CN116263918A - Password-free login data processing method and password-free login data processing system - Google Patents

Abstract

The invention relates to a method and a system for processing password-free login data. The method comprises the following steps: sending a first request for requesting to allocate the device ID to the server, and receiving and storing the device ID returned from the server; sending a second request for distributing the temporary session Token to the server based on the device ID, and receiving and storing the temporary session Token distributed from the server; and sending out a password-free login request based on the equipment ID and the temporary session Token. According to the invention, the consumer can make the order and pay through the allocated device ID without registering and logging in, and the convenience and safety of payment can be realized.

Description

Password-free login data processing method and password-free login data processing system

technical field

The invention relates to computer technology, in particular to a secret-free login data processing method and a secret-free login data processing system.

Background technique

With the development of e-commerce, e-commerce has become an important part of people's daily life. People can shop without going out using computers or mobile phones, and the prices are cheap.

In order to purchase the goods they need from various platforms, consumers need to submit personal information to register platform accounts. Unknowingly, I found that I had retained personal sensitive information such as personal mobile phone numbers, email addresses, and passwords on many platforms, which increased the risk of personal information being leaked. In particular, some users use the same account and password on each website for the convenience of memory, which increases the risk of credential stuffing attacks. If the account password of one platform is leaked, the account password of other platforms will be leaked.

For consumers, many shopping platforms are only used temporarily or very infrequently, and may not be used again after the purchase. Therefore, it is hoped to find an online payment solution that can quickly and conveniently complete the shopping payment process without user registration and login.

There are two main implementation methods of the current login-free payment scheme:

When the user clicks to pay, the cash register interface of the payment platform is called, and the user enters the card number and other information to complete the payment. This login-free payment process is very simple, but there are several problems. First, users cannot view historical transaction records; second, others can view their own order information after knowing the payment link; It is not possible to check the previous order status after the browser.

Based on the browser cache method, the user device ID is recorded when the user opens the payment link. The user clicks the payment button and jumps to the cash register to complete the payment. After payment, the association between the device ID and the transaction record is recorded. Although it can solve the problem of viewing historical transaction records and viewing order status after the user pays, this solution has very big security problems, such as: the attacker obtains the user's device ID through packet capture, etc., and then can view the All transaction records associated with the device ID.

Contents of the invention

In view of the above problems, the present invention aims to provide a secret-free login data processing method and a secret-free login data processing system that can complete the subsequent payment process without registration and login and can ensure payment security.

Furthermore, the present invention also aims to provide a secret-free login data processing method and a secret-free login data processing system that can prevent others from impersonating users to request order status and historical transaction inquiries.

The secret-free login data processing method in one aspect of the present invention is characterized in that it includes:

A parameter initialization step, sending a first request to the server for requesting the allocation of a device ID, receiving and storing the device ID returned from the server, wherein the device ID is generated by the server based on the first request and is used to uniquely identify the client end;

The temporary session Token request step is to send a second request for allocating a temporary session Token to the server based on the device ID, and receive and store the temporary session Token allocated from the server, wherein the temporary session Token is generated by the server based on the second Two requests are generated and the server stores the first correspondence between the temporary session Token and the device ID;

In the secret-free login step, a secret-free login request is issued based on the device ID and the temporary session Token.

Optionally, in the secret-free login request, a third request for obtaining order information is issued based on the device ID and the temporary session Token, and the order information related to the device ID returned from the server is received, wherein the The server stores the second corresponding relationship between the temporary session Token and the order information,

After the password-free login request, it further includes:

The order payment step is to issue a fourth request for requesting payment based on the temporary session Token and the order information, and receive the payment link created based on the fourth request returned from the server, wherein the server according to the The first corresponding relationship and the second corresponding relationship obtain corresponding order information and generate a payment link.

Optionally, after the order payment step, further include:

The transaction query step is to issue a fifth request for querying transaction records based on the temporary session Token, and receive the transaction records returned from the server based on the fifth request, wherein the server according to the first correspondence The relationship obtains transaction records related to the device ID corresponding to the temporary session Token.

Optionally, the parameter initialization step includes:

Send a request to the server to obtain the server-side public key;

receiving and storing the server-side public key generated from the server according to the request, wherein the server-side public key and the server-side private key corresponding to the server-side public key are stored on the server;

Generate a client public-private key pair and a random key and store the client public-private key pair and random key;

sending a first request to the server for requesting device ID allocation, wherein the first request includes the client public key and a random key encrypted with the server public key, wherein the server uses the The server-side private key decrypts a random key, and generates a device ID that uniquely identifies the client, uses the random key to encrypt the device ID and returns it, and the server stores the corresponding relationship between the device ID and the client public key; and

Receive the device ID returned from the server.

