One-Touch Login IP Binding for Secure Number Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing one-touch login services suffer from security vulnerabilities, leading to easy disclosure of user data due to inadequate authentication mechanisms.
Innovation Solution
Implementing a method that verifies the IP address consistency between the application client device and the application server by using symmetric keys for encryption and decryption of verification requests and tokens, ensuring that only authorized devices can access the application service.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If one-touch login is implemented without IP address verification, then login speed and user convenience are improved, but security and prevention of unauthorized access deteriorate
Solution Approach 1:
The system performs preliminary IP address binding during the login process. The operator server obtains the user's IP address before providing the token, and binds this IP address to the token. This preliminary action ensures that the IP address is recorded and verified before the actual service access occurs, enabling security verification without adding significant time to the login process.
Solution Approach 2:
The patent introduces IP address verification as an intermediary mechanism between the user and the service. The operator server acts as a mediator that verifies whether the current IP address matches the bound IP address before allowing service access. This intermediary verification layer enhances security while maintaining the one-touch login convenience for legitimate users.
2Reliability
If IP address verification is added to one-touch login, then security and prevention of data leakage are improved, but system complexity and authentication steps increase
Solution Approach 1:
The patent merges the IP address verification process with the existing one-touch login flow. The operator server combines the token issuance and IP address binding into a single operation. The verification request from the application server to the operator server simultaneously carries both the token and IP address information, allowing the system to verify security without adding separate authentication steps or significantly increasing system complexity.
3Ease of operation
If token is transmitted without IP address binding, then ease of operation is improved, but loss of information and unauthorized access increase
Solution Approach 1:
The patent embeds the IP address information within the token structure. The operator server obtains and binds the IP address to the token, creating a nested structure where the IP address is contained within the authentication credentials. This nesting ensures that the IP address verification is integrated into the token itself, protecting user data without requiring separate verification steps that would complicate the operation.
Data Source
Figure 1~2
Figure 3
Figure 4~5
AI summary
Embodiments of this specification provide methods and apparatuses for implementing a one-touch login service. In the method, information about a first IP address is obtained from a verification request sent by an application client device, a token is sent to the application client device, information about a second IP address is obtained from a number acquisition request sent by an application server, whether the first IP address is the same as the second IP address is determined, and if the first IP address is the same as the second IP address, a mobile phone number of a terminal device in which the application client device is located is obtained based on a token carried in the number acquisition request, and the mobile phone number is sent to the application server, or if the first IP address is different from the second IP address, the mobile phone number of the terminal device is refused to be sent to the application server. In the embodiments of this specification, the security of a one-touch login service can be improved, and leakage of private data of a user can be prevented.