OneID linkage login system

Abstract

The invention relates to the technical field of data processing, in particular to an OneID linkage login system, and the system comprises a correlation matching module which determines an initial correlation application and a corresponding initial correlation path based on historical behavior data; the information analysis module obtains historical login information of a plurality of users, and determines an initial OneID based on the historical login information of the plurality of users; the information comparison module creates an initial login session based on the initial OneID, collects actual user information corresponding to the initial login session, compares the actual user information with the initial OneID, generates a login instruction based on a comparison result, or performs secondary verification; and the management module receives the login instruction, collects an actual login application and an actual login path in real time, compares the actual login application and the actual login path with the initial association application and the corresponding initial association path, determines a deviation based on a comparison result, adjusts the initial OneID based on the deviation, and verifies the initial OneID again, or gives an alarm. According to the invention, the security of the linkage login process is improved.

Description

Technical Field

[0001] The present invention relates to the field of data processing technology, and in particular to a OneID linkage login system. Background Art

[0002] OneID uses ID-Mapping technology to map user identities from different sources and in different formats (such as device ID, mobile phone number, ID number, email address, etc.) to a unified ID, forming a unique identity for the user in the entire enterprise ecosystem.

[0003] The patent document with Chinese patent application number CN116800449A discloses a display device and an account switching linkage method. The display device includes a display and a controller. The controller is installed with a first application and a second application associated with the same platform identifier. The first application is configured to: receive a user operation to switch from the first account to the second account; in response to the user operation, generate and send an account switching request including the platform identifier and the second account to the server, so that the server updates the login token of the platform identifier to the target token corresponding to the second account and feeds back the target token, and the first application updates the login token of the platform identifier of the local computer to the target token; sends a first broadcast including the platform identifier and an account logout instruction, so that the second application logs out of the first account; sends a second broadcast including the platform identifier and an account login instruction, so that the second application logs in to the second account according to the target token.

[0004] In the prior art, during the account switching and login process, the focus is mainly on completing account-related operations according to the established process. There is a lack of real-time security monitoring mechanism for the actual usage after account switching and login, and it is impossible to effectively ensure the security of user accounts and data. Summary of the invention

[0005] To this end, the present invention provides a OneID linkage login system, which can solve the problem of low data security during the process of users linking login to other applications.

[0006] To achieve the above object, the present invention provides a OneID linkage login system, which includes:

[0007] An association matching module, used to determine the initial association application and its corresponding initial association path based on the user's historical behavior data;

[0008] An information analysis module, connected to the association matching module, for respectively obtaining a plurality of user historical login information corresponding to the plurality of initially associated applications, determining historical user information based on the plurality of user historical login information, and determining an initial OneID based on the historical user information;

[0009] An information comparison module, connected to the information analysis module, for creating an initial login session based on the initial OneID, collecting actual user information corresponding to the initial login session, comparing the actual user information with the initial OneID, and generating a login instruction based on the comparison result, or performing secondary verification;

[0010] The management module is connected to the information comparison module, and is used to receive the login instruction, collect the actual login application and the actual login path in real time, compare them with the initial associated application and its corresponding initial associated path respectively, determine the deviation based on the comparison result, adjust the initial OneID based on the deviation for re-verification, or issue an alarm.

[0011] Furthermore, the association matching module includes:

[0012] A data extraction unit, used to determine the historical access timestamps of several historically accessed applications in any historical period, and determine the access sequence of several applications based on the historical access timestamps;

[0013] The association determination unit is connected to the data extraction unit, and is used to draw a historical association map based on several historical access applications and their corresponding access sequences in any historical period, and determine the initial association application and its corresponding initial association path based on several historical association maps.

[0014] Further, the association determination unit includes:

[0015] An application determination subunit, for counting the historical access frequencies of several historical access applications corresponding to several historical association graphs, comparing the historical access frequencies with preset frequencies, and determining several initial associated applications based on the comparison results;

[0016] A path determination subunit is connected to the application determination subunit, and is used to analyze the associated path segments between the several initially associated applications, count the number of occurrences of any associated path segment, compare it with a preset number, determine the key path segment based on the comparison result, and determine the initial associated path based on the several key path segments.

[0017] Furthermore, the information analysis module includes:

[0018] An information determination unit, configured to set a union of several historical login information of the user as the historical user information;

[0019] An information analysis unit, connected to the information determination unit, for performing encryption calculation on each element in the set corresponding to the historical user information according to an encryption algorithm to obtain a number of historical encryption values;

[0020] An ID generating unit connected to the information analyzing unit is used to combine the historical encryption values ​​to obtain an encrypted string, and encrypt the encrypted string again to obtain the initial OneID;

[0021] The construction unit is connected to the ID generation unit, and is used to store the initial OneID and the corresponding historical user information in a one-to-one correspondence, and to construct an encrypted storage database based on the storage results.