Optionally, an extraction password is set for the stored client public-private key pair and random key.

Optionally, the temporary session Token request step includes:

generate a temporary session key;

Sending a second request to the server for obtaining a temporary session Token, wherein the second request includes: a device ID encrypted with the temporary session key, a device ID encrypted with the client private key to digitally sign the message The signature value and the temporary session key encrypted with the server-side public key, wherein the server uses the server-side private key to decrypt to obtain the temporary session key, and uses the temporary session key to decrypt to obtain the device ID, and then according to the device ID Based on the corresponding relationship between the server storage device ID and the client public key, the corresponding client public key is obtained, and the client public key is used to verify the signature of the message. If the signature verification is passed, the server generates a temporary session Token, and the server Store the temporary session token and temporary session key in association with the device ID; and

Receive the temporary session key returned from the server and the signature value for digitally signing the message with the server-side private key.

Optionally, the order payment step includes the following sub-steps:

Use the temporary session Token to send a request to the server to obtain order information, wherein the server obtains the device ID and the order information associated with the device ID according to the received temporary session Token association;

Receive order information returned from the server to the client;

Initiate a payment request to the server with the temporary session Token and order information, wherein the server searches for the device ID and client public key based on the temporary session Token, and then verifies the signature of the message, and creates a payment link based on the order information after the verification is passed; and

Receive the payment link returned from the server.

The secret-free login data processing system in one aspect of the present invention is characterized in that it includes: a mobile terminal and a server,

The mobile terminal includes:

A parameter initialization module, configured to send a first request to the server for requesting device ID allocation, and receive and store the device ID returned from the server;

The temporary session module sends a second request for requesting a temporary session Token to the server based on the device ID, receives and stores the temporary session Token returned from the server; and

The payment processing module sends a third request for obtaining order information based on the device ID and the temporary session Token, sends a fourth request for requesting payment based on the temporary session Token and the order information and based on the The payment link to complete the payment processing,

Wherein, the server includes:

a device ID generating module, configured to generate and uniquely identify the device ID of the client based on the first request;

A Token generation module generates a temporary session Token based on the second request;

The transaction processing module, based on the third request for obtaining order information, retrieves the order information related to the device ID according to the temporary session Token and the ID and creates a payment link based on the fourth request;

The database is used to store the device ID and the temporary session Token, and is used to store a first correspondence between the temporary session Token and the device ID and a second correspondence between the temporary session Token and order information.

Optionally, the database further stores transaction records related to the device ID,

The mobile terminal further includes:

The transaction query module sends the fifth request for querying transaction records based on the temporary session Token,

The transaction processing module further receives the fifth request and queries the transaction records related to the device ID from the database.

The initialization module in one aspect of the present invention is used to send a first request to the server for requesting the allocation of a device ID, and receive and store the device ID returned from the server;

The temporary session module sends a second request for obtaining a temporary session Token to the server based on the device ID, receives and stores the temporary session Token returned from the server; and

The payment processing module sends a third request for obtaining order information based on the device ID and the temporary session Token, sends a fourth request for requesting payment based on the temporary session Token and the order information and based on the payment link to complete payment processing.

Optionally the mobile terminal further includes:

The transaction query module sends a fifth request for querying transaction records based on the temporary session Token.

Optionally, the parameter initialization module performs the following actions:

Send a request to the server to obtain the server-side public key;

receiving the server-side public key generated from the server according to the request and storing the server-side public key;

Generate a client public-private key pair and a random key and store the client public-private key pair and random key;

sending a first request to the server for requesting device ID allocation, wherein the first request includes the client public key and a random key encrypted with the server public key, wherein the server uses the The server-side private key decrypts a random key, and generates a unique device ID, uses the random key to encrypt the device ID and returns it to the client, and the server stores the corresponding relationship between the device ID and the client public key; and

Receive the device ID returned from the server.

Optionally, the parameter initialization module sets an extraction password for the stored client public-private key pair and random key.

