Primary authentication method and device for cloud application login and electronic equipment

Abstract

The invention discloses a cloud application login authentication method and device and electronic equipment, and belongs to the technical field of cloud application login. The method comprises the following steps: receiving a first login request sent by a terminal for logging in a cloud application; generating first verification information based on the first login request; sending the first verification information to the number card authentication center and the terminal, so that the number card authentication center verifies second verification information sent by the cloud application platform based on the first verification information; receiving an interaction authentication request sent by the terminal; the interaction data is verified, a verification result is sent to the terminal, so that the terminal sends the verification result to a number card authentication center for verification, and the verification result comprises the first random code and the first request identifier. By means of the mode, rapid login of the cloud application can be achieved, and the problem of user experience caused by the fact that authentication information needs to be input for multiple times when the cloud application is logged in is solved.

Description

Technical Field

[0001] The present application belongs to the technical field of cloud application login, and specifically relates to a cloud application login preliminary authentication method, device and electronic device. Background Art

[0002] Cloud phone is a cloud virtual phone based on virtualization technology. When a user accesses the cloud phone through the client installed on the real machine, the server will designate one of the cloud machines to connect with the client, and the user can experience the cloud phone just like operating a real machine.

[0003] In the related art, a user enters authentication information on a real machine to log in to a cloud application. When opening the same cloud application in the cloud machine, the user needs to enter the authentication information again to log in to the application, which affects the user experience. Summary of the invention

[0004] The purpose of the embodiments of the present application is to provide a method, device and electronic device for preliminary authentication of cloud application login, which can solve the user experience problem caused by the need to enter authentication information multiple times when logging into a cloud application.

[0005] In the first aspect, an embodiment of the present application provides a cloud application login authentication method, which is applied to a cloud phone platform, and the method includes: receiving a first login request for logging into a cloud application sent by a terminal, wherein the first login request carries: a second identifier of the cloud machine logged in by the terminal, and a first application identifier of the cloud application; based on the first login request, generating first verification information, wherein the first verification information includes: a first random string, and the first random string includes: a first identifier, a second identifier, the first application identifier, a first random code, and a first request identifier corresponding to the first login request; sending the first verification information to a number card authentication center and the terminal, so that the number card authentication center authenticates the cloud application platform based on the first verification information. The second verification information sent by the terminal is verified, wherein the second verification information includes a second random string, and the second random string includes: the third identifier of the login object, the fourth identifier of the cloud machine logged in by the login object, the second application identifier of the cloud application corresponding to the login request, a second random code and the request identifier, and the second random string is received by the cloud application from the terminal and sent to the cloud application platform; receiving the interactive authentication request sent by the terminal, wherein the interactive authentication request includes interactive data; verifying the interactive data, and sending the verification result to the terminal, so that the terminal sends the verification result to the number card authentication center for verification, wherein the verification result includes the first random code and the first request identifier.

[0006] In the second aspect, an embodiment of the present application provides a cloud application login authentication method, which is applied to a number card authentication center, and the method includes: receiving first verification information sent by a cloud phone platform, wherein the first verification information includes: a first random string, the first random string includes: a first identifier of a login object, a second identifier of a cloud machine logged in by a terminal, a first application identifier of a cloud application requested to log in by the terminal, a first random code, and a first request identifier corresponding to a first login request received by the cloud phone platform; receiving second verification information sent by a cloud application platform, wherein the second verification information includes a second random string, the second random string includes: a third identifier of the login object, a third identifier of the login object The fourth identifier of the cloud machine to be logged in, the second application identifier of the cloud application requested to log in, the second random code and the second request identifier, wherein the second random string is received by the cloud application from the terminal and sent to the cloud application platform; the second verification information is verified based on the first verification information, and an authentication message is sent to the terminal; the login authentication request sent by the terminal is received, wherein the login authentication request carries a third random code and a third request identifier; and when the first random code matches the third random code, the authentication result is sent to the cloud application platform, so that the cloud application learns that the terminal is allowed to log in to the cloud application by polling the cloud application platform.

[0007] In the third aspect, an embodiment of the present application provides a cloud application login method, which is applied to a terminal, and the method includes: in response to a login operation initiated by a login object on a cloud application, sending a first login request to a cloud phone platform, wherein the first login request carries: a second identifier of the cloud machine logged in by the terminal, and a first application identifier of the cloud application; receiving first verification information sent by the cloud phone platform, wherein the first verification information includes: a first random string, and the first random string includes: a first identifier, a second identifier, the first application identifier, a first random code, and a request identifier corresponding to the first login request; sending the first verification information to the cloud application, so that the cloud application sends second verification information to the cloud application platform based on the first verification information, and the cloud application platform sends the second verification information to a number card authentication center for verification; sending an interactive authentication request to the cloud phone platform; receiving an authentication result sent by the cloud phone platform, wherein the authentication result includes: a third random code and a third request identifier; sending a login authentication request carrying a third random code and a third request identifier to the number card authentication center, so that the number card authentication center verifies the third random code based on the first random code.

[0008] In a fourth aspect, an embodiment of the present application provides a cloud application login authentication device, which is applied to a cloud phone platform, and the device includes: a first receiving module, which is used to receive a first login request sent by a terminal to log in to a cloud application, wherein the first login request carries: a second identifier of the cloud machine logged in by the terminal, and a first application identifier of the cloud application; a generating module, which is used to generate first verification information based on the first login request, wherein the first verification information includes: a first random string, which includes: a first identifier, a second identifier, the first application identifier, a first random code, and a first request identifier corresponding to the first login request; a first sending module, which is used to send the first verification information to a number card authentication center and the terminal, so that the number card authentication center can authenticate the cloud based on the first verification information. The second verification information sent by the cloud application platform is verified, wherein the second verification information includes a second random string, and the second random string includes: the third identifier of the login object, the fourth identifier of the cloud machine logged in by the login object, the second application identifier of the cloud application corresponding to the login request, the second random code and the request identifier, and the second random string is received by the cloud application from the terminal and sent to the cloud application platform; a second receiving module is used to receive an interactive authentication request sent by the terminal, wherein the interactive authentication request includes interactive data; a second sending module is used to verify the interactive data and send the verification result to the terminal, so that the terminal sends the verification result to the number card authentication center for verification, wherein the verification result includes the first random code and the first request identifier.

[0009] In the fifth aspect, an embodiment of the present application provides a cloud application login authentication device, which is applied to a number card authentication center, and the device includes: a first receiving module, which is used to receive first verification information sent by a cloud phone platform, wherein the first verification information includes: a first random string, which includes: a first identifier of a login object, a second identifier of a cloud machine logged in by a terminal, a first application identifier of a cloud application requested to log in by the terminal, a first random code, and a first request identifier corresponding to a first login request received by the cloud phone platform; a second receiving module, which is used to receive second verification information sent by a cloud application platform, wherein the second verification information includes a second random string, which includes: a third identifier of the login object, a third identifier of the login object logged in a fourth identifier of the cloud machine, a second application identifier of the cloud application requesting login, a second random code and a second request identifier, wherein the second random string is received by the cloud application from the terminal and sent to the cloud application platform; a first sending module, used to verify the second verification information based on the first verification information, and send an authentication message to the terminal; a third receiving module, used to receive a login authentication request sent by the terminal, wherein the login authentication request carries a third random code and a third request identifier; a second sending module, used to send an authentication result to the cloud application platform when the first random code matches the third random code, so that the cloud application learns by polling the cloud application platform that the terminal is allowed to log in to the cloud application.

