IP Library Granted Patent US 9,954,842
Granted Patent B2
US 9,954,842 · App. 15/352,306 · Granted Apr 24, 2018

Method, client, server and system of login verification

Inventor: Mian Huang (Hangzhou, CN)
Assignee: Alibaba Group Holding Limited
H04L63/08H04L63/10H04L67/42
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,954,842
App. No.
15/352,306
Filed
Nov 15, 2016
Granted
Apr 24, 2018
Kind
B2
Examiner
LE, CHAU D
Art Unit
2493
USPC
726/3
Abstract

The present disclosure introduces a method, a client, a server and a system of login verification. When a user logins, the client obtains a login request from the user for logging into an under-protected account system, where the login request includes at least an account to be logged in, determines property information of a current related account system corresponding to the account to be logged in from property information stored in a current login host, generates login verification information including at least the property information of the current related account system, and sends the login verification information to a server. The server verifies a login activity of the user based on the pre-stored reliable property information corresponding to the account to be logged in. Thus, the login verification process is simplified and the efficiency of login verification using the server is enhanced.

Claims (54)

1. A method of login verification, comprising:

receiving login verification information sent from a client to log into an account, the login verification information including at least property information of a current related account system, the property information of the current related account system being stored at the client, the current related account system being different from the account, and the property information including multiple account identifications of the current related account system;

comparing the property information of the current related account system with pre-stored reliable property information; and

determining that a login to the account is reliable when an intersection between the property information of the current related account system and the pre-stored reliable property information exists and the intersection satisfies a pre-set criterion, the pre-set criterion including the intersection between the multiple account identifications of the current related account system included in the property information and one or more account identifications of the current related account system included in the pre-stored reliable property information is more than a preset threshold.

2. The method as recited in claim 1 , wherein, when no intersection exists or the intersection does not satisfy the pre-set criterion, the method further comprises:

verifying whether the current login host is a trusted host; and

in response to determining that the current login host is the trusted host, determining that the login is reliable; or

in response to determining that the current login host is not the trusted host, determining that the login is unreliable.

3. The method as recited in claim 2 , wherein, when the login verification information comprises a machine property of the current login host, the verifying whether the current login host is a trusted host comprises:

determining that the current login host is the trusted host when the machine feature of the current login host satisfies a first reliable criterion.

4. The method as recited in claim 2 , wherein the verifying whether the current login host is the trusted host comprises:

obtaining a historical login record of the current login host; and

determining that the current login host is the trusted host when the historical login record satisfies a second reliable criterion.

5. The method as recited in claim 2 , wherein the verifying whether the current login host is the trusted host comprises:

performing a second verification for the current login host; and

determining that the current login host is the trusted host when the current login host passes the second verification.

6. The method as recited in claim 2 , wherein the pre-stored reliable property information is obtained by the following:

receiving property information of a first related account system corresponding to the account to be logged in from the client, wherein the property information of the first related account system is determined from property information stored in a first login host through which the user logs into the account to be logged in for the first time; and

determining reliable property information corresponding to the account to be logged in based on the property information of the first related account system.

7. The method as recited in claim 6 , wherein after verifying that the current login host is the trusted host and determining that the login is reliable, the method further comprises:

adding the property information of the current related account system to the pre-stored reliable property information corresponding to the account to be logged in to update the reliable property information corresponding to the account to be logged in.

8. The method as recited in claim 1 , wherein the client is a current login host.

9. The method as recited in claim 8 , wherein the property information further includes data that is generated during an operation of the second account system at the current login host.

10. The method as recited in claim 8 , further comprising verifying that the current login host is a trusted host in response to determining that there are multiple logins at the current login host during a preset period of time.

11. One or more computer-readable media storing executable instructions that, when executed by one or more processors, cause the one or more processors to perform acts comprising:

receiving login verification information sent from a client to log into an account, the login verification information including at least property information of a current related account system, the property information of the current related account system being stored at the client, the current related account system being different from the account, and the property information including a data message exchanged between the current related account system and a server corresponding to the current related account system or a pre-set segment of the data message;

comparing the property information of the current related account system with pre-stored reliable property information corresponding to the account to be logged in; and

determining that a login to the account is reliable when an intersection exists and the intersection satisfies a pre-set criterion.

