# US 9,882,885 B2 · Systems and methods for login and authorization > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 9,882,885 B2 - Document ID: US9882885B2 - Status: Granted - Kind: B2 - Application number: 14/754,809 - Filed: 2015-06-30 - Published: 2015-10-22 - Granted: 2018-01-30 - Earliest claimed: 2013-06-25 - Assignees: Tencent Technology (Shenzhen) Company Limited - Applicants: Tencent Technology (Shenzhen) Company Limited - Inventors: Min Ren - Web page: https://patentgrep.com/patent/US9882885B2 ## CPC - H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)} - H04L 63/0853: {using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234)} - H04L 67/10: in which an application is distributed across nodes in the network (software deployment G06F8/60; multiprogramming arrangements G06F9/46) - H04W 12/06: Authentication - H04W 12/77: Graphical identity - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract Systems and methods are provided for login and authorization. For example, a third-party terminal receives a login request from a user and sends an authorization request from the third-party terminal to a network server; the network server generates first two-dimensional-barcode information and sends the first two-dimensional-barcode information to the third-party terminal; the third-party terminal displays a first two-dimensional-barcode image; a mobile terminal extracts the first two-dimensional-barcode information from the first two-dimensional-barcode image and sends first user account information and the first two-dimensional-barcode information to the network server; the network server validates the first user account information and the first two-dimensional-barcode information based on at least information associated with stored second user account information and second two-dimensional-barcode information generated by the network server. ## Claims ### Claim 1 A method for login comprising: receiving a login request from a user; sending an authorization request to a network server; receiving first two-dimensional-barcode information from the network server; displaying a first two-dimensional-barcode image; acquiring information related to a logged-in state of a user account from a third-party server; and setting an interface of a third-party application to a user-logged-in state; wherein the third-party server sets the user account to the logged-in state and sends the information related to the logged-in state of the user account after the network server validates user account information sent from a mobile terminal and the first two-dimensional-barcode information extracted from the first two-dimensional-barcode image; wherein: the authorization request includes authorization parameters to be validated by the network server; and the authorization parameters include an application identifier, authorization scope information, an application callback address, anti-disguise information and an application key. ### Claim 2 (depends on 1) The method of claim 1, wherein the first two-dimensional-barcode information includes the authorization parameters. ### Claim 3 (depends on 1) The method of claim 1, further comprising: sending at a predetermined time an authorization inquiry to the third-party server. ### Claim 4 A method for authorization comprising: receiving an authorization request from a third-party terminal; generating first two-dimensional-barcode information; sending the first two-dimensional-barcode information to the third-party terminal so that the third-party terminal displays a first two-dimensional-barcode image; validating user account information and the first two-dimensional-barcode information sent from a mobile terminal based on at least information associated with stored user account information and second two-dimensional-barcode information, wherein the first two-dimensional-barcode information sent from the mobile terminal is extracted by the mobile terminal from the first two-dimensional-barcode image displayed on the third-party terminal; and in response to the user account information and the first two-dimensional-barcode information being validated, sending an authorization and a predetermined user identifier to the third-party server; wherein: the authorization request includes authorization parameters; and the authorization parameters include an application identifier, authorization scope information, an application callback address, anti-disguise information and an application key. ### Claim 5 (depends on 4) The method of claim 4, further comprising: validating the authorization parameters in the authorization request. ### Claim 6 (depends on 5) The method of claim 5, wherein the first two-dimensional-barcode information includes the authorization parameters. ### Claim 7 (depends on 4) The method of claim 4, wherein the in response to the user account information and the first two-dimensional-barcode information being validated, sending an authorization and a predetermined user identifier to the third-party server includes: in response to the user account information and the first two-dimensional-barcode information being validated, sending validation-success information to the mobile terminal; receiving an authorization confirmation of a user from the mobile terminal; and sending the authorization and the predetermined user identifier to the third-party server. ### Claim 8 (depends on 4) The method of claim 4, wherein: the user identifier corresponds to the user account; and the user account corresponds to different user identifiers when the user account logs into different third-party applications. ### Claim 9 (depends on 4) The method of claim 4, wherein the authorization includes an authorization-validity character string and anti-disguise information. ### Claim 10 A network server comprising: an authorization-request-receiving unit configured to receive an authorization request from a third-party terminal; a two-dimensional-barcode-generation unit configured to generate first two-dimensional-barcode information; a two-dimensional-barcode-sending unit configured to send the first two-dimensional-barcode information to the third-party terminal so that the third-party terminal displays a first two-dimensional-barcode image; a validation-information-receiving unit configured to receive user account information and the first two-dimensional-barcode information from a mobile terminal; a validation unit configured to validate the user account information and the first two-dimensional-barcode information based on at least information associated with stored user account information and second two-dimensional-barcode information generated by the two-dimensional-barcode-generation unit, wherein the first two-dimensional-barcode information sent from the mobile terminal is extracted by the mobile terminal from the first two-dimensional-barcode image displayed on the third-party terminal; and an authorization-information-sending unit configured to, in response to the user account information and the first two-dimensional-barcode information being validated, send an authorization and a predetermined user identifier to the third-party server; wherein: the authorization request includes authorization parameters; and the authorization parameters include an application identifier, authorization scope information, an application callback address, anti-disguise information and an application key. ### Claim 11 (depends on 10) The network server of claim 10, further comprising: an authorization-parameter-validation unit configured to validate the authorization parameters in the authorization request. ### Claim 12 (depends on 10) The network server of claim 10, wherein the first two-dimensional-barcode information includes the authorization parameters. ### Claim 13 (depends on 10) The network server of claim 10, further comprising: a confirmation-information-sending unit configured to, in response to the user account information and the first two-dimensional-barcode information being validated, send validation-success information to the mobile terminal; and a confirmation-information-receiving unit configured to receive an authorization confirmation of a user from the mobile terminal; wherein the authorization-information-sending unit is further configured to send the authorization and the predetermined user identifier to the third-party server. ### Claim 14 (depends on 10) The network server of claim 10, wherein: the user identifier corresponds to the user account; and the user account corresponds to different user identifiers when the user account logs into different third-party applications. ### Claim 15 (depends on 10) The network server of claim 10, wherein the authorization includes an authorization-validity character string and anti-disguise information. ### Claim 16 (depends on 10) The network server of claim 10, further comprising: one or more data processors; and a computer-readable storage medium; wherein one or more of the authorization-request-receiving unit, the two-dimensional-barcode-generation unit, the two-dimensional-barcode-sending unit, the validation-information-receiving unit, the validation unit, and the authorization-information-sending unit are stored in the storage medium and configured to be executed by the one or more data processors.