] As an optional implementation of the terminal device described in the third aspect, the identity client includes an identity interface, an identity access layer and an identity decision engine implemented using the technical framework of the Hongmeng ecosystem; The authentication interface is configured to provide the business system with a unified interface for accessing the authentication decision engine; The identity access layer is configured to jump to the identity decision engine in response to an access request initiated by the business system through the identity interface; The authentication decision engine is configured to, in response to the authentication request, request the authentication server to obtain the authentication product information, and select a corresponding authentication product module according to the authentication product information to render the interactive page; The authentication decision engine is also configured to send the user information of the target user obtained by using the interactive page to the authentication server for authentication verification, and feed back the authentication result returned by the authentication server to the business system.

[0020] Specifically, the core client uses the microservice capabilities of the Hongmeng system to expose the core interface to the business system.

[0021] Specifically, the core body access layer is built using the ArkTS language of the Hongmeng system, and the core body access layer interacts with the core body interface through micro-front-end technology.

[0022] Specifically, the core decision engine is built using the ArkTS language of the Hongmeng system; the interactive page is implemented using the ArkUI framework.

[0023] In a fourth aspect, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, it implements one of the above-mentioned authentication methods, or implements another of the above-mentioned authentication methods.

[0024] In a fifth aspect, an electronic device is provided, including: One or more processors; and a memory associated with the one or more processors, the memory being used to store program instructions, which, when read and executed by the one or more processors, execute one of the above-mentioned authentication methods, or execute another of the above-mentioned authentication methods.

[0025] The beneficial effect of the authentication method described in one or more embodiments of the present specification is that the method provides a unified authentication interface for the business system in the Harmony system, and the authentication client deployed in the Harmony terminal device executes a specific authentication product module to realize the collection of user information for different business needs, and the authentication server verifies the user information, thereby realizing an efficient authentication process and improving the intelligence and automation level of authentication.

[0026] This method modularizes the core products, thereby reducing the coupling between core products and providing socket capabilities for the core capabilities of the Hongmeng system. This design takes into account the adaptability and flexibility of various core products, making core products more diversified and improving the scalability of core products.

[0027] The terminal device described in the embodiments of this specification also has the above-mentioned beneficial effects. BRIEF DESCRIPTION OF THE DRAWINGS

[0028] In order to more clearly illustrate the embodiments of this specification or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are some embodiments of this specification. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0029] Figure 1 A schematic diagram of the structure of a verification system provided for one or more embodiments of this specification.

[0030] Figure 2 A flowchart of an authentication method provided for one or more embodiments of this specification.

[0031] Figure 3 A schematic diagram of the functional architecture of a authentication client provided for one or more embodiments of this specification.

[0032] Figure 4 A flowchart of another authentication method provided for one or more embodiments of this specification.

[0033] Figure 5A flowchart of an authentication method implemented by an authentication system in an implementation scenario provided in one or more embodiments of this specification.

[0034] Figure 6 A schematic diagram of the structure of an electronic device provided for one or more embodiments of this specification. DETAILED DESCRIPTION

[0035] First of all, it should be noted that the terms used in the embodiments of the present invention are only for the purpose of describing specific embodiments, and are not intended to limit the present invention. The singular forms "a", "the" and "the" used in the embodiments of the present invention and the appended claims are also intended to include plural forms, unless the context clearly indicates otherwise.

[0036] In order to enable those skilled in the art to better understand the technical solutions in this specification, the technical solutions in the embodiments of this specification will be clearly and completely described below in conjunction with the drawings in the embodiments of this specification. Obviously, the described embodiments are only part of the embodiments of this specification, not all of the embodiments. Therefore, it should be recognized by those skilled in the art that various changes and modifications can be made to the embodiments described herein without departing from the scope and spirit of the present invention. Similarly, for the sake of clarity and conciseness, the description of well-known functions and structures is omitted in the following description.

