A method for authorization and authentication of inter-system data transfer

Abstract

The invention belongs to the field of data exchange technology and security verification technology, and particularly relates to an intersystem data calling authorization and authentication method. The intersystem data calling authorization and authentication method comprises the following steps: firstly, SysKey is generated by a first system, and the SysKey is sent into a single-point login service system to obtain a temporary Token; the single-point login service system transmits the SysKey and the temporary Token to a second system; the second system transmits the temporary Token to the single-point login service system to verify whether the temporary Token is valid; the single-point login service system returns a verification result to the second system; if the temporary Token is valid, data to be inquired by the first system are returned to the first system; and otherwise, the temporary Token is directly returned to the first system to perform data processing. By adoption of the intersystem data calling authorization and authentication method provided by the invention, the security of user information in a data calling authorization and authentication process of the first system and the second system is guaranteed; and the two systems communicate through the single-point login service system, so the data in the two systems are respectively located within the respective system administration authority, and thus the data cross phenomenon between the two systems is effectively avoided.

Description

technical field [0001] The invention belongs to the field of data exchange technology and safety verification technology, and in particular relates to an authorization authentication method for inter-system data call. Background technique [0002] With the rapid development of the IT industry, the development of software systems not only considers functional requirements, customers also pay more and more attention to the security requirements of user information and data calls, so user authorization and authorization authentication of data calls between systems It has become particularly important, because the security of the system is more and more valued by users, and users also attach great importance to the privacy of network data. At the same time, R&D personnel also focus on designing related system security issues. Therefore, system login and data call have also become a hot topic that the IT industry has focused on research and development in recent years. [0003] ...

AI Technical Summary

Problems solved by technology

[0003] The data call authorization and authentication method between systems in the prior art cannot guarantee the security of user information during the data call authorization and authentication process between two systems, and the data between the systems is prone to overlap. Therefore, it is urgent to propose a method that can guarantee user information. The secure inter-system data call authorization authentication method

Images