Account Login Method, Device, and System

• US 20160112419A1
• Filed: 12/22/2015
• Published: 04/21/2016
• Est. Priority Date: 06/25/2013
• Status: Active Grant

• Current Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Original Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Inventors: Cai, Tao, Li, Li, Chou, Wu
• Granted Patent: US 10,021,098 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 67/146 Markers for unambiguous identification of a particular session, e.g. session cookie or URL-encoding
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials

Abstract

An account login method detects whether an account login request carries an indicator for keeping a logged-in state to determine whether a user decides to keep a logged-in state, and authentication information allocated by an integrated data services platform is stored when it is determined that a logged-in state on a third-party application or website needs to be kept; therefore, in a subsequent login process, the third-party application or website may use the authentication information to automatically perform authentication login to the integrated data services platform.

Claims

1. An account login method implemented by a third-party server, comprising:

receiving an account login request from a first terminal device;

sending the account login request to an integrated data services platform, wherein the account login request is used to instruct an authentication process for logging in the third-party server by using an account of the integrated data services platform;

detecting whether the account login request carries an indicator for keeping a logged-in state;

acquiring first authentication information of the first terminal device when detecting that the account login request carries the indicator for keeping the logged-in state, wherein the first authentication information is allocated to the first terminal device by the integrated data services platform according to an account login identifier of a user, and wherein the account login identifier is acquired by the integrated data services platform according to the account login request;

storing the first authentication information when detecting that the account login request carries the indicator for keeping the logged-in state;

allocating a first access identifier to the first terminal device;

sending the first access identifier to the first terminal device to enable the first terminal device to send a service access request with the first access identifier;

establishing a first correspondence between the first access identifier allocated to the first terminal device and the first authentication information; and

storing the first correspondence.

2. The method according to claim 1, further comprising:

receiving the service access request from the first terminal device, wherein the service access request carries the first access identifier allocated to the first terminal device;

searching, according to the first access identifier and the first correspondence, for the stored first authentication information corresponding to the first access identifier;

sending the stored authentication information to the integrated data services platform when the stored first authentication information corresponding to the first access identifier is found to request the integrated data services platform to determine whether the first authentication information is valid;

receiving a message indicating that the integrated data services platform determines that the first authentication information is valid; and

configuring service access information for the user when the message is received.

3. The method according to claim 1, further comprising:

receiving an account logout request from the first terminal device, wherein the account logout request carries the first access identifier allocated to the first terminal device;

determining, according to the first access identifier and the first correspondence, the stored first authentication information corresponding to the first access identifier; and

deleting the first authentication information corresponding to the first access identifier to complete an account logout operation of the user on the first terminal device.

4. The method according to claim 1, further comprising:

acquiring user information of the user, wherein the user information comprises a one-to-one correspondence with the user;

establishing a second correspondence between the first access identifier allocated to the first terminal device and the user information; and

storing the second correspondence.

5. The method according to claim 1, further comprising:

acquiring user information of the user, wherein the user information comprises a one-to-one correspondence with the user;

establishing a second correspondence among the first access identifier allocated to the first terminal device, the first authentication information corresponding to the first access identifier, and the user information; and

storing the second correspondence.

6. The method according to claim 4, further comprising:

receiving an account logout request from a second terminal device, wherein the account logout request carries a second access identifier allocated to the second terminal device, and wherein the second access identifier is allocated to the second terminal device when the user logs in the third-party sever for a first time by using the second terminal device;

determining that the second access identifier corresponds to a third access identifier in a second stored correspondence between the third access identifier and the user information, wherein the third access identifier comprises the second access identifier and a fourth access identifier allocated to another device when the user logs in the third party server for a first time by using the other device other than the second terminal device;

determining, according to the determined third access identifier corresponding to the user information and a third stored correspondence between the third access identifier and second authentication information, the second authentication information corresponding to the third access identifier; and

deleting the determined second authentication information to complete an account logout operation of the user on the second terminal device and on the other device.

7. The method according to claim 5, further comprising:

receiving an account logout request from a second terminal device operated by the user, wherein the account logout request carries a second access identifier of the second terminal device, and wherein the second access identifier is an access identifier allocated to the user on the second terminal device when the user logs in the third-party server for a first time by using the second terminal device;

determining, according to the second access identifier and a third stored correspondence among a third access identifier, second authentication information, and the user information, the second authentication information corresponding to the user information corresponding to the second access identifier; and

deleting the determined second authentication information to complete an account logout operation of the user on the second terminal device and on another device.

8. The method according to claim 2, further comprising:

forwarding a re-login request to the integrated data services platform when the stored authentication information corresponding to the first access identifier is not found to request the integrated data services platform to acquire the account login identifier of the user according to the re-login request and allocate authentication information to the first terminal device according to the re-login identifier; and

performing account login configuration for the user after the authentication information is acquired.

14. The device according to claim 1, wherein the processor is further configured to execute the application program to:

acquire user information of the user, wherein the user information comprises a one-to-one correspondence with the user;

establish a second correspondence among the first access identifier allocated to the first terminal device, the authentication information corresponding to the first access identifier, and the user information; and

store the second correspondence.

16. The device according to claim 14, wherein the processor is further configured to execute the application program to:

receive an account logout request from a second terminal device operated by the user, wherein the account logout request carries a second access identifier of the second terminal device, and wherein the second access identifier is an access identifier allocated to the user on the second terminal device when the user logs in the third-party server for a first time by using the second terminal device;

determine, according to the second access identifier and a third stored correspondence among a third access identifier, second authentication information, and the user information, the second authentication information corresponding to the user information corresponding to the second access identifier; and

delete the determined second authentication information to complete an account logout operation of the user on the second terminal device and on another device.

