CN103634399A - Method and device for realizing cross-domain data transmission - Google Patents

Abstract

The present invention discloses a method and device for realizing cross-domain data transmission. The login cookie data corresponding to the user SID is transmitted between browser servers of different domain names, and different encryption and verification methods are used to ensure the authenticity of the user's login identity. Reliability, so that users can log in across domains between different domain names, effectively improving the efficiency of cross-domain data transmission.

Description

A method and device for realizing cross-domain data transmission

technical field

The present invention relates to the technical field of data processing, in particular to a method and device for realizing cross-domain data transmission.

Background technique

With the rapid development of the Internet, the number and types of websites on the Internet are also increasing, and the domain names of each website are also different, and most websites often need to be registered and logged in before they can be used.

At the same time, since the webpage (Web page) under the domain name of the website is identified and accessed by the Uniform Resource Locator (URL, Universal Resource Locator), for the webpage under the same domain name, as long as the user enters the URL in the browser, the webpage After entering the registered identity information on the website, you can browse the webpage as a login after passing the server verification; however, if the user jumps from the current webpage to a webpage under another domain name, you need to re-enter the registered identity information, And only after passing the server verification can you browse the webpage under another domain name with the login identity.

Therefore, in order to solve this login problem, it is proposed in the prior art to use a cookie method that can retain the user's login status to log in between different domain names; however, since cookies can only be used for one domain name, they cannot be sent to other domain names, so If a cookie is set for one domain name in the browser, the cookie will be invalid for other domain names. Therefore, when a site or network has multiple domain names, if a user wants to log in and browse a web page of another domain name from a web page under one domain name, the invalidation of cookies for other domain names will make user login impossible, greatly reducing cross-domain data transmission s efficiency.

Contents of the invention

In view of the above problems, the present invention is proposed to provide a method for realizing cross-domain data transmission and a corresponding device for realizing cross-domain data transmission that overcome the above problems or at least partially solve the above problems.

According to one aspect of the present invention, a method for implementing cross-domain data transmission is provided, including:

Receive user login request;

Generate session information including at least the user security identifier SID and the first key and redirect the login request to the second browser server;

After receiving the verification request sent by the second browser server according to the user SID, returning the first key to the second browser server;

The login Cookie data is obtained by analyzing the received encrypted data sent by the second browser server, and the login is completed.

Optionally, the method also includes:

Record the user's login IP address when generating the session information.

Optionally, the method also includes:

When receiving the verification request and returning the first key to the second browser server, sending the user login IP address to the second browser server;

Analyze the user login IP address from the received encrypted data;

Check whether the parsed user login IP address is consistent with the recorded user login IP address; if yes, use the parsed login cookie data to complete the login.

Optionally, the method also includes:

When the session message is generated, record the user request login time.

Optionally, the method also includes:

When receiving the verification request and returning the first key to the second browser server, sending the user request login time to the second browser server;

Parse the user request login time from the received encrypted data;

Check whether the parsed user request login time is consistent with the recorded user request login time; if yes, use the parsed login cookie data to complete the login.

According to another aspect of the present invention, a method for realizing cross-domain data transmission is provided, including:

receiving a user login request redirected by the first browser server;

Judging whether the user has login authority; if so, generating login Cookie data, and obtaining the user security identifier SID generated by the first browser server;

sending a verification request to the first browser server according to the SID, and receiving a first key returned by the first browser server;

The login cookie data is encrypted by using the first key and the local second key, and then sent to the first browser server, so that the first browser server can log in according to the encrypted data analysis result.

Optionally, said obtaining the SID generated by the first browser server includes:

Determine the user login Uniform Resource Locator URL according to the user login request;

The user SID is extracted from the user login URL.

Optionally, the method also includes:

After sending the verification request to the first browser server, receiving the user login IP address returned by the first browser server;

Encrypting the login Cookie data by using the first key, the local second key and the user login IP address, and sending the encrypted data to the first browser server.

Optionally, the method also includes:

After sending the verification request to the first browser server, receiving the user requested login time returned by the first browser server;

Encrypting the login cookie data by using the first key, the second local key and the login time requested by the user, and sending the encrypted data to the first browser server.

