Verification method, apparatus, and system used for network application access

A verification server comprising:

• a processor;
• and
• a non-transitory computer readable medium having stored thereon computer-executable instructions that when executed by the processor cause the processor to perform operations comprising:
• verifying, according to a user verification request from a terminal, user identity verification on the terminal, wherein the user verification request comprises first location information, and the first location information is used to identify a network location at which the terminal is located when sending the user verification request;
• generating an encrypted token according to the first location information in the user verification request after it is determined that the terminal succeeds in the user identity verification, wherein the encrypted token comprises the first location information and an access permission of a user, and the access permission of the user comprises a list of content that can be accessed by the user;
• and
• sending the encrypted token to a control device.

A control device comprising:

• a processor;
• and
• a non-transitory computer readable medium having stored thereon computer-executable instructions that when executed by the processor cause the processor to perform operations comprising:
• receiving a first encrypted token sent by a verification server, wherein the first encrypted token comprises first location information and an access permission of a user, the first location information is used to identify a network location at which a terminal is located when sending a user verification request, and the access permission of the user comprises a list of content that can be accessed by the user;
• generating a second encrypted token according to the first encrypted token, wherein the second encrypted token comprises the first location information;
• sending the second encrypted token to the terminal;
• receiving the second encrypted token sent by a forwarding device;
• performing verification on the second encrypted token according to the first encrypted token;
• and
• sending a first message to the forwarding device after the verification on the second encrypted token succeeds, wherein the first message comprises the access permission of the user, and the first message is used to indicate that the terminal succeeds in verification.