CN112929388B - Network identity cross-device application fast authentication method and system, user agent device - Google Patents

Abstract

The invention discloses a method and a system for quickly authenticating network identity by cross-device application and user agent equipment, which comprise the following steps: acquiring an internet surfing terminal extension identifier; sending an authentication request to a website server according to prestored target website identity information and registration information to acquire authentication request feedback information, or forwarding the target website identity information and the registration information through a trusted server agent/terminal extension server; and sending the authentication request feedback information or the target website identity information and the registration information to an internet terminal extension corresponding to the internet terminal extension identifier, so that the internet terminal extension sends an authentication request to a website server by using the authentication request feedback information or the target website identity information and the registration information to complete authentication operation. By adopting the technical scheme of the invention, the method is safer and more convenient, reduces operation steps, can send out a login command from the easy App for login, and realizes the opening of a webpage or application and the successful login of a related account on another computer or mobile phone.

Description

Network identity cross-device application fast authentication method and system, user agent device

technical field

The present invention relates to the technical field of information security, and more specifically relates to a method and system for fast authentication of cross-device application of network identity, and a user agent device.

Background technique

With the expansion of the scale of the Internet and the increase in user needs, the development of cyberspace brings us convenience and speed, but also brings new challenges to individuals. The traditional network identity authentication management based on the character type "username-password" The mechanism has become the current mainstream network identity authentication management mechanism because of its simple use, strong reliability, easy deployment, and low cost.

However, nowadays a single user needs to face the scenario of registering online identities on multiple websites and managing multiple online identities at the same time, which may encounter a series of serious network security threats such as password fatigue, phishing scams, and credential stuffing attacks.

For example, a user has registered network identities on multiple websites. In order to improve security, different user names and passwords need to be set for different network identities. For this reason, the user needs to memorize a lot of user names and passwords at the same time, which easily causes confusion of multiple user names and passwords, and the user experience is very poor. This is the so-called "password fatigue" problem. And when a user wants to access multiple web applications at the same time, he needs to open multiple URLs at the same time, and enter the corresponding user name and password in each URL. This process will not only cause the above-mentioned "password fatigue" problem, but also affect User productivity.

For convenience, most users choose the same or similar user names and share a password, which is easy to remember but less secure. Once one account is stolen, all accounts are at risk of being leaked. Hackers can illegally obtain a large amount of user network identity information by trying to log in with leaked identity information or common passwords. This is the so-called "credential stuffing" attack.

Therefore, how to improve the security and convenience of network identity authentication under the premise of avoiding password fatigue is a problem to be solved by those skilled in the art.

Contents of the invention

The purpose of the present invention is to provide a network identity cross-device application fast authentication method, system, and user agent device, which are safer, more convenient, and reduce operating steps. The login command can be issued from the login easy App, and the login command can be used on another computer or mobile phone. Open the web page or application and successfully log in to the relevant account.

To achieve the above object, the present invention adopts the following technical solutions:

A fast authentication method for cross-device application of network identity, comprising:

The user agent obtains the extended identifier of the Internet access terminal;

According to the pre-stored target website identity information and registration information, send an authentication request to the website server to obtain the authentication request feedback information, or forward the target website identity information and registration information through the trusted server proxy/terminal extension server;

sending the authentication request feedback information, or the target website identity information and registration information to the Internet terminal extension corresponding to the Internet terminal extension identifier, so that the Internet terminal extension uses the authentication request feedback information, or the target website identity information and registration information The message sends an authentication request to the website server to complete the authentication operation.

Preferably, the sending the authentication request feedback information to the Internet terminal extension corresponding to the Internet terminal extension identifier includes:

The user agent sends the target website identity information, registration information and Internet terminal extension identification to the trusted server agent;

The trusted server agent sends an authentication request to the website server according to the pre-stored target website identity information and registration information to obtain the authentication request feedback information;

The trusted server agent sends the authentication request feedback information and the pre-stored authentication verification callback address to the Internet terminal extension corresponding to the Internet terminal extension identifier, so that the Internet terminal extension sends an authentication request to the website server to complete the authentication operation.