12. The one or more computer-readable media as recited in claim 11 , wherein, when no intersection exists or the intersection does not satisfies the pre-set criterion, the acts further comprise:

verifying whether the current login host is a trusted host; and

in response to determining that the current login host is the trusted host, determining that the login is reliable; or

in response to determining that the current login host is not the trusted host, determining that the login is unreliable.

13. The one or more computer-readable media as recited in claim 12 , wherein, when the login verification information comprises a machine property of the current login host, the verifying whether the current login host is the trusted host comprises:

determining that the current login host is the trusted host when the machine feature of the current login host satisfies a first reliable criterion.

14. The one or more computer-readable media as recited in claim 12 , wherein the verifying whether the current login host is the trusted host comprises:

obtaining a historical login record of the current login host; and

determining that the current login host is the trusted host when the historical login record satisfies a second reliable criterion.

15. The one or more computer-readable media as recited in claim 12 , wherein the verifying whether the current login host is the trusted host comprises:

performing a second verification for the current login host; and

determining that the current login host is the trusted host when the current login host passes the second verification.

16. The one or more computer-readable media as recited in claim 12 , wherein the pre-stored reliable property information is obtained by the following:

receiving property information of a first related account system corresponding to the account to be logged in from the client, wherein the property information of the first related account system is determined from property information stored in a first login host through which the user logs into the account to be logged in for the first time; and

determining reliable property information corresponding to the account to be logged in based on the property information of the first related account system.

17. The one or more computer-readable media as recited in claim 16 , wherein after verifying that the current login host is the trusted host and determining that the login is reliable, the method further comprises:

adding the property information of the current related account system to the pre-stored reliable property information corresponding to the account to be logged in to update the reliable property information corresponding to the account to be logged in.

18. The one or more computer-readable media as recited in claim 11 , wherein the client is a current login host.

19. The one or more computer-readable media as recited in claim 11 , wherein the acts further comprise verifying that the current login host is a trusted host in response to determining that there are multiple logins at the current login host during a preset period of time.

20. A server comprising:

one or more computer processors; and

one or more computer-readable media storing executable instructions that, when executed by one or more computer processors, cause the one or more computer processors to perform acts including:

receiving, from a client that is a current login host, a login request for logging into an account of a first account system, the login request including a request for logging into the account of the first account system and login verification information, the login verification information including property information of a second account system that is designated as a related account system of the first account system, the first account system and the second account system being associated with different applications, the property information including data that is generated during an operation of the second account system at the current login host, the data including a system time at the current login host when the operation of the second account system occurs;

verifying that the current login host is a trusted host in response to determining that there are multiple logins at the current login host during a preset period of time;

comparing, by at least one computing device of the one or more computing devices, the property information of the second account system with pre-stored reliable property information corresponding to the account of the first account system; and

determining that a login corresponding to the login request is reliable when an intersection exists between the property information and the pre-stored reliable property information and the intersection satisfies a pre-set criterion.

Assignments (3)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 10, 2020
From: ADVANTAGEOUS NEW TECHNOLOGIES CO., LTD.
To: ADVANCED NEW TECHNOLOGIES CO., LTD.
Reel/Frame 054064/0610 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Aug 31, 2020
From: ALIBABA GROUP HOLDING LIMITED
To: ADVANTAGEOUS NEW TECHNOLOGIES CO., LTD.
Reel/Frame 053650/0816 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Feb 16, 2018
From: HUANG, MIAN
To: ALIBABA GROUP HOLDING LIMITED
Reel/Frame 044955/0700 →
Priority Claims (1)
CN 2012 1 0251542 · Jul 19, 2012 · national
Continuity (2)
Continuation 13944763 · Jul 17, 2013
Related Publication 20170063830A1 · Mar 2, 2017