[0037] It should be noted that: in other embodiments, the steps of the corresponding method are not necessarily performed in the order shown and described in this specification. In some other embodiments, the steps included in the method may be more or less than those described in this specification. In addition, a single step described in this specification may be decomposed into multiple steps for description in other embodiments; and multiple steps described in this specification may be combined into a single step for description in other embodiments.

[0038] In current transaction business scenarios, such as payment scenarios, it is usually necessary to verify the user identities of both parties to the transaction to ensure the security of the transaction.

[0039] Hongmeng OS only supports Hongmeng kernel and Hongmeng OS applications, and is not compatible with Android and iOS applications. Existing authentication technology solutions for Android or iOS can no longer be used on Hongmeng OS. The industry urgently needs an authentication solution that can be applied to Hongmeng application framework, and the authentication function of the solution needs to have the ability of sustainable maintenance and three-end joint iteration.

[0040] In view of this, one or more embodiments of the present specification propose an authentication method and terminal device that can be applied to the Hongmeng operating system and provide efficient and secure authentication capabilities.

[0041] The authentication method and terminal device described in one or more embodiments of this specification will be further described in detail below in conjunction with the drawings and specific embodiments of the specification, but this detailed description does not constitute a limitation on the embodiments of this specification.

[0042] Please refer to Figure 1 , Figure 1 A core identity system proposed in one or more embodiments of this specification includes a Hongmeng terminal device 11 and a core identity server 12. Among them, the Hongmeng terminal device 11 is a terminal device with the Hongmeng operating system installed, and a core identity client is deployed on the Hongmeng terminal device 11. The Hongmeng terminal device 11 is connected to the core identity server 12 through a communication link 13, and the communication link 13 can be a wired network or a wireless network. For example, the Hongmeng terminal device 11 can establish a communication connection with the core identity server 12 using communication methods such as WIFI, Bluetooth, and infrared. Alternatively, the Hongmeng terminal device 11 can also establish a communication connection with the core identity server 12 through a mobile network, wherein the network standard of the mobile network can be any one of 2G (GSM), 2.5G (GPRS), 3G (WCDMA, TD-SCDMA, CDMA2000, UTMS), 4G (LTE), 4G+ (LTE+), WiMax, etc.

[0043] The Hongmeng terminal device 11 can be a smart mobile terminal, such as a mobile phone, a notebook, an iPad, etc. The Hongmeng terminal device 11 is installed with a verification client provided by the verification server 12, that is, the verification server 12 opens the verification service function to the Hongmeng terminal device 11 through the verification client.

[0044] The authentication server 12 is the server of the authentication client, and the authentication server 12 can be any device, equipment, platform, or device cluster with computing and processing capabilities. In this embodiment, the implementation form of the authentication server 12 is not limited. For example, the authentication server 12 can be a single server or a server cluster composed of multiple servers. The authentication server 12 can also be a cloud server, also known as a cloud computing server or cloud host, which is a host product in the cloud computing service system.

[0045] based on Figure 1 The authentication system shown in the figure, one or more embodiments of this specification proposes an authentication method, which is applicable to the above-mentioned Hongmeng terminal device 11. Please refer to Figure 2 , Figure 2 The flowchart of the above authentication method is schematically shown. Figure 2 As shown, the identity verification method may include steps S200 to S204.

[0046] S200: In response to the authentication request initiated by the business system for the target business, the authentication client requests the authentication server 12 to obtain authentication product information adapted to the target business.

[0047] The above-mentioned business system refers to an application deployed in the Hongmeng operating system of the Hongmeng terminal device 11 that requires the use of the authentication function.

