Method and system for autonomously executing identity authentication and electronic equipment
By automatically entering the identity authentication state on the client and generating authentication information using identity tokens and dynamic parameters, the problem of cumbersome login page operations in the existing technology is solved, and the effect of simplifying the login process and improving the user experience is achieved.
Patent Information
- Application Number
- CN202311241413.4
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2023-09-22
- Publication Date
- 2025-03-25
AI Technical Summary
In the prior art, after the client jumps from communication information to the display page of network content, it needs to manually enter the account password, resulting in cumbersome login page operation and reducing user experience and conversion rate.
After the client receives the communication information, it automatically enters the identity authentication state, triggers active access to the third-party server to obtain an identity token that matches the client, generates authentication information based on dynamic parameters and identity tokens, and transmits it to the sender to obtain login information.
It realizes that the client automatically enters the identity authentication state when displaying network content, simplifies the operation process of the user login page, and improves the user experience and conversion rate.
Smart Images

Figure CN119696804A_ABST
Abstract
Description
Technical Field
[0001] The present application relates to the field of data processing, and in particular, to a method, system and electronic device for autonomously performing identity authentication. Background Art
[0002] Currently, when a client receives communication information, it will access the network content associated with the communication information. While the client is displaying the network content, the client is required to manually enter its account, password and other information to enter the identity authentication state. However, after jumping from the communication information to the network content display page, the process of manually entering the account and password will greatly reduce the client's experience and conversion rate, and there is a technical problem of cumbersome operation of the user login page.
[0003] To address the above-mentioned problems, no effective solution has been proposed yet. Summary of the invention
[0004] According to one aspect of the embodiment of the present application, a method for autonomous identity authentication is provided. The method may include: a client receives communication information and accesses network content associated with the communication information, wherein the communication information is sent by the sender based on locally stored dynamic parameters; the client displays the network content and enters the identity authentication state; when the client enters the identity authentication state, it triggers active access to a third-party server and requests an identity token that matches the client; the client generates authentication information to be verified based on the dynamic parameters and identity token carried in the communication information, and transmits the authentication information to the sender; the client obtains login information based on the verification result returned by the sender.
[0005] According to another aspect of the embodiment of the present application, another autonomous identity authentication method is also provided. The method may include: the sender sends communication information to the client based on the locally stored dynamic parameters; the sender obtains the authentication information generated by the client based on the dynamic parameters carried in the communication information and the identity token matching the client, wherein the identity token is triggered by the client actively accessing and requesting a third-party server when entering the identity authentication state, and the identity authentication state is entered when the client displays network content, and the network content is associated with the communication information; the sender transmits the authentication information to the third-party server, and obtains the verification result obtained by the third-party server verifying the authentication information, wherein the client obtains the login information based on the verification result returned by the sender.
[0006] According to another aspect of the embodiment of the present application, another autonomous identity authentication method is also provided. The method may include: the client receives shopping communication information and accesses the network content associated with the shopping communication information, wherein the shopping communication information is sent by the sender based on the dynamic parameters stored locally; the client accesses the network content associated with the shopping communication information; the client displays the network content and enters the identity authentication state; when the client enters the identity authentication state, it triggers active access to the third-party server and requests to obtain an identity token matching the client; the client generates authentication information to be verified based on the dynamic parameters and identity token carried in the shopping communication information, and transmits the authentication information to the sender; the client obtains login information based on the verification result returned by the sender.
[0007] According to another aspect of the embodiment of the present application, an autonomous driving vehicle testing system based on simulation data is also provided. The system may include: a sender, which is used to send communication information to a client based on locally stored dynamic parameters; a client, which is used to receive communication information, access network content associated with the communication information, display network content, and enter an identity authentication state, and when entering the identity authentication state, trigger active access to a third-party server, and request an identity token matching the client, and generate authentication information to be verified based on the dynamic parameters and identity token carried in the communication information; a third-party server, which is used to verify the authentication information to be verified and obtain a verification result.
[0008] According to another aspect of an embodiment of the present application, an electronic device is also provided, which may include a memory and a processor; the memory is used to store computer-executable instructions, and the processor is used to execute computer-executable instructions. When the above-mentioned computer-executable instructions are executed by the processor, the above-mentioned method of any one of the above-mentioned items is implemented.
[0009] According to another aspect of an embodiment of the present application, a processor is further provided, the processor being used to run a program, wherein any one of the above methods is executed when the program is running.
[0010] According to another aspect of an embodiment of the present application, a computer-readable storage medium is further provided, the computer-readable storage medium including a stored program, wherein when the program is running, the device where the storage medium is located is controlled to execute any one of the above methods.
[0011] In an embodiment of the present application, the client receives communication information and accesses network content associated with the communication information, wherein the communication information is sent by the sender based on the dynamic parameters stored locally; the client displays the network content and enters the identity authentication state; when entering the identity authentication state, the client triggers active access to the third-party server and requests to obtain an identity token that matches the client; the client generates authentication information to be verified based on the dynamic parameters and identity token carried in the communication information, and transmits the authentication information to the sender; the client obtains login information based on the verification result returned by the sender. That is, in an embodiment of the present application, the client receives communication information, accesses network content associated with the communication information, and automatically enters the identity authentication state when displaying the network content, obtains authentication information based on the identity token that matches the client, determines the verification result of the client based on the authentication information, and automatically obtains the client's login information based on the verification result, thereby achieving the technical effect of simplifying the operation of the user login page and solving the technical problem of cumbersome operation of the login page.
[0012] It is easy to notice that the above general description and the following detailed description are only for illustrating and explaining the present application, and do not constitute a limitation of the present application. BRIEF DESCRIPTION OF THE DRAWINGS
[0013] The drawings described herein are used to provide a further understanding of the present application and constitute a part of the present application. The illustrative embodiments of the present application and their descriptions are used to explain the present application and do not constitute an improper limitation on the present application. In the drawings:
[0014] Figure 1 is a schematic diagram of an application scenario of an autonomous identity authentication method according to an embodiment of the present application;
[0015] Figure 2 is a structural block diagram of a computing environment according to an embodiment of the present application;
[0016] Figure 3 is a flow chart of a method for autonomously executing identity authentication according to an embodiment of the present application;
[0017] Figure 4 is a flow chart of another autonomous identity authentication method according to an embodiment of the present application;
[0018] Figure 5 is a flow chart of another autonomous identity authentication method according to an embodiment of the present application;
[0019] Figure 6 is a schematic diagram of an autonomous identity authentication system according to an embodiment of the present application;
[0020] Figure 7is a flow chart of an identity authentication method according to an embodiment of the present application;
[0021] Figure 8 This is a schematic diagram of a process of user-free identity authentication according to an embodiment of the present application;
[0022] Fig. 9 is a schematic diagram of an autonomous identity authentication device according to an embodiment of the present application;
[0023] Fig.10 is a schematic diagram of another autonomous identity authentication device according to an embodiment of the present application;
[0024] Fig.11 is a schematic diagram of another autonomous identity authentication device according to an embodiment of the present application;
[0025] Fig.12 is a structural block diagram of a computer terminal according to an embodiment of the present application;
[0026] Fig.13 It is a block diagram of an electronic device that autonomously executes an identity authentication method according to an embodiment of the present application. DETAILED DESCRIPTION
[0027] In order to enable those skilled in the art to better understand the solution of the present application, the technical solution in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present application.
[0028] It should be noted that the terms "first", "second", etc. in the specification and claims of the present application and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchangeable where appropriate, so that the embodiments of the present application described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any of their variations are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device comprising a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.
[0029] First, some nouns or terms that appear in the description of the embodiments of the present application are subject to the following explanations:
[0030] The fifth generation mobile communications technology (5G) message is a new message service based on the 5G network that can support the transmission of multiple types of information such as text, pictures, voice, and video.
[0031] The terminal number may refer to a displacement identifier of a user equipment, which may be important information for identifying the user equipment;
[0032] Dynamic parameters refer to parameters that can be modified dynamically while the program is running. They can be used to control the behavior of the program, adjust the performance of the program, etc. Dynamic parameters usually need to be set through specific interfaces or commands;
[0033] Hypertext Markup Language (H5) is a standard markup language used to create web pages and can be used to control the appearance and behavior of web pages.
[0034] Consistency checking refers to the process of checking the consistency of data while the program is running. It can be used to determine the correctness and reliability of the program and can be achieved through specific algorithms or data structures.
[0035] Example 1
[0036] According to one aspect of the embodiments of the present application, a self-executing identity authentication method is provided. As an optional implementation, the self-executing identity authentication method can be applied to, but is not limited to, Figure 1 The application scenario shown. Figure 1 is a schematic diagram of an application scenario of an autonomous identity authentication method according to an embodiment of the present application, such as Figure 1 As shown, in the application scenario, the terminal device 102 can, but is not limited to, communicate with the server 106 through the network 104, and the server 106 can, but is not limited to, perform operations on the database 108, such as write data operations or read data operations. The above-mentioned terminal device 102 can, but is not limited to, include a human-computer interaction screen, a processor and a memory. The above-mentioned human-computer interaction screen can, but is not limited to, be used to display communication information, network content, etc. on the terminal device 102. The above-mentioned processor can, but is not limited to, be used to respond to the above-mentioned human-computer interaction operations, perform corresponding operations, or generate corresponding instructions, and send the generated instructions to the server 106. The above-mentioned memory is used to store relevant processing data, such as identity tokens, identification information, communication templates, etc. Among them, the identification information can be used to determine the identity of the client, and can be the client's phone number.
[0037] As an optional method, the following steps in the autonomous authentication method can be executed on the server 106: Step S102, the client receives the communication information and accesses the network content associated with the communication information, wherein the communication information is sent by the sender in a targeted manner based on the dynamic parameters stored locally; Step S104, the client displays the network content and enters the identity authentication state; Step S106, when the client enters the identity authentication state, it triggers active access to the third-party server and requests an identity token that matches the client; Step S108, the client generates authentication information to be verified based on the dynamic parameters carried in the communication information and the identity token, and transmits the authentication information to the sender; Step S106, the client obtains the login information based on the verification result returned by the sender.
[0038] Using the above method, the client receives communication information, accesses network content associated with the communication information, and automatically enters the identity authentication state when displaying the network content. Based on the identity token matching the client, the authentication information is obtained, and based on the authentication information, the verification result of the client is determined, so as to automatically obtain the client's login information based on the verification result, thereby achieving the technical effect of simplifying the operation of the user login page and solving the technical problem of cumbersome operation of the login page.
