15 results about "OpenID" patented technology

The present technology can allow a user to use the OpenID Connect protocol to login to an account that has an anonymous user account ID. More specifically, the present technology can programmatically combine information received from an OpenID provider during the OpenID Connect protocol with a random value to yield a unique anonymous user account ID. The present technology also makes use of the ability within the OpenID Connect protocol to embed a chosen nonce into the token signed by the OpenID provider. This allows for embedding hashes of cryptographic keys, like signature verification keys, into ID tokens received from the OpenID provider that authenticates the user. Subsequently, the user can sign messages that can be verified using the verification key bound to the ID token from the OpenID provider.

The invention relates to a non-member customer loss prevention method and system based on payment opening and face recognition, and the method comprises the steps: obtaining the payment opening, a face image and dynamic behavior data of a non-member customer in real time, and enabling the dynamic behavior data to comprise a shopping path, standing time and moving speed; performing preliminary analysis on the dynamic behavior data by using an embedded edge computing device, identifying abnormal customer behaviors, and generating a preliminary risk assessment result; based on the preliminary risk assessment result, the payment openid, the face image and the dynamic behavior data are sent to a data center for secondary verification, and a verification result is generated; and if the verification result shows that the customer is matched with the blacklist or has an abnormal behavior, triggering an alarm and refusing the transaction, recording transaction information, customer characteristics and identification time, and generating and storing a transaction report. The method has the effect of improving the accuracy of the loss prevention system.

Disclosed in the present application are a ticket checking method and system, and a related apparatus. The method is applied to a first electronic device, on which a first account has been logged in to. The method comprises: after entering a radio-frequency field of a gate, receiving a first item identifier sent by the gate; on the basis of the first item identifier, determining a first opening identifier (OpenID), wherein the first OpenID is generated on the basis of the first item identifier and the first account, and the first OpenID is used for the gate to verify whether the first account logged in to on the first electronic device has a permission to open the gate; and sending a first response to the gate, wherein the first response comprises the first OpenID. In this way, the first electronic device can complete ticket checking by means of touching the gate, thereby simplifying steps of ticket checking, improving the efficiency of ticket checking, and bringing a better experience for users.

Embodiments of this application provide an account binding method, a device, and a system, and relate to the field of electronic technologies. A HiBoard can replace a third-party quick application to obtain an OpenID corresponding to a user account of the HiBoard, to bind a user account of a third-party application to the user account of the HiBcard by using the OpenID, thereby reducing development workload of the third-party application, simplifying a procedure for binding the accounts of the third-party application and the HiBoard, and improving efficiency and flexibility of account binding. A specific solution is as follows: An electronic device logs in to a user account of a first application. After detecting a first preset operation of a user, the electronic device obtains, by using the first application, an OpenID corresponding to the user account of the first application, where the first preset operation is used to indicate to associate a second application with the first application. The electronic device sends the OpenlD of identity information of the second application to a server of the first application, and obtains account binding success information from the server of the first application. The embodiments of this application are used for account binding.

A system (100) or method (200, 300) for self-issued OpenID provider (SIOP) authorization to a relying party application (204) can include a mobile device (206) having validation attributes, one or more processors and memory operatively coupled to the one or more processors, where the memory includes computer instructions which when executed by the one or more processors causes the one or more processors to perform certain operations. The operations can include fetching (302) an SIOP request with the validation attributes, validating (304) the validation attributes, requesting (306) user claims from a holder, receiving (308) user claims from the holder, and allowing (314) access to the relying party application upon validating a predetermined number of validation attributes according to a policy (108).

Embodiments of this application provide an account binding method, a device, and a system, and relate to the field of electronic technologies. A HiBoard can replace a third-party quick application to obtain an OpenID corresponding to a user account of the HiBoard, to bind a user account of a third-party application to the user account of the HiBcard by using the OpenID, thereby reducing development workload of the third-party application, simplifying a procedure for binding the accounts of the third-party application and the HiBoard, and improving efficiency and flexibility of account binding. A specific solution is as follows: An electronic device logs in to a user account of a first application. After detecting a first preset operation of a user, the electronic device obtains, by using the first application, an OpenID corresponding to the user account of the first application, where the first preset operation is used to indicate to associate a second application with the first application. The electronic device sends the OpenlD of identity information of the second application to a server of the first application, and obtains account binding success information from the server of the first application. The embodiments of this application are used for account binding.

The invention relates to the technical field of identity verification. The method comprises the steps of obtaining payment information submitted by a customer through payment terminal equipment, generating customer identity state information, obtaining a member verification result according to the customer identity state information, and if the customer is a non-member, sending the member verification result to a server; if the openid verification result shows that matching fails, secondary matching verification is carried out in the preset blacklist database through the payment openid again to obtain a second openid verification result, and if the second openid verification result shows that matching fails, the face image of the customer is obtained to obtain a face verification result. If the face verification result is matched successfully, reminding information is generated, and if the face verification result is matched unsuccessfully, transaction continuing information is generated. The method has the effects of realizing omnibearing verification of the identity of the customer and avoiding loopholes of a single verification mode.