[0010] In a sixth aspect, an embodiment of the present application provides a cloud application login device, which is applied to a terminal, and the device includes: a first sending module, which is used to send a first login request to a cloud phone platform in response to a login operation initiated by a login object on a cloud application, wherein the first login request carries: a second identifier of the cloud machine logged in by the terminal, and a first application identifier of the cloud application; a first receiving module, which is used to receive first verification information sent by the cloud phone platform, wherein the first verification information includes: a first random string, and the first random string includes: a first identifier, a second identifier, the first application identifier, a first random code, and a request identifier corresponding to the first login request; a second sending module, which is used to send a first login request to a cloud phone platform in response to a login operation initiated by a login object on a cloud application, wherein the first login request carries: a second identifier of the cloud machine logged in by the terminal, and a first application identifier of the cloud application; a first receiving module, which is used to receive first verification information sent by the cloud phone platform, wherein the first verification information includes: a first random string, and the first random string includes: a first identifier, a second identifier, a first application identifier, a first random code, and a request identifier corresponding to the first login request for sending the first verification information to the cloud application, so that the cloud application sends the second verification information to the cloud application platform based on the first verification information, and the cloud application platform sends the second verification information to the number card authentication center for verification; a third sending module, for sending an interactive authentication request to the cloud phone platform; a second receiving module, for receiving the authentication result sent by the cloud phone platform, wherein the authentication result includes: a third random code and a third request identifier; a fourth sending module, for sending a login authentication request carrying a third random code and a third request identifier to the number card authentication center, so that the number card authentication center verifies the third random code based on the first random code.

[0011] In the seventh aspect, an embodiment of the present application provides an electronic device, which includes a processor and a memory, wherein the memory stores programs or instructions that can be run on the processor, and when the program or instructions are executed by the processor, the steps of the method described in the first aspect, the second aspect, or the third aspect are implemented.

[0012] In an eighth aspect, an embodiment of the present application provides a computer-readable storage medium, on which a program or instruction is stored. When the program or instruction is executed by a processor, the steps of the method described in the first aspect, the second aspect, or the third aspect are implemented.

[0013] In the ninth aspect, an embodiment of the present application provides a chip, comprising a processor and a communication interface, wherein the communication interface is coupled to the processor, and the processor is used to run programs or instructions to implement the method described in the first aspect, the second aspect, or the third aspect.

[0014] In the tenth aspect, an embodiment of the present application provides a computer program product, which includes a computer program stored on a non-transitory computer-readable storage medium, and the computer program includes program instructions. When the program instructions are executed by a computer, the computer executes the method described in the first aspect, the second aspect, or the third aspect.

[0015] In an embodiment of the present application, the cloud phone platform can receive a first login request sent by a terminal to log in to a cloud application, and then can generate a first verification information including a first random string based on the first login request, and finally send the first verification information to the number card authentication center and the terminal, so that the number card authentication center verifies the second verification information sent by the cloud application platform based on the first verification information, and then based on the interactive authentication request, sends the first random code and the first request identifier to the terminal, so that the terminal sends it to the number card authentication center for verification. In this way, by verifying the first random string in the first verification information and verifying the first random code, the security and legitimacy of the login object logging into the cloud application can be guaranteed, and quick login to the cloud application can be achieved, avoiding repeated input of usernames and passwords, and improving user experience. BRIEF DESCRIPTION OF THE DRAWINGS

[0016] Figure 1 A timing diagram showing cloud application login authentication in related technologies; Figure 2 A schematic diagram showing a flow chart of a cloud application login authentication method provided in an embodiment of the present application; Figure 3 A schematic diagram showing the data structure of a random string and a random secret string provided in an embodiment of the present application; Figure 4 A schematic diagram showing a flow chart of another cloud application login authentication method provided in an embodiment of the present application; Figure 5 A timing diagram showing cloud application registration provided by an embodiment of the present application is shown; Figure 6 A schematic diagram showing a flow chart of a cloud application login method provided in an embodiment of the present application; Figure 7 A schematic diagram showing a graphic verification code provided in an embodiment of the present application; Figure 8 A schematic diagram showing the interaction between various modules provided in the embodiment of the present application; Fig. 9 A timing diagram showing the generation of a random string by the cloud phone platform provided in an embodiment of the present application; Fig.10 A timing diagram showing a mobile phone number displayed by a cloud application provided in an embodiment of the present application is shown; Fig.11 A timing diagram showing the comparison of the random secret string by the number card authentication center provided in the embodiment of the present application; Fig.12 A timing diagram showing user interaction provided by an embodiment of the present application; Fig.13 A timing diagram showing the comparison of random codes by the number card authentication center provided in an embodiment of the present application is shown; Fig.14A schematic diagram showing the structure of a cloud application login authentication device provided in an embodiment of the present application is shown; Fig.15 A schematic diagram showing the structure of another cloud application login authentication device provided in an embodiment of the present application is shown; Fig.16 A schematic diagram showing the structure of a cloud application login device provided in an embodiment of the present application is shown; Fig.17 A structural block diagram of an electronic device provided by an exemplary embodiment of the present application is shown. DETAILED DESCRIPTION

[0017] The following will be combined with the drawings in the embodiments of the present application to clearly describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, rather than all the embodiments. All other embodiments obtained by ordinary technicians in this field based on the embodiments in the present application belong to the scope of protection of this application.

[0018] The terms "first", "second", etc. in the specification and claims of the present application are used to distinguish similar objects, and are not used to describe a specific order or sequence. It should be understood that the data used in this way can be interchangeable under appropriate circumstances, so that the embodiments of the present application can be implemented in an order other than those illustrated or described here, and the objects distinguished by "first", "second", etc. are generally of one type, and the number of objects is not limited. For example, the first object can be one or more. In addition, "and / or" in the specification and claims represents at least one of the connected objects, and the character " / " generally indicates that the objects associated with each other are in an "or" relationship.

[0019] Cloud phones are cloud-based virtual phones based on virtualization technology. The cloud server manages multiple virtualized containers and runs a customized Android operating system in each virtualized container. Each container is a cloud machine. Combined with hardware simulation capabilities, the functions of cloud machines are basically the same as those of real machines. Users access the cloud phone through the client installed on the real machine. The server will specify one of the cloud machines to connect to the client, and users can experience the cloud phone just like operating a real machine.

[0020] In related technologies, users enter authentication information in the cloud phone client and enter the cloud machine after successful login. When opening an application in the cloud machine, they need to enter authentication information again and log in to the application's account system to obtain user information. Each application in the cloud machine that needs to be logged in requires additional authentication information, which affects the user experience. The specific timing diagram is as follows Figure 1 shown.

[0021] Because cloud machines are virtual environments, current quick login methods, such as one-click login using a mobile phone number, require the hardware capabilities of a physical machine to implement. Currently, there is a lack of relevant technologies that can achieve quick login on cloud machines.

[0022] The following is a detailed description of the cloud application login authentication solution provided by the embodiment of the present application through specific embodiments and their application scenarios in conjunction with the accompanying drawings.

[0023] Figure 2 The following is a flow chart of a cloud application login authentication method provided by an exemplary embodiment of the present application. Figure 2 As shown, the method mainly includes the following steps: S201: Receive a first login request sent by a terminal to log into a cloud application.

[0024] The first login request carries: the second identifier of the cloud machine that the terminal logs in to, and the first application identifier of the cloud application.

[0025] In an embodiment of the present application, the cloud phone platform can receive a first login request sent by a terminal. The first login request can instruct the login object to log in to the cloud application through the terminal. The first login request carries: a second identifier of the cloud machine logged in by the terminal, and a first application identifier of the cloud application. The first identifier can be used to identify the login object. In actual applications, it can be the user's mobile phone number. The second identifier can be used to identify the cloud machine logged in by the terminal. In actual applications, it can be the identity document (ID) of the cloud machine. The first application identifier can be used to identify the cloud application. In actual applications, it can be an application (Application, App) ID. In an embodiment of the present application, the APP ID is generated by the card authentication center based on the package name information of the cloud application when the cloud application is registered.