[0022] Furthermore, the information comparison module includes:

[0023] A session creation unit, configured to create an initial login session based on the initial OneID;

[0024] an information acquisition unit, connected to the session creation unit, for acquiring the actual user information based on the initial login session;

[0025] A comparison unit is connected to the information acquisition unit, and is used to encrypt the actual user information based on an encryption algorithm to obtain actual encrypted information, compare the actual encrypted information with the initial OneID, and determine whether the encryption length is abnormal, so as to determine the encryption abnormality and encrypt again according to the length judgment result, or identify the abnormal encryption field, determine the actual proportion of the abnormal encryption field, compare it with the preset proportion, generate a login instruction based on the comparison result, or perform secondary verification.

[0026] Furthermore, the comparison unit comprises:

[0027] A length judgment subunit, used to compare the actual character length corresponding to the actual encrypted information with the initial character length corresponding to the initial OneID, so as to judge the encryption abnormality and encrypt again according to the comparison result, or to identify the abnormal encryption field;

[0028] An abnormal identification subunit, connected to the length judgment subunit, is used to compare the actual encrypted information with the initial OneID one by one, mark abnormal characters in the initial OneID, judge the proportion of several abnormal characters in the initial OneID, and obtain the actual proportion;

[0029] an instruction generating subunit, connected to the abnormality identifying subunit, for comparing the actual proportion with the preset proportion, and generating a login instruction when the actual proportion is less than the preset proportion;

[0030] The verification subunit is connected to the abnormality identification subunit and is used to perform secondary verification when the actual proportion is greater than or equal to the preset proportion.

[0031] Furthermore, the verification subunit includes:

[0032] The traceability block is used to identify the user's actual login address and compare it with several historical login addresses in several historical login information to obtain the comparison result;

[0033] The verification block is connected to the traceability block to issue an alarm based on the comparison result, or to re-collect actual user information for verification.

[0034] Furthermore, the management module includes:

[0035] A data collection unit, used to collect actual login applications and their corresponding actual login timestamps in real time, and determine the actual login path based on a number of actual login timestamps;

[0036] a deviation determination unit connected to the data acquisition unit, for comparing a number of actually logged-in applications with a number of initially associated applications, and calculating application deviations based on the comparison results, or for comparing an actual logged-in path with an initially associated path, and calculating a path deviation based on the comparison results;

[0037] The adjustment unit is connected to the deviation determination unit, and is used to determine the deviation deviation based on the application deviation deviation or the path deviation, and adjust the initial OneID to verify again based on the comparison result between the deviation deviation and the preset deviation, or to issue an alarm.

[0038] Further, the deviation determination unit includes:

[0039] A first calculation subunit is used for calculating the number of login applications that are different from the initial associated applications among the actual login applications as the number of abnormal applications, and calculating the ratio of the number of abnormal applications to the number of initial associated applications as the application deviation;

[0040] The second calculation subunit is used to calculate the similarity value between the actual login path and the initial association path as the path deviation when the actual login applications are the same as the initial association applications.

[0041] Furthermore, the adjustment unit includes:

[0042] a deviation determination subunit, configured to use the application deviation deviation or the path deviation as the deviation deviation;

[0043] The adjustment subunit is connected to the deviation determination subunit, and is used to determine the abnormal application when the deviation is less than the preset deviation, to identify the usage frequency of the abnormal application, and to update the initial associated application based on the usage frequency, or to determine the abnormal path and update the initial associated path.

[0044] Compared with the prior art, the beneficial effect of the present invention lies in that, by setting the association matching module, the user's usage patterns and operation sequences between different applications are deeply mined, the user's habits are fully understood, and a basis is provided for subsequent judgment of the user's login to the associated application, so that the user feels more coherent when switching between multiple related applications, and the convenience of use is improved. By setting the information analysis module, compared with relying solely on the login information of a single application to identify the user, the user's identity can be determined more accurately, and the identity confusion problem caused by the duplication or similarity of user names, passwords and other information in different applications can be effectively avoided, and the risk of identity misjudgment is reduced. The encryption algorithm is used to process the relevant information to protect the user's privacy and data security, and the initial OneID As a unified identity identification, different related applications can more conveniently integrate and share user data. By setting up an information comparison module to create an initial login session based on the initial OneID, it helps to ensure the security of user accounts and related data. When the comparison results show abnormal situations such as partial information mismatch, the login is not directly rejected, but a secondary verification is performed, providing a more flexible processing mechanism. By setting up the management module for real-time monitoring to ensure safe use, the safe and stable operation of the system is maintained. When the deviation is within a reasonable range, by adjusting the associated applications and paths related to the initial OneID and other operations, it dynamically adapts to the normal changes in user usage habits over time, thereby improving the adaptability of the system.

