User data authorization method, device and system

Abstract

The invention discloses a user data authorization method, a user data authorization device and a user data authorization system. The method comprises the steps that an authorization server receives an authorization request transmitted by a third-party application server, wherein the authorization request comprises a server identifier and a server address; an identity authentication request is transmitted to an authentication gateway to authenticate the identity of a client user by the authentication gateway; an identity authentication response which is fed back by the authentication gateway is received, wherein the identity authentication response comprises an user identifier of the authenticated user; user sub-accounts which are matched with the user identifier are searched from the authorization server and are transmitted to a client for the client user to select an authorized sub-account; the authorized sub-account which is fed back by the client is received, and a corresponding relationship among the server identifier, the user identifier and the authorized sub-account is built and saved; and the user identifier, the authorized sub-account and an access token are transmitted to the third-party application server by using the server address. The third-party partial use authorization by the user is realized, the network service quality is improved and the service experience of the user is improved.

Description

technical field [0001] The present invention relates to the technical field of network services, in particular to a user data authorization method, device and system. Background technique [0002] Currently, network services have been fully applied in people's daily work and life. When using network services, network service providers provide users with corresponding services based on the user data stored internally. [0003] Taking online games as an example, when a user enjoys the online service of an online game, the user data involved may include: basic user information (such as user name, user age, place of affiliation, etc.), user level, multiple records created by the user, etc. Each game role, the unique information of each game role (such as the level of the role, the configured game equipment, the relationship with other user roles), etc., the game server of the network service provider can use the above-mentioned user data stored internally. , to provide users w...

AI Technical Summary

Problems solved by technology

[0005] For the third party to obtain user authorization, the currently widely used authorization method is completed on a user-by-user basis, that is to say, the user either authorizes the third party or does not authorize the third party. , cannot realize the user's partial use authorization to the third party

However, under normal circumstances, a user's account often contains multiple sub-accounts. If the user only wants to authorize the user data corresponding to some of the sub-accounts he owns to a third party, the existing technical solutions cannot meet this requirement. kind of demand

[0006] Still taking online games as an example, multiple game characters in user data are equivalent to multiple sub-accounts under one user account. When authorizing the use of the scheme, as long as the user authorizes the use to the third-party application server, the third-party application server will get the use authorization of all the game characters created by the user, which obviously violates the user's authorization intention and cannot satisfy the user. demand, reducing the service experience of users for online games

Images