Optionally, the temporary session Token request module performs the following actions:

generate a temporary session key;

Sending a second request to the server for obtaining a temporary session Token, wherein the second request includes: a device ID encrypted with the temporary session key, a device ID encrypted with the client private key to digitally sign the message The signature value and the temporary session key encrypted with the server-side public key, wherein the server uses the server-side private key to decrypt to obtain the temporary session key, and uses the temporary session key to decrypt to obtain the device ID, and then according to the device ID Based on the corresponding relationship between the server storage device ID and the client public key, the corresponding client public key is obtained, and the client public key is used to verify the signature of the message. If the signature verification is passed, the server generates a temporary session Token, and the server Store the temporary session token and temporary session key in association with the device ID; and

Receive the temporary session key returned from the server and the signature value for digitally signing the message with the server-side private key.

The server of one aspect of the present invention is characterized in that, comprising:

A device ID generation module, which is generated based on the first request and used to uniquely identify the device ID of the client;

Token generation module, generates temporary session Token based on the second request;

The transaction processing module, based on the third request for obtaining order information, retrieves the order information related to the device ID according to the temporary session Token and the ID and creates a payment link based on the fourth request;

The database is used to store the device ID and the temporary session Token, and is used to store a first correspondence between the temporary session Token and the device ID and a second correspondence between the temporary session Token and order information.

Optionally, the database further stores transaction records related to the device ID,

The transaction processing module further receives the fifth request and queries the transaction records related to the device ID from the database.

A computer-readable medium according to one aspect of the present invention, on which a computer program is stored, is characterized in that,

When the computer program is executed by the processor, the method for processing the secret-free login data is realized.

A computer device in one aspect of the present invention includes a storage module, a processor, and a computer program stored on the storage module and operable on the processor, wherein the processor implements the above-mentioned exemption when executing the computer program. Secret login data processing method.

As mentioned above, according to the secret-free login data processing method and secret-free login data processing system of the present invention, consumers can place orders and pay without registering and logging in after entering the mall, and only need to use the device ID to realize order information query, Order payment and transaction inquiry, the whole shopping experience is convenient and safe. Moreover, since users do not need to keep information such as personal account passwords, users do not need to worry about personal information being leaked or abused by the platform. Furthermore, in the present invention, through encrypted signature and other technical means, the risks of interception, tampering and counterfeiting of transmitted data can be effectively prevented, and the security of user data can be ensured.

The computer-readable medium in one aspect of the present invention has a computer program stored thereon, and is characterized in that, when the computer program is executed by a processor, the above method for processing secret-free login data is realized.

A computer device in one aspect of the present invention includes a storage module, a processor, and a computer program stored on the storage module and operable on the processor, wherein the processor implements the above-mentioned exemption when executing the computer program. Secret login data processing method.

Description of drawings

Fig. 1 is a schematic flow chart showing a method for processing secret-free login data of the present invention.

Fig. 2 is a schematic flow chart showing the initialization of system parameters in a specific embodiment.

Fig. 3 is a schematic flow chart showing the payment process in a specific embodiment.

Fig. 4 is a schematic flow chart showing the query history recording process in a specific embodiment.

Fig. 5 is a block diagram showing the structure of the password-free login data processing system of the present invention.

Detailed ways

Introduced below are some of the various embodiments of the invention, intended to provide a basic understanding of the invention. It is not intended to identify key or critical elements of the invention or to delineate the scope of protection.

For purposes of brevity and illustration, the principles of the invention are described herein primarily with reference to exemplary embodiments thereof. However, those skilled in the art will readily recognize that the same principles are equally applicable to all types of password-free data processing methods and password-free data processing systems. And these same principles can be implemented therein, and any such changes do not depart from the true spirit and scope of this patent application.

Moreover, in the following description, reference is made to the accompanying drawings, which illustrate certain exemplary embodiments. Electrical, mechanical, logical and structural changes may be made to these embodiments without departing from the spirit and scope of the present invention. Furthermore, although a feature of the invention is disclosed in connection with only one of several implementations/embodiments, such feature may be combined with other implementations as may be desired and/or advantageous for any given or identified functionality. / One or more other features of the embodiments are combined. Accordingly, the following description should not be taken in a limiting sense, and the scope of the invention is defined by the appended claims and their equivalents.

Words such as "have" and "comprising" mean that in addition to having units (modules) and steps that are directly and explicitly stated in the specification and claims, the technical solution of the present invention does not exclude The situation of other units (modules) and steps of the expression.

Some technical terms that will appear in the present invention are described below.

(1) Login-free: Users do not need to register an account on the platform to use all functions, reducing the risk of user personal information being leaked.