[0045] In particular, by setting up the data extraction unit to accurately determine the actual operation sequence of the user when using various applications in the past, a solid foundation is laid for in-depth understanding of the user's usage habits and behavior patterns, which is helpful for subsequent systems to provide services that are more in line with user needs based on these habits. By setting up the association determination unit, the user's complex and scattered application usage behavior is presented in an intuitive and visual manner, which is convenient for quickly and comprehensively understanding the overall picture of user behavior, and then making more accurate decisions.

[0046] In particular, by setting up the application determination subunit, accurate statistics and analysis of the user's historical application access frequency is achieved, and the most representative initial associated applications are screened out, providing an important reference basis for subsequent user identity identification and login verification. By setting up the path determination subunit, the associated path fragments between the initial associated applications are deeply analyzed, and the key path fragments can be accurately identified through comparison to construct the user's initial associated path, which reflects the user's usage habits and also provides strong support for subsequent user behavior prediction and login verification.

[0047] In particular, by setting up the information determination unit, effective integration and processing of user historical login information is achieved, providing an important data basis for subsequent user identity identification and generation of initial OneID; by setting up the information determination unit, the user's historical login information is comprehensively and accurately collected, information omissions and errors are avoided, and information from different sources and in different formats is uniformly processed, so that subsequent information analysis and encryption calculations can be carried out more efficiently and accurately; by setting up the information analysis unit, encryption calculations are performed on each element in the set corresponding to the historical user information to protect the user's privacy and data security, and also make the subsequently generated initial OneID have higher security and uniqueness; by setting up the ID generation unit to generate a unique encrypted string, the uniqueness and security of the initial OneID are ensured; by setting up the construction unit to construct an encrypted storage database based on the storage results, effective management and storage of user information are achieved, and reliable data support is provided for subsequent user identity identification and login verification, thereby improving the convenience and security of user login. BRIEF DESCRIPTION OF THE DRAWINGS

[0048] Figure 1 A structural block diagram of the OneID linkage login system provided by an embodiment of the present invention;

[0049] Figure 2 A structural block diagram of an association matching module in the OneID linkage login system provided in an embodiment of the present invention;

[0050] Figure 3 A structural block diagram of the information analysis module in the OneID linkage login system provided in an embodiment of the present invention;

[0051] Figure 4 This is a structural block diagram of the information comparison module in the OneID linkage login system provided in an embodiment of the present invention. DETAILED DESCRIPTION

[0052] In order to make the objects and advantages of the present invention more clearly understood, the present invention is further described below in conjunction with embodiments; it should be understood that the specific embodiments described herein are only used to explain the present invention and are not used to limit the present invention.

[0053] The preferred embodiments of the present invention are described below with reference to the accompanying drawings. It should be understood by those skilled in the art that these embodiments are only used to explain the technical principles of the present invention and are not intended to limit the protection scope of the present invention.

[0054] It should be noted that, in the description of the present invention, terms such as "up", "down", "left", "right", "inside" and "outside" indicating directions or positional relationships are based on the directions or positional relationships shown in the drawings. This is merely for the convenience of description and does not indicate or imply that the device or element must have a specific orientation, be constructed and operated in a specific orientation. Therefore, it should not be understood as a limitation on the present invention.

[0055] In addition, it should be noted that in the description of the present invention, unless otherwise clearly specified and limited, the terms "installed", "connected" and "connected" should be understood in a broad sense, for example, it can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection or an electrical connection; it can be a direct connection or an indirect connection through an intermediate medium, or it can be the internal communication of two components. For those skilled in the art, the specific meanings of the above terms in the present invention can be understood according to specific circumstances.

[0056] See also Figure 1 As shown, an embodiment of the present invention provides a OneID linkage login system, which includes:

[0057] The association matching module 10 is used to determine the initial association application and its corresponding initial association path based on the user's historical behavior data;

[0058] The information analysis module 20 is connected to the association matching module 10, and is used to respectively obtain a plurality of user historical login information corresponding to the plurality of initially associated applications, determine historical user information based on the plurality of user historical login information, and determine the initial OneID based on the historical user information;

[0059] The information comparison module 30 is connected to the information analysis module 20, and is used to create an initial login session based on the initial OneID, collect actual user information corresponding to the initial login session, compare the actual user information with the initial OneID, and generate a login instruction based on the comparison result, or perform secondary verification;

[0060] The management module 40 is connected to the information comparison module 30, and is used to receive the login instruction, collect the actual login application and the actual login path in real time, compare them with the initial associated application and its corresponding initial associated path respectively, determine the deviation based on the comparison result, adjust the initial OneID based on the deviation for re-verification, or issue an alarm.