[0039] Figure 2 is a structural block diagram of a computing environment according to an embodiment of the present application, such as Figure 2 As shown, computing environment 201 includes multiple computing nodes (such as servers) running on a distributed network (shown as 210-1, 210-2, ..., in the figure). The computing nodes all contain local processing and memory resources, and end users 202 can remotely run applications or store data in computing environment 201. Applications can be provided as multiple services 220-1, 220-2, 220-3 and 220-4 in computing environment 201, representing services "A", "D", "E" and "H" respectively.
[0040] The end user 202 can provide and access services through a web browser or other software application on the client, and in some embodiments, the end user 202's provision and / or request can be provided to the entry gateway 230. The entry gateway 230 can include a corresponding agent to handle the provision and / or request for the service (one or more services provided in the computing environment 201).
[0041] Services are provided or deployed based on various virtualization technologies supported by the computing environment 201. In some embodiments, services can be provided based on virtual machine (VM)-based virtualization, container-based virtualization, and / or similar methods. Virtual machine-based virtualization can be to simulate a real computer by initializing a virtual machine, and execute programs and applications without directly contacting any actual hardware resources. While the virtual machine virtualizes the machine, according to container-based virtualization, a container can be started to virtualize the entire operating system (Operating System, referred to as OS) so that multiple workloads can run on a single operating system instance.
[0042] In an embodiment based on container virtualization, several containers of a service can be assembled into a computing unit (e.g., a Kubernetes Pod). Figure 2 As shown, service 220-2 can be equipped with one or more computing units (Pods) Pod240-1, 240-2, ..., 240-N (collectively referred to as Pods). Pods can include a proxy 245 and one or more containers 242-1, 242-2, ..., 242-M (collectively referred to as containers). One or more containers in the Pod process requests related to one or more corresponding functions of the service, and the proxy 245 generally controls network functions related to the service, such as routing, load balancing, etc. Other services can also be equipped with Pods similar to Pods.
[0043] During operation, executing a user request from end user 202 may require invoking one or more services in computing environment 201, and executing one or more functions of a service may require invoking one or more functions of another service. Figure 2 As shown, service "A" 220-1 receives a user request from end user 202 from ingress gateway 230, service "A" 220-1 may call service "D" 220-2, and service "D" 220-2 may request service "E" 220-3 to perform one or more functions.
[0044] The computing environment described above can be a cloud computing environment, where the allocation of resources is managed by the cloud service provider, allowing the development of functions without considering the implementation, adjustment or expansion of servers. The computing environment allows developers to execute code in response to events without building or maintaining complex infrastructure. Services can be divided into a set of functions that can be automatically and independently scaled, rather than expanding a single hardware device to handle potential loads.
[0045] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in this application, such as weather forecast results and other data, are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of relevant data must comply with the relevant laws, regulations and standards of relevant countries and regions, and provide corresponding operation entrances for users to choose to authorize or refuse.
[0046] In the above operating environment, the present application provides a method for autonomously executing identity authentication. Figure 3 is a flow chart of a method for autonomously executing identity authentication according to an embodiment of the present application. Figure 3 As shown, the method may include the following steps:
[0047] Step S302: The client receives the communication information and accesses the network content associated with the communication information, wherein the communication information is sent by the sender in a direction based on the dynamic parameters stored locally.
[0048] In the technical solution provided in the above step S302 of the present application, the client can receive communication information from the sender and access the network content associated with the communication information. Among them, the communication information can be a 5G message. For example, in a shopping scenario, the communication information can be a message containing a product introduction and a purchase link. This is only an example, and the content of the communication information is not specifically limited. The sender can include a 5G message platform, a cloud server, etc., for example, it can be an Alibaba Cloud server, etc., and the type of the sender is not specifically limited here. The dynamic parameter can be a dynamic number parameter, which can include identification information for receiving the communication information. The identification information can be used to determine the identity of the client, and can be the client's phone number. The identification information of the client in the dynamic parameter can be a specified number information or a specified mobile phone number, which can be used to determine the mobile terminal receiving the communication information. The network content can be content associated with the network address in the communication information, and can be a web page, a product display interface, a product purchase interface, etc. This is only an example, and the type of network content is not specifically limited. The network address can be an address used to identify network resources, and can be a product link, a web page address, a jump link, etc. For example, it can be a Uniform Resource Locator (URL for short). This is only an example and does not specifically limit the type of network address. The client can be a mobile terminal, which can also be called a terminal client.
[0049] Optionally, the sender constructs the communication information based on the locally stored dynamic parameters, and sends the communication information to the corresponding client based on the dynamic parameters. The client receives the communication information and accesses the network content associated with the communication information.
[0050] For example, the sender determines the dynamic parameters based on the identification information of the client, and the sender constructs the communication information based on the dynamic parameters and the network address of the object to be accessed, and sends the communication information to the corresponding client based on the dynamic parameters. The client can receive the communication information. When the client receives the communication information, it can trigger the network address in the communication information by single-clicking, double-clicking, etc. to trigger the access instruction to the network address. The client responds to the access instruction to the network address and can jump to the network content associated with the network address. Among them, the object to be accessed can be a network resource that needs to be accessed, such as a file, a database, etc. This is only an example, and there is no specific restriction on the type of the object to be accessed.
[0051] For another example, the client can obtain a 5G message for product promotion, and can click on the link of the corresponding product in the 5G message to jump to the product sales webpage of the corresponding merchant and access the network content displayed on the product sales webpage.
[0052] Step S306: The client displays the network content and enters the identity authentication state.
[0053] In the technical solution provided in the above step S306 of the present application, the network content can be displayed on the client and the client identity authentication state can be automatically entered. The identity authentication state can be used to verify the consistency of the client.
[0054] When the client clicks on the network content to make a purchase or other operation, the client needs to enter the client's account, password or verification code through a key to complete the authentication of the client's identity. However, the input operation on the client is a very costly thing, which will greatly reduce the user experience and conversion rate. In order to solve the problem of cumbersome operations during the client login page, in this embodiment, when the network content is displayed to the client, the identity authentication state can be automatically performed to complete the authentication of the client's identity, thereby avoiding the process of requiring the client to enter the account, password or verification code before the client can be authenticated, thereby simplifying the operation of the client login page.
[0055] Step S306: When the client enters the identity authentication state, it triggers active access to the third-party server and requests an identity token that matches the client.
[0056] In the technical solution provided in the above step S308 of the present application, the client displays the network content and enters the identity authentication state at the same time. When the client enters the identity authentication state, it can trigger active access to the third-party server and request the third server to obtain an identity token that matches the client. Among them, the third-party server can be an operator service, which can be used to provide an identity token and verify the identity of the client based on the identity token. The identity token can be token information (Token information) used for identity authentication and authorization.
[0057] Optionally, when the client enters the identity authentication state, it can automatically trigger and actively access the third-party server in the background. The client can request the third-party server to obtain an identity token that matches the client based on its own identity information.
[0058] For example, when the client enters the identity authentication state, it can actively access the third-party server and send its own identification information to the third-party server. Based on the identification information sent by the client, the operator server obtains an identity token that matches the client's identification information. The identity token can be used to further verify the client's identity.
[0059] Step S308: The client generates authentication information to be verified based on the dynamic parameters and identity token carried in the communication information, and transmits the authentication information to the sender.
[0060] In the technical solution provided in the above step S308 of the present application, the client obtains dynamic parameters from the communication information and obtains an identity token matching its own identification information from the third-party server. Based on the dynamic parameters and the identity token, it can generate authentication information to be verified and transmit the authentication information to the sender.
[0061] Optionally, the client can generate an identity token through a third-party server. The third-party server records the association between the identity token and the identification information. The client can construct the authentication information to be verified by combining the identification information previously obtained from the dynamic parameters of the communication information and the identity token just obtained, and transmit the authentication information to the sender. The sender can transmit the authentication information to the third-party server, and the third-party server can further authenticate the authentication information.
[0062] Step S310: The client obtains login information based on the verification result returned by the sender.
[0063] In the technical solution provided in the above step S310 of the present application, the third-party server further verifies the authentication information, obtains the verification result, and transmits the verification result to the sender. The sender can transmit the verification result to the client. The client can obtain the login information based on the verification result returned by the sender, and automatically log in to the web page mapped to the network address based on the login information.
[0064] Optionally, the third-party server further verifies the authentication information, obtains a verification result, and transmits the verification result to the sender. The sender can transmit the verification result to the client. If the verification result is used to indicate that the authentication information has passed the verification, it can be determined that the client has passed the verification, and the webpage corresponding to the network URL can be automatically logged in in the client.
[0065] In an embodiment of the present application, the client receives communication information and accesses network content associated with the communication information, wherein the communication information is sent by the sender based on the dynamic parameters stored locally; the client displays the network content and enters the identity authentication state; when entering the identity authentication state, the client triggers active access to the third-party server and requests to obtain an identity token that matches the client; the client generates authentication information to be verified based on the dynamic parameters and identity token carried in the communication information, and transmits the authentication information to the sender; the client obtains login information based on the verification result returned by the sender. That is, in an embodiment of the present application, the client receives communication information, accesses network content associated with the communication information, and automatically enters the identity authentication state when displaying the network content, obtains authentication information based on the identity token that matches the client, determines the verification result of the client based on the authentication information, and automatically obtains the client's login information based on the verification result, thereby achieving the technical effect of simplifying the operation of the user login page and solving the technical problem of cumbersome operation of the login page.
[0066] The above method of this embodiment is further introduced below.
[0067] As an optional implementation, before the client receives the communication information, the method may also include: the sender creates a communication template locally, wherein the communication template includes at least one dynamic parameter that allows dynamic changes; the sender receives an information sending list, wherein the information sending list records the identification information of at least one client; the sender uses the identification information of the client in the information sending list to update the parameter value of the dynamic parameter that allows dynamic change; the sender combines the assigned dynamic parameter with the network address preset in the communication template to generate communication information; the sender submits a sending request based on the parameter value of the dynamic parameter, and sends the communication information to the client in a targeted manner.
[0068] In this embodiment, before the client receives the communication information, the sender needs to construct the communication information. The sender can pre-create a communication template locally that includes at least one dynamic parameter that allows dynamic changes. Based on the information sending list, the sender can determine the client that sends the communication information. The sender can use the identification information recorded in the information sending list to update the parameter value of the dynamic parameter that allows dynamic changes in the communication template to combine the assigned dynamic parameter with the network address preset in the communication template to generate the communication information. The sender can submit a sending request based on the parameter value of the dynamic parameter to send the communication information to the client in a directional manner. Among them, the communication template can be a message template containing dynamic parameters, for example, it can be a 5G message template, which is only an example here, and the type of the communication template is not specifically limited. The parameter value of the dynamic parameter in the communication template can change according to the change of the identification information of the specified client. The information sending list can include the identification information of the client receiving the communication information. The sender can include a message platform, which can be used to render the assigned dynamic parameter in combination with the network address preset in the communication template to obtain the communication information, for example, the message platform can be a 5G message platform, which is only an example here, and the type of the message platform is not specifically limited.