Preferably, the sending the authentication request feedback information to the Internet terminal extension corresponding to the Internet terminal extension identifier includes:

The user agent sends the identity information and registration information of the target website to the website server to obtain the authentication request feedback information;

The user agent sends the authentication request feedback information to the Internet terminal extension corresponding to the Internet terminal extension identifier, so that the Internet terminal extension sends an authentication request to the website server to complete the authentication operation.

Preferably, the sending the target website identity information and registration information to the Internet terminal extension corresponding to the Internet terminal extension identifier includes:

The user agent sends the identity information of the target website, the registration information and the extended identification of the Internet terminal to the trusted server agent or the terminal extended server;

The trusted server agent or the terminal extension server sends the target website identity information, registration information and pre-stored authentication verification callback address to the Internet terminal extension corresponding to the Internet terminal extension identifier, so that the Internet terminal extension can send the The authentication request completes the authentication operation.

Preferably, the sending the authentication request feedback information to the Internet terminal extension corresponding to the Internet terminal extension identifier includes:

The user agent sends the target website identity information, registration information and Internet terminal extension identification to the trusted server agent;

The Internet terminal extension sends the generated random number state to the trusted server agent according to the request of listening to the trusted server agent;

The trusted server agent sends an authentication request to the website server according to the pre-stored target website identity information, registration information and random number state to obtain authentication request feedback information;

The trusted server agent sends the authentication request feedback information and the pre-stored authentication verification callback address to the Internet terminal extension corresponding to the Internet terminal extension identifier, so that the Internet terminal extension sends an authentication request to the website server to complete the authentication operation.

Preferably, obtaining the extended identifier of the Internet access terminal includes:

User logs in/activates user agent via master password;

The Internet terminal extension generates a temporary unique UUID, and sends the UUID to the user agent and the terminal extension server after waiting for the authorization request of the user agent;

After the user agent receives the UUID sent by the Internet terminal extension, it forwards it to the terminal extension server, and the terminal extension server performs UUID verification;

The terminal extension server identifies and matches the UUID obtained from the Internet terminal extension and the user agent. If the match is successful, it generates and returns the Internet terminal extension identifier to the user agent according to the UUID.

Preferably, said obtaining the extended identifier of the Internet access terminal includes:

The user logs in/activates the user agent through the master password, and records the user_id;

The Internet terminal extension generates a temporary unique UUID, waits for the authorization request of the user agent, and sends the UUID to the user agent and the terminal extension server, and records the user_id sent by the user agent when it is authorized;

The terminal extension server receives the UUID sent by the Internet terminal extension, records the extended unique identifier, and establishes the mapping relationship between the UUID and the extended unique identifier;

The user agent receives the UUID sent by the Internet terminal extension, sends the user_id and UUID to the terminal extension server, and the terminal extension server performs UUID verification;

The terminal extension server receives the user_id and UUID sent by the user agent, identifies and matches the UUID obtained from the Internet terminal extension and the user agent, and if the match is successful, establishes the mapping relationship between user_id and the extended unique identifier, and deletes the UUID and UUID in the first step. Extend the mapping relationship of unique identifiers and perform expiration processing on UUID;

When the user agent wants to perform relevant authentication operations, it sends the user_id to the terminal extension server, and the terminal extension server queries the mapping relationship between the user_id and the extended unique identifier. If the query is successful, it returns the Internet terminal extension identifier to the user agent.

Preferably, the user agent sends the pre-stored accessible address of the target website to the Internet terminal extension, so that the Internet terminal extension can create a page window of the target website.

Preferably, the Internet terminal extension monitors the request of the trusted server agent, and receives the authentication request feedback information and the pre-stored authentication verification callback address.

Preferably, the authentication request feedback information includes: feedback login authentication information and a token that can be used to verify the status of login authorization; wherein, the token is an identification token for the website server to verify whether the user is authorized to log in.

Preferably, the Internet access terminal extension monitors the request of the trusted server agent or the terminal extension server, and receives the target website identity information, registration information and pre-stored authentication verification callback address.