9. An account login method implemented by a first terminal device, wherein the method comprises:

sending an account login request to a third-party server, wherein the account login request is used to instruct an authentication process for logging in the third-party server by using an account of an integrated data services platform, and wherein the account login request carries an indicator for keeping a logged-in state;

receiving authentication information from the integrated data services platform, wherein the authentication information is allocated by the integrated data services platform according to an account login identifier of the user, and wherein the account login identifier is acquired by the integrated data services platform according to the account login request forwarded by the third-party server;

sending the authentication information to the third-party server to request the third-party server to acquire and store the authentication information according to the indicator for keeping a logged-in state in the account login request; and

receiving an access identifier from the third-party server;

storing the access identifier for implementing an account login operation; and

,

sending a service request carrying the access identifier.

10. An account login device, comprising:

a memory configured to store an application program; and

a communications interface;

a bus; and

a processor, wherein the processor, the memory, and the communications interface communicate by using the bus, and wherein the processor is configured to execute the application program to;

receive an account login request from a first terminal device;

send the account login request to an integrated data services platform, wherein the account login request is used to instruct an authentication process for logging in the third-party server by using an account of the integrated data services platform;

detect whether the account login request carries an indicator for keeping a logged-in state;

acquire first authentication information of the first terminal device when detecting that the account login request carries the indicator for keeping the logged-in state, wherein the first authentication information is allocated to the first terminal device by the integrated data services platform according to an account login identifier of the user, and wherein the account login identifier is acquired by the integrated data services platform according to the account login request;

store the authentication information when detecting that the account login request carries the indicator for keeping the logged-in state

allocate a first access identifier to the first terminal device;

send the first access identifier to the first terminal device to enable the first terminal device to send a service access request with the first access identifier;

establish a first correspondence between the first access identifier allocated to the first terminal device and the authentication information allocated by the integrated data services platform to the first terminal device; and

store the first correspondence.

11. The device according to claim 10, wherein the processor is further configured to execute the application program to:

receive the service access request from the first terminal device, wherein the service access request carries the first access identifier allocated to the first terminal device;

search, according to the first access identifier and the first correspondence, for the stored first authentication information corresponding to the first access identifier;

send the stored authentication information to the integrated data services platform when the stored first authentication information corresponding to the first access identifier is found to request the integrated data services platform to determine whether the first authentication information is valid;

receive a message indicating that the integrated data services platform determined that the first authentication information is valid; and

configure service access information for the user when the message is received.

12. The device according to claim 10, where the processor is further configured to execute the application program to:

receive an account logout request from the first terminal device, wherein the account logout request carries the first access identifier allocated to the first terminal device;

determine, according to the first access identifier and the first correspondence, the stored first authentication information corresponding to the first access identifier; and

delete the first authentication information corresponding to the first access identifier to complete an account logout operation of the user on the first terminal device.

13. The device according to claim 10, where the processor is further configured to execute the application program to:

acquire user information of the user, wherein the user information is in a one-to-one correspondence with the user;

establish a second correspondence between the first access identifier allocated to the first terminal device and the user information; and

store the second correspondence.

15. The device according to claim 13, wherein the processor is further configured to execute the application program to:

receive an account logout request from a second terminal device, wherein the account logout request carries a second access identifier allocated to the second terminal device, and wherein the second access identifier is allocated to the second terminal device when the user logs in the third-party sever for a first time by using the second terminal device;

determine that the second access identifier corresponds to a third access identifier in a second stored correspondence between the third access identifier and the user information, wherein the third access identifier comprises the second access identifier and a fourth access identifier allocated to another device when the user logs in the third party server for a first time by using the other device other than the second terminal device;

determine, according to the determined third access identifier corresponding to the user information and a third stored correspondence between the third access identifier and second authentication information, the second authentication information corresponding to the third access identifier; and

delete the determined second authentication information to complete an account logout operation of the user on the second terminal device and on the other device.

17. The device according to claim 11, wherein the processor is further configured to execute the application program to:

forward a re-login request to the integrated data services platform when the stored authentication information corresponding to the first access identifier is not found to request the integrated data services platform to acquire the account login identifier of the user according to the re-login request and allocate authentication information to the first terminal device according to the re-login identifier; and

perform account login configuration for the user after the authentication information is acquired.

18. An account login device, comprising:

a memory configured to an application program;

a communications interface;

a bus; and

a processor, wherein the processor, the memory, and the communications interface communicate by using the bus, and wherein the processor is configured to execute the application program to;

send an account login request to a third-party server, wherein the account login request is used to instruct an authentication process for logging in the third-party server by using an account of an integrated data services platform, and wherein the account login request carries an indicator for keeping a logged-in state;

receive authentication information from the integrated data services platform, wherein the authentication information is allocated by the integrated data services platform according to an account login identifier of the user, and wherein the account login identifier is acquired by the integrated data services platform according to the account login request forwarded by the third-party server;

send the authentication information to the third-party server to enable the third-party server to acquire and store the authentication information according to the indicator for keeping the logged-in state in the account login request; and

receive an access identifier from the third-party server, wherein the access identifier enables the account login device to implement an account login operation;

send a service access request carrying the access identifier.