Method and system for using microblog authorization

Abstract

The invention discloses a method and a system for using microblog authorization. The method comprises the following steps that a client transmits authentication request information carrying user ID (Identity) to a microblog proxy server; if an effective interface token corresponding to the user ID is not searched by the microblog proxy server, the microblog proxy server transmits an authorization page request information to a microblog open platform, receives the returned authorization page address and forwards the returned authorization page address to the client; the client accesses to the authorization page and logs in; the microblog open platform authenticates the login information and transmits authorization authentication pass information to the microblog proxy server after the authentication passes; and the microblog proxy server returns the authentication pass information to the client. An application identification, an application key and the interface token are transmitted in a more single network with safer environment between the microblog open platform and the microblog proxy server, so that the security in the use process of the microblog authorization is improved with the lower cost of the newly-added microblog proxy server.

Description

technical field [0001] The invention relates to the field of the Internet, in particular to a microblog authorized use method and system. Background technique [0002] Microblog, short for Microblog, is a broadcast-style social network platform that shares short and real-time information through the attention mechanism; Weibo users can form personal communities through various clients such as WEB and WAP, and community-based User relationship enables information sharing, dissemination and acquisition. Weibo provides such a platform, you can browse the information you are interested in as a viewer on Weibo; [0003] You can also act as a publisher to publish content on Weibo for others to browse. [0004] Users implement and use Weibo functions through Weibo applications installed on clients (such as computers and mobile phones); for example, publish Weibo, browse, and edit user information. At present, the specific process of authorized use of Weibo is as follows: figure...

AI Technical Summary

Problems solved by technology

[0013] However, the inventors of the present invention have discovered that there are potential security risks in the prior art microblog authorization method: the microblog open platform and the client use https plaintext transmission to transmit data, and the data is at risk of being intercepted; If the authorization authentication request information sent by the Bo open platform is intercepted, the application ID and application key will be obtained by the illegal user; if the interface token returned by the Weibo open platform to the client is intercepted, the illegal user will obtain the Interface tokens; after illegal users obtain application IDs, application keys, or interface tokens, some counterfeiting behaviors will cause great losses to the entire Weibo authorization system

[0014] If encrypted data is transmitted between the Weibo open platform and the client, it is necessary to make major changes to the relevant interfaces of the existing Weibo open platform, which will cost a lot of money

Images