[0026] In an optional implementation, before the cloud phone platform receives a first login request for logging into a cloud application sent by a terminal, the method further includes: The cloud phone platform receives a second login request sent by the terminal for logging into the cloud phone platform, wherein the second login request carries the first identifier and authentication information of the login object; When the first identifier and the authentication information are authenticated successfully, the cloud phone platform returns a login success response to the terminal.

[0027] In an embodiment of the present application, the cloud phone platform can receive a second login request sent by the terminal for logging into the cloud phone platform, wherein the second login request carries a first identifier and authentication information of the login object. Then, if the first identifier and authentication information are authenticated, the cloud phone platform can return a successful login response to the terminal. This can verify the login of the login object to the cloud phone platform, which helps to confirm the legitimacy of the login object and ensure the security of privacy data.

[0028] S202: Generate first verification information based on the first login request.

[0029] The first verification information includes: a first random string, and the first random string includes: the first identifier, the second identifier, the first application identifier, a first random code, and a first request identifier corresponding to the first login request.

[0030] In an embodiment of the present application, the cloud phone platform can generate the first verification information based on the first login request. The first verification information includes: a first random string, the first random string includes: a first identifier (which can be a mobile phone number), a second identifier (which can be a cloud machine ID), a first application identifier (which can be an APP ID), a first random code, and a first request identifier corresponding to the first login request. In an embodiment of the present application, the first random code is a number of randomly generated characters, which can be composed of numbers, special characters, uppercase and lowercase letters, and can be used for authentication verification. The first request identifier is an identifier for the terminal to obtain the first verification information once. In actual applications, the first random string can also include a timestamp and a check code. The timestamp is a digital identifier generated by the current time, which can be used to verify the timeliness of the first random string. The check code is a summary generated by splicing the first identifier, the second identifier, the first application identifier, the first random code, the first request identifier, and the timestamp, which can be used to verify the first random string. The first verification information can be used to verify the login object, the terminal, and the cloud application to ensure the security of the login object logging into the cloud application through the cloud machine connected to the terminal.

[0031] In an optional implementation, the cloud phone platform generates first verification information based on the first login request, including: Acquire a first identifier of the login object according to the first login request; Obtain the public key corresponding to the number card authentication center; Based on the first login request, generate the first random string; The first generated random string is encrypted using the public key to obtain the first verification information.

[0032] In the embodiment of the present application, the cloud phone platform can obtain the first identification of the login object according to the first login request, and then obtain the public key corresponding to the number card authentication center. The public key can be a public key that is set in advance by the number card authentication center and can be used publicly. Then, according to the public key, the first random string is encrypted in an asymmetric encryption manner to generate a first random secret string corresponding to the first random string, that is, the first verification information. The data structure of the random string and the random secret string is as follows: Figure 3 As shown. By encrypting, the security of the first random string can be guaranteed.

[0033] S203: Send the first verification information to the number card authentication center and the terminal, so that the number card authentication center verifies the second verification information sent by the cloud application platform based on the first verification information. The second verification information includes a second random string, which includes: the third identifier of the login object, the fourth identifier of the cloud machine logged in by the login object, the second application identifier of the cloud application corresponding to the login request, the second random code and the request identifier, and the second random string is received by the cloud application from the terminal and sent to the cloud application platform.

[0034] In an embodiment of the present application, the cloud phone platform can send the first verification information to the number card authentication center and the terminal, so that the number card authentication center verifies the second verification information sent by the cloud application platform based on the first verification information. The second verification information includes a second random string, the data structure of the second random string is consistent with the first random string, and the second random string is received from the terminal by the cloud application and sent to the cloud application platform. In this way, the first verification information can be transmitted, which helps to verify the legitimacy of the login object logging into the cloud application.

[0035] In an optional implementation, sending the first verification information to a number card authentication center and the terminal includes: Sending the first verification information to the number card authentication center so that the number card authentication center verifies the first random string in the first verification information; Receiving the inspection result sent by the number card authentication center; When the verification result is that the verification is passed, the first verification information is sent to the terminal, wherein the first verification information also includes interaction information.

[0036] In the embodiment of the present application, the first verification information can be sent to the number card authentication center so that the number card authentication center verifies the first random string in the first verification information; then receives the verification result sent by the number card authentication center; and when the verification result is that the verification is passed, sends the first verification information to the terminal, wherein the first verification information also includes the interaction information. In this way, the integrity and invalidity of the first verification information can be guaranteed.

[0037] S204: Receive an interactive authentication request sent by the terminal.

[0038] The interactive authentication request includes interactive data.

[0039] In an embodiment of the present application, the cloud phone platform can receive an interactive authentication request carrying interactive data sent by a terminal.

[0040] S205: Verify the interaction data and send the verification result to the terminal, so that the terminal sends the verification result to the number card authentication center for verification.

[0041] The verification result includes the first random code and the first request identifier.

[0042] In the embodiment of the present application, the first verification information may also include interactive information, and the interactive information may be a graphic verification code, a slider confirmation, the selection of a certain type of picture, etc., which is not specifically limited in the embodiment of the present application. In the case where the interactive information is a graphic verification code, the cloud phone platform can concatenate the mobile phone number, APP ID, and cloud machine ID with a colon and perform MD5 algorithm processing to generate M, and randomly generate a string S consisting of alphanumeric characters, convert S into a picture object through EasyCaptcha, and establish a mapping relationship between M and S. The base64 string of the picture is subsequently sent to the cloud phone client as interactive information.

[0043] After the cloud phone platform sends the first verification information to the terminal, it can receive an interactive authentication request sent by the terminal, wherein the interactive authentication request includes interactive data; then the cloud phone platform can verify the interactive data based on the interactive verification information corresponding to the interactive information, and send the authentication result to the terminal, wherein the authentication result includes the first random code in the first random string generated in advance and the first request identifier, so that the terminal can send it to the number card authentication center for verification. Not only can the legitimacy of the login object be guaranteed through interaction, but the security of logging into the cloud application can also be further guaranteed.

[0044] In an embodiment of the present application, the cloud phone platform can receive a first login request sent by a terminal to log in to a cloud application, and then can generate first verification information including a first random string based on the first login request, and then send the first verification information to the number card authentication center and the terminal, so that the number card authentication center verifies the second verification information sent by the cloud application platform based on the first verification information, and then based on the interactive authentication request of the terminal, sends the first random code and the first request identifier to the terminal, so that the terminal sends it to the number card authentication center for verification. In this way, various aspects of information can be verified through the first random string in the first verification information, and the first random code can be verified, which can ensure the security and legitimacy of the login object logging into the cloud application, avoid repeated entry of user names and passwords, and achieve quick login to cloud applications, thereby improving user experience.

[0045] Figure 4 A flowchart of another cloud application login authentication method provided by an exemplary embodiment of the present application is shown, which is applied to a number card authentication center, such as Figure 4 As shown, the method mainly includes the following steps: S401: Receive first verification information sent by the cloud phone platform.

[0046] Among them, the first verification information includes: a first random string, the first random string includes: a first identifier of the login object, a second identifier of the cloud machine that the terminal logs in to, a first application identifier of the cloud application that the terminal requests to log in, a first random code, and a first request identifier corresponding to the first login request received by the cloud phone platform.

[0047] In an embodiment of the present application, the number card authentication center can provide a unified login authentication service for cloud applications. The number card authentication center can receive the first verification information sent by the cloud phone platform, and the first verification information includes: a first random string, and the first random string includes: the first identifier of the login object, the second identifier of the cloud machine logged in by the terminal, the first application identifier of the cloud application requested to log in by the terminal, the first random code, and the first request identifier corresponding to the first login request received by the cloud phone platform. Receiving the first verification information sent by the cloud phone platform can be used to confirm the legitimacy of the login object logging into the cloud application.

