[go: up one dir, main page]

CN103117986B - The verification method of wireless client, system and authentication server - Google Patents

The verification method of wireless client, system and authentication server Download PDF

Info

Publication number
CN103117986B
CN103117986B CN201110364659.1A CN201110364659A CN103117986B CN 103117986 B CN103117986 B CN 103117986B CN 201110364659 A CN201110364659 A CN 201110364659A CN 103117986 B CN103117986 B CN 103117986B
Authority
CN
China
Prior art keywords
wireless client
authentication server
serial number
identifying code
checking
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN201110364659.1A
Other languages
Chinese (zh)
Other versions
CN103117986A (en
Inventor
唐韬
傅建兵
赵杰
范小平
廖念波
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Tencent Technology Shenzhen Co Ltd
Original Assignee
Tencent Technology Shenzhen Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Tencent Technology Shenzhen Co Ltd filed Critical Tencent Technology Shenzhen Co Ltd
Priority to CN201110364659.1A priority Critical patent/CN103117986B/en
Publication of CN103117986A publication Critical patent/CN103117986A/en
Application granted granted Critical
Publication of CN103117986B publication Critical patent/CN103117986B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Landscapes

  • Mobile Radio Communication Systems (AREA)

Abstract

The invention provides the verification method of wireless client, system and authentication server.The method comprises: A, authentication server is after the checking request receiving wireless client transmission, apply for the serial number of temporary memory space and the described temporary memory space of correspondence for this checking request, the authorization information submitted to by wireless client is stored to described temporary memory space; B, authentication server utilizes described serial number to control wireless client and submits these checking needs to and other authorization informations do not submitted to, and other authorization informations that the described wireless client of continuation checking is submitted to, return the result to wireless client.