[0069] Optionally, the cloud server in the sender can locally create a communication template containing dynamic parameters that allow dynamic changes, and send the communication template to the message platform in the sender for storage. When the cloud server receives the information sending list fed back from the merchant server, it can update the parameter values of the dynamic parameters that allow dynamic changes based on the identification information of the client in the information sending list to generate the assigned dynamic parameters. The cloud server can send the assigned dynamic parameters and the selected communication template to the message platform, and obtain the communication information through the message platform. The sender can submit a sending request based on the parameter value of the dynamic parameter, and send the communication information to the client that the merchant server needs to send in a targeted manner. Among them, the merchant server can be a merchant service end, which can be used to specify the client that receives the communication information. It should be noted that the merchant server here is only an example, and does not specifically limit the terminal of the feedback information sending list.
[0070] For example, the sender can create a 5G message template containing an H5 jump network address, wherein the network address can contain a dynamic parameter with a variable parameter value. The sender can transfer the created 5G message template to the 5G message platform for storage. The merchant server initiates a request to send a 5G message to a specified mobile phone number, and through the request, the information sending list is fed back to the cloud server in the sender. In response to receiving the information sending list fed back by the merchant server, the cloud server can use the identification information of the client in the information sending list to update the dynamic parameters in the 5G message template that allow the parameter value to change dynamically, thereby generating the assigned dynamic parameters. The cloud server combines the dynamic parameters to be assigned with the preset network address in the communication template, and sends the combined information to the 5G message platform. The 5G message platform processes the combined information, generates communication information, and sends the communication information to the client in a targeted manner.
[0071] As an optional implementation, the sender uses the identification information of the client in the information sending list to update the parameter value of the dynamic parameter that is allowed to change dynamically, including: if the sender receives and recognizes the identification information of the client, it retrieves the dynamic parameter, wherein the dynamic parameter is allowed to be built into the address information of the network address; the sender sets the parameter value of the dynamic parameter to the identification information of the client.
[0072] In this embodiment, when the sender receives the information sending list fed back by the merchant server, the sender can identify the identification information of the client in the information sending list. If the identification information of the client is received and identified, the dynamic parameter can be retrieved. The sender can set the parameter value of the dynamic parameter to the identification information of the client to complete the update of the parameter value of the dynamic parameter that changes dynamically. The dynamic parameter is allowed to be built into the address information of the network address.
[0073] Optionally, when the sender receives and recognizes the client's identification information, it can call the dynamic parameters allowed to change in the communication template and set the parameter value of the dynamic parameters to the client's identification information to obtain updated dynamic parameters. The updated dynamic parameters can be embedded in the address information of the network address.
[0074] For example, the cloud server in the sender can receive a request initiated by the merchant server to send communication information to a specified mobile phone number, such as a 5G message request, to obtain a message sending list fed back by the merchant server. The sender can identify the specified mobile phone number in the message sending list. When the server identifies the specified number, it can retrieve the dynamic parameters and set the specified mobile phone number as the parameter value of the dynamic parameter in the URL of the 5G message template, so as to achieve the purpose of allowing the network address to carry the specified mobile phone number.
[0075] As an optional implementation, the sender combines the assigned dynamic parameters with the network address preset in the communication template to generate communication information, including: the sender combines the dynamic parameters to be sent with the network address preset in the communication template, and fills the combination result into the selected communication template to obtain communication information.
[0076] In this embodiment, the sender may combine the assigned dynamic parameter with the network address preset in the communication template, and fill the combined result into the selected communication template, thereby obtaining the communication information.
[0077] Optionally, the cloud server of the sender can determine the specified message template and the assigned dynamic parameters, and submit a sending request to the message platform in the sender. The message platform can determine the message template and the assigned dynamic parameters specified by the cloud server from the sending request. The message platform can combine the assigned dynamic parameters with the network address preset by the communication template. Since the updated dynamic parameters are the same as the identification information, the network address containing the identification information of the client can be obtained. The message platform can render the selected message template and the network address containing the identification information of the client to form a 5G message containing the URL of the specified mobile phone number, and send the 5G message to the client.
[0078] As an optional implementation, when the communication information carries at least dynamic parameters and a network address with an access object, the client responds to an access instruction to the network address and jumps to the network content associated with the network address, so as to successfully access the network content associated with the communication information. The method may at least include: the client monitors an access instruction that triggers access to the network address; the client responds to the access instruction, parses the communication information, and obtains the client's identification information and network address contained in the dynamic parameters; the client obtains the network content associated with the network address based on the parsed network address; and the client loads the network content.
[0079] In this embodiment, the sender transmits the communication information to the designated client. The client receives the communication information and triggers the network address in the communication information. When the client triggers the network address in the communication information, an access instruction to access the network address is triggered. When the client detects that the access instruction to access the network address has been triggered, it can respond to the access instruction and parse the received communication information to determine the dynamic parameters in the communication information, and further determine the identification information and network address of the client contained in the dynamic parameters. The client can obtain the network content associated with the network address based on the parsed network address, and load the network content in the display interface of the client. Among them, the network content can be an H5 page.
[0080] Optionally, when the client accesses a network address, it can obtain dynamic parameters in the network address to determine the identification information of the client specified by the merchant server, and access the network content with the identified identification information, thereby achieving the purpose of verifying the identification information of the client specified by the merchant server.
[0081] In this embodiment, the identification information specified by the merchant server is sent to the client through dynamic parameters, and the client is controlled to carry the identification information specified by the merchant server to obtain the network content associated with the network address. The network content associated with the network address is accessed through the carried identification information, so that the third-party server can authenticate the client through the carried identification information, thereby ensuring the authenticity and security of the client.
[0082] As an optional implementation, step S308, when the client enters the identity authentication state, triggers active access to the third-party server and requests an identity token that matches the client's identification information, including: when the client enters the identity authentication state, triggers active access to the third-party server; the client sends a request message to the third-party server, wherein the request message carries the client's device information and identification information; the client receives the identity token fed back by the third-party server based on the request message, wherein the third-party server generates an identity token that matches the client's identification information based at least on the client's device information.
[0083] In this embodiment, when the client enters the identity authentication state, it can trigger active access to the third-party server and send a request message to the third-party server. In response to the request message, the third-party server generates an identity token that matches the identification information of the client based on the device information of the client in the request message, and feeds back the identity token to the client. The client receives the identity token fed back by the third-party server based on the request message. Among them, the request message carries the device information and identification information of the client, which can be used to request the third-party server to generate an identity token that matches the identification information of the client. The device information can be used to determine the identity of the client, and can be terminal information, such as the client's mobile phone number and other information. This is only for example, and no specific restrictions are made on the device information.
[0084] Optionally, when the client enters the identity authentication state, it can actively access the third-party server and send a request message to the third-party server. In response to the request message, the third-party server generates an identity token that matches the client's identification information based on the client's device information and identification information, and sends the identity token to the client. It should be noted that there is no specific restriction on the way the third-party server generates the identity token here. As long as the method of generating the identity token for verifying the identity information is used, it should be within the scope of protection of this application.
[0085] As an optional implementation, the third-party server generates an identity token based on the device information of the client and the registration information of the base station, wherein the registration information is pre-stored in the third-party server.
[0086] In this embodiment, when receiving the request information sent by the client, the third-party server obtains the device information of the client and determines the registration information of the client in the base station. The third-party server can generate an identity token based on the device information and the registration information of the base station. Among them, the registration information may include the model, network protocol address, etc. of the client, and may be information pre-stored in the third-party server. It should be noted that this is only an example and does not specifically limit the content and storage location of the registration information. The third-party server can serve the operator.
[0087] Optionally, the operator service may generate an identity token corresponding to the identification information of the client according to the terminal information and the registration information of the terminal in the base station.
[0088] For example, the client can first generate an identity token through the operator service, so that the operator service records the relationship between the client's own identification information and the identity token. After the client obtains the identification information in the dynamic parameters from the communication information, it can combine the identity token just obtained and associated with the client's own identification information with the identification information in the dynamic parameters to form authentication information and send it to the merchant server. The merchant server verifies the authenticity of the association between the identification information in the authentication information and the identity token by calling the operator service to complete the verification of the client.
[0089] As an optional implementation, the client generates authentication information to be verified based on the dynamic parameters and identity token carried in the communication information, including: the client parses the dynamic parameters carried in the communication information, and identifies the client's identification information in the dynamic parameters; the client combines the identified client's identification information and the identity token matching the identification information to generate authentication information.
[0090] In this embodiment, the client obtains the communication information, and the client can determine the dynamic parameters carried in the communication information. The client parses the dynamic parameters and identifies the identification information of the client in the dynamic parameters. At the same time, the client requests the operator service for an identity token that matches its own identification information. The client combines the identification information in the dynamic parameters and the identity token that matches its own identification information to obtain authentication information.
[0091] Optionally, the client obtains the communication information, and identifies the identification information in the dynamic parameters in the communication information to obtain the identification information specified by the merchant server. At the same time, the client triggers the network address in the communication information to trigger the access instruction to the network address. The client responds to the access instruction to the network address, jumps to the network content associated with the network address, displays the network content on the client, and enters the identity authentication state. When the client enters the identity authentication state, it can trigger active access to the third-party server, and the client transmits its own identification information to the third-party server to obtain an identity token that matches its own identification information through the third-party server. The identification information previously determined from the dynamic parameters and the identity token that matches its own identification information can be combined to obtain authentication information, and the authentication information is transmitted to the merchant server for further verification.
[0092] As an optional implementation, before the client obtains login information based on the verification result returned by the sender, the method may also include: the third-party server obtains the authentication information to be verified transmitted by the sender; the third-party server parses the authentication information to obtain the identity token to be verified and the identification information of the client; the third-party server obtains the verification result by verifying the relationship data between the identity token and the identification information, wherein the relationship data is a comparison of whether the identity token to be verified is consistent with the identification information; the third-party server transmits the verification result to the sender.
[0093] In this embodiment, the third-party server can obtain the authentication information to be verified transmitted by the sender, and parse the authentication data to obtain the identity token and identification information to be verified. The third-party server compares whether the identity token to be verified is consistent with the identification information to obtain the relationship data between the identity token to be verified and the identification information, thereby obtaining the verification result. The third-party server can transmit the verification result to the sender.
