Account login method, device, and system

• US 10,021,098 B2
• Filed: 12/22/2015
• Issued: 07/10/2018
• Est. Priority Date: 06/25/2013
• Status: Active Grant

• Current Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Original Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Inventors: Cai, Tao, Li, Li, Chou, Wu
• Primary Examiner(s): Pearson, David J
• Application Number:
  US14/978,994
• Publication Number:
  US 20160112419A1
• Time in Patent Office: 931 Days
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 67/146 Markers for unambiguous identification of a particular session, e.g. session cookie or URL-encoding
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials

Abstract

An account login method detects whether an account login request carries an indicator for keeping a logged-in state to determine whether a user decides to keep a logged-in state, and authentication information allocated by an integrated data services platform is stored when it is determined that a logged-in state on a third-party application or website needs to be kept; therefore, in a subsequent login process, the third-party application or website may use the authentication information to automatically perform authentication login to the integrated data services platform.

Claims

1. An account login method implemented by a third-party server, comprising:

receiving an account login request from a first terminal device;

sending the account login request to an integrated data services platform, wherein the account login request for logging in the third-party server comprises instructions that instruct an authentication process to use an account of the integrated data services platform;

detecting whether the account login request comprises an indicator for keeping a logged-in state;

receiving first authentication information of the first terminal device when detecting that the account login request carries the indicator for keeping the logged-in state, wherein the first authentication information is allocated to the first terminal device according to an account login identifier of a user, and wherein the account login identifier is determined according to the account login request;

sending a first access identifier to the first terminal device, wherein the first access identifier enables the first terminal device to send a service access request with the first access identifier;

establishing a first correspondence between the first access identifier allocated to the first terminal device and the first authentication information; and

storing the first correspondence for permitting the service access request of the first terminal device according to the first access identifier.

2. The method according to claim 1, further comprising:

receiving the service access request from the first terminal device, wherein the service access request carries the first access identifier allocated to the first terminal device;

searching, according to the first access identifier and the first correspondence, for the first authentication information corresponding to the first access identifier;

sending the authentication information to the integrated data services platform when the first authentication information corresponding to the first access identifier is found to request the integrated data services platform to determine whether the first authentication information is valid;

receiving a message indicating that the integrated data services platform determines that the first authentication information is valid; and

configuring service access information for the user when the message is received.

3. The method according to claim 1, further comprising:

receiving an account logout request from the first terminal device, wherein the account logout request comprises the first access identifier allocated to the first terminal device;

determining, according to the first access identifier and the first correspondence, the first authentication information corresponding to the first access identifier; and

deleting the first authentication information corresponding to the first access identifier to complete an account logout operation of the user on the first terminal device.

4. The method according to claim 1, further comprising:

acquiring user information of the user, wherein the user information comprises a one-to-one correspondence with the user;

establishing a second correspondence between the first access identifier allocated to the first terminal device and the user information; and

storing the second correspondence.

5. The method according to claim 1, further comprising:

acquiring user information of the user, wherein the user information comprises a one-to-one correspondence with the user;

establishing a second correspondence among the first access identifier allocated to the first terminal device, the first authentication information corresponding to the first access identifier, and the user information; and

storing the second correspondence.

6. The method according to claim 4, further comprising:

receiving an account logout request from a second terminal device, wherein the account logout request comprises a second access identifier allocated to the second terminal device, and wherein the second access identifier is allocated to the second terminal device when the user logs in the third-party server for a first time by using the second terminal device;

determining that the second access identifier corresponds to a third access identifier in a second stored correspondence between the third access identifier and the user information, wherein the third access identifier comprises the second access identifier and a fourth access identifier allocated to another device when the user logs in the third party server for a first time by using the other device other than the second terminal device;

determining, according to the determined third access identifier corresponding to the user information and a third stored correspondence between the third access identifier and second authentication information, the second authentication information corresponding to the third access identifier; and

deleting the determined second authentication information to complete an account logout operation of the user on the second terminal device and on the other device.

7. The method according to claim 5, further comprising:

receiving an account logout request from a second terminal device operated by the user, wherein the account logout request comprises a second access identifier of the second terminal device, and wherein the second access identifier is an access identifier allocated to the user on the second terminal device when the user logs in the third-party server for a first time by using the second terminal device;

determining, according to the second access identifier and a third stored correspondence among a third access identifier, second authentication information and the user information, wherein the second authentication information corresponding to the user information corresponds to the second access identifier; and

deleting the second authentication information to complete an account logout operation of the user on the second terminal device and on another device.

8. The method according to claim 2, further comprising:

forwarding a re-login request to the integrated data services platform when the authentication information corresponding to the first access identifier is not found to request the integrated data services platform to acquire the account login identifier of the user according to the re-login request and allocate authentication information to the first terminal device according to a re-login identifier; and

performing account login configuration for the user after the authentication information is acquired.

9. An account login method implemented by a first terminal device, wherein the method comprises:

sending an account login request to a third-party server, wherein the account login request for logging in the third-party server comprises instructions that instruct an authentication process to use an account of an integrated data services platform, and wherein the account login request comprises an indicator for keeping a logged-in state;

receiving authentication information from the integrated data services platform, wherein the authentication information is allocated by the integrated data services platform according to an account login identifier of a user, and wherein the account login identifier is acquired according to the account login request from the third-party server;

sending the authentication information to the third-party server to request the third-party server to acquire and store the authentication information according to the indicator for keeping a logged-in state in the account login request; and

receiving an access identifier from the third-party server;

storing the access identifier for implementing an account login operation; and

,

sending a service request carrying the access identifier.