(2) Digital signature: It is some data attached to the data unit, or a cryptographic transformation of the data unit. This data or transformation allows the recipient of the data unit to confirm the origin of the data unit and the integrity of the data unit and to protect the data from forgery by someone (eg, the recipient).

(3) RSA: It is an asymmetric encryption algorithm widely used in public key encryption and electronic commerce.

(4) AES: It is the most popular symmetric encryption algorithm at present, and it can also be called Advanced Encryption Standard. It is a block encryption standard adopted by the US federal government.

(5) Extract password: the key to decrypt sensitive data stored on the client.

First, the method for processing password-free login data of the present invention will be described.

Fig. 1 is a schematic flow chart showing a method for processing secret-free login data of the present invention.

As shown in Figure 1, the secret-free login data processing method of the present invention is characterized in that it includes:

Parameter initialization step S100: sending a first request to the server for requesting the allocation of a device ID, receiving and storing the device ID returned from the server, wherein the device ID is generated by the server based on the first request and used to uniquely identify client;

Temporary session Token request step S200: send a second request for allocating a temporary session Token to the server based on the device ID, receive and store the temporary session Token allocated from the server, wherein the temporary session Token is determined by the server based on the The second request is generated and the server stores the first correspondence between the temporary session Token and the device ID; and

Password-free login request step S300: send a password-free login request based on the device ID and the temporary session token.

As an example, here is a scenario where password-free login is used for order payment. In this way, the password-free login request step S300 specifically includes: obtaining a third request for order information, receiving the order information related to the device ID returned from the server, wherein the server stores the second correspondence between the temporary session Token and the order information .

After step S300 of the password-free login request, it further includes (not shown):

Order payment step: send a fourth request for payment based on the temporary session Token and the order information, and receive the payment link created based on the fourth request returned from the server, wherein the server according to the The first corresponding relationship and the second corresponding relationship obtain corresponding order information and generate a payment link.

After the order payment step, it may optionally further include (not shown):

The transaction query step is to issue a fifth request for querying transaction records based on the temporary session Token, and receive the transaction records returned from the server based on the fifth request, wherein the server according to the first correspondence The relationship obtains transaction records related to the device ID corresponding to the temporary session Token.

Next, a method for processing password-free login data according to a specific embodiment of the present invention will be described.

As an example of applying the secret-free login data processing method of the present invention to a payment scenario, the processing process can be roughly divided into four parts: (1) initialization system parameter process, (2) temporary session Token acquisition process and payment process, (3) Query the history record process.

Each part will be described in detail below.

(1) Initialize system parameters

The main function of initializing system parameters is to generate a unique identifier (device ID) for the current client, and generate a client public-private key pair, etc. The client needs to use an encryption algorithm to encrypt the device ID and private key and store it on the client. The next time the user opens the client, first check whether the device ID exists. If it exists, use it directly.

In the present invention, the proposed device ID can uniquely identify the client, and the device ID is used by the server (background) to identify whether it is the same user. When the consumer pays, the background associates the device ID and transaction information, and the next time the user queries the transaction record When querying the associated transaction records based on the device ID. The public-private key pair generated on the client side is used to sign and verify the request message, so that the server can identify the source of the request and ensure that the device ID will not be used by others.

Fig. 2 is a schematic flow chart showing the initialization of system parameters in a specific embodiment.

As shown in Figure 2, the process of initializing system parameters includes:

S1: When the consumer opens any front-end page, check whether the system parameters are initialized (whether there is device ID and other information), if the system parameters have not been initialized, then proceed to the following steps to initialize the system parameters;

S2: The client sends a request to the server to obtain the server-side public key;

S3: The server returns the server-side public key (s_pub_key) according to the request, and the client keeps the server-side public key, which is used for subsequent encryption of sensitive information. The server can generate the server-side public key and server-side public key according to the request The server-side private key, or the server-side public key and server-side private key have been generated and stored in advance by the server;

S4: The client generates a client public-private key pair (client private key: c_pri_key and client public key: c_pub_key) and a random key using a specified algorithm, and encrypts and stores them on the client using a client plug-in or SDK. In addition, As a preferred example, considering the risk of the client encryption algorithm being cracked, you can set an extraction password, and set it so that the client public-private key pair (c_pri_key, c_pub_key) and random password can be obtained only after entering the extraction password. key;

S5: The client sends the client public key (c_pub_key) and the random key encrypted with the server-side public key (s_pub_key) to the server to request to obtain the device ID, where, for example, RSA can be used as the encryption method;

S6: The server decrypts the stored server-side private key (s_pri_key) to obtain a random key, and generates a device ID that uniquely represents the client. The server uses the random key to encrypt the device ID and returns it to the client. At the same time, the server The database saves information such as the device ID and the client public key (c_pub_key), and at least saves the correspondence between the device ID and the client public key (c_pub_key).