[0094] Optionally, the third-party server can obtain the authentication information to be verified transmitted by the sender, and parse the authentication data to obtain the identity token and identification information to be verified. The third-party server compares the identity token to be verified with the identification information to see if they are consistent. If they are consistent, it means that the current client is the client corresponding to the identification information in the dynamic parameter, so that a verification result of passing the verification can be obtained. The third-party server can transmit the verification result of passing the verification to the sender. If the corresponding communication information is copied to other clients, there will inevitably be inconsistency between the identification information and the identity token, resulting in a verification result of failing the verification.
[0095] For example, the client (e.g., a mobile phone) can obtain an identity token corresponding to its own identification information using the capabilities provided by the operator service. The client can pass the obtained identity token and the identification information carried in the previous communication information to the merchant server for further verification. The merchant server calls a third-party server, such as the operator service, to compare whether the identity token and the identification information are consistent. If they are consistent, it means that the client authentication is successful. If they are inconsistent, it means that the client authentication has failed. The third server can be used to generate an identity token and verify whether the identity token and the identification information are consistent.
[0096] From the above, it can be seen that the entire process of identity authentication on the client side is just to compare the identity token corresponding to the client with the identification information in the background to complete the identity authentication of the client. However, the client does not have to input any user number or verification code. The client can be unaware of the entire identity authentication process, which simplifies the client login page operation and improves the user experience and conversion rate.
[0097] As an optional implementation, the sender verifies whether the authentication information is passed by accessing a third-party server. If the authentication information to be verified is passed, the sender responds to the verification result and sends the login information to the client.
[0098] In this embodiment, the third-party server can transmit the verification result to the sender. If the authentication information to be verified is verified successfully, the sender can respond to the verification result to indicate that the authentication information to be verified is verified successfully, and send the verification result to the merchant server. The merchant server responds to the verification result to indicate that the authentication information to be verified is verified successfully, and sends the client's login information to the client to complete the automatic login of the client.
[0099] Since after the client clicks on the network address in the communication information, the client needs to enter its own account number, password and other information to enter the identity authentication state, the client's experience and conversion rate will be greatly reduced, and there is a technical problem that the operation of the user login page is cumbersome. In this embodiment, the relationship between the identification information and the identity token is verified by a third-party server. Consistent means that the verification is passed, and the third-party server can return the verification result to the cloud server. The cloud server returns the verification result to the merchant server. If it was consistent before, it means that the event identity of the client is the identification information in the corresponding dynamic parameter, thereby completing the identity authentication, and sending the login information to the client so that the client can obtain the login state, thereby avoiding the technical problem that the operation of the user login page is cumbersome.
[0100] As an optional implementation, before the client receives the communication information, the method may also include: the sender creates multiple communication templates locally, wherein the communication template includes at least one dynamic parameter that allows dynamic changes; the sender receives an information sending list, wherein the information sending list records the identification information of at least one client, and the client recorded in the information sending list is a terminal that needs to send communication information in a targeted manner; the sender uses the identification information of the receiving client to update the dynamic parameters that allow dynamic changes and generate dynamic parameters to be sent; the sender selects a communication template of matching type from multiple communication templates; the sender combines the dynamic parameters with the preset network address in the selected communication template to generate communication information; the sender submits a sending request to send the communication information to the client.
[0101] In this embodiment, before the client receives the communication information, the sender needs to construct the communication information. The sender can pre-create multiple communication templates locally, including at least one dynamic parameter that allows dynamic changes. After the sender receives the information sending list, based on the information sending list, it can determine the client that specifies the communication information to be sent, so as to determine the terminal to which the communication information needs to be sent. The sender can use the identification information recorded in the information sending list to update the dynamic parameters that allow dynamic changes in the communication template, thereby generating dynamic parameters to be sent. The sender determines the type of goods to be displayed to select a matching communication template from multiple communication templates. The sender combines the dynamic parameters with the preset network address in the selected communication template to generate the communication information. The sender can submit a sending request to send the communication information to the client. Among them, the commodity type can include electronic product type, household goods type, clothing and shoes type, etc. This is only for example, and no specific limitation is made to the commodity type.
[0102] Optionally, the cloud server in the sender can locally create multiple communication templates containing dynamic parameters that allow dynamic changes, and send the communication templates to the message platform in the sender for storage. When the cloud server receives the information sending list fed back from the merchant server, it can update the dynamic parameters that allow dynamic changes based on the identification information of the client in the information sending list to generate dynamic parameters to be sent. The cloud server can select a communication template that matches the commodity service end from multiple communication templates based on the commodity type in the commodity service end, and send the dynamic parameters to be sent and the selected communication template information to the message platform. The message platform selects a suitable communication template based on the communication template information, and fills the dynamic parameters into the communication template to obtain the communication information. The sender can send the communication information to the terminal where the merchant server needs to send the communication information in a targeted manner.
[0103] As an optional implementation, the method may further include: in response to the sender prohibiting the client from entering the identity authentication state in response to the number of times the client enters the identity authentication state being greater than a number threshold.
[0104] In this embodiment, the sender determines the number of times the client performs identity authentication through the network address, and in response to the number of times the client performs identity authentication through the network address being greater than the number threshold, prohibits the client from entering the identity authentication state, so as to achieve the purpose of prohibiting identity authentication of the client. The number threshold can be three times, four times, etc., which is only for example, and the size of the number threshold is not specifically limited.
[0105] Optionally, in order to avoid malicious attacks, if a network address initiates authentication access more than a certain number of times, it is not allowed to initiate authentication multiple times.
[0106] The client receives the communication information, responds to the access instruction to the network address in the communication information, automatically enters the identity authentication state, obtains the authentication information based on the identity token matching the client, and determines the verification result of the client based on the authentication information, so as to automatically obtain the client's login information based on the verification result, thereby achieving the technical effect of simplifying the operation of the user login page and solving the technical problem of cumbersome operation of the login page.
[0107] The embodiment of the present application also provides another autonomous identity authentication method from the cloud server side. Figure 4 is a flowchart of another autonomous identity authentication method according to an embodiment of the present application. Figure 4 As shown, the method may include the following steps.
[0108] Step S402: The sender sends communication information to the client in a targeted manner based on the locally stored dynamic parameters.
[0109] In the technical solution provided in the above step S402 of the present application, the sender sends communication information to the corresponding client in a targeted manner based on the identification information of the client in the locally stored dynamic parameters. The sender may include at least a cloud server and a message platform. It should be noted that the objects used to send communication information to the client should be within the scope of protection of the present application, and the type of the sender is not specifically limited here.
[0110] Optionally, the sender constructs dynamic parameters based on the identification information sent by the merchant server, constructs communication information based on the dynamic parameters and network parameters of the object to be accessed, and sends the communication information to the corresponding client in a targeted manner based on the identification information in the dynamic parameters.
[0111] In step S404, the sender obtains authentication information generated by the client based on the dynamic parameters carried in the communication information and the identity token matching the client, wherein the identity token is obtained by the client when it enters the identity authentication state, triggering active access to the third-party server and requesting. The identity authentication state is entered when the client displays network content, and the network content is associated with the communication information.
[0112] In the technical solution provided in the above step S404 of the present application, the sender sends the communication information to the client. The client receives the communication information, triggers the network address in the communication information, and jumps to the network content associated with the network address in the communication information. The network content is displayed in the display interface of the client, and the identity authentication state is entered. When the client is in the identity authentication state, the client triggers active access to the third-party server, and requests an identity token that matches the client's own identification information, and constructs the authentication information based on the identity token and the identification information of the dynamic parameters in the communication information. The client transmits the authentication information to the sender. The sender obtains the authentication information and sends the authentication information to the third-party server for further verification.
[0113] In step S406, the sender transmits the authentication information to the third-party server, and obtains the verification result obtained by the third-party server in verifying the authentication information, wherein the client obtains the login information based on the verification result returned by the sender.
[0114] In the technical solution provided in the above step S406 of the present application, the sender can transmit the authentication information to the third-party server. The third-party server verifies the authentication information, determines the consistency between the identification information and the identity token in the authentication information, obtains the verification result, and sends the verification result to the cloud server. The client can obtain the login information and the login state based on the verification result sent by the sender.
[0115] As an optional implementation, the method may also include: the target server obtains the verification result transmitted by the sender; the target server responds to the verification result that the authentication information to be verified has been verified, and determines that the client's login status is a login-allowed status; the target server responds to the client's login status as a login-allowed status, and transmits the client's login information to the client.
[0116] In this embodiment, the cloud server transmits the obtained verification result to the target server. The target server responds that the verification result is that the authentication information is passed, and determines that the login status of the client is allowed to log in. Then, the login information of the client stored locally can be transmitted to the client, or the login status of the client can be directly determined to be logged in. Among them, the target server can be a merchant server, which is only an example here, and the type of merchant server is not specifically limited.
[0117] In an embodiment of the present application, the sender sends communication information to the client in a targeted manner based on locally stored dynamic parameters; the sender obtains authentication information generated by the client based on the dynamic parameters carried in the communication information and an identity token matching the client, wherein the identity token is obtained by the client when it enters an identity authentication state and triggers active access to a third-party server and a request, and the identity authentication state is entered when the client displays network content, and the network content is associated with the communication information; the sender transmits the authentication information to the third-party server, and obtains a verification result obtained by the third-party server to verify the authentication information, wherein the client obtains the login information based on the verification result returned by the sender, thereby achieving the technical effect that the user can quickly log in to the page and solving the technical problem of cumbersome operation of the login page.
[0118] The embodiment of the present application also provides a method for autonomous identity authentication for 5G shopping scenarios. Figure 5 FIG. 1 is a flow chart of another method for autonomously executing identity authentication according to an embodiment of the present application. Figure 5 As shown, the method may include the following steps:
[0119] Step S502: The client receives shopping communication information and accesses network content associated with the shopping communication information, wherein the shopping communication information is sent by the sender in a direction-based manner based on locally stored dynamic parameters.
[0120] In the technical solution provided in the above step S502 of the present application, the sender constructs communication information based on the locally stored dynamic parameters, and sends the communication information to the corresponding client based on the dynamic parameters. The client receives the communication information and accesses the network content associated with the communication information.
[0121] For example, when the client receives the shopping communication information, it can click on the shopping address in the shopping communication information to trigger an access instruction to the shopping address. The client responds to the access instruction to the shopping address and can jump to the network content associated with the shopping address. Among them, the network content can be a product display interface, a product purchase interface, etc. This is only an example, and there is no specific restriction on the type of network content. The shopping communication information can be 5G information in a shopping scenario. The shopping address can be the address for purchasing goods. It should be noted that this is only an example, and there is no specific restriction on the shopping communication information and the shopping address.
[0122] Optionally, when the client receives the shopping communication information, it can trigger the network address in the shopping communication information by single-clicking, double-clicking, etc. to trigger an access instruction to the shopping address. The client responds to the access instruction to the shopping address and jumps to the network content associated with the shopping address.