[0061] Specifically, the embodiment of the present invention sets the association matching module to deeply mine the user's usage patterns and operation sequences between different applications, comprehensively understand the user's habits, and provide a basis for subsequent judgment of the user's login to the associated application, so that the user feels more consistent when switching between multiple related applications, and improves the convenience of use. By setting the information analysis module, compared with relying solely on the login information of a single application to identify the user, the user's identity can be determined more accurately, and the identity confusion problem caused by repeated or similar information such as user names and passwords in different applications can be effectively avoided, and the risk of misjudgment of identity can be reduced. The encryption algorithm is used to process the relevant information to protect the user's privacy and data security, and the initial OneID is used as a unified The identity identification can be used to integrate and share user data more conveniently between different related applications. By setting the information comparison module to create the initial login session based on the initial OneID, it is helpful to ensure the security of the user account and related data. When the comparison result shows abnormal conditions such as partial information mismatch, the login is not directly rejected, but a secondary verification is performed, which provides a more flexible processing mechanism. By setting the management module for real-time monitoring to ensure safe use, the safe and stable operation of the system is maintained. When the deviation is within a reasonable range, the associated applications and paths related to the initial OneID are adjusted to dynamically adapt to the normal changes in user usage habits over time, thereby improving the adaptability of the system.

[0062] See also Figure 2 As shown, the association matching module 10 includes:

[0063] A data extraction unit 11 is used to determine the historical access timestamps of several historically accessed applications in any historical period, and determine the access sequence of several applications based on the historical access timestamps;

[0064] The association determination unit 12 is connected to the data extraction unit 11, and is used to draw a historical association map based on several historical access applications and their corresponding access sequences in any historical period, and determine the initial association application and its corresponding initial association path based on several historical association maps.

[0065] It can be understood that the historical period described in the embodiment of the present invention is one day.

[0066] It can be understood that the historical association graph described in the embodiment of the present invention is a historical association graph in which applications are used as nodes and arrowed lines are used as access order to connect several nodes to determine the historical association graph.

[0067] Specifically, the embodiment of the present invention sets the data extraction unit to accurately determine the actual operation sequence of the user when using various applications in the past, thereby laying a solid foundation for in-depth understanding of the user's usage habits and behavior patterns, and helping the subsequent system to provide services that are more in line with user needs based on these habits. By setting up an association determination unit, the user's complex and scattered application usage behavior is presented in an intuitive and visual manner, which is convenient for quickly and comprehensively understanding the overall picture of the user's behavior, and then making more accurate decisions.

[0068] Specifically, the association determination unit includes:

[0069] An application determination subunit, for counting the historical access frequencies of several historical access applications corresponding to several historical association graphs, comparing the historical access frequencies with preset frequencies, and determining several initial associated applications based on the comparison results;

[0070] A path determination subunit is connected to the application determination subunit, and is used to analyze the associated path segments between the several initially associated applications, count the number of occurrences of any associated path segment, compare it with a preset number, determine the key path segment based on the comparison result, and determine the initial associated path based on the several key path segments.

[0071] Specifically, the embodiment of the present invention realizes accurate statistics and analysis of the user's historical access frequency of applications by setting the application determination subunit, screens out the most representative initial associated applications, and provides an important reference basis for subsequent user identity identification and login verification. By setting the path determination subunit, the associated path fragments between the initial associated applications are deeply analyzed, and the key path fragments can be accurately identified through comparison to construct the user's initial associated path, which reflects the user's usage habits and also provides strong support for subsequent user behavior prediction and login verification.

[0072] It can be understood that the preset frequency in the embodiment of the present invention is the average of several historical access frequencies;

[0073] The preset number of times is the average of several occurrence times.

[0074] It can be understood that an example of the application determination subunit described in the embodiment of the present invention is that the historical access applications in the historical association map 1 are application A, application B and application C, the historical access applications in the historical association map 2 are application A, application C and application D, and the historical access applications in the historical association map 3 are application B, application A and application E. The historical access frequency of application A is 3 times, the historical access frequency of application B is 2 times, the historical access frequency of application C is 2 times, the historical access frequency of application D is 1 time, and the historical access frequency of application E is 1 time. The preset frequency is 1.8 times (one decimal place is retained here, and the specific accuracy can be adjusted according to actual conditions). In this example, the historical access frequencies of application A, application B, and application C are all greater than or equal to 1.8 times, so the initial associated applications are determined to be application A, application B, and application C.

