Internet-surfing real-name authentication method and system

Abstract

The invention provides an internet-surfing real-name authentication method and system, and the method comprises the steps: intercepting the flow of a user accessing the internet through a browser, and displaying an authentication interface of a unified authentication platform, the authentication interface comprising a two-dimensional code; the unified authentication platform enables the user to be in an online state on the unified authentication platform based on authentication parameters, the authentication parameters are obtained by scanning a two-dimensional code by the user, the authorization code is sent to the browser by the unified authentication platform under the condition that the user is in the online state, and the authentication parameters at least comprise a name and a job number; and determining that the user passes the authentication based on the authorization code, so that the user can access the Internet through a browser, thereby accurately positioning a record that an individual accesses the Internet by using a computer, and improving the network security.

Description

Technical Field

[0001] The present invention relates to the technical field of information authentication, and in particular to an online real-name authentication method and system. Background Art

[0002] With the development of the Internet, network security is the top priority to ensure the normal operation of enterprises. Currently, enterprises usually authenticate Internet access by identifying the IP address and MAC address of the computer; however, in this way, everyone can access the Internet through the same computer, and it is impossible to locate the record of people using computers to access the Internet, which poses certain network security risks. Summary of the invention

[0003] In view of this, an embodiment of the present invention provides an Internet real-name authentication method and system to improve network security.

[0004] To achieve the above objectives, the embodiments of the present invention provide the following technical solutions:

[0005] A first aspect of an embodiment of the present invention discloses an Internet real-name authentication method, which is applicable to an Internet behavior management device, and includes:

[0006] Intercepting the traffic of users accessing the Internet through a browser and displaying an authentication interface of a unified authentication platform, wherein the authentication interface includes a QR code;

[0007] Obtaining an authorization code sent by the browser, wherein the unified authentication platform enables the user to be online on the unified authentication platform based on authentication parameters, the authentication parameters are obtained by the user scanning the QR code, and the authorization code is sent by the unified authentication platform to the browser when the user is online, and the authentication parameters at least include a name and a work number;

[0008] The authentication of the user is determined to be successful based on the authorization code, so that the user can access the Internet through the browser.

[0009] Preferably, intercepting the traffic of the user accessing the Internet through the browser and displaying the authentication interface of the unified authentication platform includes:

[0010] Intercept the user's traffic when accessing the Internet through the browser;

[0011] Determining whether the user has passed the authentication;

[0012] If the user fails the authentication, the authentication interface of the unified authentication platform will pop up through the proxy.

[0013] Preferably, obtaining the authorization code sent by the browser includes:

[0014] Obtaining an authorization address that the browser redirects to access, wherein the browser redirects to access the authorization address upon receiving the authorization code, and the authorization address carries the authorization code;

[0015] The authorization code is obtained based on the authorization address.

[0016] Preferably, determining that the user's authentication is successful based on the authorization code so that the user can access the Internet through the browser includes:

[0017] Passing the authorization code to the unified authentication platform to obtain an authorization token fed back by the unified authentication platform;

[0018] Using the authorization token to obtain the user information of the user from the unified authentication platform, the user information including the work number and name;

[0019] The user is brought online to the online behavior management device according to the user information, so that the user can access the Internet through the browser.

[0020] Preferably, placing the user online on the online behavior management device according to the user information so that the user can access the Internet through the browser includes:

[0021] A new user is created on the online behavior management line using the user information as a user name, so that the user can access the Internet through the browser.

[0022] A second aspect of an embodiment of the present invention discloses an Internet real-name authentication system, which is applicable to an Internet behavior management device, and includes:

[0023] A processing unit, used to intercept traffic from a user accessing the Internet through a browser and display an authentication interface of a unified authentication platform, wherein the authentication interface includes a QR code;

[0024] an acquisition unit, configured to acquire the authorization code sent by the browser, wherein the unified authentication platform enables the user to be online on the unified authentication platform based on authentication parameters, the authentication parameters are obtained by the user scanning the QR code, the authorization code is sent by the unified authentication platform to the browser when the user is online, and the authentication parameters at least include a name and a work number;

[0025] An authentication unit is used to determine whether the user is authenticated based on the authorization code, so that the user can access the Internet through the browser.