The present invention also provides a network identity cross-device application rapid authentication system, including:

An acquisition module, used for the user agent to acquire the extended identifier of the Internet access terminal;

A processing module, configured to send an authentication request to the website server to obtain an authentication request feedback token according to the pre-stored target website identity information and registration information, or forward the target website identity information and registration information through the trusted server proxy/terminal extension server;

An authentication module, configured to send authentication request feedback information, or target website identity information and registration information to the Internet terminal extension corresponding to the Internet terminal extension identifier, so that the Internet terminal extension can use the authentication request feedback information, or the target website The website identity information and registration information send an authentication request to the website server to complete the authentication operation.

Preferably, the authentication module is configured to: send an authentication request to the website server through the trusted server agent according to the identity information and the registration information to obtain the authentication request feedback information, and call back the authentication request feedback information and the pre-stored authentication check The address is sent to the Internet terminal extension corresponding to the Internet terminal extension identifier, so that the Internet terminal extension sends an authentication request to the website server to complete the authentication operation.

Preferably, the authentication module is configured to: send an authentication request to the website server with the identity information and the registration information to obtain authentication request feedback information, and send the authentication request feedback information to the Internet access terminal corresponding to the Internet access terminal extension identifier extension, so that the Internet terminal extension sends an authentication request to the website server to complete the authentication operation.

Preferably, the authentication module is configured to: send the target website identity information, registration information and extension identification to a trusted server agent or terminal extension server; and forward the target website identity information and registration information to the Internet access terminal extension The corresponding Internet access terminal extension is identified, so that the Internet access terminal extension sends an authentication request to the website server to complete the authentication operation.

The present invention also provides a user agent device, including:

A memory for storing a network identity authentication program;

The processor is configured to implement the network identity cross-device application fast authentication method when executing the network identity authentication program.

The present invention also provides a computer-readable storage medium, wherein a network identity authentication program is stored on the computer-readable storage medium, and when the network identity authentication program is executed by a processor, a fast authentication method for network identity cross-device application is realized.

The network identity cross-device application fast authentication method, system, and user agent device of the present invention, the user agent can store the accessible address of the target website and the authentication required for accessing the website in advance for the user on each target website that needs to log in or register Identity information, such as usernames and passwords, users do not need to remember the addresses, usernames and passwords of these target websites, and when they need to register or log in to the target website, they do not need to download the required application from the target website, and directly activate the authentication request through the user agent , the server agent directly sends the network identity information to the website server to perform authentication processing, and quickly opens the target website page through the Internet terminal extension and automatically completes the authentication operation.

Description of drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the following will briefly introduce the drawings that need to be used in the description of the embodiments or the prior art. Obviously, the accompanying drawings in the following description are only These are some embodiments of the present invention. Those skilled in the art can also obtain other drawings based on these drawings without creative work.

Fig. 1 is the flow chart of the fast authentication method of cross-device application of network identity according to the embodiment of the present invention;

FIG. 2 is a schematic diagram of a preferred mode of a network identity cross-device application fast authentication method according to an embodiment of the present invention;

FIG. 3 is a schematic diagram of another preferred mode of a network identity cross-device application fast authentication method according to an embodiment of the present invention;

FIG. 4 is a schematic diagram of another preferred mode of a network identity cross-device application fast authentication method according to an embodiment of the present invention;

FIG. 5 is a schematic diagram of yet another preferred mode of a network identity cross-device application fast authentication method according to an embodiment of the present invention;

FIG. 6 is a schematic diagram of yet another preferred mode of a network identity cross-device application fast authentication method according to an embodiment of the present invention;

FIG. 7 is a flow chart of obtaining an extended identifier of an Internet access terminal according to an embodiment of the present invention;

FIG. 8 is a schematic structural diagram of a fast authentication system for cross-device application of network identity according to an embodiment of the present invention.

Detailed ways

The technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of them. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without creative efforts fall within the protection scope of the present invention.

