Resource access method and URG

Abstract

The invention provides a resource access method and a URG. The method comprises the steps that the URG receives a resource request sent by a client end, wherein the resource request comprises one or more resource IDs, and each resource ID corresponds to one resource; the URG conducts permission validation on the client end; the URG generates one or more single resource requests corresponding to one or more resource servers based on the one or more resource IDs after verification is passed; each single resource request comprises an access token corresponding to the requested resource, and the access tokens represent that a resource owner allows the URG to access the resources; the URG sends one or more single resource requests to the one or more resource servers respectively; the URG receives one or more responding messages of the one or more single resource request from the corresponding resource server, and the one or more responding messages carry the resources corresponding to the one or more single resource requests; the URG sends the resources to the client end.

Description

technical field [0001] The invention relates to the field of communication technology, in particular to a resource access method and a user resource gateway. Background technique [0002] The OAUTH protocol provides a safe, open and simple standard for authorization of user resources. The difference from previous authorization methods is that OAUTH authorization will not allow third parties to touch the user's account information (such as user name and password), that is, third parties can apply for access to the user's resources without using the user's user name and password. Authorization, so OAUTH is secure. [0003] There are four logical functional entities in OAUTH2.0, which are resource owner, resource server, third-party client and authorization server. The following is a brief explanation of the four logical functional entities: [0004] Resource Owner: An entity that can grant access to a protected resource. When the resource owner is a person, it is called an...

AI Technical Summary

Problems solved by technology

[0018] Embodiments of the present invention provide a resource access method and a user resource gateway, which are used to solve the problem in the prior art that there are many signaling interactions between the client and the resource server or the authorization server when the client accesses resources, so the execution of accessing resources and Technical issues with long response times

Images