[0123] Step S504: the client accesses network content associated with the shopping communication information.
[0124] Step S506: The client displays the network content and enters the identity authentication state.
[0125] Step S508: When the client enters the identity authentication state, it triggers active access to the third-party server and requests an identity token that matches the client.
[0126] Step S510: the client generates authentication information to be verified based on the dynamic parameters and identity token carried in the shopping communication information, and transmits the authentication information to the sender.
[0127] Step S512: The client obtains login information based on the verification result returned by the sender.
[0128] There is a typical scenario in 5G messages, which is the shopping scenario. In the shopping scenario, the 5G message sent to the client will contain the shopping address corresponding to the network content, such as product introduction, purchase link, product link and other information. When the client clicks the purchase link, it will jump to the corresponding merchant's H5 page to place an order. After the client clicks the H5 page of the corresponding product link, it needs to enter its account number, password and other information for identity authentication, and then complete the product purchase process.
[0129] In the above process, the client needs to manually enter the account password after jumping from the 5G message to H5, which will greatly reduce the user experience and willingness to complete the shopping process, and also greatly reduce the conversion rate. To avoid the above problems, in an embodiment of the present application, while the client displays the network content, it can automatically enter the identity authentication state and insert dynamic parameters in the communication information. When the client obtains the communication information, it can determine the identification information in the communication information. The client combines the identity token corresponding to its own identification information with the identification information in the dynamic parameters to form the authentication information, and further authenticates it through a third-party server. If there is an association between the identity token and the identification information, it can be determined that the client is the client specified by the merchant server, and the merchant server can be controlled to update the client's status to the login state, so as to achieve the purpose of quick login of the client without the client having to enter a password or other operations, thereby achieving the technical effect of improving the efficiency of the client login page.
[0130] In an embodiment of the present application, a client receives shopping communication information and accesses network content associated with the shopping communication information, wherein the shopping communication information is sent by a sender based on locally stored dynamic parameters; the client accesses the network content associated with the shopping communication information; the client displays the network content and enters an identity authentication state; when the client enters the identity authentication state, it triggers active access to a third-party server and requests an identity token that matches the client; the client generates authentication information to be verified based on the dynamic parameters and identity token carried in the shopping communication information, and transmits the authentication information to the sender; the client obtains login information based on the verification result returned by the sender, thereby achieving the technical effect of simplifying the operation of the user login page and solving the technical problem of cumbersome operation of the login page.
[0131] Example 2
[0132] According to an embodiment of the present application, an embodiment of an autonomous identity authentication system is also provided. Figure 6 is a schematic diagram of an autonomous identity authentication system according to an embodiment of the present application, such as Figure 6 As shown, the autonomous identity authentication system 600 may include: a sender 602 , a client 604 , and a third-party server 606 .
[0133] The sender 602 is used to send communication information to the client in a targeted manner based on the locally stored dynamic parameters.
[0134] Client 604 is used to receive communication information, access network content associated with the communication information, display the network content, and enter the identity authentication state. When entering the identity authentication state, it triggers active access to a third-party server and requests an identity token that matches the client. Based on the dynamic parameters carried in the communication information and the identity token, it generates authentication information to be verified.
[0135] The third-party server 606 is used to verify the authentication information to be verified and obtain a verification result.
[0136] In this embodiment, communication information is sent to the client in a targeted manner based on locally stored dynamic parameters through sender 602; communication information is received through client 604, and network content associated with the communication information is accessed, the network content is displayed, and an identity authentication state is entered. When entering the identity authentication state, active access to a third-party server is triggered, and an identity token matching the client is requested. Based on the dynamic parameters and the identity token carried in the communication information, authentication information to be verified is generated; and a verification result is obtained by verifying the authentication information to be verified through a third-party server 606, thereby achieving the technical effect of simplifying the operation of the user login page and solving the technical problem of cumbersome operation of the login page.
[0137] Example 3
[0138] With the emergence of 5G messages, SMS is no longer limited to text content. In the future, SMS will support more and more media methods, such as text, voice, video, pictures, etc. At the same time, it also supports jump functions such as opening web pages and opening other programs. 5G messages are no longer ordinary messages but can become a super application portal.
[0139] There is a typical scenario in 5G messages, which is the shopping scenario. In the shopping scenario, the 5G message sent to the client will contain network content corresponding to the shopping address, such as product introduction, purchase link, product link and other information. When the client clicks the purchase link, it will jump to the H5 page of the corresponding merchant to place an order. After the client clicks the H5 page of the corresponding product link, it needs to enter its account, password and other information, perform identity authentication, and then complete the product purchase process. In the above process, the user needs to manually enter the account and password after jumping from the 5G message to the H5. Any key input action on the mobile terminal is a high-cost operation, which will greatly reduce the user experience and willingness to complete the shopping process, and also greatly reduce the conversion rate.
[0140] Figure 7 is a flow chart of an identity authentication method according to an embodiment of the present application, such as Figure 7 As shown, the identity authentication in this method may include the following processes:
[0141] Step S701: The merchant sends a 5G message to promote the product.
[0142] In this embodiment, the merchant server can send 5G messages promoting products to the end user.
[0143] Step S702: The user clicks on the corresponding product link in the 5G message.
[0144] In this embodiment, the terminal user receives a 5G message and clicks on the corresponding product link in the 5G message.
[0145] Step S703, in response to the product link being triggered, jump to the sales website.
[0146] In this embodiment, when the terminal user clicks on the product link, in response to the terminal user clicking on the product link, the page may jump to the product sales webpage of the corresponding merchant.
[0147] Step S704, log in to the sales website.
[0148] In this embodiment, the terminal user logs into the selling website by inputting the user's information, such as a mobile phone number.
[0149] Step S705: input login information for logging into the sales website.
[0150] In this embodiment, the terminal user can enter the login information by entering a password or clicking to obtain a text message verification code.
[0151] Step S706: Perform identity authentication based on the login information.
[0152] In this embodiment, the terminal user is authenticated based on the user information, password or SMS verification code input by the terminal user to obtain a login status of the selling website.
[0153] Step S707, placing an order on the sales website.
[0154] In this embodiment, after the terminal user logs in to the sales website, he or she can place an order on the sales website and complete the commodity transaction.
[0155] As can be seen from the above, after clicking the jump link in the above method, the user needs to enter his / her account, password or verification code by pressing keys. The input operation on the terminal is very costly and will greatly reduce the user experience and conversion rate, thereby causing the technical problem of cumbersome operation of the user login page.
[0156] To solve the above problems, for the 5G message scenario, the embodiment of the present application proposes a method for users to obtain login status through seamless identity authentication in the scenario where 5G messages are combined with H5. After the method jumps to H5 or other programs, it automatically completes identity authentication and obtains login status. After the user clicks the link of the corresponding product, the identity authentication can be completed directly without user participation to obtain login status, thereby shortening the user's operation path and improving the user experience, thereby achieving the technical effect of avoiding the cumbersome operation of the user login page.
[0157] The following is a further introduction to a method for obtaining a login status through seamless identity authentication in a scenario where 5G messages and H5 are combined, as proposed in an embodiment of the present application.
[0158] Figure 8 is a flow chart of a user-free identity authentication process according to an embodiment of the present application, such as Figure 8 As shown, the method may include the following steps.
[0159] Step S801, the cloud server 81 creates a 5G message template.
[0160] In this embodiment, the cloud server 81 can create a 5G message template including an H5 redirect network address, wherein the URL can include a variable dynamic number parameter. The dynamic number parameter can be referred to as a dynamic parameter, which can be set to the mobile phone number of the client receiving the 5G message. No specific restrictions are imposed on the dynamic number parameter.
[0161] Optionally, the cloud server 81 can transfer the created message template to the 5G message platform 82 for storage.
[0162] Step S802, the merchant server 83 initiates a request to send a 5G message to a designated mobile phone number.
[0163] In this embodiment, the merchant server 83 initiates a request to the cloud server 81 to send a 5G message to a designated mobile phone number.
[0164] Step S803, the cloud server 81 sets dynamic number parameters.
[0165] In this embodiment, the cloud server 81 receives a request initiated by the merchant server 83 to send a 5G message to a specified mobile phone number, and sets the specified mobile phone number as the value of the dynamic number parameter in the URL of the 5G message template to achieve the purpose of allowing the URL to carry the specified mobile phone number.
[0166] Step S804, the cloud server 81 specifies the corresponding message template and dynamic number parameters, and submits the sending request.
[0167] In this embodiment, the cloud server 81 specifies the corresponding message template and parameters, and submits a sending request to the 5G message platform 82.
[0168] Step S805, the 5G message platform 82 generates a 5G message and sends it to the client 85.
[0169] In this embodiment, the 5G message platform 82 obtains the designated corresponding message template and dynamic number parameters sent by the cloud server 81, renders the selected message template and the network address containing the client's identification information, forms a 5G message containing the URL of the specified mobile phone number, and sends the 5G message to the client 85.
[0170] Step S806, the client 85 triggers access to the network address in the 5G message.
[0171] In this embodiment, the client 85 accesses the corresponding URL in the 5G message through a trigger method such as clicking.
[0172] Step S807, the client 85 loads the H5 page.
[0173] In this embodiment, when the client 85 clicks the URL, it can obtain the dynamic number parameters in the URL, determine the mobile phone number information in the dynamic number parameters, and load the H5 page corresponding to the merchant in the merchant server 83 with the mobile phone number information.
[0174] Step S808, the client 85 executes the programming language service of the H5 page.
[0175] In this embodiment, the client 85 can create a World Wide Web (web) container within the 5G message application to execute the corresponding H5 programming language (Java Script, JS) service.
[0176] Step S809, the client 85 requests an identity token that matches its own mobile phone number.
[0177] In this embodiment, the client 85 uses the capabilities provided by the operator to obtain the identity token (eg, token information) corresponding to its own mobile phone number.
[0178] Optionally, the terminal can request the token information corresponding to its mobile phone number from the operator service.
[0179] Step S810, the operator server 84 determines the identity token that matches the mobile phone number of the client.
[0180] In this embodiment, the operator server 84 can generate an identity token corresponding to the mobile phone number based on the terminal information and the registration information of the terminal in the base station. The operator server can be referred to as an operator service for short.
[0181] Step S811 : the operator server 84 transmits the identity token to the client 85 .
[0182] In this embodiment, the operator server 84 may return an identity token to the client 85 .
[0183] In step S812, the client 85 transmits the mobile phone number information and the identity token in the network URL to the merchant server.
[0184] In this embodiment, the client 85 can process the network address in the 5G message to obtain the designated mobile phone number specified by the merchant server 83 in the network address, and can generate authentication information to be verified with the designated mobile phone number and identity token, and send it to the merchant server 83.