Description

The verification method of wireless client, system and authentication server
Technical field
The present invention relates to the network communications technology, particularly the verification method of wireless client, system and authentication server.
Background technology
In order to prevent Brute Force password, being no longer only authentication password to the checking of wireless client account number now, also needing wireless client input validation code and verify this identifying code.Further, for the user that account number security requirement is higher, the cryptoguard measures such as dynamic token can also be selected.
See Fig. 1, Fig. 1 be existing to wireless client account number checking flow chart.As shown in Figure 1, this flow process comprises:
Step 101, wireless client submits to account number and password to access server, selects corresponding authentication server to verify the account number that this wireless client is submitted to and password by access server.
Step 102, authentication server verifies described account number, if find that account number is abnormal, then requires wireless client input validation code.
Step 103, the account number that self inputs by wireless client requests access server, password, identifying code send to authentication server requests verification together.
Step 104, authentication server checks whether account is provided with cryptoguard, if so, then requires that wireless client inputs cryptoguard answer information.
Step 105, the account number that self inputs by wireless client requests access server, password, identifying code and cryptoguard answer send to authentication server to verify together.
Step 106, authentication server, after being proved to be successful, returning and is proved to be successful to wireless client.
So far, the flow process shown in Fig. 1 is completed.
As can be seen from the existing account number checking flow process shown in Fig. 1, in existing account number checking, wireless client submits request at every turn, all need to send on the information band being verified server authentication before together, such as bring account number when step 103 submits identifying code to, password sends together, submit to during cryptoguard answer in step 105 and bring account number, password, and identifying code sends together, the account number that such as step 103 sends, password, or the account number that step 105 sends, password, and identifying code, need repeat to send to authentication server to verify, cause waste bandwidth resource, simultaneously also consumes power.Further, in existing account number proof procedure, the information such as account number, password repeatedly in transmission over networks, by the increased risk that network monitoring arrives.
Summary of the invention
The invention provides the verification method of wireless client, system and authentication server, for saving bandwidth resources, and improving the degree of safety in proof procedure.
Technical scheme provided by the invention comprises:
A verification method for wireless client, method comprises:
A, authentication server is after the checking request receiving wireless client transmission, apply for the serial number of temporary memory space and the described temporary memory space of correspondence for this checking request, the authorization information submitted to by wireless client is stored to described temporary memory space;
B, authentication server utilizes described serial number to control wireless client and submits these checking needs to and other authorization informations do not submitted to, and other authorization informations that the described wireless client of continuation checking is submitted to, return the result to wireless client
A kind of authentication server, comprising:
First verification process unit, for after the checking request receiving wireless client transmission, apply for the serial number of temporary memory space and the described temporary memory space of correspondence for this checking request, the authorization information submitted to by wireless client is stored to described temporary memory space;
Second verification process unit, controls wireless client for utilizing described serial number and submits to this checking to need and other authorization informations do not submitted to, and other authorization informations that the described wireless client of continuation checking is submitted to, return the result to wireless client.
A verification system for wireless client, comprising: authentication server as above and wireless client.
As can be seen from the above technical solutions, in the present invention, centered by authentication server, control wireless client submits to this to verify other authorization informations also needed, and the authorization information of submit be temporarily stored in temporary memory space, like this, avoid authorization information repeat send, save bandwidth resources and also there will not be account number, password frequent transmission and the network security risk that causes, improve the degree of safety in proof procedure.
Accompanying drawing explanation
Fig. 1 is the existing flow chart to the checking of wireless client account number;
The basic flow sheet that Fig. 2 provides for the embodiment of the present invention;
The detail flowchart that Fig. 3 provides for the embodiment of the present invention;
The system construction drawing that Fig. 4 provides for the embodiment of the present invention;
The authentication server structure chart that Fig. 5 provides for the embodiment of the present invention.
Embodiment
In order to make the object, technical solutions and advantages of the present invention clearly, describe the present invention below in conjunction with the drawings and specific embodiments.
Method provided by the invention is applicable to the account number checking of wireless client application, it is centered by authentication server, safeguard the state of each account number checking request, wireless client only needs to submit the authorization information lacked to, the authorization information submitted to is temporarily preserved by authentication server, namely verify other authorization informations also needed, no longer need to repeat to submit the authorization information submitted to, the authorization information submitted to is temporarily preserved by authentication server.
Based on describing above, below method provided by the invention is described:
See the basic flow sheet that Fig. 2, Fig. 2 provide for the embodiment of the present invention.As shown in Figure 2, this flow process can comprise the following steps:
Step 201, authentication server is after the checking request receiving wireless client transmission, apply for the serial number of temporary memory space and the described temporary memory space of correspondence for this checking request, the authorization information submitted to by wireless client is stored to described temporary memory space.
