# US 2023/0054057 A1 · Login Method and System Based on Cloud Application Instance, and Related Device > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2023/0054057 A1 - Document ID: US20230054057A1 - Status: Published application - Kind: A1 - Application number: 17/976,398 - Filed: 2022-10-28 - Published: 2023-02-23 - Earliest claimed: 2020-04-30 - Assignees: Huawei Cloud Computing Technologies Co., Ltd. - Applicants: Huawei Cloud Computing Technologies Co., Ltd. - Inventors: Kaixuan Nie; Wei Huang; Qiangqiang Liu; Gang Lei - Web page: https://patentgrep.com/patent/US20230054057A1 ## CPC - G06Q 20/4097: {using mutual authentication between devices and transaction partners} - G06F 21/31: User authentication - G06Q 20/16: Payments settled via telecommunication systems - G06Q 20/3267: {In-app payments} - G06Q 20/385: {using an alias or single-use codes} - G06Q 20/40145: {Biometric identity checks} - G06Q 30/04: Billing or invoicing - G06Q 30/06: Buying, selling or leasing transactions - H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)} - H04L 63/0807: {using tickets, e.g. Kerberos (cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213)} - H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)} - H04L 63/0853: {using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234)} - H04L 63/0884: {by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity} - H04L 63/102: {Entity profiles} - G06Q 20/12: specially adapted for electronic shopping systems - H04L 63/0861: {using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231)} - H04L 2463/082: applying multi-factor authentication - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A login method and system based on a cloud application instance, and a related device are provided. The method includes the following steps: A cloud application instance sends a login request for an application service node to a terminal device, such that after obtaining a login password input by a user, the terminal device sends a verification request carrying the login password and a device identity of the cloud application instance to an account management node. The account management node may verify the login password, and send verification success information to the cloud application instance. The cloud application instance logs in to the application service node based on the verification success information using. ## Claims ### Claim 1 A login method based on a cloud application instance, comprising: sending, by a cloud application instance, a login request for an application service node to a terminal device; obtaining, by the terminal device based on the login request, a login password input by a user, and sending a verification request that carries the login password and a device identity of the cloud application instance to an account management node; verifying, by the account management node, the login password, generating verification success information when the verification succeeds, and sending the verification success information to the cloud application instance based on the device identity; and logging in, by the cloud application instance, to the application service node based on the verification success information. ### Claim 2 (depends on 1) The method according to claim 1, wherein before the verifying, by the account management node, the login password, the method further comprises: recording, by the account management node, registration information, wherein the registration information comprises a first correspondence between a cloud platform account and a registration password; and recording, by the account management node, instance status information, wherein the instance status information comprises a second correspondence between the cloud platform account and the device identity of the cloud application instance; and the verifying, by the account management node, the login password comprises: obtaining, by the account management node, the cloud platform account from the second correspondence based on the device identity of the cloud application instance that is carried in the verification request, obtaining the registration password from the first correspondence based on the cloud platform account, comparing the login password with the registration password, and when the login password is consistent with the registration password, confirming that the verification succeeds. ### Claim 3 (depends on 1) The method according to claim 1, wherein the sending the verification success information to the cloud application instance based on the device identity comprises: sending, by the cloud application instance, a verification result obtaining request to the account management node, wherein the verification result obtaining request carries the device identity of the cloud application instance; and sending, by the account management node, the verification success information to the cloud application instance based on the device identity of the cloud application instance that is carried in the verification result obtaining request. ### Claim 4 (depends on 1) The method according to claim 1, wherein the logging in, by the cloud application instance, to the application service node based on the verification success information comprises: sending, by the cloud application instance, the verification success information to the application service node; sending, by the application service node, a check request to the account management node, wherein the check request carries the verification success information; determining, by the account management node, that the account management node records the verification success information, and sending an application account creation request to the application service node; and creating, by the application service node, an application account based on the application account creation request, and allowing the cloud application instance to log in to the application service node by using the application account. ### Claim 5 (depends on 1) The method according to claim 1, wherein before the sending, by a cloud application instance, a login request for an application service node to a terminal device, the method further comprises: establishing, by the terminal device, a connection channel to the cloud application instance, and obtaining the device identity from the cloud application instance. ### Claim 6 (depends on 1) The method according to claim 1, wherein the cloud application instance comprises a virtual machine, a container, and a bare metal server. ### Claim 7 (depends on 1) The method according to claim 1, wherein the application service node comprises a game server, an education application service node, a video application service node, a social application service node, and a virtual reality application service node. ### Claim 8 A login system based on a cloud application instance, comprising the cloud application instance , configured to send a login request for an application service node to a terminal device; the terminal device , configured to: obtain, based on the login request, a login password input by a user, and send a verification request that carries the login password and a device identity of the cloud application instance to an account management node; the account management node, configured to: verify the login password, generate verification success information when the verification succeeds, and send the verification success information to the cloud application instance based on the device identity; and the cloud application instance, further configured to log in to the application service node based on the verification success information. ### Claim 9 (depends on 8) The