CN103916372A - Third-party login information hosting method and system - Google Patents

Abstract

The invention discloses a third-party login information trusteeship method and system. The method comprises the following steps: A. registering at the hosting server, wherein, the hosting client generates a user name and password for the hosting server, B. using the user name and password to log in the hosting server at the hosting client, wherein, after the login is successful, The hosting server returns the third-party URL ciphertext to the hosting client. C. Use the third-party login information to log in to the third-party URL, where the third-party login information ciphertext and the third-party login information are obtained from the hosting server through the third-party URL ciphertext The decryption algorithm, and the decryption algorithm using the third-party login information to decrypt the ciphertext of the third-party login information to obtain the third-party login information, so as to log in to the third-party URL.

Description

A third-party login information hosting method and system

technical field

The invention relates to Internet user login technology, and in particular to a third-party login information trusteeship method and system.

Background technique

With the development of the Internet, the number of independent websites is increasing, and users need to perform login verification when using different websites (for example, e-commerce) to provide personalized services. The storage and use of many login information brings great inconvenience to the user, and the verification affects the user experience. To this end, different websites have adopted different solutions, such as using third-party authentication to log in or using OpenID to log in. But there are certain risks and deficiencies in these two schemes.

For third-party authentication login, such as the joint login represented by JD.com, users can use the login platform they are most familiar with to verify user login information and save user personalized information, so as to provide users with personalized services.

But this method has the following disadvantages:

1. It is easy to be subject to the third-party login system of the joint login provider used. There is no independent account password, which is not conducive to secondary expansion.

2. Malicious websites can carry out illegal activities by forging third-party login entries of joint login providers.

3. It is easily affected by the robustness of the third-party system. For example, when there is a problem with the third-party login system of the joint login provider, it will affect the normal login of the user.

For OpenID login, in this scheme, users will be forced to be assigned a unique ID, which is used as a unique identifier on the Internet to carry out network activities, and unified OpenID authentication is used.

But this method has the following disadvantages:

1. It is not suitable for vertical industry applications with real-name registration, which will cause information leakage.

2. Anyone can set up a website to provide OpenID verification service, but the performance of the website is uneven, which makes the verification process of OpenID unstable.

3. If the website that provides the OpenID verification service is suddenly closed, a large number of users may not be able to use the services of multiple websites.

Therefore, a brand-new safe third-party login information hosting method and system is needed to solve the risks and deficiencies of the above two solutions.

Contents of the invention

According to an object of the present invention, a third-party login information hosting method is disclosed, comprising the following steps:

A. Register with the hosting server,

where the username and password for the hosting server are generated by the hosting client,

B. Use the username and password to log in to the hosting server on the hosting client,

Among them, after the login is successful, the hosting server returns the third-party URL ciphertext to the hosting client,

C. Use the third-party login information to log in to the third-party URL,

Wherein, the third-party login information ciphertext and the decryption algorithm of the third-party login information are obtained from the hosting server through the third-party URL ciphertext, and

Use the decryption algorithm of the third-party login information to decrypt the ciphertext of the third-party login information to obtain the third-party login information, so as to log in to the third-party URL.

According to another technical scheme of the present invention:

In step A:

Use the hosting client to convert the username and password for the hosting server, so that the hosting server only saves the converted username and password for logging in to the hosting server,

In step B:

The user name and password are generated using the managed client to log into the managed server by generating a converted user name and password.

According to another technical scheme of the present invention:

In step A, do an MD5 digest of the username and password used for hosting the server.

According to another technical scheme of the present invention:

In step B:

Further, the hosting server returns the third-party URL decryption algorithm to the hosting client,

The hosting client uses the third-party URL decryption algorithm to decrypt the ciphertext of the third-party URL to generate a third-party URL.

According to another technical scheme of the present invention:

The generated third-party URLs are displayed on the hosting client in the form of a list.

According to another technical scheme of the present invention:

The method further includes step D, which is used to generate third-party URL ciphertext and third-party login information ciphertext stored in the hosting server, wherein the third-party login information is a user name and password for logging into the third-party URL, wherein,

Step D includes:

The hosting server returns the third-party URL encryption algorithm to the hosting client,

Enter the third-party URL and third-party login information to be hosted on the hosting client,

Use the third-party URL encryption algorithm to encrypt the third-party URL, and send the third-party URL ciphertext to the hosting server,

The hosting server returns the first encryption algorithm used for third-party login information to the hosting client according to the third-party URL ciphertext,

The third-party login information is encrypted with the first encryption algorithm used for the third-party login information on the hosting client, and the ciphertext of the third-party login information is sent to the hosting server.