[0075] It can be understood that an example of the path determination subunit described in the embodiment of the present invention is that in the historical association graph 1, there are association path segments "application A→application B", "application B→application C", and "application C→application A" (all appearing once), in the historical association graph 2, there are association path segments "application A→application C", "application C→application A" (each appearing once), and in the historical association graph 3, there are association path segments "application B→application A", "application A→application B" (each appearing once), then "application A→application B" appears twice in total, "application B" appears twice in total, and "application A→application B" appears twice in total. → Application C" appears once, "Application C→Application A" appears twice, and "Application A→Application C" appears once. The preset number of times is 6÷4=1.5 times (also retaining one decimal place). In this example, "Application A→Application B" and "Application C→Application A" are identified as critical path fragments. Based on the critical path fragments, the initial association path can be "Application C→Application A→Application B" (a logical loop path is formed by reasonably connecting the critical path fragments. The specific form needs to be further improved and determined according to the actual situation. This is just an example of a possible situation).

[0076] Specifically, the embodiment of the present invention determines the initial associated applications and the initial associated paths between them through the collaborative work of the application determination subunit and the path determination subunit according to given rules and instance situations, providing an important data foundation for the subsequent OneID linkage login system to better adapt to users' daily usage habits, optimize login guidance and application interaction processes, etc.

[0077] See also Figure 3 As shown, the information analysis module 20 includes:

[0078] An information determination unit 21, configured to set a union of several historical login information of the user as the historical user information;

[0079] The information analysis unit 22 is connected to the information determination unit 21 and is used to perform encryption calculation on each element in the set corresponding to the historical user information according to the encryption algorithm to obtain a number of historical encryption values;

[0080] The ID generating unit 23 is connected to the information analyzing unit 22, and is used to combine the historical encryption values ​​to obtain an encrypted string, and encrypt the encrypted string again to obtain the initial OneID;

[0081] The construction unit 24 is connected to the ID generation unit 23, and is used to store the initial OneID and the corresponding historical user information in a one-to-one correspondence, and to construct an encrypted storage database based on the storage results.

[0082] Specifically, the embodiment of the present invention realizes the effective integration and processing of the user's historical login information by setting the information determination unit, and provides an important data basis for subsequent user identity identification and the generation of the initial OneID. By setting the information determination unit, the user's historical login information is comprehensively and accurately collected, and the omission and error of information are avoided. Information from different sources and in different formats is uniformly processed, so that subsequent information analysis and encryption calculations can be carried out more efficiently and accurately. By setting the information analysis unit, encryption calculations are performed on each element in the set corresponding to the historical user information to protect the user's privacy and data security, and the initial OneID generated subsequently has higher security and uniqueness. By setting the ID generation unit to generate a unique encrypted string, the uniqueness and security of the initial OneID are ensured. By setting the construction unit to construct an encrypted storage database based on the storage results, effective management and storage of user information are realized, and reliable data support is provided for subsequent user identity identification and login verification, thereby improving the convenience and security of user login.

[0083] It can be understood that an example of the information determination unit described in the embodiment of the present invention is to assume that the initial associated application A corresponds to the user historical login information of the user name and the first login password, the initial associated application B corresponds to the user historical login information of the first mobile phone number and the second login password, and the initial associated application C corresponds to the user historical login information of the second mobile phone number and the first login password, then the corresponding historical user information is {user name, first login password, first mobile phone number, second login password, second mobile phone number}. In the embodiment provided by the present invention, the user login information such as user name, login password, mobile phone number, etc. provided by the user is obtained after obtaining the user's consent, and all the obtained user information complies with relevant policies and legal provisions.

[0084] It can be understood that an example of the information analysis unit described in the embodiment of the present invention is to select a hash algorithm (such as SHA-256) as an encryption algorithm. Based on the historical user information set {user name, first login password, first mobile phone number, second login password, second mobile phone number} determined by the previous information determination unit, the information analysis unit starts to use the SHA-256 hash algorithm to encrypt and calculate these elements respectively. Assuming that the user name is "John Doe", the corresponding hash value is "4a8c3e1 f5d2b7a6c8f1d9e0a3b4c5e6d7a8b9c0d1e2f3a4b5c6d7e8f9a0b1c2d". If the first login password is "password123", the hash value is "7f8c3d2e1 a0b9c8d7e6f5a4b3c2d1e0f9a8b7c6d5e4f3a2b1c0d9e8f7a6b5c4d. For example, the first mobile phone number is "13812345678", then its corresponding hash value is "1c8aff95d4c0f20c7adf6128427ae3c652cf3fa19c3144737665a9671353e246". Assuming the second login password is "secret456", its corresponding hash value is "9e8d7c6b5a4f3e2d1c0b9a8f7e6d5c4b3a2f1e0d9c8b7a6f5e4d3c2b1 a0f9e8d", if the second mobile phone number is "13678901234", then its corresponding hash value is "3d2e1 f0a9c8b7d6e5f4a3b2c1d0e9f8a7b6c5d4e3f2a1 b0c9d8e7f6a5e4d3c2b".