[0048] Figure 5The timing diagram of cloud application registration provided by the embodiment of the present application is shown. In response to the application registration request of the cloud phone platform, the number card authentication center can generate the application APPID and key based on the package name and other information, and return the generated APPID and key to the cloud phone platform. In actual applications, the cloud application developer applies to the cloud phone platform to cloud the application, submits the application installation package, application package name, application signature and other information; the cloud phone platform pushes the application installation package to the cloud machine, and the cloud machine installs the application. Then, the cloud phone platform registers the application with the number card authentication center, the number card authentication center generates the application APPID and key based on the package name and other information, and returns the generated APPID and key to the cloud phone platform, and the cloud phone platform provides the APPID key to the cloud application manufacturer. It should be noted that the key issued to the application is used by the cloud application platform to request the number card authentication center. Their previous request needs to be protected, and the encryption and decryption keys are not the same as those in the subsequent login process. In an optional implementation, the first random string also includes a first verification code; after the number card authentication center receives the first verification information sent by the cloud phone platform, the method also includes: The number card authentication center verifies the integrity of the first random string based on the first verification code, and saves the first verification information after the verification passes.

[0049] Verification Code In the embodiment of the present application, the number card authentication center can establish a mapping relationship between the first request identifier and the first random string. By verifying the first random string, the validity of the first random string can be guaranteed, the transmission of erroneous first verification information can be avoided, and the efficiency and security of transmission can be improved.

[0050] S402: Receive second verification information sent by the cloud application platform.

[0051] Among them, the second verification information includes a second random string, and the second random string includes: the third identifier of the login object, the fourth identifier of the cloud machine logged in by the login object, the second application identifier of the cloud application requesting login, a second random code and a second request identifier. The second random string is received by the cloud application from the terminal and sent to the cloud application platform.

[0052] In an embodiment of the present application, the number card authentication center can receive the second verification information sent by the cloud application platform, the second verification information includes a second random string, the second random string includes: the third identifier of the login object, the fourth identifier of the cloud machine logged in by the login object, the second application identifier of the cloud application corresponding to the login request, the second random code and the second request identifier, and the second random string is received from the terminal by the cloud application and sent to the cloud application platform. The second verification information sent by the cloud application platform received by the number card authentication center can be used to further confirm the legitimacy of the login object logging into the cloud application.

[0053] S403: Verify the second verification information based on the first verification information, and send an authentication message to the terminal.

[0054] In an optional implementation, the verifying the second verification information based on the first verification information and sending an authentication message to the terminal may include the following steps: Step 1: When the second request identifier matches the first request identifier, the number card authentication center obtains a first random string corresponding to the first request identifier.

[0055] In the embodiment of the present application, after the number card authentication center receives the second verification information sent by the cloud application platform, it can use the private key to decrypt the second verification information, and first verify whether the cloud application platform matches the APPID in the second random string. Then it can be checked whether a first request identifier consistent with the second request identifier in the second random string is stored. If the second request identifier matches the first request identifier, the number card authentication center can obtain the first random string corresponding to the first request identifier.

[0056] Step 2: When the first random string matches the second random string, the number card authentication center sends an authentication message to the terminal corresponding to the first identifier.

[0057] The authentication message includes the second identifier and the first application identifier.

[0058] In the embodiment of the present application, when the first random string matches the second random string, the number card authentication center can send an authentication message to the terminal corresponding to the first identifier, wherein the authentication message includes the second identifier (cloud machine ID) and the first application identifier (APP ID). If the first random string does not match the second random string, it means that there may be an error in the login process or it may be attacked or unsafe, and the authentication message may not be sent, making it impossible to log in to the cloud application. The authentication message can facilitate the next step of interaction of the terminal and improve the efficiency of quick login.

[0059] S404: Receive a login authentication request sent by the terminal.

[0060] The login authentication request carries a third random code and a third request identifier; S405: When the first random code matches the third random code, an authentication result is sent to the cloud application platform, so that the cloud application learns that the terminal is allowed to log in to the cloud application by polling the cloud application platform.

[0061] In an embodiment of the present application, the number card authentication center can receive a login authentication request sent by the terminal, wherein the login authentication request carries a third random code and a third request identifier; when the first random code in the first random string corresponding to the third request identifier matches the third random code, the number card authentication center can send an authentication result to the cloud application platform, so that the cloud application learns that the terminal is allowed to log in to the cloud application by polling the cloud application platform. The number card authentication center can decrypt the request ID and random code through a private key, find the random code saved by the number card authentication center through the request ID, and compare the random code with the random code fed back by the SIM module of the terminal. If the comparison is successful, the authentication is passed, and a callback is made to notify the cloud application platform of the authentication result. After one comparison, the number card authentication center needs to delete the relevant information of the saved first random string to avoid information leakage and save storage resources.

[0062] In the embodiment of the present application, the number card authentication center can receive the first verification information sent by the cloud phone platform, and then receive the second verification information sent by the cloud application platform, verify the second verification information based on the first verification information, send an authentication message to the terminal, and then receive the login authentication request sent by the terminal, wherein the login authentication request carries the third random code and the third request identifier; when the first random code matches the third random code, the authentication result is sent to the cloud application platform, so that the cloud application learns that the terminal is allowed to log in to the cloud application by polling the cloud application platform. The security and effectiveness of the terminal logging into the cloud application can be verified, and the user experience can be improved.

[0063] Figure 6 The flowchart of a cloud application login method provided by an exemplary embodiment of the present application is shown, which is applied to a terminal. The terminal can be an electronic device such as a mobile phone. Figure 6 As shown, the method mainly includes the following steps: S601: In response to a login operation initiated by a login object on a cloud application, a first login request is sent to a cloud phone platform, wherein the first login request carries: a second identifier of a cloud machine logged in by a terminal, and a first application identifier of the cloud application.

[0064] In an embodiment of the present application, in response to a login operation initiated by a login object on a cloud application, the terminal may send a first login request to the cloud phone platform. The first login request carries: a first identifier of the login object (which may be the login object's mobile phone number), a second identifier of the cloud machine that the terminal logs in to (which may be the cloud machine ID), and a first application identifier of the cloud application (which may be the APP ID). The login object does not need to enter an authentication message, which helps the login object to quickly log in to the cloud application.

[0065] S602: Receive first verification information sent by the cloud phone platform.

[0066] The first verification information includes: a first random string, and the first random string includes: the first identifier, the second identifier, the first application identifier, a first random code, and a first request identifier corresponding to the first login request.

[0067] In an embodiment of the present application, the terminal can receive first verification information sent by the cloud phone platform based on the first login request.

[0068] In an optional implementation, after receiving the first verification information sent by the cloud phone platform, the method further includes: Sending the first identifier to the cloud application so that the cloud application displays the first identifier; In response to a confirmation operation on the first identifier displayed by the cloud application, a confirmation message is sent to the cloud application to trigger the cloud application to send the second verification information to the cloud application platform.

[0069] In the embodiment of the present application, after the terminal receives the first verification information sent by the cloud phone platform, it can send the first identifier (the mobile phone number of the login object) to the cloud application, so that the cloud application displays the first identifier; then in response to the confirmation operation of the first identifier displayed by the cloud application, a confirmation message is sent to the cloud application to trigger the cloud application to send the second verification information to the cloud application platform. The login object can confirm the mobile phone number without the need to enter additional authentication information, which helps to improve the user experience.

[0070] S603: Send the first verification information to the cloud application, so that the cloud application sends the second verification information to the cloud application platform based on the first verification information, and the cloud application platform sends the second verification information to the number card authentication center for verification.

[0071] In the embodiment of the present application, the terminal can send a first random string to the cloud application, so that the cloud application sends a second verification information to the cloud application platform based on the first random string, and the cloud application platform sends the second verification information to the number card authentication center for verification. This can verify the legitimacy of the terminal logging into the cloud application, help avoid repeated input of verification information, and improve user experience.

