Method and apparatus for managing identity for mobile terminal

• US 9,112,852 B2
• Filed: 07/26/2013
• Issued: 08/18/2015
• Est. Priority Date: 01/27/2011
• Status: Active Grant

• Current Assignee: Tencent Technology Shenzhen Company Limited (Tencent Holdings Limited)
• Original Assignee: Tencent Technology Shenzhen Company Limited (Tencent Holdings Limited)
• Inventors: Wang, Feng, Zhu, Tao, Chen, Jungui
• Primary Examiner(s): Lewis, Lisa
• Assistant Examiner(s): Zhu, Zhimei
• Application Number:
  US13/951,628
• Publication Number:
  US 20130318591A1
• Time in Patent Office: 753 Days
• Field of Search: 726/8
• US Class Current: 1/1
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority

Abstract

A method and apparatus for managing an identity for a mobile. The method comprises identifying an application sending an identity verification request when receiving the identity verification request from one of multiple applications, sending a request message obtained according to the identity verification request to an identity verification server; and notifying all applications in a related application list comprising the identified application of an identity verification result obtained according to a returned message, when receiving the returned message from the identity verification server. Centralized management is performed for user identity information and user identity verification, development and maintenance cost is reduced, security of the user account is increased, and operations of the user are facilitated.

Claims

1. A method for managing an identity for a mobile terminal, comprising:

at a mobile terminal having one or more processors and one or more memories,

identifying an application sending an identity verification request when receiving the identity verification request from one of multiple applications, sending a request message obtained according to the identity verification request to an identity verification server; and

notifying all applications in a related application list comprising the identified application of an identity verification result obtained according to a returned message when receiving the returned message from the identity verification server;

wherein identifying an application sending an identity verification request comprises;

utilizing identifier information of the application extracted from the identity verification request, searching a stored application information list for related information of the application, the related information comprising;

an address of the identity verification server corresponding to the application and the related application list comprising the application;

if the related information of the application is not searched out, requesting the application to send the related information, storing the obtained related information in the application information list.

2. The method according to claim 1, wherein sending a request message obtained according to the identity verification request to an identity verification server comprises:

encrypting identity information in the identity verification request, sending the identity verification request with encrypted identity information to the identity verification server as the request message.

3. The method according to claim 1, wherein when the identity verification server encrypts identity information in the returned message and performs secondary encryption for the returned message,

notifying all applications in a related application list comprising the identified application of an identity verification result obtained according to a returned message comprises:

decrypting the returned message to obtain the identity verification result indicating whether the identity verification is successful;

notifying all applications in the related application list comprising the identified application of the identity verification result obtained.

4. The method according to claim 3, further comprising:

deleting stored identity information related to the identity verification request and notifying all the applications in the related application list comprising the identified application of a failure reason, when the returned message indicates failure of the identity verification.

5. The method according to claim 3, further comprising:

decrypting the identity information in the returned message for obtaining and storing the identity information, when the returned message indicates success of the identity verification.

6. The method according to claim 1, wherein the identity verification comprises identity login verification, identity logout verification or identity change verification.

7. An apparatus for managing an identity for a mobile terminal, comprising:

one or more processors;

one or more memories storing modules executed by one or more processors comprising;

an identifying module, adapted to identifying an application sending an identity verification request when receiving the identity verification request from one of multiple applications;

a sending and receiving module, adapted to send a request message obtained according to the identity verification request to an identity verification server, and receive a returned message from the identity verification server; and

a notifying module, adapted to notify all applications in a related application list comprising the identified application of an identity verification result obtained according to the returned message;

wherein the apparatus further comprises a storing module, adapted to store an application information list corresponding to the multiple applications, user information and more than one related application lists;

wherein

the identifying module is adapted to utilize identifier information of the application extracted from the identity verification request, search the application information list stored in the storing module for related information of the application, the related information of the application comprising;

an address of the identity verification server corresponding to the application and the related application list comprising the application, and if the related information of the application is not searched out, request the application to send the related information, store the obtained related information in the application information list in the storing module.

8. The apparatus according to claim 7, further comprising:

an encrypting and decrypting module, adapted to encrypt identity information in the identity verification request, send the identity verification request with encrypted identity information to the sending and receiving module as the request message;

decrypt the returned message received by the sending and receiving module to obtain the identity verification result, provide the identity verification result to the notifying module;

if the identity verification is successful, decrypt the identity information in the returned message, and provide the decrypted identity information to the storing module.

9. The apparatus according to claim 8, wherein the storing module is further adapted to delete the identity information related to the identity verification request when the identity verification fails;

and store the identity information provided by the encrypting and decrypting module when the identity verification is successful.

10. The apparatus according to claim 7, wherein the notifying module is further adapted to notify all the applications in the related application list comprising the identified application of a failure reason, when the identity verification fails.

11. The apparatus according to claim 7, wherein the identity verification comprises identity login verification, identity logout verification or identity change verification.

12. A non-transitory machine-readable storage medium storing instructions to cause a mobile terminal to execute a method comprising:

identifying an application sending an identity verification request when receiving the identity verification request from one of multiple applications, sending a request message obtained according to the identity verification request to an identity verification server; and

notifying all applications in a related application list comprising the identified application of an identity verification result obtained according to a returned message when receiving the returned message from the identity verification server;

wherein identifying an application sending an identity verification request comprises;

utilizing identifier information of the application extracted from the identity verification request, searching a stored application information list for related information of the application, the related information comprising;

an address of the identity verification server corresponding to the application and the related application list comprising the application;

if the related information of the application is not searched out, requesting the application to send the related information, storing the obtained related information in the application information list.

13. The non-transitory machine-readable storage medium according to claim 12, wherein sending a request message obtained according to the identity verification request to an identity verification server comprises:

encrypting identity information in the identity verification request, sending the identity verification request with encrypted identity information to the identity verification server as the request message.

14. The non-transitory machine-readable storage medium according to claim 12, wherein when the identity verification server encrypts identity information in the returned message and performs secondary encryption for the returned message,

notifying all applications in a related application list comprising the identified application of an identity verification result obtained according to a returned message comprises:

decrypting the returned message to obtain the identity verification result indicating whether the identity verification is successful;

notifying all applications in the related application list comprising the identified application of the identity verification result obtained.

15. The non-transitory machine-readable storage medium according to claim 12, further comprising:

deleting stored identity information related to the identity verification request and notifying all the applications in the related application list comprising the identified application of a failure reason, when the returned message indicates failure of the identity verification.

16. The non-transitory machine-readable storage medium according to claim 12, further comprising:

decrypting the identity information in the returned message for obtaining and storing the identity information, when the returned message indicates success of the identity verification.

17. The non-transitory The machine-readable storage medium according to any one of claim 12, wherein the identity verification comprises identity login verification, identity logout verification or identity change verification.