[0185] In step S813 , the merchant server 83 transmits the authentication information to the cloud server 81 .
[0186] In this embodiment, the merchant server 83 may transmit the authentication information to the cloud server 81 .
[0187] In step S814, the cloud server 81 transmits the authentication information to the operator server 84 for verification.
[0188] In this embodiment, the cloud server 81 transmits the authentication information to the operator server 84 for verification to determine the verification result of the client 85 .
[0189] Step S815: the operator server 84 verifies the authentication information and obtains a verification result.
[0190] In this embodiment, the operator server 84 may determine whether the relationship between the designated number and the identity token in the authentication information is consistent to determine the verification result.
[0191] Optionally, the client transmits the token information and the designated mobile phone number associated with the corresponding 5G message carried in the previous 5G message to the merchant server 83. The merchant server 83 can verify whether the token information and the corresponding designated mobile phone number are consistent by calling the operator service. If they are consistent, it means that the identity authentication is successful. In this way, in the process of authenticating the client, the client does not need to enter a phone number or verification code to complete the authentication of the client, thereby achieving a full sense of unconsciousness for the user.
[0192] Optionally, if the corresponding 5G message is copied to other clients, there will inevitably be inconsistencies between the specified mobile phone number and the identity token, resulting in failure of authentication.
[0193] In this embodiment, the client generates an identity token through the operator service. The operator service records the association between the mobile phone number and the identity token. The client can directly obtain the designated number information from the previous 5G message and transmit the newly obtained identity token to the server. The server verifies the authenticity of the association between the designated mobile phone number and the identity token by calling the operator service. If they are consistent, it means that the current client is the corresponding designated mobile phone number; if the corresponding 5G message is copied to other clients, the designated mobile phone number and the identity token will inevitably be inconsistent, resulting in the client failing to pass the authentication.
[0194] Step S816, the operator server 84 returns the verification result to the cloud server 81.
[0195] In this embodiment, the operator server 84 can return the verification result to the cloud server 81 .
[0196] In step S817 , the cloud server 81 transmits the verification result to the merchant server 83 .
[0197] In this embodiment, the cloud server 81 returns the verification result to the merchant server 83. If it is consistent before, it means that the identity of the client is the specified mobile phone number, thereby completing the identity authentication of the client and obtaining the login state.
[0198] Optionally, in this embodiment, the entire process of obtaining the login state does not require any user operation. When the H5 page is opened in the 5G message application, the user identity authentication can be automatically completed and the login state can be obtained.
[0199] In this embodiment, in order to avoid malicious attacks, if a network address has initiated authentication access a certain number of times, it may not be allowed to initiate authentication multiple times.
[0200] In this embodiment, when the merchant server initiates the sending of 5G SMS, the phone number of the designated client can be set as a dynamic number parameter. A 5G message is constructed based on the dynamic number parameter and sent to the client. The client requests the identity token corresponding to its mobile phone number from the operator service, and transmits the obtained identity token and the designated phone number obtained in the 5G message to the operator service for further verification, thereby achieving the purpose of enabling users to quickly log in to the page, thereby solving the technical problem of cumbersome operation of the user login page and achieving the technical effect of simplifying the operation of the user login page.
[0201] It should be noted that, for the aforementioned method embodiments, for the sake of simplicity, they are all expressed as a series of action combinations, but those skilled in the art should be aware that the present application is not limited by the described order of actions, because according to the present application, certain steps can be performed in other orders or simultaneously. Secondly, those skilled in the art should also be aware that the embodiments described in the specification are all preferred embodiments, and the actions and modules involved are not necessarily required by the present application.
[0202] Through the description of the above implementation methods, those skilled in the art can clearly understand that the method according to the above embodiment can be implemented by means of software plus a necessary general hardware platform, and of course, it can also be implemented by hardware. Based on this understanding, the technical solution of the present application, or the part that contributes to the prior art, can be embodied in the form of a software product, which is stored in a storage medium (such as ROM / RAM, magnetic disk, optical disk), and includes a number of instructions for a terminal device (which can be a mobile phone, computer, server, or network device, etc.) to execute the methods of each embodiment of the present application.
[0203] Example 4
[0204] According to an embodiment of the present application, there is also provided a method for implementing the above Figure 3 The autonomous identity authentication device shown in the figure autonomously executes the identity authentication method.
[0205] Fig. 9 is a schematic diagram of an autonomous identity authentication device according to an embodiment of the present application, such as Fig. 9As shown, the autonomous identity authentication device 900 may include: a first receiving unit 902 , a first processing unit 904 , a second processing unit 906 , a third processing unit 908 and a first acquiring unit 910 .
[0206] The first receiving unit 902 is used for the client to receive communication information and access network content associated with the communication information, wherein the communication information is sent by the sender based on the dynamic parameters stored locally.
[0207] The first processing unit 904 is used for the client to display network content and enter the identity authentication state.
[0208] The second processing unit 906 is used for the client to trigger active access to the third-party server and request an identity token matching the client when the client enters the identity authentication state.
[0209] The third processing unit 908 is used for the client to generate authentication information to be verified based on the dynamic parameters and identity token carried in the communication information, and transmit the authentication information to the sender.
[0210] The first acquisition unit 910 is used for the client to acquire login information based on the verification result returned by the sender.
[0211] It should be noted that the first receiving unit 902, the first processing unit 904, the second processing unit 906, the third processing unit 908 and the first acquiring unit 910 correspond to steps S302 to S310 in Embodiment 1, and the six units and the corresponding steps implement the same examples and application scenarios, but are not limited to the contents disclosed in Embodiment 1. It should be noted that the above units may be hardware components or software components stored in a memory and processed by one or more processors, and the above units may also be part of a device and run in a computer terminal provided in Embodiment 1.
[0212] According to an embodiment of the present application, another method for implementing the above Figure 4 The autonomous identity authentication device shown in the figure autonomously executes the identity authentication method.
[0213] Fig.10 is a schematic diagram of another autonomous identity authentication device according to an embodiment of the present application. Fig.10 As shown, the autonomous identity authentication device 1000 may include: a sending unit 1002 , a generating unit 1004 and a fourth processing unit 1006 .
[0214] The sending unit 1002 is used for the sender to send communication information to the client in a targeted manner based on the dynamic parameters stored locally.
[0215] The generation unit 1004 is used for the sender to obtain the authentication information generated by the client based on the dynamic parameters carried in the communication information and the identity token matching the client, wherein the identity token is triggered by the client actively accessing and requesting a third-party server when entering the identity authentication state, and the identity authentication state is entered when the client displays network content, and the network content is associated with the communication information.
[0216] The fourth processing unit 1006 is used for the sender to transmit the authentication information to the third-party server and obtain the verification result obtained by the third-party server to verify the authentication information, wherein the client obtains the login information based on the verification result returned by the sender.
[0217] It should be noted that the sending unit 1002, the generating unit 1004 and the fourth processing unit 1006 correspond to steps S402 to S406 in Embodiment 1, and the three units and the corresponding steps implement the same examples and application scenarios, but are not limited to the contents disclosed in Embodiment 1. It should be noted that the above units may be hardware components or software components stored in a memory and processed by one or more processors, and the above units may also be part of the device and run in the computer terminal provided in Embodiment 1.
[0218] According to an embodiment of the present application, another method for implementing the above Figure 5 The autonomous identity authentication device shown in the figure autonomously executes the identity authentication method.
[0219] Fig.11 is a schematic diagram of another autonomous identity authentication device according to an embodiment of the present application. Fig.11 As shown, the autonomous identity authentication device 1100 may include: a second receiving unit 1102 , an access unit 1104 , a fifth processing unit 1106 , a sixth processing unit 1108 , a seventh processing unit 1110 and a second acquiring unit 1112 .
[0220] The second receiving unit 1102 is used for the client to receive the shopping communication information and access the network content associated with the shopping communication information, wherein the shopping communication information is sent by the sender in a direction-based manner based on the dynamic parameters stored locally.
[0221] Access unit 1104, used for the client to access the network content associated with the shopping communication information;
[0222] The fifth processing unit 1106 is used for the client to display network content and enter the identity authentication state.
[0223] The sixth processing unit 1108 is used for the client to trigger active access to the third-party server and request an identity token matching the client when the client enters the identity authentication state.
[0224] The seventh processing unit 1110 is used for the client to generate authentication information to be verified based on the dynamic parameters and identity token carried in the shopping communication information, and transmit the authentication information to the sender.
[0225] The second acquisition unit 1112 is used for the client to acquire login information based on the verification result returned by the sender.
[0226] It should be noted that the second receiving unit 1102, the access unit 1104, the fifth processing unit 1106, the sixth processing unit 1108, the seventh processing unit 1110 and the second acquisition unit 1112 correspond to steps S502 to S512 in Embodiment 1, and the six units and the corresponding steps implement the same examples and application scenarios, but are not limited to the contents disclosed in Embodiment 1. It should be noted that the above units may be hardware components or software components stored in a memory and processed by one or more processors, and the above units may also be part of a device and run in a computer terminal provided in Embodiment 1.
[0227] In the above-mentioned device, the client receives communication information, accesses network content associated with the communication information, and automatically enters an identity authentication state when displaying the network content. Based on the identity token matching the client, authentication information is obtained. Based on the authentication information, a verification result of the client is determined, and the client's login information is automatically obtained based on the verification result, thereby achieving the technical effect of simplifying the operation of the user login page and solving the technical problem of cumbersome operation of the login page.
[0228] Example 5
[0229] The embodiment of the present application may provide a computer terminal, which may be any computer terminal device in a computer terminal group. Optionally, in this embodiment, the computer terminal may also be replaced by a terminal device such as a mobile terminal.
[0230] Optionally, in this embodiment, the computer terminal may be located in at least one network device among a plurality of network devices of the computer network.
[0231] In this embodiment, the above-mentioned computer terminal can execute the program code of the following steps in the autonomous identity authentication method: the client receives the communication information and accesses the network content associated with the communication information, wherein the communication information is sent by the sender in a direction based on the dynamic parameters stored locally; the client displays the network content and enters the identity authentication state; when entering the identity authentication state, the client triggers active access to the third-party server and requests an identity token that matches the client; the client generates authentication information to be verified based on the dynamic parameters and identity token carried in the communication information, and transmits the authentication information to the sender; the client obtains login information based on the verification result returned by the sender.
[0232] Optionally, Fig.12 is a structural block diagram of a computer terminal according to an embodiment of the present application. Fig.12 As shown, the computer terminal A may include: one or more (only one is shown in the figure) processors 1202 , a memory 1204 and a transmission device 1206 .
