Method, device and system for sharing cross-platform account resources

• US 10,586,027 B2
• Filed: 08/08/2017
• Issued: 03/10/2020
• Est. Priority Date: 06/16/2015
• Status: Active Grant

• Current Assignee: Tencent Technology Company Limited (Tencent Holdings Limited)
• Original Assignee: Tencent Technology Company Limited (Tencent Holdings Limited)
• Inventors: Zhou, Hongfei, Li, Jia
• Primary Examiner(s): Zand, Kambiz
• Assistant Examiner(s): Sherkat, Arezoo
• Application Number:
  US15/671,194
• Publication Number:
  US 20170337361A1
• Time in Patent Office: 945 Days
• Field of Search: None
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/306 User profiles

Abstract

A method for sharing a cross-platform account resource is described. An authentication request carrying a user name, a password, and an ID of an APP resource server is transmitted to an account management server, based on a register account on the account management server; an authentication ticket corresponding to the APP resource server is received from the account managements server, and the authentication ticket is stored, in which the authentication ticket carries a user ID, an authorization key and a refresh key; a resource request is transmitted to the APP resource server, based on the user ID and the authorization key in the authentication ticket; an APP resource is received from the APP resource server, after the APP resource server requests the account management server to verify the authentication ticket by using the user ID and the authorization key.

Claims

1. A method for sharing a cross-platform account resource, which is applied to a terminal device, comprising:

interacting with an account management server, and completing a register account on the account management server, wherein register information of the register account comprises a user name and a password;

transmitting an authentication request to the account management server, based on the register account of the account management server, wherein the authentication request carries the user name, the password, and an ID of an APP resource server;

receiving an authentication ticket corresponding to the APP resource server from the account management server, and storing the authentication ticket, wherein the authentication ticket carries a user ID, an authorization key and a refresh key;

before transmitting a resource request to the APP resource server based on the user ID and the authorization key in the authentication ticket, determining whether the authentication ticket corresponding to the APP resource server is stored in the terminal device;

when determining that the authentication ticket corresponding to the APP resource server is stored in the terminal device, transmitting the resource request to the APP resource server based on the user ID and the authorization key in the authentication ticket;

when determining that the authentication ticket corresponding to the APP resource server is not stored in the terminal device, transmitting the authentication request carrying the user name, the password and the ID of the APP resource server to the account management server, or, transmitting a register request to the account management server;

receiving an APP resource from the APP resource server, after the account management

server receives a verification request carrying the user ID and the authorization key from the APP resource server, verifies the authentication ticket by using the user ID and the authorization key, and confirms that the user ID and the authorization key are valid;

wherein the method further comprises;

after the APP resource server requests the account management server to verify the authentication ticket by using the user ID and the authorization key, receiving a ticket error indication from the APP resource server;

on the basis of the ticket error indication, transmitting a ticket refresh request carrying the user ID and the refresh key to the account management server, or transmitting the authentication request carrying the user name, the password and the ID of the APP resource server to the account management server; and

,

receiving the authentication ticket carrying the user ID, a new authorization key and a new refresh key from the account management server, and storing the authentication ticket.

2. The method according to claim 1, wherein a valid period is respectively set for the authorization key and the refresh key in the authentication ticket, the valid period of the refresh key is longer than the valid period of the authorization key;

wherein the method further comprises;

after determining that the authentication ticket corresponding to the APP resource server is stored in the terminal device, and before transmitting the resource request to the APP resource server based on the user ID and the authorization key in the authentication ticket, determining whether the authorization key of the authentication ticket is within the valid period, when determining that the authorization key is within the valid period, transmitting the resource request to the APP resource server based on the user ID and the authorization key in the authentication ticket;

when determining that the authorization key is not within the valid period, determining whether the refresh key in the authentication ticket is within the valid period, when the refresh key is within the valid period, transmitting a ticket refresh request carrying the user ID and the refresh key to the account management server, receiving the authentication ticket corresponding to the APP resource server from the account management server, and storing the authentication ticket, wherein the authentication ticket carries the user ID, the authorization key and the refresh key;

when the refresh key is not within the valid period, transmitting the authentication request carrying the user name, the password, and the ID of the APP resource server to the account management server.