[0026] Preferably, the processing unit comprises:

[0027] The interception module is used to intercept the traffic of users accessing the Internet through the browser;

[0028] A judgment module, used to judge whether the user has passed the authentication;

[0029] The display module is used to pop up the authentication interface of the unified authentication platform through a proxy if the user fails to pass the authentication.

[0030] Preferably, the acquisition unit is specifically used to: acquire the authorization address that the browser redirects to access, wherein the browser redirects to access the authorization address when receiving the authorization code, and the authorization address carries the authorization code; and acquire the authorization code based on the authorization address.

[0031] Preferably, the authentication unit comprises:

[0032] A delivery module, used to deliver the authorization code to the unified authentication platform to obtain an authorization token fed back by the unified authentication platform;

[0033] An acquisition module, used to use the authorization token to obtain the user information of the user from the unified authentication platform, wherein the user information includes a work number and a name;

[0034] The online module is used to bring the user online on the online behavior management device according to the user information, so that the user can access the Internet through the browser.

[0035] Preferably, the online module is specifically used to create a new user online in the online behavior management using the user information as a user name, so that the user can access the Internet through the browser.

[0036] Based on the above-mentioned embodiment of the present invention, a method and system for real-name authentication for Internet access is provided. The method is as follows: intercepting the traffic of users accessing the Internet through a browser, and displaying the authentication interface of a unified authentication platform, wherein the authentication interface includes a QR code; obtaining the authorization code sent by the browser, wherein the unified authentication platform enables the user to be online on the unified authentication platform based on authentication parameters, the authentication parameters are obtained by the user scanning the QR code, and the authorization code is sent to the browser by the unified authentication platform when the user is online, and the authentication parameters at least include the name and work number; determining whether the user's authentication is successful based on the authorization code, so that the user can access the Internet through the browser. In this solution, when the user accesses the Internet through a browser, the traffic accessing the Internet is intercepted. Displaying the authentication interface to prompt the user to scan the QR code of the authentication interface, obtaining the authorization code sent by the browser, and determining whether the user's authentication is successful based on the authorization code so that the user can access the Internet through the browser, in this way, the record of an individual using a computer to access the Internet can be accurately located, thereby improving network security. BRIEF DESCRIPTION OF THE DRAWINGS

[0037] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on the provided drawings without paying creative work.

[0038] Figure 1 An example diagram of real-name authentication component deployment provided by an embodiment of the present invention;

[0039] Figure 2 A flowchart of an online real-name authentication method provided by an embodiment of the present invention;

[0040] Figure 3 A flow chart of the interactions between the parties during the online real-name authentication process provided by an embodiment of the present invention;

[0041] Figure 4 An example diagram of an interface of an online authentication platform provided by an embodiment of the present invention;

[0042] Figure 5 An example diagram of an authentication interface provided by an embodiment of the present invention;

[0043] Figure 6 Another example diagram of an authentication interface provided by an embodiment of the present invention;

[0044] Figure 7 A structural block diagram of an Internet real-name authentication system provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0045] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0046] In this application, the terms "comprises", "comprising" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device comprising a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, an element defined by the sentence "comprising a ..." does not exclude the presence of other identical elements in the process, method, article or device comprising the element.

[0047] With the development of the Internet, network security is the top priority to ensure the normal operation of enterprises. At present, enterprises usually authenticate Internet access by identifying the IP address and MAC address of the computer (only supports computers plugged into the network cable). In addition, enterprises can also access the Internet through the wireless network by identifying the MAC of the wireless terminal + the verification code of the mobile phone SMS; however, under the aforementioned Internet access method, it is impossible to locate the record of people using computers to access the Internet, and there is a lack of traceability of Internet behavior, which poses certain network security risks.