[0048] When executing the target business, the business system can call the risk control system to judge the risk of the target business, so as to determine whether it is necessary to authenticate the target user who handles the target business. When the business system determines that the target user needs to be authenticated, it can initiate an authentication request for the target business to the authentication client. In actual business scenarios, different types of businesses and different types of users require different authentication information. Taking different types of users as an example, when authenticating, corporate users generally need to provide information such as the business license, legal person ID card and contact information of the enterprise for identity verification, while personal users generally provide personal ID card and contact information for identity verification. Taking different types of business handled by the target user as an example, if the transaction password needs to be changed, it is generally necessary to provide account information, original password and user identity information for identity verification, while for transfer business, it is generally necessary to provide the password of the payer and the name and account information of the payee, so as to verify the identity of both parties of the transfer business.

[0049] Based on the business requirements of different types of target businesses, the authentication client needs to request authentication product information adapted to the target business from the authentication server 12 according to the authentication request of the business system.

[0050] In order to accurately match the authentication requirements of the target business, in some embodiments, the business system can initiate an initialization request to the authentication server 12 in advance and upload the business information of the target business when it is determined that the target user of the target business needs to be authenticated. The authentication server 12 can determine the authentication product adapted to the target business based on the business information of the target business, and determine the authentication product information of the authentication product. The above-mentioned authentication product refers to the authentication function of the target business of a certain business type, and the authentication function is implemented by generating an authentication product module in advance according to different business types and deploying it on the authentication client, that is, the authentication product module is used to render an interactive page for obtaining the user information of the target user, thereby performing authentication verification based on the obtained user information.

[0051] The authentication server 12 can pre-store authentication product information for authentication products of different business types, and pre-set matching rules based on the business information of the target business to match the corresponding authentication product information, or can determine the target business characteristics based on the business information of the target business, and then match the corresponding authentication product information according to the target business characteristics. Matching model.

[0052] The above-mentioned authentication product information may include authentication product description information and copy data. Among them, the authentication product description information is used to guide the authentication client to find the corresponding authentication product module, and input the copy data into the authentication product module to render the interactive page required for this authentication. Based on this, the authentication product description information can refer to the interface information of the corresponding authentication product module, and the authentication client can call the corresponding interface based on the interface information of the authentication product module, thereby routing to the corresponding authentication product module.

[0053] During the initialization process, the authentication server 12 can generate a unique identifier for the target business, and store the authentication product information adapted for the target business in association with the unique identifier. At the same time, the unique identifier is distributed to the business system to locate the specific target business in the subsequent authentication process.

[0054] When the business system initiates an authentication request for the target business to the authentication client, the unique identifier can be carried in the authentication request. When the authentication client requests the authentication server 12 to obtain authentication product information adapted to the target business, the unique identifier is sent to the authentication server 12, and the authentication server 12 can find the authentication product information corresponding to the target business based on the unique identifier and return the authentication product information to the authentication client.

[0055] S202: The authentication client is routed to the corresponding authentication product module according to the authentication product information to render an interactive page, and uses the interactive page to obtain user information of the target user.

[0056] In order to realize the functions of the above-mentioned authentication client, the authentication function can be decoupled into authentication sub-functions for different business types, that is, the corresponding authentication product modules are generated in advance according to different business types, and these authentication product modules are deployed in the authentication client. In this way, the coupling between authentication products can be reduced, providing socket capabilities for the authentication capabilities of the later Hongmeng system. When the business type changes or the authentication process of a certain type of business changes, the authentication service function can be updated and upgraded by updating the specific authentication product module in the authentication client.

[0057] In some implementations, the functions of the above-mentioned authentication client can be implemented based on the Hongmeng technical framework. Figure 3 , Figure 3The following schematically shows a functional architecture diagram of a client terminal. Figure 3 As shown, the authentication client mainly includes an authentication interface, an authentication access layer, and an authentication decision engine implemented using the technical framework of the Hongmeng ecosystem. Among them, the authentication interface is configured to provide a unified interface for the business system to access the authentication decision engine; the authentication access layer is configured to jump to the authentication decision engine in response to the access request initiated by the business system through the authentication interface; the authentication decision engine is configured to respond to the authentication request, request the authentication server to obtain authentication product information, and select the corresponding authentication product module according to the authentication product information to render the interactive page, and send the user information of the target user obtained using the interactive page to the authentication server for authentication verification, and feed back the authentication result returned by the authentication server to the business system.