As shown in Figure 1, a fast authentication method for cross-device network identity applications allows users to quickly and automatically create new application page windows and complete network identity authentication request operations such as login and registration without password fatigue. Increase productivity while maintaining security, including:

Step S1, the user agent obtains the extended identifier of the Internet access terminal;

Step S2, sending an authentication request to the website server to obtain authentication request feedback information according to the pre-stored target website identity information and registration information, or forwarding the target website identity information and registration information through the trusted server proxy/terminal extension server;

Step S3: Send the authentication request feedback information, or the target website identity information and registration information to the Internet terminal extension corresponding to the Internet terminal extension identifier, so that the Internet terminal extension can use the authentication request feedback information or the target website identity information and registration information to send an authentication request to the website server to complete the authentication operation; wherein, the website server is the website server that the user wants to visit the target website.

The embodiment of the present invention provides a network identity cross-device application fast authentication method, and the user agent can store target website identity information and registration information for each target website that needs to log in or register for the user. The target website identity information includes an accessible address, and/or part or all of the following: server address, IP address, port, domain name, URL, URI, etc. of the website or application. The registration information mentioned includes the authentication identity information required by the user to access the website, such as user name and password. Users do not need to remember the addresses, user names and passwords of these target websites. When they need to register or log in to the target website, they do not need to download the required application program from the target website, and directly trigger or activate the authentication request through the user agent, and the server agent directly sends the The registration information is sent to the website server for authentication processing, and the target website page is quickly opened through the Internet terminal extension and the authentication operation is automatically completed.

In the embodiment of the present invention, the user agent stores the accessible address of the target website in advance, the identity information of the target website or automatically generates the registration information of the target website in advance according to the registration rules of the target website; the registration information may include the users who log in to the target website name and password. The identity information includes user session information and the like. Accessible addresses include network addresses that can directly access the target website through specific applications;

It should be noted that a user agent is a computer system that can be trusted by users and helps users automatically generate account information. Each user can authorize multiple user agents, but one user agent can only serve one user. The user can authorize and activate the user agent in advance, and store the accessible address, registration information and identity information of the target website in advance through the user agent. There are many ways for the user to authorize the user agent to store the above authentication information, which are not specifically limited here, and those skilled in the art can choose flexibly according to the actual situation. For example, the user agent can automatically complete the generation of account information (ie, username and password) on behalf of the user according to the registration rules of the target website. Users can also add new registered accounts in the user agent or delete old registered accounts according to their actual needs, and realize backup and synchronization between the cloud and multiple user agents.

This step is the initiation step of this embodiment, and the default user agent has been authorized and activated by the user. Wherein, there are many ways for the user to activate the user agent, which are not specifically limited here. For example, the user can set a master password for the user agent, and activate the user agent by entering the master password. For another example, the user may activate the user agent by inputting authorized biometrics, which may include the user's iris information, fingerprint information, audio information, etc., which are not specifically limited here.

The Internet access terminal extension identifier is a unique token generated by the Internet access terminal extension to uniquely identify the terminal extension. The interaction between the subsequent steps and the Internet access terminal extension needs to rely on the unique identifier for session verification.

As shown in Figure 2, in a preferred manner in the implementation of the present invention, the sending of the authentication request feedback information to the Internet terminal extension corresponding to the Internet terminal extension identifier includes:

The user agent sends the target website identity information, registration information and Internet terminal extension identification to the trusted server agent;

The trusted server agent sends an authentication request to the website server according to the pre-stored target website identity information and registration information to obtain the authentication request feedback information; specifically: in the specific implementation, the role of the trusted server agent is to send the authentication request to the website server, the The authentication request can be a registration request or a login request. If the authentication is successful, the web server will return the authentication request feedback token to the trusted server agent; if the authentication fails, a reasonable error feedback will be returned, and the trusted server agent will inform the user agent. There are many ways for the website server to generate the authentication request feedback token, which are not specifically limited here, and those skilled in the art can choose flexibly according to the actual situation. For example, it can be a unique session identifier (session ID) generated by the website server, a globally unique identifier generated using the UUID method, or a token ciphertext generated based on an encryption algorithm such as RSA to establish a more complete session ID. Security Mechanism.

