Patent ID: 8732852

Claim:
A method for protecting a service account, comprising: generating, by a hardware application server, association information corresponding to a service account, when a user registers the service account at the application server; wherein the association information further comprises an association identifier for associating the service account with a Personal Communication Profile (PCP) of the user; sending, by the application server, the generated association identifier to a PCP storage apparatus to add the association identifier into the PCP of the user; receiving, by the application server, a log-on request carrying a log-on account and a password sent from a User Equipment (UE) of a user; authenticating, by the application server, legality of the log-on account and the password; sending, by the application server, an authentication request containing the association information for a service account of the user stored in the application server and a user identifier to the PCP storage apparatus if the log-on account and the password are legal; searching, by the PCP storage apparatus, the PCP of the user according to the user identifier, and determining whether the PCP of the user comprises association information consistent with the association information for the service account received from the application server to obtain an authentication determination result; and returning the authentication determination result to the application server; wherein the association information contained in the PCP of the user, stored in the PCP storage apparatus, corresponds to a plurality of service accounts of the user used on a plurality of application servers.