[0058] In some implementations, the microservice capabilities of the Hongmeng system can be used to expose the core interface to the business system, thereby providing the business system with a unified core function access interface.

[0059] In some implementations, the ArkTS language of the Hongmeng system can be used to build a core access layer, and the interaction between the core access layer and the core interface can be achieved through micro-frontend technology.

[0060] In some implementations, the ArkTS language of the Hongmeng system can be used to build a core decision engine (a virtual machine running the ArkTS language), and the interactive page can be implemented through the ArkUI, the Ark development framework of the Hongmeng system.

[0061] S204: The authentication client sends the user information to the authentication server 12 for authentication verification, and feeds back the authentication result returned by the authentication server 12 to the business system.

[0062] The verification process for user information of different business types can be pre-set in the authentication server 12, and the authentication server 12 can select a corresponding verification process to verify the user information according to the business type of the target business.

[0063] It should be noted that the authentication verification method adopted by the authentication server 12 can be adaptively set according to needs, and this embodiment does not limit this.

[0064] based on Figure 1 In one or more embodiments of the present specification, another authentication method is also proposed, which is applicable to the authentication server 12 mentioned above. Figure 4 , Figure 4 The flowchart of another authentication method described above is schematically shown. Figure 4 As shown, the identity verification method may include steps S400 to S402.

[0065] S400: In response to the authentication product information acquisition request for the target service initiated by the authentication client, the authentication server 12 sends the authentication product information adapted to the target service to the authentication client.

[0066] In some embodiments, before the authentication client initiates an authentication product information acquisition request, the business system that processes the target business can initiate an initialization request to the authentication server 12 for the target business in advance, and upload the business information of the target business. The authentication server 12 can determine the authentication product that is adapted to the target business based on the business information of the target business, and determine the authentication product information of the authentication product. The above-mentioned authentication product refers to the authentication function of the target business of a certain business type, and the authentication function is realized by pre-generating and deploying the authentication product module on the authentication client according to different business types, that is, the authentication product module is used to render an interactive page for obtaining the user information of the target user, so as to perform authentication verification based on the obtained user information. The authentication server 12 can pre-store the authentication product information of authentication products for different business types, and pre-set matching rules based on the business information of the target business to match the corresponding authentication product information, or can determine the target business characteristics based on the business information of the target business, and then match the corresponding authentication product information according to the target business characteristics. Matching model.

[0067] The above-mentioned authentication product information may include authentication product description information and copy data. Among them, the authentication product description information is used to guide the authentication client to find the corresponding authentication product module, and input the copy data into the authentication product module to render the interactive page required for this authentication. Based on this, the authentication product description information can refer to the interface information of the corresponding authentication product module, and the authentication client can call the corresponding interface based on the interface information of the authentication product module, thereby routing to the corresponding authentication product module.

[0068] During the initialization process, the authentication server 12 can generate a unique identifier for the target business, and store the authentication product information adapted for the target business in association with the unique identifier. At the same time, the unique identifier is distributed to the business system to locate the specific target business in the subsequent authentication process.

[0069] When the business system initiates an authentication request for the target business to the authentication client, the unique identifier can be carried in the authentication request. When the authentication client requests the authentication server 12 to obtain the authentication product information adapted to the target business, the unique identifier is sent to the authentication server 12. The authentication server 12 can then find the authentication product information corresponding to the target business based on the unique identifier, and return the authentication product information to the authentication client. The authentication product information guides the authentication client to select the authentication product module adapted to the current target business to render the interactive page, and use the interactive page to obtain the user information of the target user.

[0070] S402: In response to the authentication verification request initiated by the authentication client, the authentication server 12 performs authentication verification on the user information uploaded by the authentication client and returns the authentication result to the authentication client.