The trusted server agent sends the authentication request feedback information and the pre-stored authentication verification callback address to the Internet terminal extension corresponding to the Internet terminal extension identifier, so that the Internet terminal extension sends an authentication request to the website server to complete the authentication operation; wherein , the Internet access terminal expands to monitor the request of the trusted server agent, and receives the authentication request feedback information and the pre-stored authentication verification callback address. Specifically: the authentication verification callback address is a redirection verification interface authorized by the target website in advance as an agent of the trusted server. This interface address is mainly used to verify that the authentication request of the Internet terminal extension is correct. If the verification is passed, an authorized Internet terminal extension is created. Authentication status, that is, a request to log in, register, or change a password has been completed. In the specific implementation, after receiving the accessible address of the target website, the authentication request feedback token and the callback address of the authentication verification sent by the trusted server agent, the Internet terminal extension creates a new application tab page for the Internet terminal extension according to the accessible address, After the page is loaded successfully, use the authentication request feedback token as a request parameter to request the callback address, wait for the feedback of the authentication information of the callback address, and record the authentication status according to the feedback information. The callback address points to the authentication verification interface of the website server, which is mainly used to identify and match the authentication feedback token sent by the Internet terminal extension. If the match is successful, the authentication status of the authorized Internet terminal extension is created, and a login, registration or password change is completed. request, and feedback the correct authentication information, the authentication information can be redirected to control the Internet terminal extension to automatically jump to the correct accessible tab.

As shown in FIG. 3 , a preferred manner in the implementation of the present invention, the sending of the authentication request feedback information to the Internet terminal extension corresponding to the Internet terminal extension identifier includes:

The user agent sends the target website identity information, registration information and Internet terminal extension identification to the trusted server agent;

The Internet terminal extension sends the generated random number state to the trusted server agent according to the request of listening to the trusted server agent;

It should be noted that the random number state is a parameter to prevent CSRF attacks, and is randomly generated by the Internet terminal extension. In a specific implementation, there are many ways to generate the random number state, which are not specifically limited here, and those skilled in the art can choose flexibly according to the actual situation. The generated state will be sent to the trusted server agent for subsequent step authentication request parameters, and will be temporarily written into the local storage by the Internet terminal extension. The specific storage method is not specifically limited here, and those skilled in the art can flexibly choose according to the actual situation, such as cookies, etc. Take it out when the Internet terminal expands to execute subsequent steps, and send it to the website server as one of the verification parameters of the authentication verification callback address, so that the website server can judge whether it is a safe and reasonable request.

The trusted server agent sends an authentication request to the website server according to the pre-stored target website identity information, registration information and random number state to obtain authentication request feedback information;

The trusted server agent sends the authentication request feedback information and the pre-stored authentication verification callback address to the Internet terminal extension corresponding to the Internet terminal extension identifier, so that the Internet terminal extension sends an authentication request to the website server to complete the authentication operation. That is: the Internet terminal expands the new page window based on the accessible address of the target website, and at the same time sends identity information and registration information to the website server according to the authentication verification callback address to complete the authentication operation and receive feedback authentication information.

As shown in FIG. 4 , a preferred manner in the implementation of the present invention, the sending of the authentication request feedback information to the Internet terminal extension corresponding to the Internet terminal extension identifier includes:

The user agent sends an authentication request to the website server with the identity information and registration information of the target website to obtain the authentication request feedback information. The authentication request feedback information includes: feedback login authentication information and a token that can be used to verify the login authorization status; wherein the token There are many ways to generate the identification token for the website server to verify whether the user is authorized to log in, which are not specifically limited here. Those skilled in the art can flexibly choose according to the actual situation, such as commonly used cookies in browser applications.

The user agent completes the authentication operation based on the feedback information of the authentication request, and when the user selects a cross-device application to access the target website, the accessible address of the target website and the above-mentioned token are sent to the Internet terminal extension based on the Internet terminal extension identifier;

The user agent sends the authentication request feedback information to the Internet terminal extension corresponding to the Internet terminal extension identifier, so that the Internet terminal extension sends an authentication request to the website server to complete the authentication operation. That is: the Internet terminal expands a new page window based on the accessible address of the target website, and uses the received token to access the website server to verify the login authorization. If the verification is passed, it receives the login authentication information fed back by the website server.