[0072] S604: Send an interactive authentication request to the cloud phone platform.

[0073] S605: Receive the authentication result sent by the cloud phone platform.

[0074] The authentication result includes: a third random code and a third request identifier.

[0075] S606: Send a login authentication request carrying a third random code and a third request identifier to the number card authentication center, so that the number card authentication center verifies the third random code based on the first random code.

[0076] In an embodiment of the present application, the terminal can receive an authentication message sent by the number card authentication center, wherein the authentication message includes a second identifier and a first application identifier. In actual applications, after receiving the first verification information sent by the cloud phone platform, the terminal can notify the subscriber identification module (Subscriber Identification Module, SIM) software development kit (Software Development Kit, SDK) to start polling and query the message sent by the number card authentication center. After sending the first random string to the cloud application, the authentication message sent by the number card authentication center can be received, which helps to quickly receive the authentication message. The next step can be performed through the authentication message to improve the efficiency of login.

[0077] In an optional implementation, the first verification information further includes: interaction information; and sending an interaction authentication request to the cloud phone platform includes: Based on the interaction information, display an interaction page; In response to the input operation on the interactive page, an interactive authentication request is sent to the cloud phone platform, wherein the interactive authentication request includes interactive data; in the embodiment of the present application, the first verification information also includes: interactive information, in the embodiment of the present application, the interactive information can be a graphic verification code, a sliding slider to confirm, or a selection of a certain type of picture. The schematic diagram of the image verification code is as follows Figure 7 As shown, the terminal can display an interactive page based on the interactive information; then in response to the input operation on the interactive page, send an interactive authentication request to the cloud phone platform, wherein the interactive authentication request includes the interactive information and the interactive information to be authenticated; then receive the authentication result sent by the cloud phone platform, wherein the authentication result includes the third random code and the third request identifier; finally, the third random code and the third request identifier can be sent to the number card authentication center, so that the number card authentication center verifies the third random code and the third request identifier. Through interaction, the legitimacy of the random string can be guaranteed.

[0078] In the embodiment of the present application, the terminal can respond to the login operation initiated by the login object on the cloud application, send a first login message to the cloud phone platform; then receive the first verification information sent by the cloud phone platform; finally send a first random string to the cloud application, so that the cloud application sends a second verification information to the cloud application platform based on the first random string, and the cloud application platform sends the second verification information to the number card authentication center for verification, and then send an interactive authentication request to the cloud phone platform; receive the authentication result sent by the cloud phone platform, where the authentication result includes: a third random code and a third request identifier; finally send a login authentication request carrying the third random code and the third request identifier to the number card authentication center, so that the number card authentication center verifies the third random code based on the first random code. It can avoid repeated input of authentication information, enable the login object to quickly log in to the cloud application, and improve user experience.

[0079] Figure 8 A schematic diagram of module interaction provided by an embodiment of the present application is shown, which includes five modules: cloud phone platform, number card authentication center, cloud application platform, cloud machine and real machine (terminal). The real machine is equipped with a cloud phone client and a system SIM module, and the cloud phone client includes a terminal SDK and a SIM SDK; the cloud machine is equipped with cloud applications, cloud-side agents and cloud-side SDKs.

[0080] In the embodiment of the present application, the cloud phone platform can process cloud phone operation data and business data, and connect with third-party partners at the same time, and can perform the following operations: Figure 2 The cloud application login authentication method shown has the following main functions: (1) providing an application cloud application entry and returning the application ID and application key issued by the number card authentication center to the application provider; (2) pushing the cloud application installation package to the cloud machine; (3) registering application information with the number card authentication center and sending a random secret string; (4) creating a random secret string and completing the user authentication interaction operation with the cloud phone client.

[0081] In the embodiment of the present application, the number card authentication center can provide a unified login authentication service for cloud applications, and can execute the following Figure 4 The cloud application login authentication method shown has the following main functions: (1) responsible for sending SIM authentication messages to the SIM module of the real machine system and obtaining the random code and request ID sent by the SIM module; (2) responsible for verifying the validity of the random secret string sent by the cloud phone platform; (3) responsible for comparing and verifying the random secret string of the cloud phone platform with the random secret string of the cloud application platform; (4) responsible for comparing and verifying the random code fed back by the SIM module with the random code of the cloud application platform; (5) responsible for notifying the cloud application platform of the login authentication result.

[0082] In the embodiment of the present application, the real machine can execute the following Figure 6In the cloud application login and authentication method, the real machine includes a cloud phone client, and the user can complete identity authentication through the cloud phone client, enter the cloud machine and operate the cloud machine. The main functions are: receiving user input authentication information and initiating a login authentication request to the cloud phone platform; interacting with the end-side SDK to transmit mobile phone numbers and random secret string information; responsible for interacting with the SIM SDK to transmit random codes, request IDs, etc.; responsible for rendering the user interaction interface after receiving the SIM card authentication information. The real machine can also include an end-side SDK: an SDK embedded in the cloud phone client, responsible for communicating with the cloud-side SDK, and building a communication bridge between the cloud phone client and the cloud machine. The real machine can also include a SIM SDK: an SDK embedded in the cloud phone client, responsible for interacting with the system SIM module, and transmitting data between the cloud phone platform and the number card authentication center. The real machine can also include a SIM card module, which is a system-integrated module responsible for receiving SIM card messages from the number card authentication center.

[0083] In the embodiment of the present application, the cloud machine is a virtual mobile phone seen by the user, which can run the Android operating system and has various applications installed in the system, including system applications and cloud applications provided by third parties. Among them, the cloud-side SDK is responsible for communicating with the end-side SDK in the cloud machine and transmitting data between the cloud phone client and the cloud machine end. The cloud-side agent is a system application installed in the cloud machine, which is responsible for building a communication bridge between the cloud-side SDK and the cloud application.

[0084] And, cloud applications: are applications provided by third-party partners running in the cloud machine. Their main functions are: (1) responsible for calling the cloud-side proxy to obtain the real phone number and random secret string; (2) responsible for sending login authentication requests to the cloud application platform; (3) responsible for sending polling requests to the cloud application platform to query the quick login results.

[0085] In the embodiment of the present application, the cloud application platform can process the login authentication request data sent by the cloud application client, and its main functions are: (1) responsible for processing the login authentication request sent by the cloud application; (2) responsible for sending the SIM card login authentication request to the number card authentication center; (3) responsible for receiving the callback login result information of the number card authentication center; Figures 9 to 13 This is a timing diagram for implementing quick login to cloud applications provided in an embodiment of the present application. Fig. 9 A timing diagram showing the generation of a random string by the cloud phone platform provided in an embodiment of the present application; Fig.10 A timing diagram showing a mobile phone number displayed by a cloud application provided in an embodiment of the present application is shown; Fig.11 A timing diagram showing the comparison of the random secret string by the number card authentication center provided in the embodiment of the present application; Fig.12 A timing diagram showing user interaction provided by an embodiment of the present application; Fig.13A timing diagram showing the comparison of random codes by the number card authentication center provided in an embodiment of the present application.

[0086] Fig.14 The schematic diagram of the structure of a cloud application login authentication device provided by an exemplary embodiment of the present application is shown. The cloud application login authentication device can be implemented as follows: Figure 2 All or part of the content in the illustrated embodiment, the cloud application login authentication device includes: a first receiving module 1401, a generating module 1402, a first sending module 1403, a second receiving module 1404 and a second sending module 1405.