In this step 201, can have various ways during the corresponding relation specific implementation of described temporary memory space and serial number, such as, in temporary memory space, comprise serial number etc., the embodiment of the present invention does not specifically limit.
Step 202, authentication server utilizes described serial number to control wireless client and submits these checking needs to and other authorization informations do not submitted to, and other authorization informations that the described wireless client of continuation checking is submitted to, return the result to wireless client.
So far, the flow process shown in Fig. 2 is completed.
As can be seen from the flow process shown in Fig. 2, authentication server after receiving the checking request that wireless client sends, for this checking request application temporary memory space with to should the serial number of temporary memory space.Afterwards, then when needing wireless client to supplement the authorization information do not submitted to, utilize serial number to control wireless client and submit to this to verify other authorization informations do not submitted to also needed, and continue other authorization informations of the described wireless client submission of checking.Compared to existing account number checking flow process, the present invention does not need wireless client to repeat to submit the authorization information submitted to, but only needs to submit the authorization information lacked to, and account number and password are no longer frequent in transmission over networks, strengthens internet security.
Wherein, realize by following two kinds of modes during step 202 specific implementation:
Mode one, authentication server sends the mark of identifying code, serial number and this authentication server needing input to wireless client; Wireless client submits to described identifying code, serial number and authentication server to identify to access server; The identifying code that wireless client is submitted to by access server and serial number are sent to authentication server corresponding to described authentication server mark; The identifying code that authentication server checking wireless client is submitted to, returns the result of identifying code to wireless client.
Mode two, authentication server sends the mark of identifying code, serial number and this authentication server needing input to wireless client; Wireless client submits to described identifying code, serial number and authentication server to identify to access server, and the identifying code submitted to by wireless client by access server and serial number are sent to authentication server corresponding to described authentication server mark; The identifying code that authentication server checking wireless client is submitted to, deposits to temporary memory space corresponding to the serial number of wireless client submission by the result of identifying code; And check whether described account number is provided with cryptoguard, if so, send serial number, authentication server mark and need the information of cryptoguard answer to wireless client; Wireless client submits to serial number, authentication server mark and cryptoguard answer to access server, and the serial number submitted to by wireless client by access server and cryptoguard answer are sent to authentication server corresponding to described authentication server mark; Authentication server orients corresponding temporary memory space according to the serial number received; judge whether the temporary memory space oriented houses the result of identifying code; if; the result of described identifying code be identifying code be proved to be successful information time; the cryptoguard answer that checking wireless client is submitted to, and the result returning cryptoguard answer is to wireless client.
In mode two, the flow process shown in Fig. 2 is described in detail below:
See the detail flowchart that Fig. 3, Fig. 3 provide for the embodiment of the present invention.As shown in Figure 3, this flow process can comprise the following steps:
Step 301, wireless client is submitted to and is carried account number, the checking of password is asked to access server.
Step 302, access server selects an authentication server according to the load-balancing algorithm of setting, this checking request is sent to the authentication server of this selection.
Step 303, verifies that account number, the password carried is asked in described checking, when the result is abnormal, performs step 304.
One as the embodiment of the present invention is expanded, and in this step 303, if the result is normal, then directly can terminate current process.
Step 304, apply for the serial number of temporary memory space and the described temporary memory space of correspondence for this checking request, the account number submitted to by wireless client, password are stored to described temporary memory space.
In the present invention, serial number can take 4 bytes.Wherein, serial number sends the described time point decision verifying request by the mark such as instant messaging account number etc. of described wireless client with described wireless client, different wireless client identification, even same wireless client identification but to send the time point of described checking request different, corresponding serial number is also different.
Step 305, authentication server returns authentication server mark, serial number and identifying code to wireless client.
In the present invention, authentication server mark can take 2 bytes.
Step 306, wireless client submits to authentication server mark, serial number and identifying code to access server.
Step 307, the serial number that wireless client is submitted to by access server and described identifying code are sent to authentication server corresponding to described authentication server mark.
Step 308, the identifying code that authentication server checking wireless client is submitted to, orients corresponding temporary memory space according to the serial number that wireless client is submitted to, the result of identifying code is stored to the temporary memory space oriented.
The result that this step 308 stores is: the information of the information that identifying code is proved to be successful or identifying code authentication failed.
Step 309, authentication server checks whether described account number is provided with cryptoguard, if so, then sends serial number, authentication server mark and needs the information of cryptoguard answer to wireless client.
Step 310, wireless client submits to serial number, authentication server mark and cryptoguard answer to access server.
Step 311, the serial number that wireless client is submitted to by access server and cryptoguard answer are sent to authentication server corresponding to described authentication server mark.
Step 312; authentication server orients corresponding temporary memory space according to the serial number received; judge whether the temporary memory space oriented houses the result of identifying code; if; the result of described identifying code be identifying code be proved to be successful information time; the cryptoguard answer that checking wireless client is submitted to, and the result returning cryptoguard answer is to wireless client.