[0085] It can be understood that an example of the ID generation unit in the embodiment of the present invention is to connect each hash value in sequence according to the order of the elements in the historical user information set to obtain the following encrypted string: "4a8c3e1 f5d2b7a6c8f1d9e0a3b4c5e6d7a8b9c0d1e2f3a4b5c6d7e8f9a0b1c2d7f8c3d2e1 a0b9c8d7e6f5a4b3c2d1e0f9a8b7c6d5e4f3a2b1c0d9e8f7a6b5c4d1c8aff95d4c0f20c7adf6128427ae3c65 2cf3fa19c3144737665a9671353e2469e8d7c6b5a4f3e2d1c0b9a8f7e6d5c4b3a2f1e0d9c8b7a6f5e4d3c2b1 a0f9e8d3d2e1 f0a9c8b7d6e5f4a3b2c1d0e9f8a7b6c5d4e3f2a1b0c9d8e7f6a5e4d3c2b”, and the encrypted string is processed again using the SHA-256 hash algorithm to obtain the initial OneID "5a3b8c2d1e0f9g8h7i6j5k4l3m2n1o9p8q7r6s5t4u3v2w1x0y9z8a7b6c5d4e3f2g1h0i9j8k7l6m5n4o3p2q1 r0s9t8u7v6w5x4y3z2a1 b0c9d8e7f6g5h4i3j2k1 l0m".

[0086] See also Figure 4 As shown, the information comparison module 30 includes:

[0087] A session creation unit 31, used to create an initial login session based on the initial OneID;

[0088] an information acquisition unit 32, connected to the session creation unit 31, for acquiring the actual user information based on the initial login session;

[0089] The comparison unit 33 is connected to the information acquisition unit 32, and is used to encrypt the actual user information based on the encryption algorithm to obtain the actual encrypted information, compare the actual encrypted information with the initial OneID, and determine whether the encryption length is abnormal, so as to determine the encryption abnormality and encrypt again according to the length judgment result, or identify the abnormal encryption field, determine the actual proportion of the abnormal encryption field, compare it with the preset proportion, generate a login instruction based on the comparison result, or perform secondary verification.

[0090] Specifically, the embodiment of the present invention realizes the rapid establishment of an initial login session based on the initial OneID by setting the session creation unit, provides a safe and reliable login environment for users, provides a personalized session creation solution according to the actual needs and preferences of users, and obtains the user's actual user information in real time and accurately by setting the information acquisition unit, effectively processes and stores the acquired information, and provides reliable data support for subsequent comparison and verification. By setting the comparison unit, the integrity and accuracy of the information are accurately judged to ensure the authenticity and security of the user's identity.

[0091] It can be understood that the encryption algorithm used by the comparison unit in the embodiment of the present invention to determine the encryption process for the actual user information is the same as the encryption algorithm used by the information analysis unit and the ID generation unit.

[0092] It can be understood that the preset ratio in the embodiment of the present invention is 1 / the total number of characters in the initial OneID.

[0093] Specifically, the comparison unit includes:

[0094] A length judgment subunit, used to compare the actual character length corresponding to the actual encrypted information with the initial character length corresponding to the initial OneID, so as to judge the encryption abnormality and encrypt again according to the comparison result, or to identify the abnormal encryption field;

[0095] An abnormal identification subunit, connected to the length judgment subunit, is used to compare the actual encrypted information with the initial OneID one by one, mark abnormal characters in the initial OneID, judge the proportion of several abnormal characters in the initial OneID, and obtain the actual proportion;

[0096] an instruction generating subunit, connected to the abnormality identifying subunit, for comparing the actual proportion with the preset proportion, and generating a login instruction when the actual proportion is less than the preset proportion;

[0097] The verification subunit is connected to the abnormality identification subunit and is used to perform secondary verification when the actual proportion is greater than or equal to the preset proportion.

[0098] It can be understood that the length judgment subunit described in the embodiment of the present invention is used to judge the encryption exception when the actual character length is not equal to the initial character length, and to encrypt the actual user information again. When the actual character length is equal to the initial character length, it identifies the abnormal encryption field.

