A distributed authority verification method and system for centralized authority data

Abstract

The invention discloses a centralized authority data distributed authority verification method and system. The method comprises the steps that when a Web server receives an access request of a request side, an encryption token which is carried by the access request and authorized to the request side by a central authorization server is acquired; the Web server decrypts the encryption token so as to obtain the token; and the Web server verifies the token so as to determine whether the request side has access authority. The verification phase is shifted to each independent application system, only the first time of authorization and verification are processed by the central authorization server saving authorization data, and all the subsequent requests of the request side have attachment of the encryption access token for access. Intranet request overhead and time delay can be reduced, and concurrent pressure of the central authorization server can be reduced so that stability of the system can be enhanced.

Description

technical field [0001] The invention relates to the technical field of authority authentication, in particular to a distributed authority verification method and system for centralized authority data. Background technique [0002] At present, the known authority verification system is unified by a centralized authority management system to handle the authority authorization and verification of multiple systems, but this will cause the following two defects: [0003] 1) Access to all interfaces will be distributed to the centralized authority management system first. In the case of a large amount of concurrency under each independent system, this design brings excessive load pressure to the centralized authority management system. [0004] 2) Increased intranet overhead. Although the intranet overhead of a single verification request is not large, it will cause request delays when a large number of verification requests are concurrent. [0005] Therefore, the prior art stil...

AI Technical Summary

Problems solved by technology

[0006] In view of the above-mentioned deficiencies in the prior art, the purpose of the present invention is to provide a distributed authority verification method and system for centralized authority data, aiming at solving the problem that the authority verification system in the prior art is uniformly handled by a centralized authority management system. The authority authorization and verification load of a system is too heavy, and the defects of intranet overhead and delay are increased

Images