[0048] Therefore, the embodiment of the present invention provides a method and system for real-name authentication for Internet access. When a user accesses the Internet through a browser, the traffic for accessing the Internet is intercepted. An authentication interface is displayed to prompt the user to scan the QR code of the authentication interface, obtain the authorization code sent by the browser, and determine that the user's authentication is passed based on the authorization code so that the user can access the Internet through the browser. In this way, the record of an individual using a computer to access the Internet can be accurately located, thereby improving network security.

[0049] It should be noted that the Internet real-name authentication method and system provided by this solution are implemented based on real-name authentication components. The real-name authentication components include: the user's PC and mobile device, mobile work platform client, Internet behavior management device, unified authentication platform and mobile work platform, etc. The functions of these real-name authentication components are explained below.

[0050] User's PC and mobile devices: access the Internet.

[0051] Mobile work platform client: employees scan the code for authentication.

[0052] Internet behavior management equipment: used to perform Internet user identity authentication, Internet behavior auditing and Internet traffic control.

[0053] Unified authentication platform: provides an oauth (an authentication protocol) authentication docking interface, and is connected to the Internet behavior management device configuration for oauth authentication. It is the server in oauth authentication.

[0054] Mobile work platform: save all employee information (such as name, work number and mobile phone number, etc.), and perform identity verification during QR code authentication.

[0055] By deploying the above-mentioned real-name authentication components, online real-name authentication is implemented. Taking a bank (divided into the head office and branches) as an example, the deployment example of each real-name authentication component is shown in the figure below: Figure 1 As shown;

[0056] Figure 1In the process, each branch deploys an Internet behavior management device in series at the Internet exit, and each branch's Internet behavior management device is connected to the unified authentication platform of the head office's WEB area for multi-oauth authentication; choose to use the authentication server on the Internet behavior management device, and configure the authentication server as a third-party oauth authentication server.

[0057] The head office's Internet exit is connected to an Internet behavior management device, which is also connected to the head office's unified authentication platform for multi-oauth authentication in the WEB area.

[0058] Two devices are deployed in the head office's WEB area, one is a unified authentication platform and the other is a mobile work platform; authentication is established between the unified authentication platform and the mobile work platform.

[0059] The 10444 port of the service IP of the unified authentication platform in the WEB area of ​​the head office needs to be opened to the public network to ensure that it can be accessed by public network devices. Since the 10444 port is mainly used for the OAuth authentication connection between the branch and the head office's Internet behavior management equipment, for security reasons, a whitelist control is performed on the firewall at the head office's Internet exit, and only the branch's Internet exit IP is allowed to access the 10444 port of the unified authentication platform in the WEB area.

[0060] The above is an explanation of the example diagram of real-name authentication component deployment.

[0061] It should be noted that this solution has already completed the following pre-configuration before Internet authentication:

[0062] The Internet behavior management device and the unified authentication platform are connected to the standard oauth2.0 authentication protocol.

[0063] The unified authentication platform configures the authentication service for scanning code authentication to connect to a third party, and this third party refers to the mobile work platform. The unified authentication platform and the mobile work platform also have a negotiation interface. The main function of this interface is that when the user scans the code and passes the authentication on the mobile work platform, the mobile work platform will pass the authenticated user's work number and name to the unified authentication platform through this interface. The unified authentication platform uses "work number_name" to log in to the platform.

[0064] The online behavior management device and the unified authentication platform prepare a negotiation interface in advance. When the user goes online on the unified authentication platform, the unified authentication platform will pass information such as the work number and name to the online behavior management device through the negotiation interface.

[0065] See also Figure 2 , shows a flow chart of an online real-name authentication method provided by an embodiment of the present invention, the online real-name authentication method is applicable to an online behavior management device, and the online real-name authentication method includes:

[0066] Step S201: intercept the traffic of users accessing the Internet through the browser, and display the authentication interface of the unified authentication platform, which includes a QR code.

[0067] In the specific implementation of step S201, when the user uses the browser of the PC to access the Internet, the Internet behavior management device intercepts the traffic of the user accessing the Internet through the browser and determines whether the user has passed the authentication;

[0068] If the user fails the authentication, the authentication interface of the unified authentication platform will pop up through the proxy. The authentication interface contains a QR code generated by the unified authentication platform. The user can scan the QR code in the authentication interface through the mobile platform client (also referred to as the mobile platform APP).