According to another aspect of the present invention, a device for realizing cross-domain data transmission is provided, including:

a first receiving unit adapted to receive a user login request;

The first generation unit is adapted to generate session information including at least the user security identifier SID and the first key and redirect the login request to the second browser server;

The first feedback unit is adapted to return the first key to the second browser server after receiving the verification request sent by the second browser server according to the user SID;

The first parsing unit is adapted to obtain the login cookie data by parsing the received encrypted data sent by the second browser server, and complete the login.

Optionally, the first generation unit includes:

The first recording module is adapted to record the user login IP address and/or the user request login time when generating the session information.

Optionally, the first feedback unit includes:

The first sending module is adapted to send the user login IP address and/or to the second browser server when receiving the verification request and returning the first key to the second browser server User requests login time.

Optionally, the first parsing unit includes:

The first decryption module is adapted to resolve the user login IP address and/or user login time from the received encrypted data;

The first verification module is adapted to verify whether the user login IP address parsed by the first decryption module is consistent with the recorded user login IP address, and if so, complete the login using the parsed login Cookie data; or, It is suitable for checking whether the user request login time parsed by the first decryption module is consistent with the recorded user request login time, and if so, complete the login by using the parsed login Cookie data; or, it is suitable for checking the Whether the user login IP address parsed by the first decryption module is consistent with the recorded user login IP address, and whether the user request login time parsed by the first decryption module is consistent with the recorded user request login time, if If they are all consistent, the login is completed using the parsed login cookie data.

According to another aspect of the present invention, a device for realizing cross-domain data transmission is provided, including:

The second receiving unit is adapted to receive a user login request redirected by the first browser server;

The second judging unit is adapted to judge whether the user has login authority; if yes, generate login Cookie data, and obtain the user security identifier SID generated by the first browser server;

The second sending unit is adapted to send a verification request to the first browser server according to the SID, and receive the first key returned by the first browser server;

The second encryption unit is adapted to use the first key and the local second key to encrypt the login Cookie data and send it to the first browser server, so that the first browser server can Log in the data analysis result.

Optionally, the second judging unit includes:

The first processing module is adapted to determine the user login Uniform Resource Locator URL according to the user login request;

The second processing module is adapted to extract the user SID from the user login URL determined by the first processing module.

Optionally, the second sending unit includes:

The second obtaining module is adapted to receive the user login IP address and/or user request login time returned by the first browser server after sending the verification request to the first browser server.

Optionally, the second encryption unit includes:

An encryption module, adapted to use the first key, the local second key, and the user login IP address and/or user request login time to encrypt the login Cookie data;

A sending module, adapted to send the data encrypted by the encryption module to the first browser server.

In the embodiment of the present invention, the login Cookie data corresponding to the user SID is transmitted between browser servers of different domain names, and different encryption and verification methods are used to ensure the reliability of the user's login identity, thereby enabling the user to log in between different domain names. Cross-domain login effectively improves the efficiency of cross-domain data transmission.

The above description is only an overview of the technical solution of the present invention. In order to better understand the technical means of the present invention, it can be implemented according to the contents of the description, and in order to make the above and other purposes, features and advantages of the present invention more obvious and understandable , the specific embodiments of the present invention are enumerated below.

Description of drawings

Various other advantages and benefits will become apparent to those of ordinary skill in the art upon reading the following detailed description of the preferred embodiment. The drawings are only for the purpose of illustrating a preferred embodiment and are not to be considered as limiting the invention. Also throughout the drawings, the same reference numerals are used to designate the same components. In the attached picture:

FIG. 1 shows a flow chart of the method steps for realizing cross-domain data transmission according to Embodiment 1 of the present invention;

FIG. 2 shows a flow chart of the method steps for realizing cross-domain data transmission according to Embodiment 2 of the present invention;

FIG. 3 shows a flow chart of the method steps for realizing cross-domain data transmission according to Embodiment 3 of the present invention;

FIG. 4 shows a flow chart of the method steps for realizing cross-domain data transmission according to Embodiment 4 of the present invention;

FIG. 5 shows a flow chart of the steps of a method for implementing cross-domain data transmission according to Embodiment 5 of the present invention;

FIG. 6 shows a structural block diagram of a device for implementing cross-domain data transmission according to Embodiment 6 of the present invention; and

Fig. 7 shows a structural block diagram of an apparatus for implementing cross-domain data transmission according to Embodiment 7 of the present invention.