[0071] The verification process for user information of different business types can be pre-set in the authentication server 12, and the authentication server 12 can select a corresponding verification process to verify the user information according to the business type of the target business.

[0072] It should be noted that the authentication verification method adopted by the authentication server 12 can be adaptively set according to needs, and this embodiment does not limit this.

[0073] The following will combine the specific implementation scenarios Figure 1 Please refer to the workflow of the authentication system shown in Figure 5 , Figure 5 A schematic flow chart of an authentication method implemented by the authentication system in an implementation scenario is shown.

[0074] like Figure 5 As shown, the process of the entire authentication system to implement the authentication method includes: S500: The user performs a business process in the business system.

[0075] S502: The business system determines that the business process needs to be authenticated by calling the risk control system.

[0076] S504: The business system makes an initialization request to the authentication server 12. The authentication server 12 determines the authentication product adapted to the target business based on the business information of the current target business of the business system, thereby determining the authentication product information of the authentication product. The authentication server 12 generates a unique identifier verifyId for the target business, and associates and stores the authentication product information adapted to the target business with the unique identifier, and at the same time, distributes the unique identifier verifyId to the business system.

[0077] S506: The business system initiates a verification request to the verification client, and carries a unique identifier verifyId in the verification request.

[0078] S508: The verification client initiates a request to obtain verification product information to the verification server 12, and simultaneously sends a unique identifier verifyId.

[0079] S510: The verification server 12 locates the verification product information corresponding to the target business based on the unique identifier verifyId, including the interface information and text data of the corresponding verification product module, and then sends the verification product information to the verification client.

[0080] S512: The authentication client is routed to the corresponding authentication product module according to the interface information of the authentication product module, and inputs the copy data into the authentication product module.

[0081] S514: The verification product module renders the interactive page according to the copy data.

[0082] S516: The authentication client obtains the user interaction result of the target user through the interaction page, and the user interaction result includes the user information of the target user.

[0083] S518: The authentication client initiates an authentication verification request to the authentication server 12 and sends the user information to the authentication server 12.

[0084] S520: The authentication server 12 performs authentication verification on the target user according to the user information, and returns the authentication result to the authentication client.

[0085] S522: The authentication client determines whether there is a next authentication operation. If yes, it proceeds to step S524; if not, it proceeds to step S526.

[0086] S524: If further verification is required, repeat steps S512 to S522 until the verification process is completed.

[0087] S526: The authentication process ends, and the authentication client returns the authentication result to the business system.

[0088] S528: The business system displays the business result page to the user and continues to advance the business process.

[0089] The above is Figure 1 The workflow of the authentication system shown in the figure, and the authentication method implemented by the above-mentioned authentication system, can provide a unified authentication interface for the business system in the Hongmeng system, realize an efficient authentication process, and improve the intelligence and automation level of authentication.

[0090] Corresponding to the above-mentioned authentication method, one or more embodiments of this specification also propose a terminal device. The terminal device adopts the Hongmeng system, and the terminal device is deployed with an authentication client. The terminal device interacts with the authentication server 12 through the authentication client to implement the above-mentioned authentication method. In the terminal device, the authentication client is used to: In response to the authentication request initiated by the business system for the target business, a request is made to the authentication service end 12 to obtain authentication product information adapted to the target business.

[0091] According to the authentication product information, it is routed to the corresponding authentication product module to render the interactive page, and the user information of the target user is obtained using the interactive page.

[0092] The user information is sent to the authentication server 12 for authentication verification, and the authentication result returned by the authentication server 12 is fed back to the business system.

[0093] Optionally, in the terminal device, before initiating the authentication request, the business system initiates an initialization request to the authentication server 12 for the target business in advance, and obtains a unique identifier issued by the authentication server 12, which is associated with the authentication product information generated by the authentication server 12 for the target business.