[0069] When the user scans the QR code in the authentication interface through the mobile platform client, the mobile platform client will send a URL (uniform resource locator) request to the mobile platform server, that is, the recognition result of the QR code in the authentication interface is the mobile work platform URL.

[0070] Step S202: Obtain the authorization code sent by the browser.

[0071] After the authentication interface is displayed, the user scans the QR code in the authentication interface through the mobile platform client for authentication. At this time, the mobile work platform client will pass the user's authentication information (name, work number, department, etc.) to the mobile work platform for authentication;

[0072] After the user passes the authentication of the mobile work platform, the mobile work platform carries the user's authentication parameters to access the unified authentication platform. The unified authentication platform verifies that the authentication parameters are correct. The mobile work platform also transmits the user's work number and name and other information to the unified authentication platform. The unified authentication platform uses "work number_name" as the user name to create a new user and confirm that the user has passed the authentication and is online. That is, the user has completed the online status in the unified authentication platform (is online);

[0073] Among them, the authentication parameters mentioned above include at least name and work number; in general, the unified authentication platform enables users to be online on the unified authentication platform based on the authentication parameters, and the authentication parameters are obtained by users scanning the QR code.

[0074] After the user goes online on the unified authentication platform, the authentication interface is refreshed, and the unified authentication platform returns the authorization code of the authentication result (recorded as the oauth code parameter) to the browser, that is, the authorization code is sent to the browser by the unified authentication platform when the user is online.

[0075] It should be noted that the authorization code is the intermediate credential that the client uses to request an access token from an authorization server (such as a unified authentication platform). The authorization code is used to exchange secure tokens between the client and the authorization server. The browser can use the authorization code to declare to the Internet behavior management device that it is an authenticated user, and the browser can request access to the Internet.

[0076] In the specific implementation process of step S202, the online behavior management device obtains the authorization address that the browser redirects to access, wherein the browser redirects to access the authorization address upon receiving the authorization code, and the authorization address carries the authorization code; the online behavior management device obtains the authorization code based on the authorization address.

[0077] Specifically, after the unified authentication platform returns the authorization code of the authentication result to the browser, the browser redirects to access the authorization address (the authorization address carries the authorization code), and the Internet behavior management device obtains the authorization code through the authorization address.

[0078] It should be noted that the authorization address is a fictitious address, and the purpose of the authorization address is to pass the authorization code to the Internet behavior management device.

[0079] Step S203: Determine whether the user's authentication is successful based on the authorization code, so that the user can access the Internet through the browser.

[0080] In the specific implementation of step S203, after the online behavior management device obtains the authorization code, the online behavior management device transmits the authorization code to the unified authentication platform to obtain the authorization token (referred to as oauthtoken) fed back by the unified authentication platform; the online behavior management device uses the authorization token to obtain the user's user information from the unified authentication platform, and the user information includes the work number and name;

[0081] The online behavior management device brings the user online on the online behavior management device according to the user information, so that the user can access the Internet through a browser.

[0082] Specifically, the Internet behavior management device calls the "Get Authorization Token" interface of the unified authentication platform and passes the authorization code to obtain the authorization token;

[0083] After the online behavior management device obtains the authorization token, it obtains the user's user information (name + work number) from the unified authentication platform through the authorization token; the online behavior management device uses the user information as the user name to create a new user online on the online behavior management device, allowing the user to access the Internet through a browser.

[0084] That is to say, the Internet behavior management device creates a new user with "work number_name" as the user name based on the user's user information and authenticates the user to go online (the user passes the online authentication of the Internet behavior management device). At this time, the user is online in the Internet behavior management, the user is allowed to access the Internet, and the access interface of the browser used by the user pops up the Internet address access interface that the user initially visited.

[0085] In the embodiment of the present invention, when a user accesses the Internet through a browser, the traffic accessing the Internet is intercepted. An authentication interface is displayed to prompt the user to scan the QR code of the authentication interface, obtain the authorization code sent by the browser, and determine that the user's authentication is passed based on the authorization code so that the user can access the Internet through the browser. In this way, the record of an individual using a computer to access the Internet can be accurately located, thereby improving network security.