3. A method for sharing a cross-platform account resource, which is applied to an account management server, comprising:

receiving a register request from a terminal device, wherein the register request carries register information of a user name and a password;

storing a register account corresponding to the register information, and returning a register complete indication to the terminal device;

receiving an authentication request from the terminal device, wherein the authentication request carries the user name, the password, and an ID of an APP resource server;

when determining that the register account with the user name and the password is stored in the account management server, generating an authentication ticket corresponding to the APP resource server for the terminal device, storing the authentication ticket and returning the authentication ticket to the terminal device, wherein the authentication ticket carries a user ID, an authorization key and a refresh key;

receiving a verification request from the APP resource server, wherein the verification request carries the user ID and the authorization key;

verifying the user ID and the authorization key, by using the corresponding authentication ticket stored in the account management server;

when the user ID and the authorization key are valid, confirming that a verification is passed;

otherwise, confirming that the verification is failed; and

, returning a verification result to the APP resource server;

wherein the method further comprises;

receiving a ticket refresh request from the terminal device, wherein the ticket refresh request carries the user ID and the refresh key;

verifying the user ID and the refresh key, by using the corresponding authentication ticket stored in the account management server;

when the user ID and the refresh key are valid, generating the authentication ticket corresponding to the APP resource server for the terminal device, wherein the authentication ticket carries the user ID, a new authorization key and a new refresh key;

storing the authentication ticket, and returning the authentication ticket to the terminal device;

wherein a valid period is respectively set for the authorization key and the refresh key in the authentication ticket, the valid period of the refresh key is longer than the valid period of the authorization key;

wherein verifying the user ID and the authorization key, by using the corresponding authentication ticket stored in the account management server comprises;

comparing the user ID and the authorization key with the user ID and the authorization key in the corresponding authentication ticket stored in the account management server, when they are the same, and the authorization key is within the valid period, confirming that the user ID and the authorization key are valid;

otherwise, confirming that the user ID and the authorization key are invalid;

wherein verifying the user ID and the refresh key, by using the corresponding authentication ticket stored in the account management server, comprises;

comparing the user ID and the refresh key with the user ID and the refresh key in the corresponding authentication ticket stored in the account management server, when they are the same, and the refresh key is within the valid period, confirming that the user ID and the refresh key are valid;

otherwise, confirming that the user ID and the refresh key are invalid.

4. A device for sharing a cross-platform account resource, which is applied to a terminal device, comprising a processor and a memory;

wherein the memory stores application program modules executable by the processor, and the application program modules comprise a register request transmitting module, a register result receiving module, an authentication request transmitting module, an authentication ticket receiving module, a resource request transmitting module, a resource feedback receiving module and a storing module,

the register request transmitting module is configured to transmit a register request to an account management server, wherein the register request carries register information of a user name and a password; and

,

the register result receiving module is configured to receive register result information from the account management server;

the authentication request transmitting module is configured to transmit an authentication request to the account management server, based on a register account on the account management server, wherein the authentication request carries the user name, the password, and an ID of an APP resource server;

the authentication ticket receiving module is configured to receive an authentication ticket corresponding to the APP resource server from the account management server, and store the authentication ticket into the storing module, wherein the authentication ticket carries a user ID, an authorization key and a refresh key;

the storing module is configured to store an authentication ticket corresponding to each APP resource server;

the resource request transmitting module is configured to transmit a resource request to the APP resource server, based on the user ID and the authorization key in the authentication ticket; and

,

the resource feedback receiving module is configured to receive an APP resource from the APP resource server, after the account management server receives a verification request carrying the user ID and the authorization key from the APP resource server, verifies the authentication ticket by using the user ID and the authorization key, and confirms that the user ID and the authorization key are valid;

wherein the resource feedback receiving module is further configured to receive a ticket error indication from the APP resource server, after the APP resource server requests the account management server to verify the authentication ticket by using the user ID and the authorization key;

on the basis of the ticket error indication, the resource feedback receiving module is further configured to indicate the authentication request transmitting module to transmit the authentication request, or indicate the ticket refresh request transmitting module to transmit the ticket refresh request;

wherein the device further comprises a ticket detecting module, the ticket detecting module is configured to determine whether the authentication ticket corresponding to the APP resource server is stored in the terminal device, before the resource request transmitting module transmits the resource request to the APP resource server;

when determining that the authentication ticket corresponding to the APP resource server is stored in the terminal device, the ticket detecting module is further configured to indicate the resource request transmitting module to transmit the resource request to the APP resource server;

when determining that the authentication ticket corresponding to the APP resource server is not stored in the terminal device, the ticket detecting module is further configured to indicate the authentication request transmitting module to transmit the authentication request to the account management server, or indicate the register request transmitting module to transmit the register request to the account management server.