[0094] When the business system initiates an authentication request, it carries a unique identifier in the authentication request so that the authentication client can request the authentication server 12 to obtain authentication product information based on the unique identifier.

[0095] Optionally, the authentication product information includes authentication product description information and copy data. The authentication client is specifically used to route to the corresponding authentication product module according to the authentication product description information, and input the copy data into the authentication product module to render the interactive page.

[0096] Optionally, in the terminal device, the authentication client is pre-deployed with authentication product modules for different business types.

[0097] Optionally, in the terminal device, the authentication client includes an authentication interface, an authentication access layer, and an authentication decision engine implemented using the technical framework of the Hongmeng ecosystem. The authentication interface is configured to provide a unified interface for accessing the authentication decision engine to the business system. The authentication access layer is configured to jump to the authentication decision engine in response to an access request initiated by the business system through the authentication interface. The authentication decision engine is configured to request the authentication server 12 to obtain authentication product information in response to the authentication request, and select the corresponding authentication product module based on the authentication product information to render the interactive page. The authentication decision engine is also configured to send the user information of the target user obtained using the interactive page to the authentication server 12 for authentication verification, and feed back the authentication result returned by the authentication server 12 to the business system.

[0098] Specifically, in the terminal device, the identity client uses the microservice capabilities of the Hongmeng system to expose the identity interface to the business system.

[0099] Specifically, in the terminal device, the core body access layer of the core body client is built using the ArkTS language of the Hongmeng system, and the core body access layer interacts with the core body interface through micro-front-end technology.

[0100] Specifically, in the terminal device, the authentication decision engine of the authentication client is built using the ArkTS language of the Hongmeng system, and the interactive page is implemented using the ArkUI framework.

[0101] In some embodiments, a computer-readable storage medium is also provided, on which a computer program is stored. When the computer program is executed by a processor, it implements one of the above-mentioned authentication methods, or implements another of the above-mentioned authentication methods.

[0102] The computer-readable storage medium may be any available medium that can be stored in the electronic device or a data storage device such as a data center containing one or more available media. The available medium may be a magnetic medium (e.g., a floppy disk, a hard disk, a tape), an optical medium (e.g., a DVD), or a semiconductor medium (e.g., a solid-state hard disk). The computer-readable storage medium includes instructions that instruct the electronic device to perform one of the above authentication methods, or to perform another of the above authentication methods.

[0103] This embodiment also provides an electronic device, including: One or more processors; and a memory associated with the one or more processors, the memory being used to store program instructions, which, when read and executed by the one or more processors, implement one of the above-mentioned authentication methods, or implement another of the above-mentioned authentication methods.

[0104] Please refer to Figure 6 , Figure 6 A structural schematic diagram of the above-mentioned electronic device is shown. The electronic device includes a bus 601, a processor 602, a memory 603 and a communication interface 604. The memory 603 stores a computer program, and when the computer program runs on the processor 602, the processor 602 executes the specific steps in the above-mentioned one authentication method, or executes the specific steps of the above-mentioned another authentication method. It should be understood that the present application does not limit the number of processors and memories in the electronic device.

[0105] The bus 601 may be a peripheral component interconnect (PCI) bus or an extended industry standard architecture (EISA) bus. The bus 601 may be divided into an address bus, a data bus, a control bus, etc. For ease of representation, Figure 6 The bus 601 is represented by only one line, but it does not mean that there is only one bus or one type of bus. The bus 601 may include a path for transmitting information between various components of the terminal device (for example, the processor 602, the memory 603 and the communication interface 604).

[0106] The processor 602 may include any one or more of a processor such as a central processing unit (CPU), a graphics processing unit (GPU), a microprocessor (MP), or a digital signal processor (DSP).

[0107] The memory 603 may include a volatile memory, such as a random access memory (RAM). The memory 603 may also include a non-volatile memory, such as a read-only memory (ROM), a flash memory, a hard disk drive (HDD), or a solid state drive (SSD).