According to another technical scheme of the present invention:

Username and/or password for hosting server as symmetric key for encryption and decryption algorithms.

According to another technical scheme of the present invention:

In step C,

further obtain a second encryption algorithm for third-party login information from the hosting server, and

Encrypt the third-party login information with the second encryption algorithm used for the third-party login information on the hosting client, and send the ciphertext of the third-party login information to the hosting server.

According to another object of the present invention, a third-party login information escrow system is disclosed, including a escrow client and a escrow server, wherein,

hosting server for registration,

where the hosting client generates a username and password for the hosting server,

The managed client logs into the managed server with a username and password,

Among them, after the login is successful, the hosting server returns the third-party URL ciphertext to the hosting client,

The hosted client logs into the third-party URL with the third-party login information,

Among them, the hosting client obtains the ciphertext of the third-party login information and the decryption algorithm of the third-party login information from the hosting server through the ciphertext of the third-party URL, and uses the decryption algorithm of the third-party login information to decrypt the ciphertext of the third-party login information to obtain the third-party login information. information, thereby logging into the third-party URL.

According to another technical scheme of the present invention:

The hosting client is further configured to transform the username and password for the hosting server such that the hosting server only saves the transformed username and password for logging into the hosting server,

The hosting client is further configured to use the username and password to generate a transformed username and password to log into the hosting server.

According to another technical scheme of the present invention:

The hosting client is further configured to MD5 digest the username and password for the hosting server.

According to another technical scheme of the present invention:

The hosting server is configured to also return a third-party URL decryption algorithm to the hosting client,

The hosted client is configured to decrypt the third-party URL ciphertext using a third-party URL decryption algorithm to generate a third-party URL.

According to another technical scheme of the present invention:

The generated third-party URLs are displayed on the hosting client in the form of a list.

According to another technical scheme of the present invention:

The managed server and the managed client are further configured to generate a third-party URL ciphertext and a third-party login information ciphertext stored in the managed server in the following manner, wherein the third-party login information is a username and password for logging into the third-party URL ,in,

This method includes:

The hosting server returns the third-party URL encryption algorithm to the hosting client,

Enter the third-party URL and third-party login information to be hosted on the hosting client,

Use the third-party URL encryption algorithm to encrypt the third-party URL, and send the third-party URL ciphertext to the hosting server,

The hosting server returns the first encryption algorithm used for third-party login information to the hosting client according to the third-party URL ciphertext,

The third-party login information is encrypted with the first encryption algorithm used for the third-party login information on the hosting client, and the ciphertext of the third-party login information is sent to the hosting server.

According to another technical scheme of the present invention:

Username and/or password for hosting server as symmetric key for encryption and decryption algorithms.

According to another technical scheme of the present invention:

the hosted client is configured to further obtain a second encryption algorithm for third-party login information from the hosted server, and

The escrow client is configured to encrypt the third-party login information using a second encryption algorithm for the third-party login information, and send the ciphertext of the third-party login information to the escrow server.

One advantage of the present invention is that no third-party login system of any federated login provider is introduced, so various disadvantages of federated logins can be avoided.

An advantage of the present invention is that the concept of an OpenID is introduced, but it is not used as a public ID, thereby avoiding various shortcomings in the existing openID scheme.

An advantage of the present invention is that users use different usernames and passwords on different websites, but they only need to remember the username and password of the hosting server, thus providing users with a top-secret password safe.

An advantage of the present invention is that the trusteeship information is safe. The trusteeship party only knows the md5 value of the user registration information, but cannot know the user's registration name and password. The user name and password of the target network saved by the user are encrypted by symmetric encryption. Provide encryption and decryption algorithms without saving passwords. Even if the hosting website is attacked, no plaintext leakage of user information can be achieved.

An advantage of the present invention is that the encryption method is safe, and a dynamic encryption strategy is set for the user's encrypted information, which increases the difficulty of guessing the ciphertext.

An advantage of the present invention is that the transmission is safe. In this solution, no matter whether http or https transmission is adopted, the transmission on the Internet is all ciphertext, and no plaintext information will appear. Therefore, avoid the risk of user login information being cracked during transmission.

Description of drawings

Those skilled in the art will understand various aspects of the present invention more clearly after reading the detailed description of the present invention with reference to the accompanying drawings. It should be understood by those skilled in the art that these drawings are only used to describe the technical solution of the present invention in conjunction with the specific implementation, and are not intended to limit the protection scope of the present invention. in,

Fig. 1 is a schematic diagram of steps of a third-party login information hosting method according to an embodiment of the present invention.