Detailed ways

Exemplary embodiments of the present disclosure will be described in more detail below with reference to the accompanying drawings. Although exemplary embodiments of the present disclosure are shown in the drawings, it should be understood that the present disclosure may be embodied in various forms and should not be limited by the embodiments set forth herein. Rather, these embodiments are provided for more thorough understanding of the present disclosure and to fully convey the scope of the present disclosure to those skilled in the art.

Referring to FIG. 1 , it shows a flow chart of the steps of Embodiment 1 of a method for realizing cross-domain data transmission according to an embodiment of the present invention, which may specifically include the following steps:

Step 101: the first browser server receives the user login request sent by the browser client;

Step 102: The first browser server generates session information (session) for this login and jumps to the login request value to the second browser server; wherein, the session information includes at least user security identifiers (SID, Security Identifiers) and the first key Key1;

Step 103: After receiving the user login request redirected by the first browser server, the second browser server determines whether the user has login authority; if the user has login authority, the second browser server generates login Cookie data, Execute step 104;

Step 104: the second browser server obtains the user SID, and executes step 105;

Specifically, this embodiment proposes that the user SID may be obtained in the following manner, but is not limited thereto:

S1041: After receiving the user login request redirected by the first browser server, the second browser server determines the user login URL according to the user login request;

S1042: Extract the user SID from the determined user login URL.

Of course, those of ordinary skill in the art can easily understand that after the second browser server receives the user login request redirected by the first browser server, it can also obtain the first browser server’s login request in various ways. The generated SID will not be described in detail in this embodiment.

Step 105: The second browser server sends a verification request to the first browser server according to the obtained SID, so as to obtain the Key1 generated by the first browser server;

Step 106: After receiving the verification request from the second browser server, the first browser server feeds back the Key1 to the second browser server;

Step 107: After the second browser server receives the Key1, use the Key1 and the locally stored second key Key2 to encrypt the login cookie data; execute step 109;

Step 108: the second browser server sends the encrypted login cookie data to the first browser server;

Step 109: The first browser server obtains the login cookie data by decrypting the received encrypted data, and uses the login cookie data to complete the user login operation.

Based on the above-mentioned embodiment 1, embodiment 2 of the present invention also proposes a method for realizing cross-domain data transmission, as shown in FIG. The difference is that the method also includes the process of using the user login IP address for verification, specifically the method includes:

Step 101: the first browser server receives the user login request sent by the browser client;

Step 202: The first browser server generates session information for this login, records the IP address of the user login and jumps to the second browser server for the login request value; wherein, the session information includes at least the user security identifier and The first key Key1;

Step 103: After receiving the user login request redirected by the first browser server, the second browser server determines whether the user has login authority; if the user has login authority, the second browser server generates login Cookie data, Execute step 104;

Step 104: the second browser server obtains the user SID, and executes step 105;

Step 105: The second browser server sends a verification request to the first browser server according to the obtained SID;

Step 206: After receiving the verification request from the second browser server, the first browser server feeds back the Key1 and user login IP address to the second browser server;

Step 207: After the second browser server receives the Key1 and the user login IP address, use the Key1, the locally stored second key Key2 and the user login IP address pair sent by the first browser server to The login Cookie data is encrypted; execute step 108;

Step 108: the second browser server sends the encrypted login cookie data to the first browser server;

Step 209: The first browser server decrypts the received encrypted data, and checks whether the decrypted user login IP address is consistent with the recorded user login IP address, and if so, determines that the decrypted result is The login Cookie data is used to complete the user login operation; otherwise, the login fails.