[0233] Among them, the memory can be used to store software programs and modules, such as the program instructions / modules corresponding to the autonomous execution identity authentication method and device in the embodiment of the present application. The processor executes various functional applications and data processing by running the software programs and modules stored in the memory, that is, realizing the above-mentioned autonomous execution identity authentication method. The memory may include a high-speed random access memory, and may also include a non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some instances, the memory may further include a memory remotely arranged relative to the processor, and these remote memories can be connected to the computer terminal A via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.
[0234] The processor can call the information and application stored in the memory through the transmission device to perform the following steps: the client receives the communication information and accesses the network content associated with the communication information, wherein the communication information is sent by the sender based on the dynamic parameters stored locally; the client displays the network content and enters the identity authentication state; when the client enters the identity authentication state, it triggers active access to the third-party server and requests an identity token that matches the client; the client generates authentication information to be verified based on the dynamic parameters and identity token carried in the communication information, and transmits the authentication information to the sender; the client obtains login information based on the verification result returned by the sender.
[0235] Optionally, the processor may also execute program codes of the following steps: the sender creates a communication template locally, wherein the communication template includes at least one dynamic parameter that allows dynamic changes; the sender receives an information sending list, wherein the information sending list records identification information of at least one client; the sender uses the identification information of the client in the information sending list to update the parameter value of the dynamic parameter that allows dynamic changes; the sender combines the assigned dynamic parameter with the network address preset in the communication template to generate the communication information; the sender submits a sending request based on the parameter value of the dynamic parameter, and sends the communication information to the client in a targeted manner.
[0236] Optionally, the processor may also execute the following program code: if the sender receives and identifies the identification information of the client, it retrieves the dynamic parameter, wherein the dynamic parameter is allowed to be built into the address information of the network address; the sender sets the parameter value of the dynamic parameter to the identification information of the client.
[0237] Optionally, the processor may also execute program code of the following steps: the sender combines the dynamic parameters to be sent with the network address preset in the communication template, and fills the combination result into the selected communication template to obtain communication information.
[0238] Optionally, the processor may also execute program code of the following steps: the client detects an access instruction that triggers access to a network address; the client responds to the access instruction, parses the communication information, and obtains the client's identification information and network address contained in the dynamic parameters; the client obtains network content associated with the network address based on the resolved network address; and the client loads the network content.
[0239] Optionally, the processor may also execute program code of the following steps: when the client enters the identity authentication state, the client triggers active access to the third-party server; the client sends a request message to the third-party server, wherein the request message carries the client's device information and identification information; the client receives an identity token fed back by the third-party server based on the request message, wherein the third-party server generates an identity token that matches the client's identification information based at least on the client's device information.
[0240] Optionally, the processor may also execute program code of the following steps: the client parses the dynamic parameters carried in the communication information and identifies the identification information of the client in the dynamic parameters; the client combines the identified identification information of the client and an identity token matching the identification information to generate authentication information.
[0241] Optionally, the processor may further execute program code of the following steps: the third-party server generates an identity token based on the device information of the client and the registration information of the base station, wherein the registration information is pre-stored in the third-party server.
[0242] Optionally, the processor may also execute program codes of the following steps: the third-party server obtains the authentication information to be verified transmitted by the sender; the third-party server parses the authentication information to obtain the identity token to be verified and the identification information of the client; the third-party server determines the verification result by verifying the relationship data between the identity token and the identification information, wherein the relationship data is a comparison of whether the identity token to be verified is consistent with the identification information; the third-party server transmits the verification result to the sender.
[0243] Optionally, the processor may also execute the following program code: the sender verifies whether the authentication information is passed by accessing a third-party server. If the authentication information to be verified is passed, the sender responds to the verification result and sends the login information to the client.
[0244] Optionally, the processor may also execute program code for the following steps: the sender creates multiple communication templates locally, wherein the communication template includes at least one dynamic parameter that allows dynamic changes; the sender receives an information sending list, wherein the information sending list records identification information of at least one client, and the client recorded in the information sending list is a terminal that needs to send communication information in a targeted manner; the sender uses the identification information of the receiving client to update the dynamic parameters that allow dynamic changes and generate dynamic parameters to be sent; the sender selects a matching communication template from multiple communication templates; the sender combines the dynamic parameters with the preset network address in the selected communication template to generate communication information; the sender submits a sending request to send the communication information to the client.
[0245] Optionally, the processor may further execute program code of the following steps: the sender responds that the number of times the client enters the identity authentication state is greater than a number threshold, and prohibits the client from entering the identity authentication state.
[0246] As an optional example, the processor can call the information and application stored in the memory through the transmission device to perform the following steps: the sender sends the communication information to the client in a targeted manner based on the locally stored dynamic parameters; the sender obtains the authentication information generated by the client based on the dynamic parameters carried in the communication information and the identity token matching the client, wherein the identity token is triggered by the client actively accessing and requesting a third-party server when entering the identity authentication state, and the identity authentication state is entered when the client displays network content, and the network content is associated with the communication information; the sender transmits the authentication information to the third-party server, and obtains the verification result obtained by the third-party server to verify the authentication information, wherein the client obtains the login information based on the verification result returned by the sender.
[0247] Optionally, the processor may also execute the program code of the following steps: the target server obtains the verification result transmitted by the sender; the target server responds with the verification result that the authentication information to be verified has been verified, and determines that the login status of the client is a login-allowed status; the target server responds with the login status of the client as a login-allowed status, and transmits the login information of the client to the client.
[0248] As another optional example, the processor may call the information and application stored in the memory through the transmission device to perform the following steps: the client receives the shopping communication information and accesses the network content associated with the shopping communication information, wherein the shopping communication information is sent by the sender based on the dynamic parameters stored locally; the client accesses the network content associated with the shopping communication information; the client displays the network content and enters the identity authentication state; when entering the identity authentication state, the client triggers active access to the third-party server and requests an identity token that matches the client; the client generates authentication information to be verified based on the dynamic parameters and identity token carried in the shopping communication information, and transmits the authentication information to the sender; the client obtains login information based on the verification result returned by the sender.
[0249] By adopting the embodiment of the present application, the client receives communication information, accesses network content associated with the communication information, and automatically enters an identity authentication state when displaying the network content. Authentication information is obtained based on an identity token that matches the client. Based on the authentication information, a verification result of the client is determined, so as to automatically obtain the client's login information based on the verification result, thereby achieving the technical effect of simplifying the operation of the user login page and solving the technical problem of cumbersome operation of the login page.
[0250] It can be understood by those skilled in the art that Fig.12The structure shown is for illustration only, and the computer terminal A may also be a smart phone (such as an Android phone, an iOS phone, etc.), a tablet computer, a PDA, a mobile Internet device (Mobile Internet Devices, MID), a PAD, or other terminal devices. Fig.12 It does not limit the structure of the above-mentioned computer terminal A. For example, the computer terminal A may also include Fig.12 More or fewer components (such as network interfaces, display devices, etc.) shown in, or having Fig.12 Different configurations are shown.
[0251] A person of ordinary skill in the art can understand that all or part of the steps in the various methods of the above embodiments can be completed by instructing the hardware related to the terminal device through a program, and the program can be stored in a computer-readable storage medium, and the storage medium may include: a flash drive, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk, etc.
[0252] Example 6
[0253] The embodiment of the present application further provides a computer-readable storage medium. Optionally, in this embodiment, the computer-readable storage medium can be used to store the program code executed by the autonomous identity authentication method provided in the first embodiment.
[0254] Optionally, in this embodiment, the computer-readable storage medium may be located in any one of the computer terminals in a computer terminal group in a computer network, or in any one of the mobile terminals in a mobile terminal group.
[0255] Optionally, in this embodiment, the computer-readable storage medium is configured to store program codes for executing the information stored in the memory and the application program executed by the processor through the transmission device.
[0256] In an embodiment of the present application, the client receives communication information, accesses network content associated with the communication information, and automatically enters an identity authentication state when displaying the network content. Authentication information is obtained based on an identity token that matches the client. Based on the authentication information, a verification result of the client is determined, so as to automatically obtain the client's login information based on the verification result, thereby achieving the technical effect of simplifying the operation of the user login page and solving the technical problem of cumbersome operation of the login page.
[0257] Example 7
[0258] An embodiment of the present application may provide an electronic device, which may include a memory and a processor.
[0259] Fig.13 It is a block diagram of an electronic device that autonomously performs an identity authentication method according to an embodiment of the present application. The electronic device is intended to represent various forms of digital computers, such as laptop computers, desktop computers, workbenches, personal digital assistants, servers, blade servers, mainframe computers, and other suitable computers. The electronic device can also represent various forms of mobile devices, such as personal digital processing, cellular phones, smart phones, wearable devices, and other similar computing devices. The components shown herein, their connections and relationships, and their functions are merely examples and are not intended to limit the implementation of the present application described and / or required herein.
[0260] like Fig.13 As shown, the device 1300 includes a computing unit 1301, which can perform various appropriate actions and processes according to a computer program stored in a read-only memory (ROM) 1302 or a computer program loaded from a storage unit 1308 to a random access memory (RAM) 1303. In RAM 1303, various programs and data required for the operation of the device 1300 can also be stored. The computing unit 1301, ROM 1302, and RAM 1303 are connected to each other via a bus 1304. An input / output (I / O) interface 1305 is also connected to the bus 1304.
[0261] A number of components in the device 1300 are connected to the I / O interface 1305, including: an input unit 1306, such as a keyboard, a mouse, etc.; an output unit 1304, such as various types of displays, speakers, etc.; a storage unit 1308, such as a disk, an optical disk, etc.; and a communication unit 13010, such as a network card, a modem, a wireless communication transceiver, etc. The communication unit 13010 allows the device 1300 to exchange information / data with other devices through a computer network such as the Internet and / or various telecommunication networks.
[0262] The computing unit 1301 may be a variety of general and / or special processing components with processing and computing capabilities. Some examples of the computing unit 1301 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various dedicated artificial intelligence (AI) computing chips, various computing units running machine learning model algorithms, a digital signal processor (DSP), and any appropriate processor, controller, microcontroller, etc. The computing unit 1301 performs the various methods and processes described above, such as autonomously executing an authentication method. For example, in some embodiments, the autonomously executing authentication method may be implemented as a computer software program, which is tangibly contained in a machine-readable medium, such as a storage unit 1308. In some embodiments, part or all of the computer program may be loaded and / or installed on the device 1300 via the ROM 1302 and / or the communication unit 13010. When the computer program is loaded into RAM 1303 and executed by the computing unit 1301, one or more steps of the autonomous authentication method described above may be performed. Alternatively, in other embodiments, the computing unit 1301 may be configured to perform the autonomous authentication method in any other appropriate manner (e.g., by means of firmware).