As shown in Figures 5 and 6, a preferred mode in the implementation of the present invention, the sending of the target website identity information and registration information to the Internet terminal extension corresponding to the Internet terminal extension identifier includes:

The user agent sends the identity information of the target website, the registration information and the extended identification of the Internet terminal to the trusted server agent or the terminal extended server;

The trusted server agent or the terminal extension server sends the target website identity information, registration information and pre-stored authentication verification callback address to the Internet terminal extension corresponding to the Internet terminal extension identifier, so that the Internet terminal extension can send the The authentication request completes the authentication operation, wherein the Internet terminal extension listens to the request of the trusted server agent or the terminal extension server, and receives the target website identity information, registration information, and pre-stored authentication verification callback address. The Internet terminal expands the new page window based on the accessible address of the target website, and at the same time sends identity information and registration information to the website server according to the authentication verification callback address to complete the authentication operation and receive feedback authentication information.

As shown in Figure 7, in this embodiment, in step S1, obtaining the extended identification of the Internet access terminal includes:

S11. The user logs in/activates the user agent through the master password;

S12. The Internet terminal extension generates a temporary unique UUID, and sends the UUID to the user agent and the terminal extension server after waiting for an authorization request from the user agent;

S13. After the user agent receives the UUID sent by the Internet terminal extension, it forwards it to the terminal extension server, and the terminal extension server performs UUID verification;

S14. The terminal extension server identifies and matches the UUID obtained from the Internet terminal extension and the user agent, and if the matching is successful, generates and returns the Internet terminal extension identifier to the user agent according to the UUID.

In this embodiment, the acquisition of the extended identification of the Internet access terminal in step S1 includes:

S111, the user logs in/activates the user agent through the master password, and records the user_id;

S112, the Internet terminal extension generates a temporary unique UUID, and sends the UUID to the user agent and the terminal extension server after waiting for the authorization request of the user agent, and simultaneously records the user_id sent when the user agent authorizes;

S113. The terminal extension server receives the UUID sent by the Internet terminal extension, records the extended unique identifier, and establishes a mapping relationship between the UUID and the extended unique identifier;

It should be noted that the extension unique identifier can be the extension id uniquely pointing to the extension of the Internet terminal, or a network link identifier capable of establishing a long connection with the extension, such as the long connection socketid of websocket, which is not specifically limited here. Technicians can choose flexibly according to the actual situation.

S114. The user agent receives the UUID sent by the Internet terminal extension, sends the user_id and the UUID to the terminal extension server, and the terminal extension server performs UUID verification;

S115, the terminal extension server receives the user_id and UUID sent by the user agent, identifies and matches the UUID obtained from the Internet terminal extension and the user agent, if the match is successful, establishes the mapping relationship between user_id and the extended unique identifier, and deletes the first step at the same time The mapping relationship between UUID and extended unique identifier, and expire UUID;

In a specific implementation, the Internet access terminal extension may periodically update the mapping relationship between the user_id and the extended unique identifier in the terminal extension server based on the user_id stored in S502, so as to ensure the uniqueness and real-time performance of the extended unique identifier. At the same time, the terminal extension server can set a certain recording time limit for the mapping relationship between the stored user_id and the extended unique identifier. After a certain period of time, the user agent needs to re-authorize the Internet terminal extension to improve security.

S116. When the user agent wants to perform relevant authentication operations, it sends the user_id to the terminal extension server, and the terminal extension server queries the mapping relationship between the user_id and the extended unique identifier. If the query is successful, the extended unique identifier is returned to the user agent.

As shown in Figure 8, the present invention also provides a network identity cross-device application fast authentication system, including:

An acquisition module, used for the user agent to acquire the extended identifier of the Internet access terminal;

A processing module, configured to send an authentication request to the website server to obtain an authentication request feedback token according to the pre-stored target website identity information and registration information, or forward the target website identity information and registration information through the trusted server proxy/terminal extension server;

An authentication module, configured to send authentication request feedback information, or target website identity information and registration information to the Internet terminal extension corresponding to the Internet terminal extension identifier, so that the Internet terminal extension can use the authentication request feedback information, or the target website The website identity information and registration information send an authentication request to the website server to complete the authentication operation.