Based on the above-mentioned embodiment 1, embodiment 3 of the present invention also proposes a method for realizing cross-domain data transmission, as shown in FIG. The difference is that the method also includes a process of verifying the login time requested by the user. Specifically, the method includes:

Step 101: the first browser server receives the user login request sent by the browser client;

Step 302: The first browser server generates session information for this login, and at the same time records the login time requested by the user and jumps to the second browser server for the login request value; wherein, the session information includes at least the user security identifier and the second browser server. A key Key1;

Step 103: After receiving the user login request redirected by the first browser server, the second browser server determines whether the user has login authority; if the user has login authority, the second browser server generates login Cookie data, Execute step 104;

Step 104: the second browser server obtains the user SID, and executes step 105;

Step 105: The second browser server sends a verification request to the first browser server according to the obtained SID;

Step 306: After receiving the verification request from the second browser server, the first browser server feeds back the Key1 and the login time requested by the user to the second browser server;

Step 307: After the second browser server receives the Key1 and the user requested login time, use the Key1, the locally stored second key Key2 and the user requested login time sent by the first browser server to pair The login Cookie data is encrypted; execute step 108;

Step 108: the second browser server sends the encrypted login cookie data to the first browser server;

Step 309: The first browser server decrypts the received encrypted data, and checks whether the decrypted user request login time is consistent with the recorded user request login time, and if so, determines that the decrypted result is The login Cookie data is used to complete the user login operation; otherwise, the login fails.

Based on the above-mentioned embodiment 1, embodiment 4 of the present invention also proposes a method for realizing cross-domain data transmission, as shown in FIG. The difference is that the method also includes the process of verifying the user's login IP address and the user's requested login time. Specifically, the method includes:

Step 101: the first browser server receives the user login request sent by the browser client;

Step 402: The first browser server generates session information for this login, records the user request login time and the user login IP address, and jumps to the login request value of the second browser server; wherein the session information includes at least the user Security identifier and first key Key1;

Step 103: After receiving the user login request redirected by the first browser server, the second browser server determines whether the user has login authority; if the user has login authority, the second browser server generates login Cookie data, Execute step 104;

Step 104: the second browser server obtains the user SID, and executes step 105;

Step 105: The second browser server sends a verification request to the first browser server according to the obtained SID;

Step 406: After receiving the verification request from the second browser server, the first browser server feeds back the Key1, user request login time and user login IP address to the second browser server;

Step 407: After the second browser server receives the Key1, user request login time and user login IP address, use the Key1, the locally stored second key Key2 and the The user requests login time and the user login IP address to encrypt the login Cookie data; execute step 108;

Step 108: the second browser server sends the encrypted login cookie data to the first browser server;

Step 409: The first browser server decrypts the received encrypted data, and checks whether the decrypted user request login time is consistent with the recorded user request login time, and simultaneously checks the decrypted user login time. Whether the IP address is consistent with the recorded user login IP address, if yes, then determine that the decryption is obtained as the login Cookie data, and then utilize the login Cookie data to complete the user login operation; otherwise, the login fails.

Based on the methods of the above-mentioned embodiments, the embodiment of the present invention proposes to describe the methods of the above-mentioned embodiments in detail through the following specific operations, but is not limited thereto; specifically, as shown in Embodiment 5 and Figure 5 , the method includes:

S501: After the user opens the Window of the World browser page login.theworld.cn, enters the user name and password and clicks Login, the Window of the World browser client sends the user's login request to the Window of the World browser server;

S502: After receiving the user's login request from the client, the Window of the World browser server generates a session for this login, the session includes at least the user SID and the first key Kye1, and records the IP address of the user's login and the user request login time TIME; then jump to the 360 browser page app.brower.360.cn?sid:001, the jump address contains the user SID as 001;

S503: After the 360 browser page is opened, the 360 browser server is responsible for processing the user's login request, that is, it first judges whether the user has login authority; The outgoing user SID is 001;

S504: The 360 browser server sends a verification request to the Window of the World browser server according to the extracted user SID, that is, sends a verification request to login.theworld.cn through the SID;

S505: The Window of the World browser server feeds back the Kye1, and the recorded user login IP address and TIME according to the verification request of the 360 browser server;

S506: According to the feedback from the Window of the World browser server, the 360 browser server encrypts the login cookie data by using the Key1, the locally stored second key Key2, TIME and the user login IP address, Then submit the encrypted data to the Window of the World browser server in the form of POST;

S507: The Window of the World browser server decrypts the received encrypted data, and judges whether the decrypted user login IP address is consistent with the recorded user login IP address, and at the same time judges whether the decrypted TIME is consistent with the recorded user login IP address. Whether the TIME is consistent, if both are consistent, then use the decrypted Cookie to complete the login; otherwise, the login fails.