[0099] Specifically, the verification subunit includes:

[0100] The traceability block is used to identify the user's actual login address and compare it with several historical login addresses in several historical login information to obtain the comparison result;

[0101] The verification block is connected to the traceability block to issue an alarm based on the comparison result, or to re-collect actual user information for verification.

[0102] It is understandable that in the embodiment of the present invention, when the user's actual login address is different from several historical login addresses, an alarm is issued and the login interface is locked. When the user's actual login address is the same as several historical login addresses, the actual user information is re-collected for verification.

[0103] Specifically, the management module includes:

[0104] A data collection unit, used to collect actual login applications and their corresponding actual login timestamps in real time, and determine the actual login path based on a number of actual login timestamps;

[0105] a deviation determination unit connected to the data acquisition unit, for comparing a number of actually logged-in applications with a number of initially associated applications, and calculating application deviations based on the comparison results, or for comparing an actual logged-in path with an initially associated path, and calculating a path deviation based on the comparison results;

[0106] The adjustment unit is connected to the deviation determination unit, and is used to determine the deviation deviation based on the application deviation deviation or the path deviation, and adjust the initial OneID to verify again based on the comparison result between the deviation deviation and the preset deviation, or to issue an alarm.

[0107] Specifically, the deviation determination unit includes:

[0108] A first calculation subunit is used for calculating the number of login applications that are different from the initial associated applications among the actual login applications as the number of abnormal applications, and calculating the ratio of the number of abnormal applications to the number of initial associated applications as the application deviation;

[0109] The second calculation subunit is used to calculate the similarity value between the actual login path and the initial association path as the path deviation when the actual login applications are the same as the initial association applications.

[0110] Specifically, the adjustment unit includes:

[0111] a deviation determination subunit, configured to use the application deviation deviation or the path deviation as the deviation deviation;

[0112] The adjustment subunit is connected to the deviation determination subunit, and is used to determine the abnormal application when the deviation is less than the preset deviation, to identify the usage frequency of the abnormal application, and to update the initial associated application based on the usage frequency, or to determine the abnormal path and update the initial associated path.

[0113] It can be understood that the abnormal applications described in the embodiment of the present invention are those newly appeared abnormal applications that are not within the scope of the initial associated applications but are used by the user.

[0114] It can be understood that the adjustment subunit in the embodiment of the present invention is also used to issue an alarm when the deviation is greater than or equal to a preset deviation.

[0115] It can be understood that, in the embodiment of the present invention, when the usage frequency of the abnormal application is greater than the preset usage frequency, the initial associated application is updated.

[0116] It can be understood that the preset deviation in the embodiment of the present invention is 90%.

[0117] It can be understood that the preset usage frequency in the embodiment of the present invention is 5 times.

[0118] So far, the technical solutions of the present invention have been described in conjunction with the preferred embodiments shown in the accompanying drawings. However, it is easy for those skilled in the art to understand that the protection scope of the present invention is obviously not limited to these specific embodiments. Without departing from the principle of the present invention, those skilled in the art can make equivalent changes or substitutions to the relevant technical features, and the technical solutions after these changes or substitutions will fall within the protection scope of the present invention.

[0119] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. For those skilled in the art, the present invention may have various modifications and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.

Claims

1. A OneID linkage login system, characterized in that: include: An association matching module, used to determine the initial association application and its corresponding initial association path based on the user's historical behavior data; An information analysis module, connected to the association matching module, for respectively obtaining a plurality of user historical login information corresponding to the plurality of initially associated applications, determining historical user information based on the plurality of user historical login information, and determining an initial OneID based on the historical user information; An information comparison module, connected to the information analysis module, for creating an initial login session based on the initial OneID, collecting actual user information corresponding to the initial login session, comparing the actual user information with the initial OneID, and generating a login instruction based on the comparison result, or performing secondary verification; The management module is connected to the information comparison module, and is used to receive the login instruction, collect the actual login application and the actual login path in real time, compare them with the initial associated application and its corresponding initial associated path respectively, determine the deviation based on the comparison result, adjust the initial OneID based on the deviation for re-verification, or issue an alarm.

2. The OneID linkage login system according to claim 1, characterized in that: The association matching module comprises: A data extraction unit, used to determine the historical access timestamps of several historically accessed applications in any historical period, and determine the access sequence of several applications based on the historical access timestamps; The association determination unit is connected to the data extraction unit, and is used to draw a historical association map based on several historical access applications and their corresponding access sequences in any historical period, and determine the initial association application and its corresponding initial association path based on several historical association maps.