5. The device according to claim 4, wherein the device further comprises a ticket refresh request transmitting module, which is configured to transmit a ticket refresh request carrying the user ID and the refresh key to the account management server, so as to request the account management server to re-transmit the authentication ticket.

6. The device according to claim 4, wherein a valid period is respectively set for the authorization key and the refresh key in the authentication ticket, the valid period of the refresh key is longer than the valid period of the authorization key;

after determining that the authentication ticket corresponding to the APP resource server is stored in the terminal device, and before indicating the resource request transmitting module to transmit the resource request to the APP resource server, the ticket detecting module is further configured to determine whether the authorization key of the authentication ticket is within the valid period;

when the authorization key is within the valid period, the ticket detecting module is further configured to indicate the resource request transmitting module to transmit the resource request to the APP resource server;

when the authorization key is not within the valid period, the ticket detecting module is further configured to determine whether the refresh key is within the valid period, when the refresh key is within the valid period, the ticket detecting module is further configured to indicate the ticket refresh request transmitting module to transmit the ticket refresh request to the account management server;

when the refresh key is not within the valid period, the ticket detecting module is further configured to indicate the authentication request transmitting module to transmit the authentication request to the account management server.

7. A device for sharing a cross-platform account resource, which is applied to an account management server, comprising a processor and a memory, wherein the memory stores application program modules executable by the processor, and the application program modules comprise a register interface module, a storing module, an authentication request receiving module, an authentication ticket generating module, an authentication ticket transmitting module, a verification request receiving module, a verification processing module and a verification result transmitting module, wherein

the register interface module is configured to receive a register request from a terminal device, wherein the register request comprises register information of a user name and a password;

the register interface module is further configured to store a register account corresponding to the register information into the storing module, and return a register complete indication to the terminal device;

the storing module is configured to store the register account of the terminal device, and an authentication ticket corresponding to each APP resource server, wherein the register account comprises the user name and the password;

the authentication request receiving module is configured to receive an authentication request from the terminal device, wherein the authentication request carries the user name, the password and an ID of an APP resource server;

when determining that the storing module stores the register account carrying the user name and the password, the authentication ticket generating module is configured to generate an authentication ticket corresponding to the APP resource server for the terminal device, and store the authentication ticket into the storing module, wherein the authentication ticket carries a user ID, an authorization key and a refresh key;

the authentication ticket transmitting module is configured to transmit the authentication ticket to the terminal device, wherein the authentication ticket is generated by the authentication ticket generating module;

the verification request receiving module is configured to receive a verification request from the APP resource server, wherein the verification request carries the user ID and the authorization key;

the verification processing module is configured to verify the user ID and the authorization key, by using the corresponding authentication ticket stored in the account management server, when the user ID and the authorization key are valid, the verification processing module is further configured to confirm that a verification is passed;

when the user ID and the authorization key are invalid, the verification processing module is further configured to confirm that the verification is failed; and

the verification result transmitting module is configured to transmit a verification result to the APP resource server, wherein the verification result is obtained by the verification processing module;

wherein the device further comprises a ticket refresh request receiving module, which is configured to receive a ticket refresh request from the terminal device, wherein the ticket refresh request carries the user ID and the refresh key;

the verification processing module is further configured to verify the user ID and the refresh key, by using the corresponding authentication ticket stored in the account management server;

when the user ID and the refresh key are valid, the verification processing module is further configured to indicate the authentication ticket generating module to re-generate the authentication ticket for the terminal device.

8. The device according to claim 7, wherein a valid period is respectively set for the authorization key and the refresh key of the authentication ticket, the valid period of the refresh key is longer than the valid period of the authorization key;

when verifying the user ID and the authorization key, by using the corresponding authentication ticket stored in the account management server, the verification processing module is further configured to compare the user ID and the authorization key with the user ID and the authorization key in the corresponding authentication ticket stored in the account management server, when they are the same, and the authorization key is within the valid period, the verification processing module is further configured to confirm that the user ID and the authorization key are valid;

otherwise, the verification processing module is further configured to confirm that the user ID and the authorization key are invalid;

when verifying the user ID and the refresh key, by using the corresponding authentication ticket stored in the account management server, the verification processing module is further configured to compare the user ID and the refresh key with the user ID and the refresh key in the corresponding authentication ticket stored in the account management server, when they are the same, and the refresh key is within the valid period, the verification processing module is further configured to confirm that the user ID and the refresh key are valid;

otherwise, the verification processing module is further configured to confirm that the user ID and the refresh key are invalid.