After the client receives the device ID, it encrypts and saves it on the client using a client plug-in or SDK (the client code can be packaged using an obfuscation algorithm), and keeps the device ID through encryption, which can prevent the device ID from being stolen by others.

In this way, so far, the system parameter initialization has been completed, and the next time the client is opened, it will first check whether the device ID exists, and if it exists, there is no need to repeat the above operations.

(2) Temporary session Token acquisition process and payment process

Fig. 3 is a schematic flow chart showing the payment process in a specific embodiment.

As shown in Figure 3, the payment process in a specific embodiment includes:

S11: The consumer opens the order page or any other interface of the client;

S12: The client checks whether the system parameters are initialized. If not initialized, the system parameters are initialized (that is, the process of initializing the system parameters in (1) above is performed). If the system parameters have been initialized, perform the following operations. Session Token, if not, execute the operations of S13~S15;

S13: the client generates a temporary session key;

S14: The client sends a request for a temporary session to the server. Here, the request parameters include: a device ID encrypted with a temporary session key, a message digitally signed with RSASHA256, and a temporary session key encrypted with RSA. Among them, the client private key (c_pri_key) required for digital signature and the server-side public key (s_pub_key) required for RSA encryption have been saved on the client when initializing the system parameters, and the encryption algorithm for encrypting the device ID can use AES, for example. On the other hand, if the extraction password is set when initializing the system parameters, the extraction password needs to be entered here to obtain the client private key (c_pri_key) and device ID stored on the client;

S15: After receiving the message, the server uses the server-side public key (s_pri_key) to decrypt to obtain the temporary session key, and then uses the temporary session key to decrypt to obtain the device ID, and then according to the device ID stored in the device ID database and the client public key (c_pub_key)) to find the client public key (c_pub_key) corresponding to the device ID, and finally use the client public key (c_pub_key) to verify the message. If it can be processed normally, it means that the message is If it is legal, the server generates a temporary session token and returns it to the client. At the same time, the server caches the temporary session Token and the temporary session key, and associates the device ID. On the other hand, the client also stores the temporary session token and the temporary session key. Encrypted and cached;

S16: After receiving the temporary session token, the client uses the temporary session token to send a request to the server to obtain order information;

S17: The server obtains the device ID according to the received temporary session Token association query, and returns the order information related to the device ID to the client;

S18: The consumer clicks the payment button;

S19: The client sends a payment request to the server with the temporary session token and order information;

S20: The server searches for the device ID and client public key (c_pub_key) according to the temporary session Token, and then checks the signature of the message with the found client public key. After the verification is passed, it creates a payment link based on the order information and records the device ID. and the relationship between the order,

S21: the server returns the payment link (such as the URL of the cash register) to the client;

S22: The client jumps to the cash register page of the third-party payment platform to complete the subsequent payment process.

(3) Query the history record process.

Fig. 4 is a schematic flow chart showing the query history recording process in a specific embodiment.

As shown in Figure 4, the query history recording process in a specific embodiment includes:

S31: When the consumer opens the transaction record page or any other front-end interface, check whether the system parameters are initialized, if not initialized, initialize the system parameters, and if initialized, perform some operations;

S32: The client checks whether a temporary session token already exists in the front end, and if not, executes steps S33~S35.

S33: the client generates a temporary session key;

S34: The client sends a request for a temporary session to the server. Here, the request parameters include: a device ID encrypted with a random key, a message signed with RSASHA256, and a temporary session key encrypted with RSA. Among them, the client private key (c_pri_key) required for digital signature and the server-side public key (s_pub_key) required for RSA encryption have been saved on the client when initializing the system parameters, and the encryption algorithm for encrypting the device ID can use AES, for example. On the other hand, if the extraction password is set when initializing the system parameters, the extraction password needs to be entered here to obtain the client private key (c_pri_key) and device ID stored on the client;