One as the embodiment of the present invention is expanded, and in this step 312, if judged result is no, then can returns and perform step 305.
It should be noted that, step 309 to step 312 is the operations performed for the wireless client that account number security requirement is higher, for the wireless client that account number security requirement is not very high, can when step 308 process ends, now, in step 308, the result of identifying code is stored to the temporary memory space oriented can change to: the result of identifying code is returned to wireless client.
Also it should be noted that, is saving resource, also can delete the temporary memory space oriented at the end of checking; Or judge currently whether arrive setting-up time, if so, the temporary memory space oriented described in deletion, otherwise, return and judge the current operation whether arriving setting-up time.
So far, the description of the inventive method is completed.Below system provided by the invention and authentication server are described.
See the system construction drawing that Fig. 4, Fig. 4 provide for the embodiment of the present invention.As shown in Figure 4, this system can comprise authentication server and wireless client.
Wherein, the structure shown in Fig. 5 can be comprised during authentication server specific implementation:
See the authentication server structure chart that Fig. 5, Fig. 5 provide for the embodiment of the present invention.As shown in Figure 5, this authentication server can comprise:
First verification process unit, for after the checking request receiving wireless client transmission, apply for the serial number of temporary memory space and the described temporary memory space of correspondence for this checking request, the authorization information submitted to by wireless client is stored to described temporary memory space;
Second verification process unit, controls wireless client for utilizing described serial number and submits to this checking to need and other authorization informations do not submitted to, and other authorization informations that the described wireless client of continuation checking is submitted to, return the result to wireless client.
Preferably, described first verification process unit verifies that account number, the password carried is asked in described checking further, when the result is exception, performs the described serial number applying for temporary memory space and the described temporary memory space of correspondence for this checking request;
The authorization information that described first verification process unit has been submitted to comprises described account number, password.
As for described second verification process unit, realize by following two kinds of structures during its specific implementation:
Structure one:
Structure based one, this second verification process unit can comprise:
First identifying code sending module, for sending the mark of the identifying code, serial number and this authentication server that need input to wireless client, to make wireless client submit to described identifying code, serial number and authentication server to identify to access server, the identifying code submitted to by wireless client by access server and serial number are sent to authentication server corresponding to described authentication server mark;
First identifying code authentication module, for the identifying code that authentication server checking wireless client is submitted to, returns the result of identifying code to wireless client.
Structure two:
Structure based two, described second verification process unit comprises:
Second identifying code sending module, for sending the mark of the identifying code, serial number and this authentication server that need input to wireless client, to make wireless client submit to described identifying code, serial number and authentication server to identify to access server, the identifying code submitted to by wireless client by access server and serial number are sent to authentication server corresponding to described authentication server mark;
Second identifying code authentication module, for the identifying code that authentication server checking wireless client is submitted to, deposits to temporary memory space corresponding to the serial number of wireless client submission by the result of identifying code;
Cryptoguard sending module, for checking whether described account number is provided with cryptoguard, if, send serial number, authentication server mark and need the information of cryptoguard answer to wireless client, make wireless client submit to serial number, authentication server mark and cryptoguard answer to access server, the serial number submitted to by wireless client by access server and cryptoguard answer are sent to authentication server corresponding to described authentication server mark;
Cryptoguard authentication module; for orienting corresponding temporary memory space according to the serial number received; judge whether the temporary memory space oriented houses the result of identifying code; if; the result of described identifying code be identifying code be proved to be successful information time; the cryptoguard answer that checking wireless client is submitted to, and the result returning cryptoguard answer is to wireless client.
So far, the two kinds of structures completing the second verification process unit describe.
It should be noted that; in the present invention; cryptoguard authentication module is after returning to wireless client by the result of cryptoguard answer; or the first identifying code authentication module is after returning to wireless client by the result of identifying code; the temporary memory space for this checking request application can be deleted further; or judge currently whether arrive setting-up time; if; delete the described temporary memory space for this checking request application; otherwise, return and judge the current operation whether arriving setting-up time.
So far, the description of system provided by the invention and authentication server is completed.
As can be seen from the above technical solutions, in the present invention, centered by authentication server, control wireless client submits to this to verify other authorization informations also needed, and the authorization information of submit be temporarily stored in temporary memory space, like this, avoid authorization information repeat send, save bandwidth resources and also there will not be account number, password frequent transmission and the network security risk that causes, improve the degree of safety in proof procedure.
The foregoing is only preferred embodiment of the present invention, not in order to limit the present invention, within the spirit and principles in the present invention all, any amendment made, equivalent replacement, improvement etc., all should be included within the scope of protection of the invention.

