CN105592083B - Method and device for terminal to access server by using token - Google Patents

Abstract

The invention discloses a method and a device for a terminal to access a server by using a token, which relates to the field of Internet technology and can solve the problem in the prior art that the terminal cannot successfully access the server when the new token issued by the server side is not successfully saved. The method of the present invention mainly includes: after generating a new token corresponding to the original token, setting the new token as a candidate token, the token is used to uniquely identify the terminal, and the token is the access credential required for the terminal to access the server ; Send the candidate token to the terminal; if the confirmation character sent by the terminal is received, replace the original token with the candidate token as a valid token, so that the terminal can successfully access the server by using the candidate token; if the confirmation sent by the terminal is not received character, the validity of the original token is preserved, so that the terminal can successfully access the server by using the original token. The present invention is mainly applicable to the scenario where the terminal uses the token to access the network security server.

Description

Method and device for terminal to access server by using token

technical field

The present invention relates to the field of Internet technologies, and in particular, to a method and device for a terminal to access a server by using a token.

Background technique

In practical applications, before the server sends a data request, the terminal needs to apply to the server for a token that uniquely identifies the terminal corresponding to the terminal, and then sends a data request to the server according to the applied token. After the server receives the data request, it will first verify whether the token is correct, and if the verification is correct, it will return the data response corresponding to the data request to the terminal, thus ensuring the security of the server.

In the prior art, users may use ghost software to clone multiple systems that are identical to known systems. Therefore, there may be a phenomenon that multiple terminals contain the same token, and multiple terminals can successfully access the server using the same token. . In order to avoid the phenomenon that one token corresponds to multiple terminals, the server side often updates the token regularly, and issues a new token to the terminal, so that the terminal can use the new token to access the server.

However, there are often the following problems in the prior art: after the server issues a new token to the terminal, the terminal may not receive the new token, or the new token is successfully received but fails to be saved. In this case, when the terminal sends a data request to the server, it will carry the locally stored original token to send the data request to the server, but the original token has expired, so the terminal cannot successfully obtain the data response corresponding to the data request. It can be seen that how to ensure that the terminal can successfully access the server even when the terminal fails to save the new token is a major problem today.

SUMMARY OF THE INVENTION

In view of this, the present invention provides a method and device for a terminal to access a server using a token, which can solve the problem in the prior art that the terminal cannot successfully access the server when the new token issued by the server side is not successfully saved.

In one aspect, the present invention provides a method for a terminal to access a server using a token, the method comprising:

After generating a new token corresponding to the original token, the new token is set as a candidate token, the token is used to uniquely identify the terminal, and the token is the access credential required for the terminal to access the server;

sending the candidate token to the terminal;

If a confirmation character sent by the terminal is received, the original token is replaced by the candidate token as a valid token, so that the terminal can successfully access the server by using the candidate token, and the confirmation character is used for indicating that the terminal has successfully saved the candidate token;

If the confirmation character sent by the terminal is not received, the validity of the original token is retained, so that the terminal can successfully access the server by using the original token.

In another aspect, the present invention provides an apparatus for a terminal to access a server using a token, the apparatus comprising:

The setting unit is configured to set the new token as a candidate token after generating a new token corresponding to the original token, the token is used to uniquely identify the terminal, and the token is used when the terminal accesses the server required access credentials;

a sending unit, configured to send the candidate token set by the setting unit to a terminal;

a replacement unit, configured to replace the original token with the candidate token as a valid token when receiving the confirmation character sent by the terminal, so that the terminal can successfully access the server by using the candidate token, so The confirmation character is used to indicate that the terminal has successfully saved the candidate token;

A retention unit, configured to retain the validity of the original token when the confirmation character sent by the terminal is not received, so that the terminal can successfully access the server by using the original token.