[0108] The communication interface 604 uses a transceiver module such as, but not limited to, a network interface card or a transceiver to implement communication between the electronic device and other devices or a communication network.

[0109] It should be understood by those skilled in the art that the modules or steps of the present invention described above can be implemented by a general-purpose computing device, they can be concentrated on a single computing device, or distributed on a network composed of multiple computing devices, and optionally, they can be implemented by a program code executable by a computing device, so that they can be stored in a storage device and executed by the computing device, and in some cases, the steps shown or described can be executed in a different order than that here, or they can be made into individual integrated circuit modules, or multiple modules or steps therein can be made into a single integrated circuit module for implementation. Thus, the present invention is not limited to any specific combination of hardware and software.

[0110] Each embodiment in this specification is described in a progressive manner, and the same or similar parts between the embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the system embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.

[0111] The above is a description of a specific embodiment of the specification. Other embodiments are within the scope of the appended claims. In some cases, the actions or steps recorded in the claims can be performed in an order different from that in the embodiments and still achieve the desired results. In addition, the processes depicted in the drawings do not necessarily require the specific order or continuous order shown to achieve the desired results. In some embodiments, multitasking and parallel processing are also possible or may be advantageous.

[0112] It should be noted that the above examples are only specific embodiments of the present invention. Obviously, the present invention is not limited to the above examples, and there are many similar variations. All variations directly derived or associated from the contents disclosed by the technicians in this field should fall within the protection scope of the present invention.

Claims

1. A verification method, applicable to a Hongmeng terminal device, wherein the Hongmeng terminal device is deployed with a verification client; the method comprises: In response to the authentication request initiated by the business system for the target business, the authentication client requests the authentication server to obtain authentication product information adapted to the target business; The authentication client is routed to the corresponding authentication product module according to the authentication product information to render an interactive page, and uses the interactive page to obtain user information of the target user; The authentication client sends the user information to the authentication server for authentication verification, and feeds back the authentication result returned by the authentication server to the business system.

2. The method according to claim 1, further comprising: The business system initiates an initialization request to the authentication service end for the target business, and obtains a unique identifier issued by the authentication service end, wherein the unique identifier is associated with the authentication product information generated by the authentication service end for the target business; The business system initiates the authentication request carrying the unique identifier to the authentication client for the target business, so that the authentication client can request the authentication server to obtain the authentication product information based on the unique identifier.

3. The method according to claim 1, wherein the authentication product information includes authentication product description information and copy data; the authentication client selects a pre-built authentication product module according to the authentication product information to render an interactive page, specifically comprising: The authentication client is routed to the corresponding authentication product module according to the authentication product description information, and inputs the copy data into the authentication product module to render the interactive page.

4. The method according to claim 1, further comprising: Generate corresponding authentication product modules in advance according to different business types, and deploy the authentication product modules on the authentication client.

5. According to the method of claim 1, the identity client includes an identity interface, an identity access layer and an identity decision engine implemented using the technical framework of the Hongmeng ecosystem; The authentication interface is configured to provide the business system with a unified interface for accessing the authentication decision engine; The identity access layer is configured to jump to the identity decision engine in response to an access request initiated by the business system through the identity interface; The authentication decision engine is configured to, in response to the authentication request, request the authentication server to obtain the authentication product information, and select a corresponding authentication product module according to the authentication product information to render the interactive page; The authentication decision engine is also configured to send the user information of the target user obtained by using the interactive page to the authentication server for authentication verification, and feed back the authentication result returned by the authentication server to the business system.

6. The method according to claim 5, further comprising: The core interface is exposed to the business system by utilizing the microservice capabilities of the Hongmeng system.

7. The method according to claim 5, further comprising: The core access layer is built using the ArkTS language of the Hongmeng system, and the interaction between the core access layer and the core interface is realized through micro-front-end technology.

8. The method according to claim 5, further comprising: The identity decision engine is built using the ArkTS language of the Hongmeng system, and the interactive page is implemented through the ArkUI framework.