Claims (5)

1. a verification method for wireless client, is characterized in that, the method comprises:
A, authentication server is after the checking request receiving wireless client transmission, verify that account number, the password carried is asked in described checking, when the result is abnormal, apply for the serial number of temporary memory space and the described temporary memory space of correspondence for this checking request, the authorization information submitted to by wireless client is stored to described temporary memory space;
B, authentication server utilizes described serial number to control wireless client and only submits these checking needs to and other authorization informations do not submitted to, and other authorization informations that the described wireless client of continuation checking is submitted to, return the result to wireless client;
Wherein, step B comprises:
Authentication server sends the mark of identifying code, serial number and this authentication server needing input to wireless client;
Wireless client submits to described identifying code, serial number and authentication server to identify to access server, and the identifying code submitted to by wireless client by access server and serial number are sent to authentication server corresponding to described authentication server mark;
The identifying code that authentication server checking wireless client is submitted to, deposits to temporary memory space corresponding to the serial number of wireless client submission by the result of identifying code; And check whether described account number is provided with cryptoguard, if so, send serial number, authentication server mark and need the information of cryptoguard answer to wireless client;
Wireless client submits to serial number, authentication server mark and cryptoguard answer to access server, and the serial number submitted to by wireless client by access server and cryptoguard answer are sent to authentication server corresponding to described authentication server mark;
Authentication server orients corresponding temporary memory space according to the serial number received; judge whether the temporary memory space oriented houses the result of identifying code; if; the result of described identifying code be identifying code be proved to be successful information time; the cryptoguard answer that checking wireless client is submitted to, and the result returning cryptoguard answer is to wireless client.
2. method according to claim 1, is characterized in that, after step B, comprises further:
Delete the temporary memory space for this checking request application;
Or judge currently whether arrive setting-up time, if so, delete the described temporary memory space for this checking request application, otherwise, return and judge the current operation whether arriving setting-up time.
3. method according to claim 1, is characterized in that, described serial number is determined by the mark of described wireless client and the time point of the described checking request of described wireless client transmission.
4. an authentication server, is characterized in that, this authentication server comprises:
First verification process unit, for after the checking request receiving wireless client transmission, the account number, the password that carry are asked in the described checking of further checking, when the result is abnormal, apply for the serial number of temporary memory space and the described temporary memory space of correspondence for this checking request, the authorization information submitted to by wireless client is stored to described temporary memory space;
Second verification process unit, controls wireless client for utilizing described serial number and submits to this checking to need and other authorization informations do not submitted to, and other authorization informations that the described wireless client of continuation checking is submitted to, return the result to wireless client;
Wherein, described second verification process unit comprises:
Second identifying code sending module, for sending the mark of the identifying code, serial number and this authentication server that need input to wireless client, to make wireless client submit to described identifying code, serial number and authentication server to identify to access server, the identifying code submitted to by wireless client by access server and serial number are sent to authentication server corresponding to described authentication server mark;
Second identifying code authentication module, for the identifying code that authentication server checking wireless client is submitted to, deposits to temporary memory space corresponding to the serial number of wireless client submission by the result of identifying code;
Cryptoguard sending module, for checking whether described account number is provided with cryptoguard, if, send serial number, authentication server mark and need the information of cryptoguard answer to wireless client, make wireless client submit to serial number, authentication server mark and cryptoguard answer to access server, the serial number submitted to by wireless client by access server and cryptoguard answer are sent to authentication server corresponding to described authentication server mark;
Cryptoguard authentication module; for orienting corresponding temporary memory space according to the serial number received; judge whether the temporary memory space oriented houses the result of identifying code; if; the result of described identifying code be identifying code be proved to be successful information time; the cryptoguard answer that checking wireless client is submitted to, and the result returning cryptoguard answer is to wireless client.
5. a verification system for wireless client, is characterized in that, this system comprises: authentication server as claimed in claim 4 and wireless client.
CN201110364659.1A 2011-11-17 2011-11-17 The verification method of wireless client, system and authentication server Active CN103117986B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201110364659.1A CN103117986B (en) 2011-11-17 2011-11-17 The verification method of wireless client, system and authentication server

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201110364659.1A CN103117986B (en) 2011-11-17 2011-11-17 The verification method of wireless client, system and authentication server