Fig. 2 is a schematic diagram of an example of a user registration process according to an embodiment of the present invention.

FIG. 3 is a schematic diagram of an example of a user login process according to an embodiment of the present invention.

Fig. 4 is a schematic diagram of an example of a user using login information according to an embodiment of the present invention.

Detailed ways

The specific implementation manners of the present invention will be described in further detail below with reference to the accompanying drawings. In the following description, for purposes of explanation, numerous specific details are set forth in order to provide a thorough understanding of one or more aspects of the embodiments. It may be apparent, however, to one skilled in the art that one or more aspects of the various embodiments may be practiced with a lesser degree of these specific details. Although a particular feature or aspect of an embodiment may be disclosed with respect to only one of several implementations, such feature or aspect may be disclosed in conjunction with other implementations as may be desired and advantageous for any given or particular application. One or more other features or aspects in combination.

Fig. 1 is a schematic diagram of steps of a third-party login information hosting method according to an embodiment of the present invention. As shown in the figure, a third-party login information hosting method includes the following three steps:

A. Register with the hosting server.

where the username and password for the hosting server are generated by the hosting client,

B. Log in to the hosting server with the username and password on the hosting client.

Among them, after the login is successful, the hosting server returns the third-party URL ciphertext to the hosting client,

C. Use the third-party login information to log in to the third-party URL.

Wherein, the third-party login information ciphertext and the decryption algorithm of the third-party login information are obtained from the hosting server through the third-party URL ciphertext, and

Use the decryption algorithm of the third-party login information to decrypt the ciphertext of the third-party login information to obtain the third-party login information, so as to log in to the third-party URL.

In a preferred embodiment:

In step A:

The user name and password used for the hosting server are converted by using the hosting client, so that the hosting server only saves the converted user name and password for logging in to the hosting server.

In step B:

The user name and password are generated using the managed client to log into the managed server by generating a converted user name and password.

In a preferred embodiment, in step A, the username and password for the hosting server are MD5 digested.

Referring now to FIG. 2 , FIG. 2 is a schematic diagram of an example of a user registration process according to an embodiment of the present invention. After the user fills in the user name and password on the managed client, the MD5 digest of the user name and user password entered by the user (you can also choose other algorithms, such as sha1, etc.), and then submit the generated user name MD5 value and password MD5 value to as Login to the hosting server of the center. Then, the hosting server searches for the MD5 value of the username and password. If there is a duplicate username MD5 value in the hosting server, it will prompt the user to register failed in the returned registration information, otherwise prompt the user to register successfully.

In a preferred embodiment:

In step B:

Further, the hosting server returns the third-party URL decryption algorithm to the hosting client,

The hosting client uses the third-party URL decryption algorithm to decrypt the ciphertext of the third-party URL to generate a third-party URL.

The generated third-party URLs can be displayed in the hosting client in the form of a list.

Referring now to FIG. 3 , FIG. 3 is a schematic diagram of an example of a user login process according to an embodiment of the present invention.

As shown in the figure, the user sends the MD5 value of the user name and the MD5 value of the password to the login center. If there is a matching MD5 value of the username and MD5 value of the password on the managed server, the login is successful. For example, the login center can detect whether there is an MD5 value of the user name, and if not, return a login failure prompt; if there is an MD5 value of the user name, the login center can detect whether there is an MD5 value of the password, if the MD5 value of the password and the MD5 value of the user name do not match If it matches, a login failure prompt will be returned.

After the user logs in successfully, the login center returns the ciphertext of the third-party URL. The login center returns the url decryption algorithm to the user, and the user uses a symmetric key to decrypt the third-party url. Optionally, the user's third-party URL list can be displayed. The username and/or password used for hosting the server here serves as the symmetric key for the encryption and decryption algorithm.

In a preferred embodiment:

The method further includes a step D of generating a third-party URL ciphertext and a third-party login information ciphertext stored in the hosting server, wherein the third-party login information is a user name and password for logging into the third-party URL. In other words, add or modify third-party login information to be hosted in the hosting server during this step.

Step D includes:

The hosting server returns the third-party URL encryption algorithm to the hosting client,

Enter the third-party URL and third-party login information to be hosted on the hosting client,

Use the third-party URL encryption algorithm to encrypt the third-party URL, and send the third-party URL ciphertext to the hosting server,

The hosting server returns the first encryption algorithm used for third-party login information to the hosting client according to the third-party URL ciphertext,

The third-party login information is encrypted with the first encryption algorithm used for the third-party login information on the hosting client, and the ciphertext of the third-party login information is sent to the hosting server.