[0087] In an embodiment of the present application, a first receiving module 1401 is used to receive a first login request sent by a terminal to log in to a cloud application, wherein the first login request carries: a second identifier of the cloud machine that the terminal logs in to, and a first application identifier of the cloud application; a generating module 1402 is used to generate first verification information based on the first login request, wherein the first verification information includes: a first random string, and the first random string includes: a first identifier, a second identifier, the first application identifier, a first random code, and a first request identifier corresponding to the first login request; a first sending module 1403 is used to send the first verification information to a number card authentication center and the terminal, so that the number card authentication center verifies the second verification information sent by the cloud application platform based on the first verification information. Verification is performed, wherein the second verification information includes a second random string, and the second random string includes: the third identifier of the login object, the fourth identifier of the cloud machine logged in by the login object, the second application identifier of the cloud application corresponding to the login request, the second random code and the request identifier, and the second random string is received by the cloud application from the terminal and sent to the cloud application platform; the second receiving module 1404 is used to receive the interactive authentication request sent by the terminal, wherein the interactive authentication request includes interactive data; the second sending module 1405 is used to verify the interactive data and send the verification result to the terminal, so that the terminal sends the verification result to the number card authentication center for verification, wherein the verification result includes the first random code and the first request identifier. In an optional implementation method, the first sending module 1403, when used to send the first verification information to the number card authentication center and the terminal, is specifically used to: Sending the first verification information to the number card authentication center so that the number card authentication center verifies the first random string in the first verification information; Receiving the inspection result sent by the number card authentication center; When the verification result is that the verification is passed, the first verification information is sent to the terminal, wherein the first verification information also includes interaction information.

[0088] In an optional implementation, when the generating module 1402 is used to generate the first verification information based on the first login request, it is specifically used to: Acquire a first identifier of the login object according to the first login request; Obtain the public key corresponding to the number card authentication center; Based on the first login request, generate the first random string; The first generated random string is encrypted using the public key to obtain the first verification information.

[0089] In an optional implementation, the first receiving module 1401 is further configured to: Receiving a second login request sent by the terminal to log in to the cloud phone platform, wherein the second login request carries the first identifier and authentication information of the login object; When the first identifier and the authentication information are authenticated successfully, a login success response is returned to the terminal.

[0090] The cloud application login authentication device in the embodiment of the present application can be an electronic device or a component in an electronic device, such as an integrated circuit or a chip. The electronic device can be a terminal or other devices other than a terminal. Exemplarily, the electronic device can be a mobile phone, a tablet computer, a laptop computer, a PDA, a vehicle-mounted electronic device, a mobile Internet device (Mobile Internet Device, MID), an augmented reality (augmented reality, AR) / virtual reality (virtual reality, VR) device, a robot, a wearable device, an ultra-mobile personal computer (ultra-mobile personal computer, UMPC), a netbook or a personal digital assistant (personal digital assistant, PDA), etc. It can also be a server, a network attached storage (Network Attached Storage, NAS), a personal computer (personal computer, PC), a television (television, TV), a teller machine or a self-service machine, etc., which is not specifically limited in the embodiment of the present application.

[0091] The cloud application login authentication device in the embodiment of the present application may be a device having an operating system. The operating system may be an Android operating system, an iOS operating system, or other possible operating systems, which are not specifically limited in the embodiment of the present application.

[0092] The cloud-based application login authentication device provided in the embodiment of the present application can achieve Figure 2 To avoid repetition, the various processes implemented in the illustrated method embodiment will not be described again here.

[0093] Fig.15 The schematic diagram of the structure of a cloud application login authentication device provided by an exemplary embodiment of the present application is shown. The cloud application login authentication device can be implemented as follows: Figure 4 In the embodiment shown in the figure, all or part of the contents, the cloud application login authentication device includes: a first receiving module 1501, a second receiving module 1502, a first sending module 1503, a third receiving module 1504 and a second sending module 1505. .

[0094] In an embodiment of the present application, a first receiving module 1501 is used to receive first verification information sent by a cloud phone platform, wherein the first verification information includes: a first random string, the first random string includes: a first identifier of a login object, a second identifier of a cloud machine logged in by a terminal, a first application identifier of a cloud application requested to log in by the terminal, a first random code, and a first request identifier corresponding to a first login request received by the cloud phone platform; a second receiving module 1502 is used to receive second verification information sent by a cloud application platform, wherein the second verification information includes a second random string, the second random string includes: a third identifier of a login object, a fourth identifier of a cloud machine logged in by the login object, a first application identifier of a cloud application requested to log in, a first random code, and a first request identifier corresponding to a first login request received by the cloud phone platform. two application identifiers, a second random code and a second request identifier, wherein the second random string is received by the cloud application from the terminal and sent to the cloud application platform; a first sending module 1503, used to verify the second verification information based on the first verification information, and send an authentication message to the terminal; a third receiving module 1504, used to receive a login authentication request sent by the terminal, wherein the login authentication request carries a third random code and a third request identifier; a second sending module 1505, used to send an authentication result to the cloud application platform when the first random code matches the third random code, so that the cloud application learns by polling the cloud application platform that the terminal is allowed to log in to the cloud application.

[0095] In an optional implementation, the first sending module 1503, when used to verify the second verification information based on the first verification information and send an authentication message to the terminal, is specifically used to: When the second request identifier matches the first request identifier, the number card authentication center obtains a first random string corresponding to the first request identifier; When the first random string matches the second random string, the number card authentication center sends an authentication message to the terminal, wherein the authentication message includes the second identifier and the first application identifier.

[0096] In an optional implementation, the first random string also includes a first check code; and the first receiving module 1501 is further configured to: The number card authentication center verifies the integrity of the first random string based on the first verification code, and saves the first verification information after the verification passes; A mapping relationship between the first random string and the first request identifier is established.

[0097] In an optional implementation, the second receiving module 1502 is further configured to establish a mapping relationship between the second request identifier and the second random code.

[0098] The cloud application login authentication device in the embodiment of the present application can be an electronic device or a component in an electronic device, such as an integrated circuit or a chip. The electronic device can be a terminal or other devices other than a terminal. Exemplarily, the electronic device can be a mobile phone, a tablet computer, a laptop computer, a PDA, a vehicle-mounted electronic device, a mobile Internet device (Mobile Internet Device, MID), an augmented reality (augmented reality, AR) / virtual reality (virtual reality, VR) device, a robot, a wearable device, an ultra-mobile personal computer (ultra-mobile personal computer, UMPC), a netbook or a personal digital assistant (personal digital assistant, PDA), etc. It can also be a server, a network attached storage (Network Attached Storage, NAS), a personal computer (personal computer, PC), a television (television, TV), a teller machine or a self-service machine, etc., which is not specifically limited in the embodiment of the present application.

[0099] The cloud application login authentication device in the embodiment of the present application may be a device having an operating system. The operating system may be an Android operating system, an iOS operating system, or other possible operating systems, which are not specifically limited in the embodiment of the present application.

[0100] The cloud-based application login authentication device provided in the embodiment of the present application can achieve Figure 4 To avoid repetition, the various processes implemented in the illustrated method embodiment will not be described again here.

[0101] Fig.16 The schematic diagram of the structure of a cloud application login device provided by an exemplary embodiment of the present application is shown. The cloud application login device can implement the following Figure 6 In the embodiment shown, all or part of the content, the cloud application login device includes: a first sending module 1601, a first receiving module 1602, a second sending module 1603, a third sending module 1604, a second receiving module 1605 and a fourth sending module 1606. .

[0102] In an embodiment of the present application, a first sending module 1601 is used to send a first login request to a cloud phone platform in response to a login operation initiated by a login object on a cloud application, wherein the first login request carries: a second identifier of the cloud machine logged in by the terminal, and a first application identifier of the cloud application; a first receiving module 1602 is used to receive first verification information sent by the cloud phone platform, wherein the first verification information includes: a first random string, wherein the first random string includes: a first identifier, a second identifier, the first application identifier, a first random code, and a request identifier corresponding to the first login request; a second sending module 1603 is used to send the first authentication information to the cloud application. Verification information, so that the cloud application sends second verification information to the cloud application platform based on the first verification information, and the cloud application platform sends the second verification information to the number card authentication center for verification; a third sending module 1604, used to send an interactive authentication request to the cloud phone platform; a second receiving module 1605, used to receive the authentication result sent by the cloud phone platform, wherein the authentication result includes: a third random code and a third request identifier; a fourth sending module 1606, used to send a login authentication request carrying a third random code and a third request identifier to the number card authentication center, so that the number card authentication center verifies the third random code based on the first random code.