10. An account login device, comprising:

a memory configured to store an application program comprising instructions; and

a communications interface;

a bus; and

a processor, wherein the processor, the memory, and the communications interface communicate by using the bus, and wherein the instructions cause the processor to be configured to;

receive an account login request from a first terminal device;

send the account login request to an integrated data services platform, wherein the account login request to log in a third-party server comprises instructions that instruct an authentication process to use an account of the integrated data services platform;

detect whether the account login request comprises an indicator for keeping a logged-in state;

receive first authentication information of the first terminal device when detecting that the account login request comprises the indicator for keeping the logged-in state, wherein the first authentication information is allocated to the first terminal device according to an account login identifier of a user, and wherein the account login identifier is determined according to the account login request;

send a first access identifier to the first terminal device to enable the first terminal device to send a service access request with the first access identifier;

establish a first correspondence between the first access identifier allocated to the first terminal device and the authentication information allocated by the integrated data services platform to the first terminal device; and

store the first correspondence for permitting the service access request of the first terminal device according to the first access identifier.

11. The device according to claim 10, wherein the instructions further cause the processor to be configured to:

receive the service access request from the first terminal device, wherein the service access request comprises the first access identifier allocated to the first terminal device;

search, according to the first access identifier and the first correspondence, for the first authentication information corresponding to the first access identifier;

send the authentication information to the integrated data services platform when the first authentication information corresponding to the first access identifier is found to request the integrated data services platform to determine whether the first authentication information is valid;

receive a message indicating that the integrated data services platform determined that the first authentication information is valid; and

configure service access information for the user when the message is received.

12. The device according to claim 10, where the instructions further cause the processor to be configured to:

receive an account logout request from the first terminal device, wherein the account logout request comprises the first access identifier allocated to the first terminal device;

determine, according to the first access identifier and the first correspondence, the first authentication information corresponding to the first access identifier; and

delete the first authentication information corresponding to the first access identifier to complete an account logout operation of the user on the first terminal device.

13. The device according to claim 10, where the instructions further cause the processor to be configured to:

acquire user information of the user, wherein the user information is in a one-to-one correspondence with the user;

establish a second correspondence between the first access identifier allocated to the first terminal device and the user information; and

store the second correspondence.

14. The device according to claim 10, wherein the instructions further cause the processor to be configured to execute the application program to:

acquire user information of the user, wherein the user information comprises a one-to-one correspondence with the user;

establish a second correspondence among the first access identifier allocated to the first terminal device, the authentication information corresponding to the first access identifier, and the user information; and

store the second correspondence.

15. The device according to claim 13, wherein the instructions further cause the processor to be configured to execute the application program to:

receive an account logout request from a second terminal device, wherein the account logout request comprises a second access identifier allocated to the second terminal device, and wherein the second access identifier is allocated to the second terminal device when the user logs in the third-party server for a first time by using the second terminal device;

determine that the second access identifier corresponds to a third access identifier in a second stored correspondence between the third access identifier and the user information, wherein the third access identifier comprises the second access identifier and a fourth access identifier allocated to another device when the user logs in the third party server for a first time by using the other device other than the second terminal device;

determine, according to the determined third access identifier corresponding to the user information and a third stored correspondence between the third access identifier and second authentication information, the second authentication information corresponding to the third access identifier; and

delete the determined second authentication information to complete an account logout operation of the user on the second terminal device and on the other device.

16. The device according to claim 14, wherein the instructions further cause the processor to be configured to execute the application program to:

receive an account logout request from a second terminal device operated by the user, wherein the account logout request comprises a second access identifier of the second terminal device, and wherein the second access identifier is an access identifier allocated to the user on the second terminal device when the user logs in the third-party server for a first time by using the second terminal device;

determine, according to the second access identifier and a third stored correspondence among a third access identifier, second authentication information and the user information, wherein the second authentication information corresponding to the user information corresponds to the second access identifier; and

delete the second authentication information to complete an account logout operation of the user on the second terminal device and on another device.

17. The device according to claim 11, wherein the instructions further cause the processor to be configured to execute the application program to:

forward a re-login request to the integrated data services platform when the authentication information corresponding to the first access identifier is not found to request the integrated data services platform to acquire the account login identifier of the user according to the re-login request and allocate authentication information to the first terminal device according to a re-login identifier; and

perform account login configuration for the user after the authentication information is acquired.

18. An account login device, comprising:

a memory configured to store an application program comprising instructions;

a communications interface;

a bus; and

a processor, wherein the processor, the memory, and the communications interface communicate by using the bus, and wherein the instructions cause the processor to be configured to;

send an account login request to a third-party server, wherein the account login request for logging in the third-party server comprises instructions that instruct an authentication process to use an account of an integrated data services platform, and wherein the account login request comprises an indicator for keeping a logged-in state;

receive authentication information from the integrated data services platform, wherein the authentication information is allocated by the integrated data services platform according to an account login identifier of a user, and wherein the account login identifier is acquired according to the account login request from the third-party server;

send the authentication information to the third-party server to enable the third-party server to acquire and store the authentication information according to the indicator for keeping the logged-in state in the account login request;

receive an access identifier from the third-party server, wherein the access identifier enables the account login device to implement an account login operation; and

send a service access request carrying the access identifier.