The above step D can occur when the user logs in for the first time, or any login after the first login.

In a preferred embodiment:

In step C,

further obtain a second encryption algorithm for third-party login information from the hosting server, and

Encrypt the third-party login information with the second encryption algorithm used for the third-party login information on the hosting client, and send the ciphertext of the third-party login information to the hosting server.

Fig. 4 is a schematic diagram of an example of a user using login information according to an embodiment of the present invention.

As shown in Figure 4, the user selects a third-party url to log in on the hosting client. Use the selected third-party URL ciphertext to request the login information of the third-party URL from the login center. The login center searches the ciphertext of the third-party url saved by the user, and returns an error message if it is not found, or returns the ciphertext of the third-party login information. Then return the last decryption algorithm of the third-party login information; return the current encryption algorithm of the third-party login information. The user uses the last decryption algorithm to decrypt the third-party login information on the managed client. Then, the user encrypts the third-party login information using this encryption algorithm on the managed client. The user uploads the new third-party login information ciphertext and encryption algorithm to the hosting server for update operation. The login center returns the update status, and the client logs in to the third-party website according to the obtained third-party login information.

In this example, since the encryption algorithm returned each time may be different, dynamic encryption is implemented, thereby further ensuring the security of the user's third-party login information.

Further, the present invention restricts to describe a third-party login information escrow system, including a escrow client and a escrow server. The third-party login information trusteeship method of the present invention can be realized by configuring a trusteeship client and a trusteeship server. The managed client and managed server are configured as follows:

hosting server for registration,

where the hosting client generates a username and password for the hosting server,

The managed client logs into the managed server with a username and password,

Among them, after the login is successful, the hosting server returns the third-party URL ciphertext to the hosting client,

The hosted client logs into the third-party URL with the third-party login information,

Among them, the hosting client obtains the ciphertext of the third-party login information and the decryption algorithm of the third-party login information from the hosting server through the ciphertext of the third-party URL, and uses the decryption algorithm of the third-party login information to decrypt the ciphertext of the third-party login information to obtain the third-party login information. information, thereby logging into the third-party URL.

Preferably, the hosting client is further configured to convert the username and password for the hosting server so that the hosting server only saves the converted username and password for logging into the hosting server,

The hosting client is further configured to use the username and password to generate a transformed username and password to log into the hosting server.

Preferably, the hosting client is further configured to MD5 digest the username and password for the hosting server.

Preferably, the hosting server is configured to also return a third-party URL decryption algorithm to the hosting client,

The hosted client is configured to decrypt the third-party URL ciphertext using a third-party URL decryption algorithm to generate a third-party URL.

Preferably, the generated third-party URLs are displayed on the hosting client in the form of a list.

Preferably, the hosting server and the hosting client are further configured to generate third-party URL ciphertext and third-party login information ciphertext stored in the hosting server in the following manner, wherein the third-party login information is used to log in to the third-party URL username and password, where,

This method includes:

The hosting server returns the third-party URL encryption algorithm to the hosting client,

Enter the third-party URL and third-party login information to be hosted on the hosting client,

Use the third-party URL encryption algorithm to encrypt the third-party URL, and send the third-party URL ciphertext to the hosting server,

The hosting server returns the first encryption algorithm used for third-party login information to the hosting client according to the third-party URL ciphertext,

The third-party login information is encrypted with the first encryption algorithm used for the third-party login information on the hosting client, and the ciphertext of the third-party login information is sent to the hosting server.

Preferably, the username and/or password for the hosting server are used as a symmetric key for the encryption and decryption algorithm.

Preferably, the hosting client is configured to further obtain a second encryption algorithm for third-party login information from the hosting server, and

The escrow client is configured to encrypt the third-party login information using a second encryption algorithm for the third-party login information, and send the ciphertext of the third-party login information to the escrow server.

Through the description of the above embodiments, those skilled in the art can understand that various modifications and substitutions can be made to the specific embodiments of the present invention without departing from the spirit and scope of the present invention. These changes and substitutions all fall within the scope defined by the claims of the present invention.

