Login method, server, and login system

Patent metadata

Field	Value
Publication number	US-2017195311-A1
Application number	US-201715462521-A
Country	US
Kind code	A1
Filing date	Mar 17, 2017
Priority date	Apr 21, 2015
Publication date	Jul 6, 2017
Grant date	—

Abstract

A login method is disclosed, including: receiving, by a first server, a login request of a first terminal; generating, by the first server, a unique identifier according to the login request, storing the unique identifier, generating a corresponding two-dimensional code according to the unique identifier, and returning the corresponding two-dimensional code to the first terminal, the two-dimensional code including the unique identifier; receiving, by a second server, the unique identifier that is obtained by a second terminal by scanning the corresponding two-dimensional code and a user name that has been used by the second terminal for logging in to an application, and sending the unique identifier and the user name to the first server; performing, by the first server, identity verification of the second server, and binding, by the first server, the stored unique identifier to the user name when the identity verification of the second server succeeds, to implement login to the first terminal by using the user name; or rejecting, by the first server, the login request when the identity verification of the second server fails.

First claim

What is claimed is:

1 . A login method, comprising:
receiving, by a first server, a login request of a first terminal; generating, by the first server, a unique identifier according to the login request, storing the unique identifier, generating a corresponding two-dimensional code according to the unique identifier, and returning the corresponding two-dimensional code to the first terminal, wherein the corresponding two-dimensional code comprises the unique identifier; receiving, by the first server, the unique identifier and a user name sent by a second server, wherein the second server receives the unique identifier that is obtained by a second terminal by scanning the corresponding two-dimensional code and the user name has been used by the second terminal for logging in to an application; performing, by the first server, identity verification of the second server; when the identity verification of the second server succeeds, binding, by the first server, the unique identifier stored on the first server to the user name to implement login to the first terminal by using the user name; and when the identity verification of the second server fails, rejecting, by the first server, the login request.

2 . The method according to claim 1 , wherein the performing, by the first server, the identity verification of the second server comprises:
receiving, by the first server, verification information sent by the second server; and performing, by the first server, the identity verification of the second server according to the verification information and prestored registration information.

3 . The method according to claim 2 , wherein:
the prestored registration information comprises a system identifier and a corresponding key, and the verification information comprises a system identifier, an encrypted character string, and corresponding invoking source information; and the performing, by the first server, the identity verification of the second server according to the verification information and the prestored registration information comprises:
searching, by the first server, the prestored registration information for the corresponding key in the prestored registration information according to the system identifier in the verification information;
decrypting the encrypted character string in the verification information according to the corresponding key in the prestored registration information; and
detecting whether the corresponding invoking source information in the verification information is consistent with invoking source information stored in correspondence with the prestored registration information, wherein
the identity verification of the second server succeeds when the encrypted character string in the verification information is successfully decrypted according to the corresponding key and the corresponding invoking source information in the verification information is consistent with the invoking source information stored in correspondence with the prestored registration information, and
the identity verification of the second server fails when either the encrypted character string in the verification information is not successfully decrypted according to the corresponding key or the corresponding invoking source information in the verification information is not consistent with the invoking source information stored in correspondence with the prestored registration information.

4 . The method according to claim 1 , wherein before the receiving, by the first server, the login request of the first terminal, the method further comprises:
receiving, by the first server, a registration request, wherein the registration request comprises invoking source information; generating, by the first server, registration information, and storing the registration information and the invoking source information in correspondence with each other, so that the second server obtains the registration information and the invoking source information, generates verification information according to the registration information and the invoking source information, and stores the verification information.

5 . The method according to claim 1 , wherein, when the identity verification of the second server succeeds, the binding, by the first server, the unique identifier stored on the first server to the user name to implement login to the first terminal by using the user name comprises:
binding, by the first server, the unique identifier to the user name; receiving a query request sent by the first terminal, wherein the query request comprises the unique identifier; and returning the user name in a binding relationship with the unique identifier to the first terminal according to the query request.

6 . A first server, comprising:
a memory storing instructions; at least one processor in communication with the memory, wherein, when the instructions are executed by the at least one processor, the at least one processor is configured to cause the first server to perform:
receiving a login request of a first terminal;
generating a unique identifier according to the login request, storing the unique identifier, generating a corresponding two-dimensional code according to the unique identifier, and returning the corresponding two-dimensional code to the first terminal, wherein the corresponding two-dimensional code comprises the unique identifier;
receiving the unique identifier and a user name sent by a second server, wherein the unique identifier is obtained by scanning the corresponding two-dimensional code by a second terminal and the user name has been used by the second terminal for logging in to an application;
performing identity verification of the second server;
when the identity verification of the second server succeeds, binding the unique identifier stored in the first server to the user name to implement login to the first terminal by using the user name; and
when the identity verification of the second server fails, rejecting the login request.

7 . The first server according to claim 6 , wherein, when the at least one processor is configured to cause the first server to perform the performing the identity verification of the second server, the at least one processor is configured to cause the first server to perform:
receiving verification information sent by the second server; and performing the identity verification of the second server according to the verification information and prestored registration information.

8 . The first server according to claim 7 , wherein:
the prestored registration information comprises a system identifier and a corresponding key, and the verification information comprises a system identifier, an encrypted character string, and corresponding invoking source information; and when the at least one processor is configured to cause the first server to perform the performing the identity verification of the second server according to the verification information and the prestored registration information, the at least one processor is configured to cause the first server to perform:
searching the prestored registration information for the corresponding key in the prestored registration information according to the system identifier in the verification information;
decrypting the encrypted character string in the verification information according to the corresponding key in the prestored registration information; and
detecting whether the corresponding invoking source information in the verification information is consistent with invoking source information stored in correspondence with the prestored registration information, wherein
the identity verification of the second server su

Assignees

• Tencent Tech Shenzhen Co Ltd

Inventors

• Liu Mengqiao
• Zhang Shanyou
• Liu Yuebo

Classifications

• H04L67/42

  Electricity · mapped topic

• H04L63/083 Primary

  using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226) · CPC title

• G06K7/1417

  2D bar codes · CPC title

• G06K19/10

  at least one kind of marking being used for authentication, e.g. of credit or identity cards (verification of coded identity or credit cards in mechanisms actuated by them G07F7/12) · CPC title

• G06F21/602

  Providing cryptographic facilities or services · CPC title