A method for system user to delegate others for security assistance

Abstract

The invention discloses a method for a system user to delegate others for security assistance, comprising the following steps: issuing an assistance invitation list by a delegator, the assistance invitation list comprising assistance content and authorization for a victim to log in a target system; sending the authorization to the trustee; and auditing the login of the supported person and the assisted business operation. According to the method, the assistance invitation list is sent to the entrusted person to enter the target system, so that leakage of a user account password is avoided, andthe privacy of the user is guaranteed; through the management of the assistance invitation list, the available IP segment, the maximum use frequency, the expiration time management, the available function module, the operation function and the accessible service data of the assistance invitation list are limited, detailed auditing is carried out on the operation assisted by an entrustee, and thesafety of the service data of the entrustee is guaranteed.

Description

technical field [0001] The invention relates to the field of information technology, in particular to a method for a system user to entrust others to perform security assistance. Background technique [0002] The application system usually has its own server and its own account system, that is, if the user needs to access the application system, he must first log in to the application system through the account number and password, and the system can only be entered after the server authentication is passed. [0003] If the system user needs to entrust others to assist in business operations, or requests assistance from others, the system user is required to provide the account number and password to the assistant, which will cause the system user's account and privacy to be leaked. [0004] With the development of Internet services, users may use multiple application systems, and the password information set is often the same. Therefore, when the account password of an appl...

AI Technical Summary

Problems solved by technology

[0003] If the system user needs to entrust others to assist in business operations, or requests assistance from others, the system user is required to provide the account number and password to the assistant, which will cause the leakage of the system user's account number and privacy

[0004] With the development of Internet business, users may use multiple application systems, and the password information set is often the same. Therefore, when the account password of an application is leaked, it may cause security risks for multiple applications.

[0005] In addition, the trustee uses the account number and password of the trustee to enter the target system, and the trustee can operate all functional modules and operating functions owned by the trustee, and access all business documents of the trustee, so the security of the trustee's business data will also be affected

Images