[0086] It should be noted that the above Figure 2 It involves multiple interactions among users, mobile work platform clients, computers, Internet behavior management devices, unified authentication platforms, and mobile work platforms. To better understand the content of the interactions among all parties, Figure 3 The flowchart of the interaction between the parties in the online real-name authentication process is illustrated as an example. Figure 3 In the Internet, the Internet behavior management device is referred to as Internet behavior management. Figure 3 The steps include:

[0087] ① When users use a computer browser to access the Internet, their traffic is blocked by Internet behavior management.

[0088] ②. Internet behavior management verifies that the user has not passed the authentication, and the agent pops up the authentication interface of the unified authentication platform, which contains a QR code generated by the unified authentication platform.

[0089] ③. The user scans the QR code through the mobile work platform client for authentication. The mobile work platform client transmits the user's authentication information to the mobile work platform for authentication, and the authentication is successful.

[0090] ④. The mobile work platform carries the authentication parameters to access the unified authentication platform. The unified authentication platform verifies that the authentication parameters are correct. The mobile work platform passes the work number and name to the unified authentication platform. The unified authentication platform uses "work number_name" as the user name to create a new user and confirm that the user has passed the authentication and is online. At this time, the user has been online on the unified authentication platform.

[0091] ⑤. The authentication interface is refreshed, and the unified authentication platform returns the authorization code (recorded as the oauth code parameter) to the browser.

[0092] ⑥. The browser redirects to access the authorization address (the authorization address carries the authorization code), and the Internet behavior management obtains the authorization code through the authorization address.

[0093] ⑦. The Internet behavior management calls the "Get Authorization Token" interface of the unified authentication platform and passes the authorization code to obtain the authorization token.

[0094] ⑧. After obtaining the authorization token, the Internet behavior management obtains the user's user information (name + work number) from the unified authentication platform through the authorization token.

[0095] ⑨. The Internet behavior management device creates a new user with "work number_name" as the user name based on the user's user information and authenticates the user to go online. The user is allowed to access the Internet, and the access interface of the browser used by the user pops up the Internet address access interface that the user initially visited.

[0096] Based on the above embodiments, the service flow of online real-name authentication is as follows:

[0097] 1. When a user accesses the Internet, he enters the Internet URL he wants to access in the browser. The traffic to the Internet is intercepted by the Internet behavior management device, and a pop-up message is displayed. Figure 4 The interface of the online authentication platform shown includes an oauth authentication trigger button.

[0098] 2. User clicks Figure 4 The oauth authentication trigger button on the Internet authentication platform interface jumps to display Figure 5 The authentication interface of the unified authentication platform is shown, and the authentication interface of the unified authentication platform displays a QR code for authentication.

[0099] 3. The user uses the mobile work platform client to scan Figure 5 The QR code in the authentication interface of the unified authentication platform is shown. After the authentication is completed, the following is displayed: Figure 6 The authentication interface of the unified authentication platform is shown. Figure 6 The authentication interface of the unified authentication platform shown displays the prompt message "Scan code successful", the user's name, the user's work number and the department to which the user belongs. At this time, the PC can access the Internet.

[0100] 4. The Internet behavior management device uses the user's work number and name as the user name to go online and perform traffic control and behavior auditing.

[0101] In actual application, after applying the Internet real-name authentication method proposed in this solution, the employee's Internet access process is as follows: open the browser on the wired computer, a QR code pops up when visiting any website, use the mobile work platform client to scan the QR code, and after successful authentication, you can go online;

[0102] The process for employees to log out of the Internet is as follows: open the browser on the wired computer, visit the logout website, click the logout button, and log out of the Internet.

[0103] In summary, the present invention has the following beneficial effects:

[0104] 1. Implement real-name system for users to access the Internet, and then accurately audit users' online behavior: All users need to implement real-name system for accessing the Internet, and the employee system and unified authentication platform interface are connected. The user name and work number are synchronized to the unified authentication platform. The online behavior management device obtains the work number and name through the token to realize unique authentication online. At the same time, the work number and name can be used to accurately audit users' online behavior.