Claims (16)

1. A third-party login information hosting method, characterized in that, comprising the following steps: A. Register with the hosting server, where the username and password for the hosting server are generated by the hosting client, B. Use the username and password to log in to the hosting server on the hosting client, Among them, after the login is successful, the hosting server returns the third-party URL ciphertext to the hosting client, C. Use the third-party login information to log in to the third-party URL, Wherein, the third-party login information ciphertext and the decryption algorithm of the third-party login information are obtained from the hosting server through the third-party URL ciphertext, and Use the decryption algorithm of the third-party login information to decrypt the ciphertext of the third-party login information to obtain the third-party login information, so as to log in to the third-party URL. 2. the method for claim 1, is characterized in that, In step A: Use the hosting client to convert the username and password for the hosting server, so that the hosting server only saves the converted username and password for logging in to the hosting server, In step B: The user name and password are generated using the managed client to log into the managed server by generating a converted user name and password. 3. the method for claim 2, is characterized in that, In step A, do an MD5 digest of the username and password used for hosting the server. 4. the method for claim 1, is characterized in that, In step B: Further, the hosting server returns the third-party URL decryption algorithm to the hosting client, The hosting client uses the third-party URL decryption algorithm to decrypt the ciphertext of the third-party URL to generate a third-party URL. 5. method as claimed in claim 4, is characterized in that, The generated third-party URLs are displayed on the hosting client in the form of a list. 6. the method for claim 1, is characterized in that, The method further includes step D, which is used to generate third-party URL ciphertext and third-party login information ciphertext stored in the hosting server, wherein the third-party login information is a user name and password for logging into the third-party URL, wherein, Step D includes: The hosting server returns the third-party URL encryption algorithm to the hosting client, Enter the third-party URL and third-party login information to be hosted on the hosting client, Use the third-party URL encryption algorithm to encrypt the third-party URL, and send the third-party URL ciphertext to the hosting server, The hosting server returns the first encryption algorithm used for third-party login information to the hosting client according to the third-party URL ciphertext, The third-party login information is encrypted with the first encryption algorithm used for the third-party login information on the hosting client, and the ciphertext of the third-party login information is sent to the hosting server. 7. The method of claim 1, wherein Username and/or password for hosting server as symmetric key for encryption and decryption algorithms. 8. The method of claim 1, wherein, In step C, further obtain a second encryption algorithm for third-party login information from the hosting server, and Encrypt the third-party login information with the second encryption algorithm used for the third-party login information on the hosting client, and send the ciphertext of the third-party login information to the hosting server. 9. A third-party login information hosting system, characterized in that it includes a hosting client and a hosting server, wherein, hosting server for registration, where the hosting client generates a username and password for the hosting server, The managed client logs into the managed server with a username and password, Among them, after the login is successful, the hosting server returns the third-party URL ciphertext to the hosting client, The hosted client logs into the third-party URL with the third-party login information, Among them, the hosting client obtains the ciphertext of the third-party login information and the decryption algorithm of the third-party login information from the hosting server through the ciphertext of the third-party URL, and uses the decryption algorithm of the third-party login information to decrypt the ciphertext of the third-party login information to obtain the third-party login information. information, thereby logging into the third-party URL. 10. The system of claim 9, wherein: The hosting client is further configured to transform the username and password for the hosting server such that the hosting server only saves the transformed username and password for logging into the hosting server, The hosting client is further configured to use the username and password to generate a transformed username and password to log into the hosting server. 11. The system of claim 10, wherein, The hosting client is further configured to MD5 digest the username and password for the hosting server. 12. The system of claim 9, wherein: The hosting server is configured to also return a third-party URL decryption algorithm to the hosting client, The hosted client is configured to decrypt the third-party URL ciphertext using a third-party URL decryption algorithm to generate a third-party URL. 13. The system of claim 12, wherein: The generated third-party URLs are displayed on the hosting client in the form of a list. 14. The system of claim 9, wherein, The managed server and the managed client are further configured to generate a third-party URL ciphertext and a third-party login information ciphertext stored in the managed server in the following manner, wherein the third-party login information is a username and password for logging into the third-party URL ,in, This method includes: The hosting server returns the third-party URL encryption algorithm to the hosting client, Enter the third-party URL and third-party login information to be hosted on the hosting client, Use the third-party URL encryption algorithm to encrypt the third-party URL, and send the third-party URL ciphertext to the hosting server, The hosting server returns the first encryption algorithm used for third-party login information to the hosting client according to the third-party URL ciphertext, The third-party login information is encrypted with the first encryption algorithm used for the third-party login information on the hosting client, and the ciphertext of the third-party login information is sent to the hosting server. 15. The system of claim 9, wherein, Username and/or password for hosting server as symmetric key for encryption and decryption algorithms. 16. The system of claim 9, wherein, the hosted client is configured to further obtain a second encryption algorithm for third-party login information from the hosted server, and The escrow client is configured to encrypt the third-party login information using a second encryption algorithm for the third-party login information, and send the ciphertext of the third-party login information to the escrow server.