With the above technical solutions, the method and device for accessing a server by a terminal using a token provided by the present invention can, after generating a new token corresponding to the original token, first set the new token as a candidate token, and then send the new token to the terminal. If the candidate token receives the confirmation character sent by the terminal, it can be determined that the terminal has successfully saved the candidate token, and the candidate token is replaced with the original token as a valid token, so that the terminal can successfully access the server by using the candidate token, However, if the confirmation character sent by the terminal is not received, it can be determined that the terminal has not successfully saved the candidate token, and the validity of the original token is still retained, so that the terminal can successfully access the server by using the original token. It can be seen that, compared with the prior art, when the new token is directly used as a valid token, the present invention only uses the new token as a valid token after ensuring that the terminal successfully saves the new token. The original token is still used as a valid token, thus ensuring that the valid token stored on the terminal side is the same as the valid token stored on the server side, and further, when the terminal fails to save the new token, it can also ensure that the terminal successfully accesses server.

The above description is only an overview of the technical solutions of the present invention, in order to be able to understand the technical means of the present invention more clearly, it can be implemented according to the content of the description, and in order to make the above and other purposes, features and advantages of the present invention more obvious and easy to understand , the following specific embodiments of the present invention are given.

Description of drawings

Various other advantages and benefits will become apparent to those of ordinary skill in the art upon reading the following detailed description of the preferred embodiments. The drawings are for the purpose of illustrating preferred embodiments only and are not to be considered limiting of the invention. Also, the same components are denoted by the same reference numerals throughout the drawings. In the attached image:

1 shows a flowchart of a method for a terminal to access a server by using a token provided by an embodiment of the present invention;

FIG. 2 shows a block diagram of a composition of an apparatus for a terminal to access a server using a token provided by an embodiment of the present invention;

FIG. 3 shows a block diagram of another apparatus for a terminal to access a server by using a token provided by an embodiment of the present invention.

Detailed ways

Exemplary embodiments of the present disclosure will be described in more detail below with reference to the accompanying drawings. While exemplary embodiments of the present disclosure are shown in the drawings, it should be understood that the present disclosure may be embodied in various forms and should not be limited by the embodiments set forth herein. Rather, these embodiments are provided so that the present disclosure will be more thoroughly understood, and will fully convey the scope of the present disclosure to those skilled in the art.

An embodiment of the present invention provides a method for a terminal to access a server by using a token. The method is mainly applied to the server side. As shown in FIG. 1 , the method mainly includes:

101. After generating a new token corresponding to the original token, set the new token as a candidate token.

The token is used to uniquely identify the terminal, and the token is the access credential required by the terminal to access the server. In practical applications, when the terminal accesses the server for the first time, it will send a token request to the server through the API (Application Programming Interface) that applies for the token. After the server receives the token request, it can request the token from the token. Obtain the terminal information of the terminal, and generate a token that can uniquely identify the terminal according to the terminal information, current time and other information, and feed back the generated token to the corresponding terminal, so that the terminal can use the token to access the server. That is to say, the server can verify whether the terminal is legitimate through the token, so as to prevent illegal terminals from invading the server.

Due to the existence of the ghost system, the server will periodically update the token to prevent the terminal corresponding to the ghost system from successfully accessing the server using the token in the terminal corresponding to the original system. In this step, after generating a new token corresponding to the original token, the terminal can set the new token as a candidate token, that is, the new token is used as a candidate token of the original token, so that the new token can be successfully saved in the subsequent terminal After that, replace the original token with the new token as a valid token.

The terminal information includes information such as an IP (Internet Protocol Address, Internet Protocol) address, a MAC (Media Access Control, media access control) address, and a user name. The token can be a 32-bit hash value, and the original token is the current valid token.

102. Send the candidate token to the terminal.

Specifically, when the server generates a token corresponding to a terminal for the first time, the corresponding relationship between the token and the terminal information of the terminal is recorded. When obtaining the candidate token corresponding to the original token, the server will obtain the IP address and MAC address of the terminal from the terminal information corresponding to the candidate token, and send the candidate token to the terminal corresponding to the IP address and MAC address, so that the terminal can Update the original token stored locally.

103. If the confirmation character sent by the terminal is received, replace the original token with the candidate token as a valid token, so that the terminal can successfully access the server by using the candidate token.

The ACK (Acknowledgement, confirmation character) is used to indicate that the terminal has successfully saved the candidate token. In practical applications, the ACK may contain the candidate token and the identifier of the successfully saved candidate token.

