Method and system for access capability authorization

Abstract

The invention discloses a capability access authorization method and system, which manages the authorization of the service capability open platform: (1) When a third-party application accesses a service capability, it needs to obtain the display authorization of the service billing party; (2) The third party When the application accesses the business capabilities related to the end user's private data, in order to ensure the security and privacy of the end user's data, it needs to obtain the display authorization of the private data owner; (3) it needs to obtain the authorization of the service level agreement system of the capability open platform; After obtaining multi-party authorization, the authorization system generates the corresponding access token and issues it to the third-party application. The third-party application carries the access token and uses the access token as the capability access authorization credential to directly access the corresponding capability interface, thus ensuring The business capabilities of the business capability open platform are reasonably accessed by legitimate third-party applications.

Description

technical field [0001] The invention belongs to the technical field of the Internet, and more specifically relates to a capability access authorization method for a business capability open platform. Background technique [0002] With the substantial improvement of mobile communication bandwidth and the intelligence of mobile terminals, traditional mobile or Internet services can no longer meet the diverse and personalized needs of mobile terminal users. In order to further promote the prosperity of mobile Internet business, well-known Internet companies and telecom operators at home and abroad have launched their own business capability open platforms, such as Google App, China Telecom's "Tianyi Space Application Factory", etc. This type of business capability open platform encapsulates its own business capabilities into an API interface in a unified format and provides them to third-party application developers (including enterprise developers and individual developers), t...

AI Technical Summary

Problems solved by technology

However, the OAuth authorization protocol is mainly aimed at the situation where end users using third-party applications need to access their own private data, and does not consider other private data owners providing third-party applications with authorized access functions

In addition, the OAuth authorization protocol does not consider functions such as billing authorization for capability access and SLA system authorization.

Images