3. The OneID linkage login system according to claim 2, characterized in that: The association determination unit comprises: An application determination subunit, for counting the historical access frequencies of several historical access applications corresponding to several historical association graphs, comparing the historical access frequencies with preset frequencies, and determining several initial associated applications based on the comparison results; A path determination subunit is connected to the application determination subunit, and is used to analyze the associated path segments between the several initially associated applications, count the number of occurrences of any associated path segment, compare it with a preset number, determine the key path segment based on the comparison result, and determine the initial associated path based on the several key path segments.

4. The OneID linkage login system according to claim 3, characterized in that: The information analysis module includes: An information determination unit, configured to set a union of several historical login information of the user as the historical user information; An information analysis unit, connected to the information determination unit, for performing encryption calculation on each element in the set corresponding to the historical user information according to an encryption algorithm to obtain a number of historical encryption values; An ID generating unit connected to the information analyzing unit is used to combine the historical encryption values ​​to obtain an encrypted string, and encrypt the encrypted string again to obtain the initial OneID; The construction unit is connected to the ID generation unit, and is used to store the initial OneID and the corresponding historical user information in a one-to-one correspondence, and to construct an encrypted storage database based on the storage results.

5. The OneID linkage login system according to claim 4, characterized in that: The information comparison module includes: A session creation unit, configured to create an initial login session based on the initial OneID; an information acquisition unit, connected to the session creation unit, for acquiring the actual user information based on the initial login session; A comparison unit is connected to the information acquisition unit, and is used to encrypt the actual user information based on an encryption algorithm to obtain actual encrypted information, compare the actual encrypted information with the initial OneID, and determine whether the encryption length is abnormal, so as to determine the encryption abnormality and encrypt again according to the length judgment result, or identify the abnormal encryption field, determine the actual proportion of the abnormal encryption field, compare it with the preset proportion, generate a login instruction based on the comparison result, or perform secondary verification.

6. The OneID linkage login system according to claim 5, characterized in that: The comparison unit comprises: A length judgment subunit, used to compare the actual character length corresponding to the actual encrypted information with the initial character length corresponding to the initial OneID, so as to judge the encryption abnormality and encrypt again according to the comparison result, or to identify the abnormal encryption field; An abnormal identification subunit, connected to the length judgment subunit, is used to compare the actual encrypted information with the initial OneID one by one, mark abnormal characters in the initial OneID, judge the proportion of several abnormal characters in the initial OneID, and obtain the actual proportion; an instruction generating subunit, connected to the abnormality identifying subunit, for comparing the actual proportion with the preset proportion, and generating a login instruction when the actual proportion is less than the preset proportion; The verification subunit is connected to the abnormality identification subunit and is used to perform secondary verification when the actual proportion is greater than or equal to the preset proportion.

7. The OneID linkage login system according to claim 6, characterized in that: The verification subunit comprises: The traceability block is used to identify the user's actual login address and compare it with several historical login addresses in several historical login information to obtain the comparison result; The verification block is connected to the traceability block to issue an alarm based on the comparison result, or to re-collect actual user information for verification.

8. The OneID linkage login system according to claim 7, characterized in that: The management module comprises: A data collection unit, used to collect actual login applications and their corresponding actual login timestamps in real time, and determine the actual login path based on a number of actual login timestamps; a deviation determination unit connected to the data acquisition unit, for comparing a number of actually logged-in applications with a number of initially associated applications, and calculating application deviations based on the comparison results, or for comparing an actual logged-in path with an initially associated path, and calculating a path deviation based on the comparison results; The adjustment unit is connected to the deviation determination unit, and is used to determine the deviation deviation based on the application deviation deviation or the path deviation, and adjust the initial OneID to verify again based on the comparison result between the deviation deviation and the preset deviation, or to issue an alarm.

9. The OneID linkage login system according to claim 8, characterized in that: The deviation determination unit comprises: A first calculation subunit is used for calculating the number of login applications that are different from the initial associated applications among the actual login applications as the number of abnormal applications, and calculating the ratio of the number of abnormal applications to the number of initial associated applications as the application deviation; The second calculation subunit is used for calculating the similarity value between the actual login path and the initial association path as the path deviation when the actual login applications are the same as the initial association applications.

10. The OneID linkage login system according to claim 9, characterized in that: The adjustment unit comprises: a deviation determination subunit, configured to use the application deviation deviation or the path deviation as the deviation deviation; The adjustment subunit is connected to the deviation determination subunit, and is used to determine the abnormal application when the deviation is less than the preset deviation, to identify the usage frequency of the abnormal application, and to update the initial associated application based on the usage frequency, or to determine the abnormal path and update the initial associated path.

Images