Authentication method used for open interface calling

Abstract

The invention provides an authentication method used for open interface calling. The method comprises the steps that an application operating on a user terminal performs initial registration operation on an open interface service operation platform before initiation of a calling request for the first time so as to acquire an ID and a key; the application dynamically creates a token based on random parameters when the calling request is initiated and constructs the calling request through combination of the created token and the ID and the key and then transmits the calling request to an open interface provider server; and the open interface provider server receives the calling request and then transmits the calling request to an authentication server to perform authentication of the calling request and provides an open interface required by the calling request to the application under the condition that the authentication server transmits back a message indicating success of authentication. The method has high security and is convenient to operate.

Description

technical field [0001] The present invention relates to an authentication method, more specifically, to an authentication method for open interface calling. Background technique [0002] At present, with the increasingly wide application of computers and networks and the increasing variety of business types in different fields, open interfaces (that is, interfaces provided by third-party platforms to achieve general functions, such as SMS functions, emails, etc.) are invoked through cloud computing-based applications. function and verification code function, etc.) to achieve specific functions more efficiently is becoming more and more important. [0003] In the existing technical solutions, the authentication of the call request sent by the application is usually implemented in the following way: (1) The application in the user terminal sends a request to the authentication client running in the user terminal before sending the call request Obtain the token (Token) issued ...

AI Technical Summary

Problems solved by technology

[0004] However, the above-mentioned existing technical solutions have the following problems: (1) Since the token is issued by the authentication client running in the user terminal, the token information has the risk of being intercepted and maliciously stolen; (2) due to different The third-party platform needs to develop different authentication clients and reside on the user terminal, so the operation is cumbersome and the efficiency is low

Images