It can be seen that by adopting the method of the embodiment of the present invention, the login Cookie data corresponding to the user SID is transmitted between browser servers of different domain names, and different encryption and verification methods are used to ensure the reliability of the user's login identity, thereby It can realize the cross-domain login of users between different domain names, effectively improving the efficiency of cross-domain data transmission.

Of course, the above-mentioned special information and its judgment method are just examples. When implementing the embodiment of the present invention, other special information and its judgment method can be set according to the actual situation, which is not limited in the embodiment of the present invention. In addition, in addition to the above-mentioned special information and its judgment method, those skilled in the art may also use other special information and its judgment method according to actual needs, which is not limited in this embodiment of the present invention.

For the method embodiment, for the sake of simple description, it is expressed as a series of action combinations, but those skilled in the art should know that the embodiment of the present invention is not limited by the described action order, because according to the embodiment of the present invention , certain steps may be performed in other order or simultaneously. Secondly, those skilled in the art should also know that the embodiments described in the specification belong to preferred embodiments, and the actions involved are not necessarily required by the embodiments of the present invention.

Referring to FIG. 6 , it shows a structural block diagram of an embodiment of a device for realizing cross-domain data transmission according to an embodiment of the present invention, which may specifically include the following modules: a first receiving unit 610 adapted to receive a user login request; a first The generation unit 620 is adapted to generate session information including at least the user security identifier SID and the first key and jumps the login request to the second browser server; the first feedback unit 630 is adapted to After the browser server returns the first key to the second browser server according to the verification request sent by the user SID; the first parsing unit 640 is adapted to pass the received second browser server The encrypted data sent is analyzed to obtain the login cookie data, and the login is completed.

Wherein, the first generating unit 620 may further include (not shown in the figure): a first recording module adapted to record the user login IP address and/or the user request login time when generating the session information.

In addition, the first feedback unit 630 may further include (not shown in the figure): a first sending module, adapted to return the first password to the second browser server after receiving the verification request; When using the key, send the user login IP address and/or user request login time to the second browser server.

In practical applications, the first parsing unit 640 may further include (not shown in the figure): a first decryption module, adapted to parse out the user login IP address and/or user login time from the received encrypted data; The first verification module is adapted to verify whether the user login IP address parsed by the first decryption module is consistent with the recorded user login IP address, and if so, complete the login using the parsed login Cookie data; or, It is suitable for checking whether the user request login time parsed by the first decryption module is consistent with the recorded user request login time, and if so, complete the login by using the parsed login Cookie data; or, it is suitable for checking the Whether the user login IP address parsed by the first decryption module is consistent with the recorded user login IP address, and whether the user request login time parsed by the first decryption module is consistent with the recorded user request login time, if If they are all consistent, the login is completed using the parsed login cookie data.

Referring to FIG. 7 , the present invention also discloses a device for realizing cross-domain data transmission, including the following modules: a second receiving unit 710, adapted to receive a user login request redirected by the first browser server; a second judging unit 720, It is suitable for judging whether the user has login authority; if yes, then generate login Cookie data, and obtain the user security identifier SID generated by the first browser server; the second sending unit 730 is adapted to send the The first browser server sends a verification request, and receives the first key returned by the first browser server; the second encryption unit 740 is adapted to use the first key and the local second key to pair the The login cookie data is encrypted and then sent to the first browser server, so that the first browser server can log in according to the analysis result of the encrypted data.

Wherein, the second judging unit 720 may further include (not shown in the figure): a first processing module, adapted to determine the user login uniform resource locator URL according to the user login request; a second processing module, adapted to obtain from The user SID is extracted from the user login URL determined by the first processing module.

In addition, the second sending unit 730 may further include (not shown in the figure): a second obtaining module, adapted to receive the verification request from the first browser server after sending the verification request to the first browser server. The returned user login IP address and/or user request login time.

