A mobile application access authentication and authorization method and system

Abstract

The invention discloses a mobile application access authentication and authorization method and system. The method comprises that mobile application transmits an authentication ID to an authentication and authorization server; that the authentication and authorization server verifies the authentication ID according to a preset authentication and authorization logic rule, that the authentication and authorization server generates an access token and transmits the access token to the mobile application when the authentication ID is valid; and that the mobile application has access to a service system with the access token. The method separates the authentication and authorization logic rule from the service system, performs unified management on mobile application access authority with the authentication and authorization server, prevents the normal operation of the service system from being influenced when the authentication and authorization logic rule is modified or redeployed, and dynamically transmits the access token to the mobile application with the authentication and authorization server so as to be beneficial to secure access control of the service system access.

Description

technical field [0001] The invention relates to the field of communication technology, in particular to a mobile application access authentication authorization method and system. Background technique [0002] With the development of mobile terminal equipment, mobile applications and their service systems are widely used in mobile terminal equipment. Such as figure 1 As shown, at present, when the mobile application 10 accesses the service system 30, the service system 30 needs to use authentication and authorization logic rules to perform authentication and authorization on the mobile application 10, and each service system 30 independently triggers a series of security authentication logic. However, in the existing mobile access authorization authentication scheme, the authentication and authorization logic rules are integrated in the service system 30. When the authentication and authorization logic rules need to be modified, the authentication and authorization logic ru...

AI Technical Summary

Problems solved by technology

However, in the existing mobile access authorization authentication scheme, the authentication and authorization logic rules are integrated in the service system 30. When the authentication and authorization logic rules need to be modified, the authentication and authorization logic rules must be redeployed in the service system 30. If the service system 30 cannot achieve dynamic deployment, it is necessary to suspend the operation of the business system to support the launch of new rules, which will have a very large impact on the normal operation of the business system 30

Images