Mobile application access authentication and authorization method and system

Abstract

The invention discloses a mobile application access authentication authorization method and system, the method comprising: a mobile application sends an authentication ID to an authentication authorization server; the authentication authorization server verifies the authentication ID according to preset authentication authorization logic rules; When the verification of the authentication ID is valid, the authentication and authorization server generates an access token and sends the access token to the mobile application; the mobile application uses the access token to access the service system . The invention separates the authentication and authorization logic rules from the business system, and the authentication and authorization server is responsible for the unified management of the mobile application access rights, so as to avoid affecting the normal operation of the business system when modifying or redeploying the authentication and authorization logic rules, and through the authentication and authorization server. The mobile application dynamically sends the access token, which is conducive to the security access control of the business system access.

Description

technical field [0001] The invention relates to the field of communication technology, in particular to a mobile application access authentication authorization method and system. Background technique [0002] With the development of mobile terminal equipment, mobile applications and their service systems are widely used in mobile terminal equipment. Such as figure 1 As shown, at present, when the mobile application 10 accesses the service system 30, the service system 30 needs to use authentication and authorization logic rules to perform authentication and authorization on the mobile application 10, and each service system 30 independently triggers a series of security authentication logic. However, in the existing mobile access authorization authentication scheme, the authentication and authorization logic rules are integrated in the service system 30. When the authentication and authorization logic rules need to be modified, the authentication and authorization logic ru...

AI Technical Summary

Problems solved by technology

However, in the existing mobile access authorization authentication scheme, the authentication and authorization logic rules are integrated in the service system 30. When the authentication and authorization logic rules need to be modified, the authentication and authorization logic rules must be redeployed in the service system 30. If the service system 30 cannot achieve dynamic deployment, it is necessary to suspend the operation of the business system to support the launch of new rules, which will have a very large impact on the normal operation of the business system 30

Images