User authorization method and system and device thereof

Abstract

The invention discloses a user authorization method and a system and a device thereof, which are applied to a network consisting of a service integration platform (SIP), an Internet service provider (ISP) and an independent software vendor (ISV) application. The ISP provides different open application programming interfaces (Open API); the method comprises the following steps: the SIP creates a user authorization token according to the registration information of the Open API called by the ISV application when the ISP authorizes user identity; the SIP processes a call request for the Open APIby the ISV application according to the user authorization token. The invention refines the application range, the use type and the use right of the user authorization token, supports the mode of asynchronous user authorization, improves the safety of the system and solves the problem of low service efficiency due to data relay during service request of large data.

Description

technical field [0001] The present application relates to the field of network technology, in particular to a method, system and device for user authorization. Background technique [0002] With the continuous maturity of SOA (Service-Oriented Architecture, service-oriented architecture) and the popularization of REST (Representational State Transfer, representational state transfer) style, Internet open services have gradually become emerging Internet resources, that is, website The service is packaged into a series of data interfaces that are easily recognizable by the computer and then opened for use by third-party developers. The API (Application Programming Interface) that is opened is called Open API (Open Application Programming Interface). At the same time, with the enrichment of Web 2.0 applications, ISVs (Independent Software Vendors, Independent Software Vendors) use the effective service resources of the network to design a variety of interactive applications acc...

AI Technical Summary

Problems solved by technology

[0010] In the existing technology, the timeliness and scope of user authorization involved in the authorization token are not clear, and it is easy for the user to modify or access the data without knowing it.

At the same time, the validity period of user authorization is not clear and the authorization token containing user information is transmitted as a parameter, which will reduce the security of the system and pose a threat to user information.

In addition, in the prior art, the authorization process and the service access process are closely combined. When there is a service request with a large amount of data, the service efficiency will be low due to data forwarding.

Images