[0263] Various embodiments of the systems and techniques described above herein may be implemented in digital electronic circuit systems, integrated circuit systems, field programmable gate arrays (FPGAs), application specific integrated circuits (ASICs), application specific standard parts (ASSPs), system on chip systems (SOCs), complex programmable logic devices (CPLDs), computer hardware, firmware, software, and / or combinations thereof. These various embodiments may include: being implemented in one or more computer programs that can be executed and / or interpreted on a programmable system including at least one programmable processor, which may be a dedicated or general programmable processor that can receive data and instructions from a storage system, at least one input device, and at least one output device, and transmit data and instructions to the storage system, the at least one input device, and the at least one output device.
[0264] The program code for implementing the method of the present application can be written in any combination of one or more programming languages. These program codes can be provided to a processor or controller of a general-purpose computer, a special-purpose computer, or other programmable data processing device, so that the program code, when executed by the processor or controller, implements the functions / operations specified in the flow chart and / or block diagram. The program code can be executed entirely on the machine, partially on the machine, partially on the machine and partially on a remote machine as a stand-alone software package, or entirely on a remote machine or server.
[0265] In the context of the present application, a machine-readable medium may be a tangible medium that may contain or store a program for use by or in conjunction with an instruction execution system, device, or equipment. A machine-readable medium may be a machine-readable signal medium or a machine-readable storage medium. A machine-readable medium may include, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, devices, or equipment, or any suitable combination of the foregoing. A more specific example of a machine-readable storage medium may include an electrical connection based on one or more lines, a portable computer disk, a hard disk, a random access memory, a read-only memory, an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.
[0266] To provide interaction with a user, the systems and techniques described herein may be implemented on a computer having: a display device (e.g., a cathode ray tube or liquid crystal display, monitor) for displaying information to the user; and a keyboard and pointing device (e.g., a mouse or path ball) through which the user can provide input to the computer. Other types of devices may also be used to provide interaction with the user; for example, the feedback provided to the user may be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user may be received in any form (including acoustic input, voice input, or tactile input).
[0267] The systems and techniques described herein may be implemented in a computing system that includes back-end components (e.g., as a data server), or a computing system that includes middleware components (e.g., an application server), or a computing system that includes front-end components (e.g., a user computer with a graphical user interface or a web browser through which a user can interact with implementations of the systems and techniques described herein), or a computing system that includes any combination of such back-end components, middleware components, or front-end components. The components of the system may be interconnected by any form or medium of digital data communication (e.g., a communication network). Examples of communication networks include: local area networks, wide area networks, and the Internet.
[0268] A computer system may include a client and a server. The client and the server are generally remote from each other and usually interact through a communication network. The relationship of client and server is generated by computer programs running on respective computers and having a client-server relationship with each other. The server may be a cloud server, a server of a distributed system, or a server combined with a blockchain.
[0269] It should be noted that the serial numbers of the above-mentioned embodiments of the present application are only for description and do not represent the advantages or disadvantages of the embodiments.
[0270] In the above embodiments of the present application, the description of each embodiment has its own emphasis. For parts that are not described in detail in a certain embodiment, please refer to the relevant description of other embodiments.
[0271] In the several embodiments provided in this application, it should be understood that the disclosed technical content can be implemented in other ways. Among them, the device embodiments described above are only schematic, for example, the division of units is only a logical function division, and there may be other division methods in actual implementation, for example, multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of units or modules, which can be electrical or other forms.
[0272] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.
[0273] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.
[0274] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application, or the part that contributes to the prior art, or all or part of the technical solution can be embodied in the form of a software product, which is stored in a storage medium and includes several instructions for a computer device (which can be a personal computer, server or network device, etc.) to perform all or part of the steps of the various embodiments of the present application. The aforementioned storage medium includes: various media that can store program codes, such as USB flash drives, read-only memory random access memories, mobile hard disks, magnetic disks or optical disks.
[0275] The above are only preferred implementations of the present application. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principles of the present application. These improvements and modifications should also be regarded as the scope of protection of the present application.
Claims
1. A method for autonomously performing identity authentication, characterized in that: include: The client receives the communication information and accesses the network content associated with the communication information, wherein the communication information is sent by the sender based on the locally stored dynamic parameters; The client displays the network content and enters an identity authentication state; When the client enters the identity authentication state, the client triggers active access to the third-party server and requests an identity token matching the client; The client generates authentication information to be verified based on the dynamic parameters carried in the communication information and the identity token, and transmits the authentication information to the sender; The client obtains login information based on the verification result returned by the sender.
2. The method according to claim 1, characterized in that Before the client receives the communication information, the method further includes: The sender creates a communication template locally, wherein the communication template includes at least one dynamic parameter that allows dynamic changes; The sender receives an information sending list, wherein the information sending list records identification information of at least one client; The sender uses the identification information of the client in the information sending list to update the parameter value of the dynamic parameter allowed to change dynamically; The sender combines the assigned dynamic parameter with the network address preset in the communication template to generate the communication information; The sender submits a sending request based on the parameter value of the dynamic parameter, and sends the communication information to the client in a directionally manner.
3. The method according to claim 2, characterized in that The sender uses the identification information of the client in the information sending list to update the parameter value of the dynamic parameter that is allowed to change dynamically, including: If the sender receives and identifies the identification information of the client, it retrieves the dynamic parameter, wherein the dynamic parameter is allowed to be embedded in the address information of the network address; The sender sets the parameter value of the dynamic parameter as the identification information of the client.
4. The method according to claim 3, characterized in that The sender combines the assigned dynamic parameter with the network address preset in the communication template to generate the communication information, including: The sender combines the dynamic parameters to be sent with the network address preset in the communication template, and fills the combination result into the selected communication template to obtain the communication information.
5. The method according to claim 1, characterized in that In a case where the communication information carries at least the dynamic parameter and the network address of the object to be accessed, the client responds to an access instruction to the network address and jumps to the network content associated with the network address, so as to successfully access the network content associated with the communication information. The method at least comprises: The client detects an access instruction that triggers access to the network address; The client responds to the access instruction, parses the communication information, and obtains the identification information of the client and the network address contained in the dynamic parameters; The client obtains the network content associated with the network address based on the resolved network address; The client loads the network content.
6. The method according to claim 1, characterized in that When the client enters the identity authentication state, triggering active access to the third-party server and requesting to obtain the identity token matching the identification information of the client includes: When the client enters the identity authentication state, triggering active access to the third-party server; The client sends a request message to the third-party server, wherein the request message carries the device information and identification information of the client; The client receives the identity token fed back by the third-party server based on the request information, wherein the third-party server generates the identity token matching the identification information of the client based at least on the device information of the client.
7. The method according to claim 6, characterized in that The client generates the authentication information to be verified based on the dynamic parameter and the identity token carried in the communication information, including: The client parses the dynamic parameter carried in the communication information, and identifies and obtains the identification information of the client in the dynamic parameter; The client combines the identified identification information of the client with an identity token matching the identification information to generate the authentication information.
8. The method according to claim 6, characterized in that The third-party server generates the identity token based on the device information of the client and the registration information of the base station, wherein the registration information is pre-stored in the third-party server.
9. The method according to any one of claims 1 to 8, characterized in that Before the client obtains the login information based on the verification result returned by the sender, the method further includes: The third-party server obtains the authentication information to be verified transmitted by the sender; The third-party server parses the authentication information to obtain the identity token to be verified and the identification information of the client; The third-party server determines the verification result by verifying the relationship data between the identity token and the identification information, wherein the relationship data is a comparison of whether the identity token to be verified is consistent with the identification information; The third-party server transmits the verification result to the sender.
10. The method according to claim 9, characterized in that The method also includes: the sender verifies whether the authentication information is passed by accessing the third-party server. If the authentication information to be verified is passed, the sender responds to the verification result and sends the login information to the client.
11. The method according to claim 1, characterized in that: Before the client receives the communication information, the method further includes: The sender creates a plurality of communication templates locally, wherein the communication templates include at least one dynamic parameter that allows dynamic changes; The sender receives an information sending list, wherein the information sending list records identification information of at least one client, and the client recorded in the information sending list is a terminal that needs to send communication information in a targeted manner; The sender uses the identification information of the receiving client to update the dynamic parameter allowed to change dynamically, and generates the dynamic parameter to be sent; The sender selects a matching communication template from the multiple communication templates; The sender combines the dynamic parameter with the network address preset in the selected communication template to generate the communication information; The sender submits a sending request and sends the communication information to the client.
12. A method for autonomously performing identity authentication, characterized in that: include: The sender sends communication information to the client in a targeted manner based on the locally stored dynamic parameters; The sender obtains authentication information generated by the client based on the dynamic parameters carried in the communication information and an identity token matching the client, wherein the identity token is obtained by the client triggering active access to a third-party server and requesting when entering an identity authentication state, the identity authentication state is entered when the client displays network content, and the network content is associated with the communication information; The sender transmits the authentication information to the third-party server, and obtains a verification result obtained by the third-party server verifying the authentication information, wherein the client obtains login information based on the verification result returned by the sender.
13. The method according to claim 12, characterized in that The method further comprises: The target server obtains the verification result transmitted by the sender; The target server responds that the verification result is that the authentication information to be verified has been verified, and determines that the login status of the client is a login-allowed status; In response to the login status of the client being the login-allowed status, the target server transmits the login information of the client to the client.
14. A method for autonomously performing identity authentication, characterized in that: include: The client receives the shopping communication information and accesses the network content associated with the shopping communication information, wherein the shopping communication information is sent by the sender based on the locally stored dynamic parameters; The client accesses the network content associated with the shopping communication information; The client displays the network content and enters an identity authentication state; When the client enters the identity authentication state, the client triggers active access to the third-party server and requests an identity token matching the client; The client generates authentication information to be verified based on the dynamic parameters carried in the shopping communication information and the identity token, and transmits the authentication information to the sender; The client obtains login information based on the verification result returned by the sender.
15. A system for autonomously performing identity authentication, characterized in that: include: The sender is used to send communication information to the client in a targeted manner based on the locally stored dynamic parameters; The client is used to receive the communication information, access the network content associated with the communication information, display the network content, and enter the identity authentication state, and when entering the identity authentication state, trigger active access to the third-party server and request an identity token matching the client, and generate authentication information to be verified based on the dynamic parameters carried in the communication information and the identity token; The third-party server is used to verify the authentication information to be verified and obtain a verification result.
16. An electronic device, characterized in that: include: Memory and processor; The memory is used to store computer-executable instructions, and the processor is used to execute the computer-executable instructions. When the computer-executable instructions are executed by the processor, the steps of the method described in any one of claims 1 to 14 are implemented.