Third-party authorization method and third-party authorization system

Abstract

The invention belongs to the technical field of communication, and particularly relates to a third-party authorization method and a third-party authorization system. The third-party authorization method comprises the steps that a user ID of a request user, a business ID of access business and the interaction record between the request user and the access business are acquired; identity authentication of the request user is passed under the condition that the access business is bound in the third-party authorization system and identity information of the request user is stored; and credibility between the user ID and the business ID is inquired under the condition that identity authentication of the request user is successful, and authorization confirmation of the corresponding authority for accessing to the access business of the request user is performed according to authority matching of the user side and the business side. According to the third-party authorization method and the third-party authorization system, real sharing of user resources is realized and user privacy is also effectively protected.

Description

technical field [0001] The invention belongs to the technical field of communications, and in particular relates to a third-party authorization method and a third-party authorization system. Background technique [0002] The number of resources and services provided by the Internet is huge and growing rapidly, and it has become the main channel for people to obtain information and services. However, the privacy and security situation of network users is becoming more and more serious. Since users are often accustomed to the login method of simple passwords, there are security risks such as weak passwords, "dragging the database", and "crashing the database". In order to further reduce the risk of user information leakage and authentication key information being intercepted, it is an effective way to solve these problems through authorized login, sharing and obtaining user information through a third party. [0003] The advantages of third-party authentication are portabilit...

AI Technical Summary

Problems solved by technology

However, in terms of technical implementation, because the existing technology mixes the two steps of authentication and authorization, the third-party authentication agency only realizes the authorization of access behavior through authentication, and lacks the management of behavior rights, thus causing the above security risks and business processes. the cumbersome

Images