Platform authorization method, platform service side, application client side and system

Abstract

The embodiment of the invention discloses a platform authorization method, a platform service side, an application client side and a system. The platform authorization method comprises the following steps: a first validation message sent by the application client side through a first pathway is received and a terminal identifier is acquired; the mapping relation between received random character strings and the terminal identifier is recorded; a second validation message sent by the application client side through a second pathway is received; identity certification information submitted during a registration process is read from a data base according to an identity identifier; signature is conducted on the extracted identity certification information; if a generated signature value is consistent with a received signature value, a corresponding terminal identifier is extracted from the recorded mapping relation according to the random character strings; corresponding information on a user account is acquired according to the terminal identifier; an authorized access token is generated according to the information on the user account and the identity identification information; the authorized access token is sent to the application client side. According to the technical scheme provided by the embodiment of the invention, the user cannot perceive the authorization process and the authorization safety can be further improved.

Description

technical field

[0001] The invention relates to the technical field of computer communication, in particular to a platform authorization method, a platform server, an application client and a system. Background technique

[0002] An open platform refers to an open basic service platform for third parties provided by a website, such as open cloud platforms such as Baidu, Tencent, Ali, and Sina Weibo. In order to obtain various high-value cloud capabilities and user data provided by these open platforms, third-party application clients will support the open authorization interfaces provided by major platforms, so as to obtain the authorization of the application client on these platforms. Generate an authorized access token, and use the access token to call the OpenAPI (Open Application Programming Interface, Open Application Programming Interface) provided by the major platforms to obtain the cloud capabilities required by the application client and the relevant data of the u...

Images