S35: After receiving the message, the server uses the server-side private key (s_pri_key) to decrypt to obtain the temporary session key, and then uses the temporary session key to decrypt to obtain the device ID. key (c_pub_key)) to find the client public key (c_pub_key) corresponding to the device ID, and finally use the client public key (c_pub_key) to verify the message. If it can be processed normally, it means that the message is If it is legal, the server generates a temporary session token and returns it to the client. At the same time, the server caches the temporary session Token and the temporary session key, and associates the device ID. On the other hand, the client also stores the temporary session token and the temporary session key. Encrypted and cached;

S36: The client carries the temporary session Token and sends a request to the server to obtain historical transaction records;

S37: After receiving the request, the server obtains the device ID and the corresponding client public key (c_pub_key) according to the temporary session Token, and then uses the client public key (c_pub_key) to verify the signature of the message to ensure the legitimacy of the data source. If If the request is legal, the transaction record corresponding to the device ID will be returned.

The password-free login data processing method of the present invention has been described above, and then the password-free login data processing system of the present invention will be described.

Fig. 5 is a block diagram showing the structure of the password-free login data processing system of the present invention.

As shown in FIG. 5 , the password-free login data processing system includes: a mobile terminal 100 and a server 200 .

Wherein, the mobile terminal 100 includes:

A parameter initialization module 110, configured to send a first request to the server for requesting the allocation of a device ID, and receive and store the device ID returned from the server;

The temporary session module 120 sends a second request for requesting a temporary session Token to the server based on the device ID, receives and stores the temporary session Token returned from the server; and

The payment processing module 130 sends a third request for obtaining order information based on the device ID and the temporary session Token, sends a fourth request for requesting payment based on the temporary session Token and the order information, and sends a fourth request based on the The server's payment link completes the payment processing.

Wherein, the server 200 includes:

A device ID generating module 210, configured to generate a device ID based on the first request and used to uniquely identify the client;

Token generating module 220 generates a temporary session Token based on the second request;

The transaction processing module 230, based on the third request for obtaining order information, retrieves the order information related to the device ID according to the temporary session Token and the ID and creates a payment link based on the fourth request;

The database 240 is configured to store the device ID and the temporary session Token, and is used to store a first correspondence between the temporary session Token and the device ID and a second correspondence between the temporary session Token and order information.

Further, the database 240 further stores transaction records related to device IDs.

The mobile terminal 100 further includes: a transaction query module 240, which sends a fifth request for querying transaction records based on the temporary session Token.

The transaction processing module 230 is further configured to further receive the fifth request and query the transaction record related to the device ID from the database.

Wherein, the parameter initialization module 110 performs the following actions:

Send a request to the server to obtain the server-side public key;

receiving the server-side public key generated from the server according to the request and storing the server-side public key;

Generate a client public-private key pair and a random key and store the client public-private key pair and random key;

sending a first request to the server for requesting device ID allocation, wherein the first request includes the client public key and a random key encrypted with the server public key, wherein the server uses the The server-side private key decrypts a random key, and generates a unique device ID, uses the random key to encrypt the device ID and returns it to the client, and the server stores the corresponding relationship between the device ID and the client public key; and

Receive the device ID returned from the server.

Moreover, the parameter initialization module 110 sets an extraction password for the stored client public-private key pair and random key.

The temporary session Token request module 120 performs the following actions:

generate a temporary session key;

Sending a second request to the server for acquiring a temporary session Token, wherein the second request includes: a device ID encrypted using the temporary session key, a message digitally signed using the client private key, and the temporary session key encrypted using the server-side public key, wherein the server uses the server-side private key to decrypt to obtain the temporary session key, uses the temporary session key to decrypt to obtain the device ID, and then stores the device ID based on the server The correspondence between the device ID and the client public key obtains the corresponding client public key, and uses the client public key to verify the signature of the message. If the signature verification is passed, the server generates a temporary session Token, and the server sends the temporary session Token and temporary session key are stored in association with the device ID; and

Receive a temporary session key back from the server.

As mentioned above, according to the secret-free login data processing method and secret-free login data processing system of the present invention, consumers can place orders and pay without registering and logging in after entering the mall, and only need to use the device ID to realize order information query, Order payment and transaction inquiry, the whole shopping experience is convenient and safe. Moreover, since users do not need to keep information such as personal account passwords, users do not need to worry about personal information being leaked or abused by the platform. Furthermore, in the present invention, through encrypted signature and other technical means, the risks of interception, tampering and counterfeiting of transmitted data can be effectively prevented, and the security of user data can be ensured.

The present invention also provides a computer-readable medium, on which a computer program is stored, which is characterized in that, when the computer program is executed by a processor, the above-mentioned secret-free login data processing method is realized.