system according to claim 8, wherein the account management node is configured to: before verifying the login password, record registration information, wherein the registration information comprises a first correspondence between a cloud platform account and a registration password; the account management node is configured to record instance status information, wherein the instance status information comprises a second correspondence between the cloud platform account and the device identity of the cloud application instance; and the account management node is configured to: obtain the cloud platform account from the second correspondence based on the device identity of the cloud application instance that is carried in the verification request, obtain the registration password from the first correspondence based on the cloud platform account, compare the login password with the registration password, and when the login password is consistent with the registration password, confirm that the verification succeeds. ### Claim 10 (depends on 8) The system according to claim 8, wherein the cloud application instance is configured to send a verification result obtaining request to the account management node, wherein the verification result obtaining request carries the device identity of the cloud application instance; and the account management node is configured to send the verification success information to the cloud application instance based on the device identity of the cloud application instance that is carried in the verification result obtaining request. ### Claim 11 (depends on 8) The system according to claim 8, wherein the cloud application instance is configured to send the verification success information to the application service node; the application service node is configured to send a check request to the account management node, wherein the check request carries the verification success information; the account management node is configured to: determine that the account management node records the verification success information, and send an application account creation request to the application service node; and the application service node is configured to: create an application account based on the application creation request, and allow the cloud application instance to log in to the application service node using the application account. ### Claim 12 (depends on 8) The system according to claim 8, wherein the terminal device is configured to: before sending the login request for the application service node to the cloud application instance, establish a connection channel to the cloud application instance, and obtain the device identity from the cloud application instance. ### Claim 13 (depends on 8) The system according to claim 8, wherein the cloud application instance comprises a virtual machine, a container, and a bare metal server. ### Claim 14 The system according to claim8, wherein the application service node comprises a game server, an education application service node, a video application service node, a social application service node, and a virtual reality application service node. ### Claim 15 (depends on 8) The system according to claim 8, wherein the terminal device comprises a mobile phone, a tablet computer, a personal computer, a smart television, and a game console. ### Claim 16 (depends on 8) The system according to claim 8, wherein the login password comprises biological information and a password. ### Claim 17 A login method based on a cloud application instance, comprising: receiving, by an account management node, a verification request that carries a device identity of a cloud application instance and a login password and that is sent by a terminal device, wherein the login password is a login password obtained from a user after the terminal device receives a login request for an application service node that is sent by the cloud application instance; and verifying, by the account management node, the login password, generating verification success information when the verification succeeds, and sending the verification success information to the cloud application instance based on the device identity, so that the cloud application instance logs in to the application service node based on the verification success information. ### Claim 18 (depends on 17) The method according to claim 17, wherein before the receiving, by an account management node, a verification request that carries a device identity of a cloud application instance and a login password and that is sent by a terminal device, the method further comprises: recording, by the account management node, registration information, wherein the registration information comprises a first correspondence between a cloud platform account and a registration password; and recording, by the account management node, instance status information, wherein the instance status information comprises a second correspondence between the cloud platform account and the device identity of the cloud application instance; and the verifying, by the account management node, the login password comprises: obtaining, by the account management node, the cloud platform account from the second correspondence based on the device identity of the cloud application instance that is carried in the verification request, obtaining the registration password from the first correspondence based on the cloud platform account, comparing the login password with the registration password, and when the login password is consistent with the registration password, confirming that the verification succeeds. ### Claim 19 A computing device, comprising a processor and a memory, wherein the memory stores program instructions, and the processor runs the program instructions to perform the following steps: receiving a verification request that carries a device identity of a cloud application instance and a login password and that is sent by a terminal device, wherein the login password is a login password obtained from a user after the terminal device receives a login request for the application service node that is sent by the cloud application instance; and verifying the login password, generating verification success information when the verification succeeds, and sending the verification success information to the cloud application instance based on the device identity, so that the cloud application instance logs in to the application service node based on the verification success information. ### Claim 20 (depends on 19) The computing device according to claim 19, wherein the processor runs the program instructions to perform the following steps: before receiving the verification request that carries the device identity of the cloud application instance and the login password and that is sent by the terminal device, recording registration information, wherein the registration information comprises a first correspondence between a cloud platform account and a registration password; recording instance status information, wherein the instance status information comprises a second correspondence between the cloud platform account and the device identity of the cloud application instance; and obtaining the cloud platform account from the second correspondence based on the device identity of the cloud application instance that is carried in the verification request, obtaining the registration password from the first correspondence based on the cloud platform account, comparing the login password with the registration password, and when the login password is consistent with the registration password, confirming that the verification succeeds.