Method, device and system for logging in through a browser application at a client terminal

A main server that is communicatively connected to a client terminal and a third party server, respectively, the main server comprising:

• one or more processors;
• memory;
• and
• one or more programs modules stored in the memory and configured for execution by the one or more processors, the one or more program modules including:
• a receiving module configured to receive a validation request from the third party server, wherein the validation request is triggered by a data access request from a browser application at the client terminal to the third party server and the validation request comprises a third party identifier, a user identifier, and a session key;
• a determination module configured to determine whether there is an active communication session between the main server and the client terminal corresponding to the session key;
• and
• a sending module configured to send an authorization request to the third party server based on the third party identifier, in accordance with a determination that the communication session is an active session, the authorization request including the session key, wherein the third party server is configured to allow the client terminal to access a predefined portion of data associated with the user identifier through the browser application without further validating the data access request and require further authentication by the main server from the client terminal when the browser application requests to access sensitive data outside the predefine portion in the third party server.

A non-transitory computer readable storage medium having stored therein one or more instructions, which, when executed by a main server that is communicatively connected to a client terminal and a third party server, respectively, cause the main server to:

• receive a validation request from the third party server, wherein the validation request is triggered by a data access request from a browser application at the client terminal to the third party server and the validation request comprises a third party identifier, a user identifier, and a session key;
• determine whether there is an active communication session between the main server and the client terminal corresponding to the session key;
• and
• in accordance with a determination that the communication session is an active session, send an authorization request to the third party server based on the third party identifier, the authorization request including the session key, wherein the third party server is configured to allow the client terminal to access a predefined portion of data associated with the user identifier through the browser application without further validating the data access request and require further authentication by the main server from the client terminal when the browser application requests to access sensitive data outside the predefine portion in the third party server.