The present invention also provides a computer device, including a storage module, a processor, and a computer program stored on the storage module and operable on the processor. It is characterized in that, when the processor executes the computer program, the aforementioned free Secret login data processing method.

The above examples mainly illustrate the password-free login data processing method and the password-free login data processing system of the present invention. Although only some specific embodiments of the present invention have been described, those skilled in the art should understand that the present invention can be implemented in many other forms without departing from the spirit and scope thereof. The examples and embodiments shown are therefore to be regarded as illustrative and not restrictive, and the invention may cover various modifications without departing from the spirit and scope of the invention as defined in the appended claims with replace.

Claims (18)

1. A secret-free login data processing method, characterized in that, comprising: A parameter initialization step, sending a first request to the server for requesting the allocation of a device ID, receiving and storing the device ID returned from the server, wherein the device ID is generated by the server based on the first request and is used to uniquely identify the client end; The temporary session Token request step is to send a second request for allocating a temporary session Token to the server based on the device ID, and receive and store the temporary session Token allocated from the server, wherein the temporary session Token is generated by the server based on the second Two requests are generated and the server stores the first correspondence between the temporary session Token and the device ID; In the secret-free login step, a secret-free login request is issued based on the device ID and the temporary session Token. 2. The secret-free login data processing method as claimed in claim 1, characterized in that, In the secret-free login request, a third request for obtaining order information is issued based on the device ID and the temporary session Token, and the order information related to the device ID returned from the server is received, wherein the server stores the temporary The second correspondence between session Token and order information, After the password-free login request, it further includes: The order payment step is to issue a fourth request for requesting payment based on the temporary session Token and the order information, and receive the payment link created based on the fourth request returned from the server, wherein the server according to the The first corresponding relationship and the second corresponding relationship obtain corresponding order information and generate a payment link. 3. The secret-free login data processing method according to claim 2, further comprising: after the order payment step: The transaction query step is to issue a fifth request for querying transaction records based on the temporary session Token, and receive the transaction records returned from the server based on the fifth request, wherein the server according to the first correspondence The relationship obtains transaction records related to the device ID corresponding to the temporary session Token. 4. The secret-free login data processing method as claimed in claim 2, wherein the parameter initialization step comprises: Send a request to the server to obtain the server-side public key; receiving and storing the server-side public key generated from the server according to the request, wherein the server-side public key and the server-side private key corresponding to the server-side public key are stored on the server; Generate a client public-private key pair and a random key and store the client public-private key pair and random key; sending a first request to the server for requesting device ID allocation, wherein the first request includes the client public key and a random key encrypted with the server public key, wherein the server uses the The server-side private key decrypts a random key, and generates a device ID that uniquely identifies the client, uses the random key to encrypt the device ID and returns it, and the server stores the corresponding relationship between the device ID and the client public key; and Receive the device ID returned from the server. 5. The secret-free login data processing method as claimed in claim 4, characterized in that, For the stored client public-private key pair and random key, an extraction password is set. 6. The secret-free login data processing method as claimed in claim 4, wherein the temporary session Token request step comprises: generate a temporary session key; Sending a second request to the server for obtaining a temporary session Token, wherein the second request includes: a device ID encrypted with the temporary session key, a device ID encrypted with the client private key to digitally sign the message The signature value and the temporary session key encrypted with the server-side public key, wherein the server uses the server-side private key to decrypt to obtain the temporary session key, and uses the temporary session key to decrypt to obtain the device ID, and then according to the device ID Based on the corresponding relationship between the server storage device ID and the client public key, the corresponding client public key is obtained, and the client public key is used to verify the signature of the message. If the signature verification is passed, the server generates a temporary session Token, and the server Store the temporary session token and temporary session key in association with the device ID; and Receive the temporary session key returned from the server and the signature value for digitally signing the message with the server-side private key. 7. The secret-free login data processing method according to claim 6, wherein the order payment step comprises the following sub-steps: Use the temporary session Token to send a request to the server to obtain order information, wherein the server obtains the device ID and the order information associated with the device ID according to the received temporary session Token association; Receive order information returned from the server to the client; Initiate a payment request to the server with the temporary session Token and order information, wherein the server searches for the device ID and client public key based on the temporary session Token, and then verifies the signature of the message, and creates a payment link based on the order information after the verification is passed; and Receive the payment link returned from the server. 