Preferably, the authentication module is configured to: send an authentication request to the website server through the trusted server agent according to the identity information and the registration information to obtain the authentication request feedback information, and call back the authentication request feedback information and the pre-stored authentication check The address is sent to the Internet terminal extension corresponding to the Internet terminal extension identifier, so that the Internet terminal extension sends an authentication request to the website server to complete the authentication operation.

Preferably, the authentication module is configured to: send an authentication request to the website server with the identity information and the registration information to obtain authentication request feedback information, and send the authentication request feedback information to the Internet access terminal corresponding to the Internet access terminal extension identifier extension, so that the Internet terminal extension sends an authentication request to the website server to complete the authentication operation.

Preferably, the authentication module is configured to: send the target website identity information, registration information and extension identification to a trusted server agent or terminal extension server; and forward the target website identity information and registration information to the Internet access terminal extension The corresponding Internet access terminal extension is identified, so that the Internet access terminal extension sends an authentication request to the website server to complete the authentication operation.

The present invention also provides a user agent device, including:

A memory for storing a network identity authentication program;

The processor is configured to implement the network identity cross-device application fast authentication method when executing the network identity authentication program.

The present invention also provides a computer-readable storage medium, wherein a network identity authentication program is stored on the computer-readable storage medium, and when the network identity authentication program is executed by a processor, a fast authentication method for network identity cross-device application is realized.

Obviously, those skilled in the art can make various changes and modifications to the present invention without departing from the spirit and scope of the present invention. It should be noted that the above descriptions are only specific embodiments of the present invention, and do not limit the present invention. All adjustments and optimizations made within the spirit and principles of the present invention shall belong to the claims of the present invention. coverage.

Claims (5)

