Single sign-on tamper-proofing method and device, computer equipment and storage medium

Abstract

The invention provides a single sign-on tamper-proofing method and device, computer equipment and a storage medium. The method comprises the following steps: obtaining first login information of a user logging in a server, associating the first login information with a first tag, generating a private key and a public key which are bound with each other, packaging and encrypting the first tag in the public key, and storing the public key in a session library of the server, thereby realizing the encryption of the tag, and preventing an illegal person from inputting the tag into the session library and directly entering the server; sending the private key to a pre-associated terminal device; obtaining a to-be-verified private key input by the user through the terminal equipment; judging whether the to-be-verified private key is the same as a private key or not, if yes, searching whether a public key corresponding to the private key exists in a session library, if yes, decrypting the public key by the private key to obtain a first label, and obtaining first login information corresponding to the first label to log in a server again through the first login information, thereby realizing single sign-on of a user.

Description

technical field [0001] The invention relates to the field of computer security, in particular to a single sign-on anti-tampering method, device, computer equipment and storage medium. Background technique [0002] CAS (Central Authentication Service, Central Authentication Service). At present, the login of the business system realizes single sign-on through CAS authentication. The login process is as follows: the central system provides a unified CAS.JAR package for login, and access During the process of the target address, the CAS.JAR package will intercept the access of the user terminal by default. When the user completes the account password login, it will allow access to the target address. After the login is completed, the user’s login information is recorded by the CAS.JAR package and stored as a label. To the session, and the next time the user does not need to enter the account password, the login information includes the user ID, login time and login password. ...

AI Technical Summary

Problems solved by technology

[0003] Therefore, there is a problem. SESSION (session control) refers to the time elapsed from the user terminal registering into the system to logging out of the system. If necessary, there is a certain operating space; Login time, the system will look for the label corresponding to the user ID in the CAS.JAR package according to the user ID. After verifying that the login time matches the time associated with the label, the CAS.JAR package may be misjudged during the login process. The login information allows illegal users to bypass the login process of entering account numbers and passwords through the single sign-on method of CAS, so there are hidden dangers

Images