[0103] In an optional implementation, the second sending module 1603 is further configured to: Sending the first identifier to the cloud application so that the cloud application displays the first identifier; In response to a confirmation operation on the first identifier displayed by the cloud application, a confirmation message is sent to the cloud application to trigger the cloud application to send the second verification information to the cloud application platform.

[0104] In an optional implementation, the second receiving module 1605 is further configured to: Receive an authentication message sent by the number card authentication center, wherein the authentication message includes the second identifier and the first application identifier.

[0105] In an optional implementation, the first verification information further includes: interaction information; when the third sending module 1604 is used to send an interaction authentication request to the cloud phone platform, it is specifically used to: Based on the interaction information, display an interaction page; In response to an input operation on the interaction page, sending an interaction authentication request to the cloud phone platform, wherein the interaction authentication request includes the interaction information and the interaction information to be authenticated; The cloud application login device in the embodiment of the present application can be an electronic device or a component in the electronic device, such as an integrated circuit or a chip. The electronic device can be a terminal or other devices other than a terminal. Exemplarily, the electronic device can be a mobile phone, a tablet computer, a laptop computer, a PDA, a vehicle-mounted electronic device, a mobile Internet device (Mobile Internet Device, MID), an augmented reality (augmented reality, AR) / virtual reality (virtual reality, VR) device, a robot, a wearable device, an ultra-mobile personal computer (ultra-mobile personal computer, UMPC), a netbook or a personal digital assistant (personal digital assistant, PDA), etc. It can also be a server, a network attached storage (Network Attached Storage, NAS), a personal computer (personal computer, PC), a television (television, TV), a teller machine or a self-service machine, etc., which is not specifically limited in the embodiment of the present application.

[0106] The cloud application login authentication device in the embodiment of the present application may be a device having an operating system. The operating system may be an Android operating system, an iOS operating system, or other possible operating systems, which are not specifically limited in the embodiment of the present application.

[0107] The cloud application login device provided in the embodiment of the present application can achieve Figure 6 To avoid repetition, the various processes implemented in the illustrated method embodiment will not be described again here.

[0108] Alternatively, if Fig.17As shown, an embodiment of the present application also provides an electronic device 1700, including a processor 1701 and a memory 1702, wherein the memory 1702 stores programs or instructions that can be executed on the processor 1701, and when the program or instructions are executed by the processor 1701, the various steps of the above-mentioned method embodiment are implemented, and the same technical effect can be achieved. To avoid repetition, they are not described here.

[0109] It should be noted that the electronic devices in the embodiments of the present application include the mobile electronic devices and non-mobile electronic devices mentioned above.

[0110] An embodiment of the present application also provides a computer-readable storage medium, on which a program or instruction is stored. When the program or instruction is executed by a processor, the various processes of the above-mentioned method embodiment are implemented and the same technical effect can be achieved. To avoid repetition, it will not be repeated here.

[0111] The processor is the processor in the electronic device described in the above embodiment. The readable storage medium includes a computer readable storage medium, such as a computer read-only memory ROM, a random access memory RAM, a magnetic disk or an optical disk.

[0112] An embodiment of the present application further provides a chip, which includes a processor and a communication interface, wherein the communication interface is coupled to the processor, and the processor is used to run programs or instructions to implement the various processes of the above-mentioned method embodiment, and can achieve the same technical effect. To avoid repetition, it will not be repeated here.

[0113] It should be understood that the chip mentioned in the embodiments of the present application can also be called a system-level chip, a system chip, a chip system or a system-on-chip chip, etc.

[0114] An embodiment of the present application provides a computer program product, which includes a computer program stored on a non-transitory computer-readable storage medium, and the computer program includes program instructions. When the program instructions are executed by a computer, the computer executes the various processes of the above-mentioned method embodiment and can achieve the same technical effect. To avoid repetition, they are not repeated here.

[0115] It should be noted that, in this article, the term "includes", "comprising" or any other variant thereof is intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such a process, method, article or device. In the absence of further restrictions, an element defined by the sentence "including one..." does not exclude the presence of other identical elements in the process, method, article or device including the element. In addition, it should be noted that the scope of the method and device in the embodiment of the present application is not limited to performing functions in the order shown or discussed, and may also include performing functions in a substantially simultaneous manner or in a reverse order according to the functions involved, for example, the described method may be performed in an order different from that described, and various steps may also be added, omitted, or combined. In addition, the features described with reference to certain examples may be combined in other examples. Through the description of the above embodiments, those skilled in the art can clearly understand that the above-mentioned embodiment method can be implemented by means of software plus a necessary general hardware platform, and of course, it can also be implemented by hardware, but in many cases the former is a better embodiment. Based on this understanding, the technical solution of the present application can essentially or the part that contributes to the prior art can be embodied in the form of a computer software product, which is stored in a storage medium (such as ROM / RAM, disk, CD-ROM), and includes a number of instructions for enabling a terminal (which can be a mobile phone, computer, server, or network device, etc.) to execute the methods described in the various embodiments of the present application.

[0116] The embodiments of the present application are described above in conjunction with the accompanying drawings, but the present application is not limited to the above-mentioned specific implementation methods. The above-mentioned specific implementation methods are merely illustrative and not restrictive. Under the guidance of the present application, ordinary technicians in this field can also make many forms without departing from the purpose of the present application and the scope of protection of the claims, all of which are within the protection of the present application.

Claims

1. A cloud application login authentication method, applied to a cloud phone platform, characterized in that: include: Receiving a first login request sent by a terminal for logging into a cloud-based application, wherein the first login request carries: a second identifier of a cloud machine logged into by the terminal, and a first application identifier of the cloud-based application; Generate first verification information based on the first login request, wherein the first verification information includes: a first random string, wherein the first random string includes: a first identifier, the second identifier, the first application identifier, a first random code, and a first request identifier corresponding to the first login request; The first verification information is sent to the number card authentication center and the terminal, so that the number card authentication center verifies the second verification information sent by the cloud application platform based on the first verification information, wherein the second verification information includes a second random string, and the second random string includes: the third identifier of the login object, the fourth identifier of the cloud machine logged in by the login object, the second application identifier of the cloud application corresponding to the login request, the second random code and the request identifier, and the second random string is received by the cloud application from the terminal and sent to the cloud application platform; receiving an interactive authentication request sent by the terminal, wherein the interactive authentication request includes interactive data; The interaction data is verified, and the verification result is sent to the terminal, so that the terminal sends the verification result to the number card authentication center for verification, wherein the verification result includes the first random code and the first request identifier.

2. The method according to claim 1, characterized in that: Before the receiving terminal sends a first login request for logging into the cloud application, the method further includes: Receiving a second login request sent by the terminal to log in to the cloud phone platform, wherein the second login request carries the first identifier and authentication information of the login object; When the first identifier and the authentication information are authenticated successfully, a login success response is returned to the terminal.

3. The method according to claim 2, characterized in that The generating first verification information based on the first login request includes: Acquire a first identifier of the login object according to the first login request; Obtain the public key corresponding to the number card authentication center; Based on the first login request, generate the first random string; The first generated random string is encrypted using the public key to obtain the first verification information.

4. The method according to claim 1, characterized in that: The sending the first verification information to the number card authentication center and the terminal includes: Sending the first verification information to the number card authentication center so that the number card authentication center verifies the first random string in the first verification information; Receiving the inspection result sent by the number card authentication center; When the verification result is that the verification is passed, the first verification information is sent to the terminal, wherein the first verification information also includes interaction information.