Specifically, when the server receives the confirmation character sent by the terminal, it can be determined that the terminal has successfully saved the candidate token, and the terminal will use the candidate token to access the server subsequently. At this time, the server can replace the original token with the candidate token as a valid token, so as to ensure that the valid tokens stored on the server side and the terminal side are all candidate tokens, and when the terminal uses the candidate token to access the server, the server verifies the valid token. The alternate token is correct, so the terminal can successfully access the server.

104. If the confirmation character sent by the terminal is not received, the validity of the original token is retained, so that the terminal can successfully access the server by using the original token.

Specifically, when the server does not receive the confirmation character sent by the terminal within the preset time period, it can be determined that the terminal has not successfully saved the candidate token (including not receiving the candidate token sent by the server and having received the candidate token but It is not successfully saved to the local two cases), and the terminal will still use the original token to access the server in the future. At this time, the server can retain the validity of the original token, while the candidate token is still invalid and plays a candidate role, so as to ensure that the valid tokens stored on the server side and the terminal side are all original tokens, and then the terminal uses When the original token accesses the server, the server verifies that the original token is correct, so that the terminal can successfully access the server.

The method for accessing a server by a terminal using a token provided by the embodiment of the present invention can, after generating a new token corresponding to the original token, first set the new token as a candidate token, and then send the candidate token to the terminal. After receiving the confirmation character sent by the terminal, it can be determined that the terminal has successfully saved the candidate token, and the candidate token is replaced by the original token as a valid token, so that the terminal can successfully access the server by using the candidate token, and if the terminal does not receive the If the confirmation character is sent, it can be determined that the terminal has not successfully saved the candidate token, and the validity of the original token is still retained, so that the terminal can successfully access the server by using the original token. It can be seen that, compared with the prior art, when the new token is directly used as a valid token, the present invention only uses the new token as a valid token after ensuring that the terminal successfully saves the new token. The original token is still used as a valid token, thus ensuring that the valid token stored on the terminal side is the same as the valid token stored on the server side, and further, when the terminal fails to save the new token, it can also ensure that the terminal successfully accesses server.

Further, when the server determines that the terminal has not successfully saved the candidate token, it still takes the original token as the current valid token, but also sends the candidate token to the terminal again, so that the terminal can update the local token in time. In practical applications, the implementation of sending the candidate token to the terminal again can be mainly divided into the following two ways:

Manner 1: The server receives the data request carrying the original token sent by the terminal, and sends a data response carrying the candidate token to the terminal according to the data request, so that the terminal can save the candidate token again.

Specifically, when the terminal fails to save the candidate token, it will still use the original token to access the server in the future. After the server receives the data request carrying the original token sent by the terminal, since the valid token stored locally by the server is the original token, the token carried in the data request is correct. However, in order to allow the terminal to update the local token in time, when the server sends a data response to the terminal according to the data request, in addition to sending the requested content (such as a virus database) to the terminal, it can also send an alternate token to the terminal to notify the terminal. Update the local token to an alternate token. If the terminal successfully saves the candidate token, the terminal will send a confirmation character to the server so that the server can set the candidate token as a valid token; if the terminal fails to save the candidate token successfully, the terminal will not send a confirmation character to the server, so that the server can Still have the original token as a valid token.

Mode 2: The server sends the candidate token to the terminal again, and replaces the original token with the candidate token as a valid token until the confirmation character sent by the terminal is received.

Specifically, if the server does not receive the confirmation character sent by the terminal within the preset time period, the server may determine that the terminal has not successfully saved the candidate token. In this case, the server can send the candidate token to the terminal again, so that the terminal can save the candidate token again. Until the server receives the confirmation character sent by the terminal, the server can determine that the terminal has successfully saved the candidate token, and after receiving the confirmation characters before replacing the original token with the alternate token as a valid token.

Further, the specific implementation of replacing the original token with the candidate token as a valid token mentioned in the above step 103 may be: the server adds a valid identifier to the candidate token; deletes the original token, or uses the original token to carry the Valid IDs are replaced with invalid IDs.