[0105] 2. Use QR code scanning to authenticate Internet access, which is convenient, fast and highly secure: Using QR code scanning to authenticate Internet access can quickly realize authentication and authorization. The whole process takes a very short time, is convenient, fast and highly secure.

[0106] Corresponding to the online real-name authentication method provided by the above embodiment of the present invention, see Figure 7 , the embodiment of the present invention also provides a structural block diagram of an online real-name authentication system, the online real-name authentication system is applicable to an online behavior management device, the online real-name authentication system includes: a processing unit 100, an acquisition unit 200 and an authentication unit 300;

[0107] The processing unit 100 is used to intercept the traffic of users accessing the Internet through a browser and display an authentication interface of the unified authentication platform, which includes a QR code.

[0108] The acquisition unit 200 is used to obtain the authorization code sent by the browser, wherein the unified authentication platform makes the user online on the unified authentication platform based on the authentication parameters, the authentication parameters are obtained by the user scanning the QR code, and the authorization code is sent to the browser by the unified authentication platform when the user is online, and the authentication parameters at least include the name and work number.

[0109] In a specific implementation, the acquisition unit 200 is specifically used to: acquire the authorization address that the browser redirects to access, wherein the browser redirects to access the authorization address upon receiving the authorization code, and the authorization address carries the authorization code; and acquire the authorization code based on the authorization address.

[0110] The authentication unit 300 is used to determine whether the user's authentication is successful based on the authorization code, so that the user can access the Internet through the browser.

[0111] In the embodiment of the present invention, when a user accesses the Internet through a browser, the traffic accessing the Internet is intercepted. An authentication interface is displayed to prompt the user to scan the QR code of the authentication interface, obtain the authorization code sent by the browser, and determine that the user's authentication is passed based on the authorization code so that the user can access the Internet through the browser. In this way, the record of an individual using a computer to access the Internet can be accurately located, thereby improving network security.

[0112] Preferably, combined Figure 7 The processing unit 100 includes an interception module, a judgment module and a display module. The execution principle of each module is as follows:

[0113] The interception module is used to intercept the traffic of users accessing the Internet through the browser.

[0114] The judgment module is used to judge whether the user has passed the authentication.

[0115] The display module is used to pop up the authentication interface of the unified authentication platform through the proxy if the user fails the authentication.

[0116] Preferably, combined Figure 7 The content shown, the authentication unit 300 includes a transmission module, an acquisition module and an online module, and the execution principle of each module is as follows:

[0117] The delivery module is used to deliver the authorization code to the unified authentication platform to obtain the authorization token fed back by the unified authentication platform.

[0118] The acquisition module is used to use the authorization token to obtain the user's user information from the unified authentication platform. The user information includes the work number and name.

[0119] The online module is used to bring users online on the online behavior management device based on user information so that users can access the Internet through a browser.

[0120] In a specific implementation, the online module is specifically used to: create a new user on the online behavior management line using the user information as the user name, so that the user can access the Internet through a browser.

[0121] In summary, the embodiments of the present invention provide a method and system for real-name authentication for Internet access. When a user accesses the Internet through a browser, the traffic accessing the Internet is intercepted. An authentication interface is displayed to prompt the user to scan the QR code of the authentication interface, obtain the authorization code sent by the browser, and determine that the user's authentication is passed based on the authorization code so that the user can access the Internet through the browser. In this way, the record of an individual using a computer to access the Internet can be accurately located, thereby improving network security.

[0122] Each embodiment in this specification is described in a progressive manner, and the same or similar parts between the embodiments can refer to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the system or system embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can refer to the partial description of the method embodiment. The system and system embodiments described above are merely schematic, wherein the units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, they may be located in one place, or they may be distributed on multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the scheme of this embodiment. Ordinary technicians in this field can understand and implement it without creative work.

[0123] Professionals may further appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of the two. In order to clearly illustrate the interchangeability of hardware and software, the composition and steps of each example have been generally described in the above description according to function. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professionals and technicians may use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of the present invention.

