Open-end API (application program interface) public license access control method based on digital application signature certification

Abstract

The invention provides an open-end API public license access control method based on digital application signature certification. A public license mechanism of the open-end API is set up in a coalition or third-party public service platform form; and only Web applications or application software products passing the certification of the coalition or third-party public service platform can be licensed to use the open-end API inside the coalition or third-party public service platform. When a user uses a Web application or an application software product for calling a network API, an API license request initiated by a Web application or application software product client contains digital certificate information, and API license is finished after a public license server determines the digital certificate. Determination is performed based on the digital signature certificate of the Web application or the application software product, and the Web application or application software product client is licensed by using the action of the open-end API, so that credible access control is realized.

Description

technical field [0001] The invention relates to the technical field of communication, in particular to a method for controlling open API public authorization access based on application digital signature authentication. Background technique [0002] At present, openness has become the main theme in the field of mobile Internet. At the same time as the rapid development of intelligent mobile terminals, the obvious characteristics of "cloud mobile phones" of intelligent terminals have emerged, and the mobile Internet has placed more emphasis on the value of cloud services provided by open platforms to users. The development of mobile applications is gradually shifting from centering on smart terminal platforms to centering on network open platforms. The huge power of developers and applications gathered by the open Internet platform has begun to be released. [0003] However, the current open environment is still not mature and perfect, and there are still some problems. In...

AI Technical Summary

Problems solved by technology

[0004] Although comprehensive integration is the general trend of the development of mobile Internet open platforms in the future, the current Internet open platforms are fragmented, the level of network information and capability opening is uneven, API authorization methods are not uniform, and web applications and open platforms are interconnected through APIs. There are still many problems when using these open capabilities: on the one hand, when application developers use these open capabilities, they need to separately implement API authorization docking with each open platform, and a large amount of repetitive work is one of the obstacles affecting application development innovation; on the other hand, Web applications based on various open platforms continue to appear on the Internet, but the methods for obtaining API authorization are not uniform

Due to the lack of a mechanism for judging the legitimacy or credibility of web applications in the current authorization protocol, some malicious third-party applications can complete API authorization without the user's knowledge or attention, resulting in the security of user information. Hidden danger

Images