Specifically, after the server receives the confirmation character sent by the terminal, it can be determined that the terminal has successfully saved the candidate token sent by the terminal, and subsequently the terminal will use the candidate token to access the server. Therefore, the server can add a valid identifier to the alternate token and clear the validity of the original token. Among them, there are two ways to clear the validity of the original token: (1) delete the original token directly, and only keep the candidate token; (2) keep the original token, but need to replace the valid identifier of the original token with Invalid ID.

Further, the specific implementation manner of generating the new token corresponding to the original token on the server side may be as follows: the server searches for terminal information of the terminal corresponding to the original token, and generates a new token corresponding to the original token according to the terminal information and the current time. .

Specifically, since the tokens corresponding to each terminal are different, when a token corresponding to a terminal is generated, the server will record the corresponding relationship between the token and the terminal information, so as to verify whether the token is correct in the future, and according to the original token corresponding terminal information and current time to generate a new token corresponding to the original token.

Further, according to the above method embodiment, another embodiment of the present invention also provides a device for a terminal to access a server using a token. As shown in FIG. 2 , the device mainly includes: a setting unit 21 , a sending unit 22 , a replacement unit 23 and reserved unit 24. in,

The setting unit 21 is used to set the new token as a candidate token after generating the new token corresponding to the original token, the token is used to uniquely identify the terminal, and the token is the access credential required when the terminal accesses the server;

The sending unit 22 is configured to send the candidate token set by the setting unit 21 to the terminal;

The replacement unit 23 is configured to replace the original token with the candidate token as a valid token when receiving the confirmation character sent by the terminal, so that the terminal can successfully access the server by using the candidate token, and the confirmation character is used to indicate that the terminal has successfully saved the candidate token token;

The retention unit 24 is configured to retain the validity of the original token when the confirmation character sent by the terminal is not received, so that the terminal can successfully access the server by using the original token.

The device for a terminal to access a server using a token provided by the embodiment of the present invention can, after generating a new token corresponding to the original token, first set the new token as a candidate token, and then send the candidate token to the terminal. After receiving the confirmation character sent by the terminal, it can be determined that the terminal has successfully saved the candidate token, and the candidate token is replaced by the original token as a valid token, so that the terminal can successfully access the server by using the candidate token, and if the terminal does not receive the If the confirmation character is sent, it can be determined that the terminal has not successfully saved the candidate token, and the validity of the original token is still retained, so that the terminal can successfully access the server by using the original token. It can be seen that, compared with the prior art, when the new token is directly used as a valid token, the present invention only uses the new token as a valid token after ensuring that the terminal successfully saves the new token. The original token is still used as a valid token, thus ensuring that the valid token stored on the terminal side is the same as the valid token stored on the server side, and further, when the terminal fails to save the new token, it can also ensure that the terminal successfully accesses server.

Further, as shown in Figure 3, the device also includes:

The receiving unit 25 is configured to receive a data request carrying the original token sent by the terminal after retaining the validity of the original token if the confirmation character sent by the terminal is not received;

The sending unit 22 is further configured to send a data response carrying the candidate token to the terminal according to the data request received by the receiving unit 25, so that the terminal can save the candidate token again.

Further, the sending unit 22 is further configured to send the candidate token to the terminal again after retaining the validity of the original token if the confirmation character sent by the terminal is not received, until the confirmation character sent by the terminal is received, and the candidate token is sent to the terminal. The token replaces the original token as a valid token.

Further, as shown in Figure 3, the replacement unit 23 includes:

The adding module 231 is used to add a valid identifier to the candidate token;

delete module 232, used to delete the original token;

The replacement module 233 is configured to replace the valid ID carried by the original token with an invalid ID.

Further, as shown in Figure 3, the device also includes:

a generating unit 26, configured to generate a new token corresponding to the original token;

The generating unit 26 includes:

A search module 261, configured to search for terminal information of the terminal corresponding to the original token;

The generating module 262 is configured to generate a new token corresponding to the original token according to the terminal information found by the searching module 261 and the current time.

Further, the terminal information includes an Internet Protocol IP address, a media access control MAC address and a user name.