[0124] The above description of the disclosed embodiments enables those skilled in the art to implement or use the present invention. Various modifications to these embodiments will be apparent to those skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the scope of the present invention. Therefore, the present invention will not be limited to the embodiments shown herein, but rather to the widest scope consistent with the principles and novel features disclosed herein.

Claims

1. A method for online real-name authentication, characterized in that: The method is applicable to an online behavior management device, and the method includes: Intercepting the traffic of users accessing the Internet through a browser and displaying an authentication interface of a unified authentication platform, wherein the authentication interface includes a QR code; Obtaining an authorization code sent by the browser, wherein the unified authentication platform enables the user to be online on the unified authentication platform based on authentication parameters, the authentication parameters are obtained by the user scanning the QR code, and the authorization code is sent by the unified authentication platform to the browser when the user is online, and the authentication parameters at least include a name and a work number; The authentication of the user is determined to be successful based on the authorization code, so that the user can access the Internet through the browser.

2. The method according to claim 1, characterized in that Intercept the traffic of users accessing the Internet through the browser and display the authentication interface of the unified authentication platform, including: Intercept the user's traffic when accessing the Internet through the browser; Determining whether the user has passed the authentication; If the user fails the authentication, the authentication interface of the unified authentication platform will pop up through the proxy.

3. The method according to claim 1, characterized in that Obtaining the authorization code sent by the browser, including: Obtaining an authorization address that the browser redirects to access, wherein the browser redirects to access the authorization address upon receiving the authorization code, and the authorization address carries the authorization code; The authorization code is obtained based on the authorization address.

4. The method according to claim 1, characterized in that: Determining that the user's authentication is successful based on the authorization code so that the user can access the Internet through the browser includes: Passing the authorization code to the unified authentication platform to obtain an authorization token fed back by the unified authentication platform; Using the authorization token to obtain the user information of the user from the unified authentication platform, the user information including the work number and name; The user is brought online to the online behavior management device according to the user information, so that the user can access the Internet through the browser.

5. The method according to claim 4, characterized in that The method of bringing the user online on the online behavior management device according to the user information so that the user can access the Internet through the browser includes: A new user is created on the online behavior management line using the user information as a user name, so that the user can access the Internet through the browser.

6. An Internet real-name authentication system, characterized in that: The system is applicable to an online behavior management device, and the system includes: A processing unit, used to intercept traffic from a user accessing the Internet through a browser and display an authentication interface of a unified authentication platform, wherein the authentication interface includes a QR code; an acquisition unit, configured to acquire the authorization code sent by the browser, wherein the unified authentication platform enables the user to be online on the unified authentication platform based on authentication parameters, the authentication parameters are obtained by the user scanning the QR code, the authorization code is sent by the unified authentication platform to the browser when the user is online, and the authentication parameters at least include a name and a work number; An authentication unit is used to determine whether the user is authenticated based on the authorization code, so that the user can access the Internet through the browser.

7. The system according to claim 6, characterized in that The processing unit comprises: The interception module is used to intercept the traffic of users accessing the Internet through the browser; A judgment module, used to judge whether the user has passed the authentication; The display module is used to pop up the authentication interface of the unified authentication platform through a proxy if the user fails to pass the authentication.

8. The system according to claim 6, characterized in that The acquisition unit is specifically used to: acquire the authorization address that the browser redirects to access, wherein the browser redirects to access the authorization address when receiving the authorization code, and the authorization address carries the authorization code; and acquire the authorization code based on the authorization address.

9. The system according to claim 6, characterized in that The authentication unit comprises: A delivery module, used to deliver the authorization code to the unified authentication platform to obtain an authorization token fed back by the unified authentication platform; An acquisition module, used to use the authorization token to obtain the user information of the user from the unified authentication platform, wherein the user information includes a work number and a name; The online module is used to bring the user online on the online behavior management device according to the user information, so that the user can access the Internet through the browser.

10. The system according to claim 9, characterized in that The online module is specifically used to create a new user in the online behavior management line using the user information as a user name, so that the user can access the Internet through the browser.

Images