8. A secret-free login data processing system, comprising: a mobile terminal and a server, The mobile terminal includes: A parameter initialization module, configured to send a first request to the server for requesting device ID allocation, and receive and store the device ID returned from the server; The temporary session module sends a second request for requesting a temporary session Token to the server based on the device ID, receives and stores the temporary session Token returned from the server; and The payment processing module sends a third request for obtaining order information based on the device ID and the temporary session Token, sends a fourth request for requesting payment based on the temporary session Token and the order information and based on the The payment link to complete the payment processing, Wherein, the server includes: a device ID generating module, configured to generate and uniquely identify the device ID of the client based on the first request; A Token generation module generates a temporary session Token based on the second request; The transaction processing module, based on the third request for obtaining order information, retrieves the order information related to the device ID according to the temporary session Token and the ID and creates a payment link based on the fourth request; The database is used to store the device ID and the temporary session Token, and is used to store a first correspondence between the temporary session Token and the device ID and a second correspondence between the temporary session Token and order information. 9. The secret-free login data processing system as claimed in claim 8, wherein: The database further stores transaction records related to the device ID, The mobile terminal further includes: The transaction query module sends the fifth request for querying transaction records based on the temporary session Token, The transaction processing module further receives the fifth request and queries the transaction records related to the device ID from the database. 10. A mobile terminal, characterized in that, comprising: A parameter initialization module, configured to send a first request to the server for requesting device ID allocation, and receive and store the device ID returned from the server; The temporary session module sends a second request for obtaining a temporary session Token to the server based on the device ID, receives and stores the temporary session Token returned from the server; and The payment processing module sends a third request for obtaining order information based on the device ID and the temporary session Token, sends a fourth request for requesting payment based on the temporary session Token and the order information and based on the payment link to complete payment processing. 11. The mobile terminal according to claim 10, wherein the mobile terminal further comprises: The transaction query module sends a fifth request for querying transaction records based on the temporary session Token. 12. The mobile terminal of claim 11, wherein: The parameter initialization module performs the following actions: Send a request to the server to obtain the server-side public key; receiving the server-side public key generated from the server according to the request and storing the server-side public key; Generate a client public-private key pair and a random key and store the client public-private key pair and random key; sending a first request to the server for requesting device ID allocation, wherein the first request includes the client public key and a random key encrypted with the server public key, wherein the server uses the The server-side private key decrypts a random key, and generates a unique device ID, uses the random key to encrypt the device ID and returns it to the client, and the server stores the corresponding relationship between the device ID and the client public key; and Receive the device ID returned from the server. 13. The mobile terminal of claim 12, wherein: The parameter initialization module sets an extraction password for the stored client public-private key pair and random key. 14. The mobile terminal of claim 13, wherein: The temporary session Token request module performs the following actions: generate a temporary session key; Sending a second request to the server for obtaining a temporary session Token, wherein the second request includes: a device ID encrypted with the temporary session key, a device ID encrypted with the client private key to digitally sign the message The signature value and the temporary session key encrypted with the server-side public key, wherein the server uses the server-side private key to decrypt to obtain the temporary session key, and uses the temporary session key to decrypt to obtain the device ID, and then according to the device ID Based on the corresponding relationship between the server storage device ID and the client public key, the corresponding client public key is obtained, and the client public key is used to verify the signature of the message. If the signature verification is passed, the server generates a temporary session Token, and the server Store the temporary session token and temporary session key in association with the device ID; and Receive the temporary session key returned from the server and the signature value for digitally signing the message with the server-side private key. 15. A server, characterized in that, comprising: A device ID generation module, which is generated based on the first request and used to uniquely identify the device ID of the client; Token generation module, generates temporary session Token based on the second request; The transaction processing module, based on the third request for obtaining order information, retrieves the order information related to the device ID according to the temporary session Token and the ID and creates a payment link based on the fourth request; The database is used to store the device ID and the temporary session Token, and is used to store a first correspondence between the temporary session Token and the device ID and a second correspondence between the temporary session Token and order information. 16. The server of claim 15, wherein: The database further stores transaction records related to the device ID, The transaction processing module further receives the fifth request and queries the transaction records related to the device ID from the database. 17. A computer-readable medium having a computer program stored thereon, characterized in that, When the computer program is executed by the processor, the secret-free login data processing method described in any one of claims 1-7 is realized. 18. A computer device, comprising a storage module, a processor, and a computer program stored on the storage module and operable on the processor, wherein the processor implements claims 1 to 7 when executing the computer program Any one of the secret-free login data processing methods.

Images