In practical applications, the second encryption unit 740 may further include (not shown in the figure): an encryption module adapted to use the first key, the local second key, and the user login IP address and /or the user requests login time to encrypt the login Cookie data; the sending module is adapted to send the data encrypted by the encryption module to the first browser server.

As for the device embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and for related parts, please refer to the part of the description of the method embodiment.

The algorithms and displays presented herein are not inherently related to any particular computer, virtual system, or other device. Various generic systems can also be used with the teachings based on this. The structure required to construct such a system is apparent from the above description. Furthermore, the present invention is not specific to any particular programming language. It should be understood that various programming languages can be used to implement the content of the present invention described herein, and the above description of specific languages is for disclosing the best mode of the present invention.

In the description provided herein, numerous specific details are set forth. However, it is understood that embodiments of the invention may be practiced without these specific details. In some instances, well-known methods, structures and techniques have not been shown in detail in order not to obscure the understanding of this description.

Similarly, it should be appreciated that in the foregoing description of exemplary embodiments of the invention, in order to streamline this disclosure and to facilitate an understanding of one or more of the various inventive aspects, various features of the invention are sometimes grouped together in a single embodiment, figure, or its description. This method of disclosure, however, is not to be interpreted as reflecting an intention that the claimed invention requires more features than are expressly recited in each claim. Rather, as the following claims reflect, inventive aspects lie in less than all features of a single foregoing disclosed embodiment. Thus, the claims following the Detailed Description are hereby expressly incorporated into this Detailed Description, with each claim standing on its own as a separate embodiment of this invention.

Those skilled in the art can understand that the modules in the device in the embodiment can be adaptively changed and arranged in one or more devices different from the embodiment. Modules or units or components in the embodiments may be combined into one module or unit or component, and furthermore may be divided into a plurality of sub-modules or sub-units or sub-assemblies. All features disclosed in this specification (including accompanying claims, abstract and drawings), as well as any method or method so disclosed, may be used in any combination, except that at least some of such features and/or processes or units are mutually exclusive. All processes or units of equipment are combined. Each feature disclosed in this specification (including accompanying claims, abstract and drawings) may be replaced by alternative features serving the same, equivalent or similar purpose, unless expressly stated otherwise.

Furthermore, those skilled in the art will understand that although some embodiments described herein include some features included in other embodiments but not others, combinations of features from different embodiments are meant to be within the scope of the invention. and form different embodiments. For example, in the following claims, any of the claimed embodiments may be used in any combination.

The various component embodiments of the present invention may be implemented in hardware, or in software modules running on one or more processors, or in a combination thereof. Those skilled in the art should understand that a microprocessor or a digital signal processor (DSP) may be used in practice to implement some or all of the components and functions of the device for cross-domain data transmission implemented in the embodiments of the present invention. The present invention can also be implemented as an apparatus or an apparatus program (for example, a computer program and a computer program product) for performing a part or all of the methods described herein. Such a program for realizing the present invention may be stored on a computer-readable medium, or may be in the form of one or more signals. Such a signal may be downloaded from an Internet site, or provided on a carrier signal, or provided in any other form.

It should be noted that the above-mentioned embodiments illustrate rather than limit the invention, and that those skilled in the art will be able to design alternative embodiments without departing from the scope of the appended claims. In the claims, any reference signs placed between parentheses shall not be construed as limiting the claim. The word "comprising" does not exclude the presence of elements or steps not listed in a claim. The word "a" or "an" preceding an element does not exclude the presence of a plurality of such elements. The invention can be implemented by means of hardware comprising several distinct elements, and by means of a suitably programmed computer. In a unit claim enumerating several means, several of these means can be embodied by one and the same item of hardware. The use of the words first, second, and third, etc. does not indicate any order. These words can be interpreted as names.

The embodiment of the present invention also discloses A1, a method for realizing cross-domain data transmission, including:

Receive user login request;

Generate session information including at least the user security identifier SID and the first key and redirect the login request to the second browser server;

After receiving the verification request sent by the second browser server according to the user SID, returning the first key to the second browser server;

The login Cookie data is obtained by analyzing the received encrypted data sent by the second browser server, and the login is completed.