In the above-mentioned embodiments, the description of each embodiment has its own emphasis. For parts that are not described in detail in a certain embodiment, reference may be made to the relevant descriptions of other embodiments.

It can be understood that the relevant features in the above-mentioned methods and apparatuses may refer to each other. In addition, "first", "second", etc. in the above-mentioned embodiments are used to distinguish each embodiment, and do not represent the advantages and disadvantages of each embodiment.

Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working process of the system, device and unit described above may refer to the corresponding process in the foregoing method embodiments, which will not be repeated here.

The device for the above-mentioned terminal to use the token to access the server includes a memory and a processor. The above-mentioned setting unit, sending unit, replacement unit, and retention unit are all stored in the memory as program units, and the processor executes the above-mentioned program units stored in the memory. implement the corresponding function.

The algorithms and displays provided herein are not inherently related to any particular computer, virtual system, or other device. Various general-purpose systems can also be used with teaching based on this. The structure required to construct such a system is apparent from the above description. Furthermore, the present invention is not directed to any particular programming language. It is to be understood that various programming languages may be used to implement the inventions described herein, and that the descriptions of specific languages above are intended to disclose the best mode for carrying out the invention.

In the description provided herein, numerous specific details are set forth. It will be understood, however, that embodiments of the invention may be practiced without these specific details. In some instances, well-known methods, structures and techniques have not been shown in detail in order not to obscure an understanding of this description.

Similarly, it is to be understood that in the above description of exemplary embodiments of the invention, various features of the invention are sometimes grouped together into a single embodiment, figure, or its description. This disclosure, however, should not be construed as reflecting an intention that the invention as claimed requires more features than are expressly recited in each claim. Rather, as the following claims reflect, inventive aspects lie in less than all features of a single foregoing disclosed embodiment. Thus, the claims following the Detailed Description are hereby expressly incorporated into this Detailed Description, with each claim standing on its own as a separate embodiment of this invention.

Those skilled in the art will understand that the modules in the device in the embodiment can be adaptively changed and arranged in one or more devices different from the embodiment. The modules or units or components in the embodiments may be combined into one module or unit or component, and further they may be divided into multiple sub-modules or sub-units or sub-assemblies. All features disclosed in this specification (including accompanying claims, abstract and drawings) and any method so disclosed may be employed in any combination, unless at least some of such features and/or procedures or elements are mutually exclusive. All processes or units of equipment are combined. Each feature disclosed in this specification (including accompanying claims, abstract and drawings) may be replaced by alternative features serving the same, equivalent or similar purpose, unless expressly stated otherwise.

Furthermore, those skilled in the art will appreciate that although some of the embodiments described herein include certain features, but not others, included in other embodiments, that combinations of features of different embodiments are intended to be within the scope of the invention within and form different embodiments. For example, in the following claims, any of the claimed embodiments may be used in any combination.

Various component embodiments of the present invention may be implemented in hardware, or in software modules running on one or more processors, or in a combination thereof. Those skilled in the art should understand that a microprocessor or a digital signal processor (DSP) can be used in practice to implement the state detection method, device, server and system device for a portable electronic anti-lost device according to the embodiments of the present invention Some or all of the functionality of some or all of the components. The present invention can also be implemented as apparatus or apparatus programs (eg, computer programs and computer program products) for performing part or all of the methods described herein. Such a program implementing the present invention may be stored on a computer-readable medium, or may be in the form of one or more signals. Such signals may be downloaded from Internet sites, or provided on carrier signals, or in any other form.

It should be noted that the above-described embodiments illustrate rather than limit the invention, and that alternative embodiments may be devised by those skilled in the art without departing from the scope of the appended claims. In the claims, any reference signs placed between parentheses shall not be construed as limiting the claim. The word "comprising" does not exclude the presence of elements or steps not listed in a claim. The word "a" or "an" preceding an element does not exclude the presence of a plurality of such elements. The invention can be implemented by means of hardware comprising several different elements and by means of a suitably programmed computer. In a unit claim enumerating several means, several of these means may be embodied by one and the same item of hardware. The use of the words first, second, and third, etc. do not denote any order. These words can be interpreted as names.