Publications (2)

Publication Number Publication Date
CN103117986A CN103117986A (en) 2013-05-22
CN103117986B true CN103117986B (en) 2016-01-13

Family

ID=48416261

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201110364659.1A Active CN103117986B (en) 2011-11-17 2011-11-17 The verification method of wireless client, system and authentication server

Country Status (1)

Country Link
CN (1) CN103117986B (en)

Families Citing this family (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN110457876A (en) * 2019-08-15 2019-11-15 中国银行股份有限公司 Identity identifying method, apparatus and system

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101075985A (en) * 2007-02-08 2007-11-21 腾讯科技(深圳)有限公司 Instant telecommunication system, server and instant telecommunication method when safety access
CN101257489A (en) * 2008-03-20 2008-09-03 陈珂 Method for protecting account number safety
CN101262485A (en) * 2008-04-10 2008-09-10 华为技术有限公司 Authentication method and system, server and client
CN102104610A (en) * 2011-03-25 2011-06-22 深圳Tcl新技术有限公司 Authentication method and authentication system
CN102231716A (en) * 2011-06-30 2011-11-02 重庆新媒农信科技有限公司 Instant communication service login method

Family Cites Families (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
KR100581590B1 (en) * 2003-06-27 2006-05-22 주식회사 케이티 Dual element authentication key exchange method, authentication method using the same, and a recording medium storing a program including the method

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101075985A (en) * 2007-02-08 2007-11-21 腾讯科技(深圳)有限公司 Instant telecommunication system, server and instant telecommunication method when safety access
CN101257489A (en) * 2008-03-20 2008-09-03 陈珂 Method for protecting account number safety
CN101262485A (en) * 2008-04-10 2008-09-10 华为技术有限公司 Authentication method and system, server and client
CN102104610A (en) * 2011-03-25 2011-06-22 深圳Tcl新技术有限公司 Authentication method and authentication system
CN102231716A (en) * 2011-06-30 2011-11-02 重庆新媒农信科技有限公司 Instant communication service login method

Also Published As

Publication number Publication date
CN103117986A (en) 2013-05-22

Similar Documents

Publication Publication Date Title
CN103152331B (en) The method, system and the cloud server that log in/register is carried out by mobile terminal
CN103517273B (en) Authentication method, managing platform and Internet-of-Things equipment
CN103139777B (en) The method, system and the cloud server that log in/register is carried out by mobile terminal
CN103051453B (en) A kind of mobile terminal network affaris safety trade system based on digital certificate and method
CN110958111B (en) Block chain-based identity authentication mechanism of electric power mobile terminal
US9459604B2 (en) Methods and system for joining a smart energy device to a zigbee network
CN108833122A (en) Awakening method, device and the storage medium of vehicle-carrying communication controller
EP2207301A1 (en) An authentication method for request message and the apparatus thereof
CN102868702B (en) System login device and system login method
CN111949288A (en) Intelligent element remote upgrading method and system based on vehicle-mounted Ethernet
CN204376941U (en) Outer net middleware, inner net middleware and middleware system
CN103746969A (en) Vehicle terminal authentication method and authentication server
CN113285807A (en) Method and system for network access authentication of intelligent equipment
CN104821940A (en) Method and equipment for sending portal redirected address
CN112423277B (en) Security certificate recovery in bluetooth mesh networks
CN102143131B (en) User logout method and authentication server
CN103905194A (en) Identity traceability authentication method and system
CN109495458A (en) A kind of method, system and the associated component of data transmission
CN107682363A (en) The smart home product safety means of communication, system and computer-readable recording medium
CN109729000B (en) Instant messaging method and device
CN111404918A (en) Cloud mobile phone distributed service emergency authentication method, device and system
CN102970308A (en) User authentication method and server
CN102148725A (en) Service state detecting method and system for AAA server
CN109428893A (en) A kind of identity identifying method, apparatus and system
CN102448063B (en) The determination method and apparatus of authentification failure reason

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C14 Grant of patent or utility model
GR01 Patent grant