1. A network identity cross-device application quick authentication method, is characterized in that, comprises: The user agent obtains the extended identifier of the Internet access terminal; Send an authentication request to the website server according to the pre-stored identity information and registration information of the target website to obtain the feedback information of the authentication request, or forward the identity information and registration information of the target website through a trusted server agent; sending the authentication request feedback information, or the target website identity information and registration information to the Internet terminal extension corresponding to the Internet terminal extension identifier, so that the Internet terminal extension uses the authentication request feedback information, or the target website identity information and registration information The information sends an authentication request to the website server to complete the authentication operation; Among them, obtaining the extended identifier of the Internet access terminal includes: the user logs in or activates a user agent; The Internet terminal extension generates a temporary unique UUID, and sends the UUID to the user agent and the terminal extension server after waiting for the authorization request of the user agent; After receiving the UUID sent by the Internet terminal extension, the user agent forwards it to the terminal extension server, and the terminal extension server performs UUID verification; The terminal extension server identifies and matches the UUID obtained from the Internet terminal extension and the user agent, and if the match is successful, generates and returns the Internet terminal extension identifier to the user agent according to the UUID; Alternatively, the obtaining the extended identifier of the Internet access terminal includes: The user logs in or activates the user agent, and records the user_id; The Internet terminal extension generates a temporary unique UUID, waits for the authorization request of the user agent, and sends the UUID to the user agent and the terminal extension server, and records the user_id sent by the user agent when it is authorized; The terminal extension server receives the UUID sent by the Internet terminal extension, records the extended unique identifier, and establishes the mapping relationship between the UUID and the extended unique identifier; The user agent receives the UUID sent by the Internet terminal extension, sends the user_id and UUID to the terminal extension server, and the terminal extension server performs UUID verification; The terminal extension server receives the user_id and UUID sent by the user agent, identifies and matches the UUID obtained from the Internet terminal extension and the user agent, and if the match is successful, establishes the mapping relationship between user_id and the extended unique identifier, and deletes the UUID and UUID in the first step. Extend the mapping relationship of unique identifiers and perform expiration processing on UUID; When the user agent wants to perform relevant authentication operations, it sends the user_id to the terminal extension server, and the terminal extension server queries the mapping relationship between user_id and the extended unique identifier. If the query is successful, it returns the Internet terminal extension identifier to the user agent. Wherein, sending the authentication request feedback information to the Internet terminal extension corresponding to the Internet terminal extension identifier includes: The user agent sends the target website identity information, registration information and Internet terminal extension identification to the trusted server agent; The trusted server agent sends an authentication request to the website server according to the pre-stored target website identity information and registration information to obtain the authentication request feedback information; The trusted server agent sends the authentication request feedback information and the pre-stored authentication verification callback address to the Internet terminal extension corresponding to the Internet terminal extension identifier, so that the Internet terminal extension sends an authentication request to the website server to complete the authentication operation; Alternatively, the sending the authentication request feedback information to the Internet terminal extension corresponding to the Internet terminal extension identifier includes: The user agent sends the identity information and registration information of the target website to the website server to obtain the authentication request feedback information; The user agent sends the authentication request feedback information to the Internet terminal extension corresponding to the Internet terminal extension identifier, so that the Internet terminal extension sends an authentication request to the website server to complete the authentication operation; Alternatively, the sending the authentication request feedback information to the Internet terminal extension corresponding to the Internet terminal extension identifier includes: The user agent sends the target website identity information, registration information and Internet terminal extension identification to the trusted server agent; The Internet terminal extension sends the generated random number state to the trusted server agent according to the request of listening to the trusted server agent; The trusted server agent sends an authentication request to the website server according to the pre-stored target website identity information, registration information and random number state to obtain authentication request feedback information; The trusted server agent sends the authentication request feedback information and the pre-stored authentication verification callback address to the Internet terminal extension corresponding to the Internet terminal extension identifier, so that the Internet terminal extension sends an authentication request to the website server to complete the authentication operation; The user agent sends the pre-stored accessible address of the target website to the Internet terminal extension, so that the Internet terminal extension can create a new target website page window; The Internet terminal extension monitors the request of the trusted server agent, and receives the authentication request feedback information and the pre-stored authentication verification callback address; The authentication request feedback information includes: feedback login authentication information and a token that can be used to verify the status of login authorization; wherein, the token is an identification token for the website server to verify whether the user has logged in and authorized. 2. A network identity cross-device application rapid authentication system, characterized in that it comprises: An acquisition module, used for the user agent to acquire the extended identifier of the Internet access terminal; A processing module, configured to send an authentication request to the website server to obtain authentication request feedback information according to the pre-stored target website identity information and registration information, or forward the target website identity information and registration information through a trusted server agent; An authentication module, configured to send authentication request feedback information, or target website identity information and registration information to the Internet terminal extension corresponding to the Internet terminal extension identifier, so that the Internet terminal extension can use the authentication request feedback information, or the target website The website identity information and registration information send an authentication request to the website server to complete the authentication operation; the user agent sends the pre-stored accessible address of the target website to the Internet terminal extension, so that the Internet terminal extension can create a new target website page window; The authentication module is configured to: sending the identity information and registration information of the target website to the Internet terminal extension corresponding to the Internet terminal extension identifier includes: sending the target website identity information and registration information to the website server through a trusted server agent according to the identity information and the registration information. The authentication request is to obtain the authentication request feedback information, and the authentication request feedback information and the pre-stored authentication verification callback address are sent to the Internet terminal extension corresponding to the Internet terminal extension identifier, so that the Internet terminal extension sends the authentication request to the website server to complete Authentication operation. 3. The network identity cross-device application rapid authentication system according to claim 2, wherein the authentication module is configured to: send the target website identity information and registration information to the Internet terminal extension corresponding to the Internet terminal extension identifier Including: sending the target website identity information, registration information and Internet terminal extension identification to the trusted server agent; and forwarding the target website identity information and registration information to the Internet access terminal extension corresponding to the Internet access terminal extension identification, so as to access the Internet The terminal extension sends an authentication request to the website server to complete the authentication operation. 4. A user agent device, characterized in that, comprising: A memory for storing a network identity authentication program; A processor, configured to implement the steps of the method for fast authentication of cross-device network identity applications according to claim 1 when executing the network identity authentication program. 5. A computer-readable storage medium, characterized in that, a network identity authentication program is stored on the computer-readable storage medium, and when the network identity authentication program is executed by a processor, network identity crossover as claimed in claim 1 is realized. The device applies the fast authentication method.

Images