5. A cloud application login authentication method, applied to a number card authentication center, characterized in that: include: Receive first verification information sent by the cloud phone platform, wherein the first verification information includes: a first random string, the first random string includes: a first identifier of a login object, a second identifier of a cloud machine logged in by the terminal, a first application identifier of a cloud application requested to be logged in by the terminal, a first random code, and a first request identifier corresponding to a first login request received by the cloud phone platform; Receive second verification information sent by the cloud application platform, wherein the second verification information includes a second random string, and the second random string includes: a third identifier of the login object, a fourth identifier of the cloud machine logged in by the login object, a second application identifier of the cloud application requested to log in, a second random code, and a second request identifier, and the second random string is received by the cloud application from the terminal and sent to the cloud application platform; Verify the second verification information based on the first verification information, and send an authentication message to the terminal; receiving a login authentication request sent by the terminal, wherein the login authentication request carries a third random code and a third request identifier; When the first random code matches the third random code, an authentication result is sent to the cloud application platform, so that the cloud application learns that the terminal is allowed to log in to the cloud application by polling the cloud application platform.

6. The method according to claim 5, characterized in that The verifying the second verification information based on the first verification information and sending an authentication message to the terminal includes: When the second request identifier matches the first request identifier, obtaining a first random string corresponding to the first request identifier; In a case where the first random string matches the second random string, an authentication message is sent to the terminal, wherein the authentication message includes the second identifier and the first application identifier.

7. The method according to claim 5, characterized in that The first random string also includes a first verification code; after receiving the first verification information sent by the cloud phone platform, the method also includes: Verifying the integrity of the first random string based on the first verification code, and after the verification passes, saving the first verification information; A mapping relationship between the first random string and the first request identifier is established.

8. The method according to claim 5, characterized in that After receiving the second verification information sent by the cloud application platform, the method further includes: Establish a mapping relationship between the second request identifier and the second random code.

9. A cloud application login method, applied to a terminal, characterized in that: include: In response to a login operation initiated by the login object on the cloud application, a first login request is sent to the cloud phone platform, wherein the first login request carries: a second identifier of the cloud machine logged in by the terminal, and a first application identifier of the cloud application; Receive first verification information sent by the cloud phone platform, wherein the first verification information includes: a first random string, the first random string includes: a first identifier, the second identifier, the first application identifier, a first random code, and a request identifier corresponding to the first login request; Sending the first verification information to the cloud application, so that the cloud application sends second verification information to the cloud application platform based on the first verification information, and the cloud application platform sends the second verification information to the number card authentication center for verification; Sending an interactive authentication request to the cloud phone platform; Receiving an authentication result sent by the cloud phone platform, wherein the authentication result includes: a third random code and a third request identifier; Send a login authentication request carrying a third random code and a third request identifier to the number card authentication center, so that the number card authentication center verifies the third random code based on the first random code.

10. The method according to claim 8, characterized in that The method further comprises: Sending the first identifier to the cloud application so that the cloud application displays the first identifier; In response to a confirmation operation on the first identifier displayed by the cloud application, a confirmation message is sent to the cloud application to trigger the cloud application to send the second verification information to the cloud application platform.

11. The method according to claim 9, characterized in that After sending the first random string to the cloud application, the method further includes: Receive an authentication message sent by the number card authentication center, wherein the authentication message includes the second identifier and the second application identifier.

12. The method according to claim 10, characterized in that The first verification information also includes: interaction information; sending an interaction authentication request to the cloud phone platform includes: Based on the interaction information, display an interaction page; In response to an input operation on the interactive page, an interactive authentication request is sent to the cloud phone platform, wherein the interactive authentication request includes interactive data.

13. A cloud application login authentication device, applied to a cloud phone platform, characterized in that: include: A first receiving module, configured to receive a first login request sent by a terminal for logging into a cloud-based application, wherein the first login request carries: a second identifier of a cloud machine logged into by the terminal, and a first application identifier of the cloud-based application; A generating module, configured to generate first verification information based on the first login request, wherein the first verification information includes: a first random string, wherein the first random string includes: a first identifier, the second identifier, the first application identifier, a first random code, and a first request identifier corresponding to the first login request; A first sending module is used to send the first verification information to the number card authentication center and the terminal, so that the number card authentication center verifies the second verification information sent by the cloud application platform based on the first verification information, wherein the second verification information includes a second random string, and the second random string includes: a third identifier of the login object, a fourth identifier of the cloud machine logged in by the login object, a second application identifier of the cloud application corresponding to the login request, a second random code and the request identifier, and the second random string is received by the cloud application from the terminal and sent to the cloud application platform; A second receiving module, configured to receive an interactive authentication request sent by the terminal, wherein the interactive authentication request includes interactive data; The second sending module is used to verify the interactive data and send the verification result to the terminal, so that the terminal sends the verification result to the number card authentication center for verification, wherein the verification result includes the first random code and the first request identifier.

14. A cloud application login authentication device, applied to a number card authentication center, characterized in that: include: A first receiving module is used to receive first verification information sent by a cloud phone platform, wherein the first verification information includes: a first random string, the first random string includes: a first identifier of a login object, a second identifier of a cloud machine logged in by a terminal, a first application identifier of a cloud application requested to be logged in by the terminal, a first random code, and a first request identifier corresponding to a first login request received by the cloud phone platform; A second receiving module is used to receive second verification information sent by the cloud application platform, wherein the second verification information includes a second random string, and the second random string includes: a third identifier of the login object, a fourth identifier of the cloud machine logged in by the login object, a second application identifier of the cloud application requested to log in, a second random code, and a second request identifier, and the second random string is received by the cloud application from the terminal and sent to the cloud application platform; A first sending module, configured to verify the second verification information based on the first verification information, and send an authentication message to the terminal; A third receiving module, configured to receive a login authentication request sent by the terminal, wherein the login authentication request carries a third random code and a third request identifier; The second sending module is used to send the authentication result to the cloud application platform when the first random code matches the third random code, so that the cloud application learns that the terminal is allowed to log in to the cloud application by polling the cloud application platform.

15. A cloud application login device, applied to a terminal, characterized in that: include: A first sending module, configured to send a first login request to the cloud phone platform in response to a login operation initiated by the login object on the cloud application, wherein the first login request carries: a second identifier of the cloud machine logged in by the terminal, and a first application identifier of the cloud application; A first receiving module is used to receive first verification information sent by the cloud phone platform, wherein the first verification information includes: a first random string, the first random string includes: a first identifier, the second identifier, the first application identifier, a first random code, and a request identifier corresponding to the first login request; A second sending module is used to send the first verification information to the cloud application, so that the cloud application sends the second verification information to the cloud application platform based on the first verification information, and the cloud application platform sends the second verification information to the number card authentication center for verification; A third sending module is used to send an interactive authentication request to the cloud phone platform; A second receiving module, configured to receive an authentication result sent by the cloud phone platform, wherein the authentication result includes: a third random code and a third request identifier; The fourth sending module is used to send a login authentication request carrying a third random code and a third request identifier to the number card authentication center, so that the number card authentication center verifies the third random code based on the first random code.

16. An electronic device, characterized in that: The electronic device comprises a processor and a memory, wherein the memory stores a program or instruction that can be run on the processor, and when the program or instruction is executed by the processor, the steps of the method according to any one of claims 1 to 12 are implemented.

17. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a program or instruction, and when the program or instruction is executed by a processor, the steps of the method according to any one of claims 1 to 12 are implemented.

18. A computer program product, characterized in that The computer program product comprises a computer program stored on a non-transitory computer-readable storage medium, wherein the computer program comprises program instructions, and when the program instructions are executed by a computer, the computer is caused to perform the steps of the method according to any one of claims 1 to 12.

Images