9. A verification method, applicable to a verification server, comprising: In response to a request for obtaining authentication product information for a target business initiated by an authentication client, the authentication product information adapted to the target business is sent to the authentication client, so that the authentication client can select a pre-built authentication product module based on the authentication product information to render an interactive page, and use the interactive page to obtain user information of the target user; In response to the authentication verification request initiated by the authentication client, the user information uploaded by the authentication client is authenticated and the authentication result is returned to the authentication client.

10. The method according to claim 9, further comprising: In response to an initialization request initiated by the business system for the target business, determine authentication product information adapted to the target business; Generate a unique identifier for the target business, and store the authentication product information in association with the unique identifier; The unique identifier is returned to the business system so that the business system can carry the unique identifier in the authentication request initiated to the authentication client, and the authentication client can obtain the authentication product information from the authentication server based on the unique identifier.

11. The method according to claim 9, further comprising: The authentication product information of the authentication product modules for different business types is stored in advance in the authentication service end.

12. A terminal device, the terminal device adopts the Hongmeng system, and the terminal device is deployed with a core identity client; the core identity client is used to: In response to the authentication request initiated by the business system for the target business, request the authentication service end to obtain authentication product information adapted to the target business; Routing to a corresponding authentication product module according to the authentication product information to render an interactive page, and using the interactive page to obtain user information of the target user; The user information is sent to the authentication server for authentication verification, and the authentication result returned by the authentication server is fed back to the business system.

13. The terminal device according to claim 12, wherein: Before initiating the authentication request, the business system initiates an initialization request to the authentication server for the target business in advance to obtain a unique identifier issued by the authentication server, wherein the unique identifier is associated with the authentication product information generated by the authentication server for the target business; When the business system initiates the authentication request, the unique identifier is carried in the authentication request, so that the authentication client can request the authentication server to obtain the authentication product information based on the unique identifier.

14. According to the terminal device of claim 12, the authentication product information includes authentication product description information and copy data; the authentication client is specifically used to route to the corresponding authentication product module according to the authentication product description information, and input the copy data into the authentication product module to render the interactive page.

15. The terminal device according to claim 12, wherein the authentication client is pre-deployed with authentication product modules for different business types.

16. The terminal device according to claim 12, wherein the identity verification client comprises an identity verification interface, an identity verification access layer and an identity verification decision engine implemented using the technical framework of the Hongmeng ecosystem; The authentication interface is configured to provide the business system with a unified interface for accessing the authentication decision engine; The identity access layer is configured to jump to the identity decision engine in response to an access request initiated by the business system through the identity interface; The authentication decision engine is configured to, in response to the authentication request, request the authentication server to obtain the authentication product information, and select a corresponding authentication product module according to the authentication product information to render the interactive page; The authentication decision engine is also configured to send the user information of the target user obtained by using the interactive page to the authentication server for authentication verification, and feed back the authentication result returned by the authentication server to the business system.

17. According to the terminal device according to claim 16, the core client utilizes the microservice capability of the Hongmeng system to expose the core interface to the business system.

18. According to the terminal device according to claim 16, the core body access layer is built using the ArkTS language of the Hongmeng system, and the core body access layer interacts with the core body interface through micro-front-end technology.

19. According to the terminal device according to claim 16, the identity decision engine is built using the ArkTS language of the Hongmeng system; and the interactive page is implemented using the ArkUI framework.

20. A computer-readable storage medium having a computer program stored thereon, wherein when the computer program is executed by a processor, the method according to any one of claims 1 to 8 is implemented, or the method according to any one of claims 9 to 11 is implemented.

21. An electronic device, comprising: one or more processors; And a memory associated with the one or more processors, the memory is used to store program instructions, and when the program instructions are read and executed by the one or more processors, the method according to any one of claims 1 to 8 is executed, or the method according to any one of claims 9 to 11 is executed.

Images