A2, the method as described in A1, is characterized in that, also comprises:

Record the user's login IP address when generating the session information.

A3, the method as described in A2, is characterized in that, also comprises:

When receiving the verification request and returning the first key to the second browser server, sending the user login IP address to the second browser server;

Analyze the user login IP address from the received encrypted data;

Check whether the parsed user login IP address is consistent with the recorded user login IP address; if yes, use the parsed login cookie data to complete the login.

A4, the method as described in A1, is characterized in that, also comprises:

When the session message is generated, record the user request login time.

A5, the method as described in A4, is characterized in that, also comprises:

When receiving the verification request and returning the first key to the second browser server, sending the user request login time to the second browser server;

Parse the user request login time from the received encrypted data;

Check whether the parsed user request login time is consistent with the recorded user request login time; if yes, use the parsed login cookie data to complete the login.

The embodiment of the present invention also discloses B6, a method for realizing cross-domain data transmission, including:

receiving a user login request redirected by the first browser server;

Judging whether the user has login authority; if so, generating login Cookie data, and obtaining the user security identifier SID generated by the first browser server;

sending a verification request to the first browser server according to the SID, and receiving a first key returned by the first browser server;

The login cookie data is encrypted by using the first key and the local second key, and then sent to the first browser server, so that the first browser server can log in according to the encrypted data analysis result.

B7, the method as described in B6, it is characterized in that, described obtaining the SID that the first browser server generates comprises:

Determine the user login Uniform Resource Locator URL according to the user login request;

The user SID is extracted from the user login URL.

B8, the method as described in B6, is characterized in that, also comprises:

After sending the verification request to the first browser server, receiving the user login IP address returned by the first browser server;

Encrypting the login Cookie data by using the first key, the local second key and the user login IP address, and sending the encrypted data to the first browser server.

B9, the method as described in B6, is characterized in that, also comprises:

After sending the verification request to the first browser server, receiving the user requested login time returned by the first browser server;

Encrypting the login cookie data by using the first key, the second local key and the login time requested by the user, and sending the encrypted data to the first browser server.

The embodiment of the present invention also discloses C10, a device for realizing cross-domain data transmission, including:

a first receiving unit adapted to receive a user login request;

The first generation unit is adapted to generate session information including at least the user security identifier SID and the first key and redirect the login request to the second browser server;

The first feedback unit is adapted to return the first key to the second browser server after receiving the verification request sent by the second browser server according to the user SID;

The first parsing unit is adapted to obtain login cookie data by parsing the received encrypted data sent by the second browser server, and complete the login.

C11, the device as described in C10, is characterized in that, described first generation unit comprises:

The first recording module is adapted to record the user login IP address and/or the user request login time when generating the session information.

C12. The device as described in C11, wherein the first feedback unit includes:

The first sending module is adapted to send the user login IP address and/or to the second browser server when receiving the verification request and returning the first key to the second browser server User requests login time.

C13, the device as described in C10, is characterized in that, described first parsing unit comprises:

The first decryption module is adapted to resolve the user login IP address and/or user login time from the received encrypted data;

The first verification module is adapted to verify whether the user login IP address parsed by the first decryption module is consistent with the recorded user login IP address, and if so, complete the login using the parsed login Cookie data; or, It is suitable for checking whether the user request login time parsed by the first decryption module is consistent with the recorded user request login time, and if so, complete the login by using the parsed login Cookie data; or, it is suitable for checking the Whether the user login IP address parsed by the first decryption module is consistent with the recorded user login IP address, and whether the user request login time parsed by the first decryption module is consistent with the recorded user request login time, if If they are all consistent, the login is completed using the parsed login cookie data.

The embodiment of the present invention also discloses D14, a device for realizing cross-domain data transmission, including:

The second receiving unit is adapted to receive a user login request redirected by the first browser server;

The second judging unit is adapted to judge whether the user has login authority; if yes, generate login Cookie data, and obtain the user security identifier SID generated by the first browser server;

The second sending unit is adapted to send a verification request to the first browser server according to the SID, and receive the first key returned by the first browser server;

The second encryption unit is adapted to use the first key and the local second key to encrypt the login Cookie data and send it to the first browser server, so that the first browser server can Log in the data analysis result.