A system and method for self-issued OpenID provider (SIOP) authorization to a relying party application can include a mobile device having validation attributes, one or more processors and memory operatively coupled to the one or more processors, where the memory includes computer instructions which when executed by the one or more processors causes the one or more processors to perform certain operations. The operations can include fetching an SIOP request with the validation attributes, validating the validation attributes, requesting user claims from a holder, receiving user claims from the holder, and allowing access to the relying party application upon validating a predetermined number of validation attributes according to a policy.

Embodiments of the present specification provide a third-party applet service providing method and device. In the method, a second-party server obtains a public key sent by a first-party client; obtains an OpenID (OpenID) and generates a SessionID (SessionID); establishes a correspondence between the public key, the OpenID and the SessionID; according to the correspondence established in advance, finds the public key corresponding to the SessionID carried in a business data request; uses the found public key to verify a signature of a business parameter signed by a private key; after verification, sends a business resource request to a third-party server, sends response data returned by the third-party server to the first-party client, and sends the response data to a third-party client by the first-party client. Embodiments of the present specification can improve the security of the third-party applet service.

The embodiments of this specification provide a service provision method and device for a third-party mini-program. In this method, the second-party server generates and saves an application key (AppKey), and sends the AppKey to the first-party client; obtains an open authentication system identifier (OpenID) and generates a session identifier (SessionID); establishes a correspondence between the AppKey, OpenID, and SessionID; receives a business data request from the first-party client; determines whether the SessionID and AppKey carried in the business data request conform to the established correspondence; if so, sends a business resource request carrying the business parameters and the OpenID corresponding to the SessionID carried in the business data request to the third-party server; and sends the response data to the first-party client. The embodiments of this specification can improve the service security of third-party mini-programs.

The invention relates to the technical field of account management, discloses an account association control method and device, equipment and a storage medium, and aims to solve the problems of relatively tedious operation and poor user experience in association control of a traditional official account and a service cloud. The account association control method comprises the following steps: when a target attention event of a target official account is monitored, caching a first open and a first unionid to a memory of a service cloud, and generating a target attention event response message; when skipping to the target applet, matching in a memory of the service cloud by using a second unionid in the user verification parameter; if a consistent unionid is matched, updating the association relationship data cached in the memory according to a second open id in the user verification parameters, at least one service cloud id corresponding to the second open id, the unionid of each WeChat user and the first open id; and in response to the target interaction instruction, performing association control on the target official account, the target applet and the service cloud according to the association relationship data.

The application discloses a WeChat ecological multi-channel OpenID unified identity mapping and event driving system and method, which is applied to intelligent park and factory security management scenes. The scheme solves the WeChat OAuth callback limitation problem under the front-end and back-end separation architecture by deploying the intermediate page service in the record callback domain name, and stably obtains the multi-channel OpenID and the globally unique wechat_unionid. Taking the wechat_unionid as the core, the multi-channel identity identifier is normalized and associated to the unique business user ID through the non-overlay field update rule. Based on the business user ID, the memory cache and the message queue are combined to realize the low-delay accurate push of the security event. The scheme has completed the full code development and production verification, solves the problems of unstable multi-channel identity collection, identity fracture, field coverage and alarm push delay, and can be widely applied to various intelligent security systems.

The invention provides an APP login state construction method and system, electronic equipment and a storage medium, and aims to solve the problem that enough APP accounts cannot be found for respective login, and the method comprises the following steps: determining a target application, a key method and a redirection link which need to generate a login state; mounting and monitoring the key method; generating each random code value and an openid value corresponding to the code value, and storing the code values and the openid values into redis; an http request of a key method is initiated, a request address is a redirection link, and a generated code value is used for replacing a placeholder in the request before the request; monitoring logic is executed, a code of the key method is read, and a value corresponding to the code is inquired in redis; and if the code can be queried, replacing the value of the openid in the template character string of the APP with the value corresponding to the code, and returning the value to the calling party as return content. According to the invention, the login states of a large number of different APP account users can be simulated.

The present invention relates to the field of electronic information technology, and specifically, to an electronic social security card scanning code login application method and system. It includes the steps of applying for authorization, obtaining authorization information, pulling up a scanning login page, gateway verification, displaying a QR code, scanning a QR code, user authorization, generating a one-time user openid, scanning feedback, requesting authorization, and information encryption. The present invention designs an electronic social security card user system based on real name, real person, and real card, and integrates technical means such as QR code, encrypted transmission, and access authorization to enable users to quickly and safely log in to a partner service platform, while improving the information security in the scanning code login application process, providing users with a more convenient service experience, and protecting the scanning login of the electronic social security card from infringement and occupation by a third party.

The invention discloses a ticket checking method, system and related device, the method is applied to a first electronic device, and the first electronic device logs in a first account; the method comprises the following steps: after entering a radio frequency field of a gate, receiving a first item identifier sent by the gate; a first gate opening identifier OpenID is determined based on the first item identifier, the first OpenID is generated by the first item identifier and a first account number, and the first OpenID is used for the gate machine to verify whether the first account number logged in the first electronic equipment has the right to open the gate; and sending a first response to the gate, wherein the first response comprises the first OpenID. Thus, the first electronic device can complete ticket checking by touching the gate, ticket checking steps are simplified, ticket checking efficiency is improved, and better experience is brought to users.