Claims (6)

1. A method for a terminal to access a server by using a token, the method comprising:

after generating a new token corresponding to an original token, setting the new token as a candidate token, wherein the token is used for uniquely identifying a terminal and is an access certificate required by the terminal when the terminal accesses a server;

generating a new token corresponding to the original token specifically includes: when a terminal accesses a server for the first time, a token request is sent to the server through an application programming interface applying for the token, the server can acquire terminal information of the terminal from the token request after receiving the token request, and a token capable of uniquely identifying the terminal is generated according to at least the terminal information and the current time;

sending the candidate token to a terminal;

if a confirmation character sent by the terminal is received, replacing the original token with the candidate token to be a valid token so that the terminal can successfully access the server by using the candidate token, wherein the confirmation character is used for indicating that the terminal successfully stores the candidate token, and is an identifier comprising the candidate token and the successfully stored candidate token;

wherein, the replacing the original token with the candidate token as the valid token specifically includes: adding a valid identifier to the candidate token; replacing the effective identification carried by the original token with an invalid identification;

if the confirmation character sent by the terminal is not received, the validity of the original token is reserved so that the terminal can successfully access the server by using the original token;

receiving a data request carrying the original token and sent by the terminal, and sending a data response carrying the candidate token to the terminal according to the data request so that the terminal can store the candidate token again; and/or the presence of a gas in the gas,

and sending the candidate token to the terminal again until a confirmation character sent by the terminal is received, and replacing the original token with the candidate token to be used as a valid token.

2. The method of claim 1, wherein generating a new token corresponding to the original token comprises:

searching terminal information of a terminal corresponding to the original token;

and generating a new token corresponding to the original token according to the terminal information and the current time.

3. The method of claim 2, wherein the terminal information comprises an Internet Protocol (IP) address, a Media Access Control (MAC) address, and a user name.

4. An apparatus for a terminal to access a server using a token, the apparatus comprising:

the setting unit is used for setting a new token corresponding to an original token as a candidate token after the new token is generated, wherein the token is used for uniquely identifying a terminal and is an access certificate required by the terminal when the terminal accesses a server;

generating a new token corresponding to the original token specifically includes: when a terminal accesses a server for the first time, a token request is sent to the server through an application programming interface applying for the token, the server can acquire terminal information of the terminal from the token request after receiving the token request, and a token capable of uniquely identifying the terminal is generated according to at least the terminal information and the current time;

a transmission unit configured to transmit the candidate token set by the setting unit to a terminal;

a replacing unit, configured to replace the original token with the candidate token as a valid token when receiving a confirmation character sent by the terminal, so that the terminal can successfully access the server by using the candidate token, where the confirmation character is used to indicate that the terminal has successfully saved the candidate token, and the confirmation character is an identifier that includes the candidate token and the successfully saved candidate token;

the replacement unit includes: an adding module, configured to add a valid identifier to the candidate token; the replacing module is used for replacing the effective identification carried by the original token with the invalid identification;

the reservation unit is used for reserving the validity of the original token when the confirmation character sent by the terminal is not received so that the terminal can successfully access the server by using the original token;

the receiving unit is used for receiving a data request carrying the original token sent by the terminal after the validity of the original token is reserved if the confirmation character sent by the terminal is not received;

the sending unit is further configured to send a data response carrying the candidate token to the terminal according to the data request received by the receiving unit, so that the terminal stores the candidate token again;

the sending unit is further configured to, after the validity of the original token is retained if the confirmation character sent by the terminal is not received, send the candidate token to the terminal again until the confirmation character sent by the terminal is received, and replace the original token with the candidate token as a valid token.

5. The apparatus of claim 4, further comprising:

the generating unit is used for generating a new token corresponding to the original token;

the generation unit includes:

the searching module is used for searching the terminal information of the terminal corresponding to the original token;

and the generating module is used for generating a new token corresponding to the original token according to the terminal information searched by the searching module and the current time.

6. The apparatus of claim 5, wherein the terminal information comprises an Internet Protocol (IP) address, a Media Access Control (MAC) address, and a user name.

Images