D15. The device as described in D14, wherein the second judging unit includes:

The first processing module is adapted to determine the user login Uniform Resource Locator URL according to the user login request;

The second processing module is adapted to extract the user SID from the user login URL determined by the first processing module.

D16. The device as described in D14, wherein the second sending unit includes:

The second obtaining module is adapted to receive the user login IP address and/or user request login time returned by the first browser server after sending the verification request to the first browser server.

D17. The device as described in D16, wherein the second encryption unit includes:

An encryption module, adapted to use the first key, the local second key, and the user login IP address and/or user request login time to encrypt the login Cookie data;

A sending module, adapted to send the data encrypted by the encryption module to the first browser server.

Claims (10)

1. a method that realizes cross-domain data transmission, comprising:

Receive user's logging request;

Generate the session information redirect logging request to the second browser server that at least comprise user security identifiers SID and the first key;

When receiving described the second browser server according to after the check request of described user SID transmission, to described the second browser server, return to described the first key;

By the enciphered data that described the second browser server receiving is sent, resolve and obtain logining Cookie data, complete login.

2. the method for claim 1, is characterized in that, also comprises:

Recording user login IP address when generating described session information.

3. method as claimed in claim 2, is characterized in that, also comprises:

When receiving described check request and return to described the first key to described the second browser server, to described the second browser server, send described user and login IP address;

From the enciphered data receiving, parse user and login IP address;

Whether the user that verification parses to login IP address consistent if logining IP address and the user who has recorded; If so, utilize the login Cookie data that parse to complete login.

4. a method that realizes cross-domain data transmission, comprising:

Receive user's logging request of the first browser server redirect;

Judge whether user has logon rights; If had, generate login Cookie data, and obtain the user security identifiers SID that described the first browser server generates;

According to described SID, to described the first browser server, send check request, and receive the first key that described the first browser server returns;

After utilizing described the first key and local the second key to be encrypted described login Cookie data, be sent to described the first browser server, so that described the first browser server is logined according to enciphered data analysis result.

5. method as claimed in claim 4, is characterized in that, described in obtain the SID that the first browser server generates and comprise:

According to described user's logging request, determine that user logins uniform resource position mark URL;

From described user, login and URL, extract described user SID.

6. method as claimed in claim 4, is characterized in that, also comprises:

To described the first browser server, sending after check request, receiving the user that described the first browser server returns and login IP address;

Utilize described the first key, local the second key and described user to login IP address described login Cookie data are encrypted, enciphered data is sent to described the first browser server.

7. a device of realizing cross-domain data transmission, comprising:

The first receiving element, is suitable for receiving user's logging request;

The first generation unit, is suitable for generating session information redirect logging request to the second browser server that at least comprises user security identifiers SID and the first key;

The first feedback unit, is suitable for, when receiving described the second browser server according to after the check request of described user SID transmission, to described the second browser server, returning to described the first key;

The first resolution unit, is suitable for, by the enciphered data of described the second browser server transmission receiving is resolved and obtained logining Cookie data, completing login.

8. device as claimed in claim 7, is characterized in that, described the first generation unit comprises:

The first logging modle, is suitable for when generating described session information recording user login IP address and/or user and asks login time.

9. a device of realizing cross-domain data transmission, comprising:

The second receiving element, is suitable for receiving user's logging request of the first browser server redirect;

The second judging unit, is suitable for judging whether user has logon rights; If had, generate login Cookie data, and obtain the user security identifiers SID that described the first browser server generates;

The second transmitting element, is suitable for to described the first browser server, sending check request according to described SID, and receives the first key that described the first browser server returns;

The second ciphering unit, is sent to described the first browser server after being suitable for utilizing described the first key and local the second key to be encrypted described login Cookie data, so that described the first browser server is logined according to enciphered data analysis result.

10. device as claimed in claim 9, is characterized in that, described the second judging unit comprises:

The first processing module, is suitable for determining that according to described user's logging request user logins uniform resource position mark URL;

The second processing module, is suitable for logining and URL, extracting described user SID from the definite user of described the first processing module.

Images