Authorization authentication method, device and equipment based on proxy service

Abstract

The embodiment of the invention provides an authorization authentication method, device and equipment based on proxy service. The proxy service-based authorization authentication method is applied to an internal server in a system, and comprises the following steps of: setting a calling module of a proxy server verification interface in the internal server; the calling module responds to a token and an access request from an external server and calls a verification interface of a proxy server to verify whether the token is correct or not; if the token is correct, the internal server forwards the access request to the requested internal server; and the requested internal server responds to the access request and returns the resources requested by the access request. According to the embodiment of the invention, the multi-system authorization authentication efficiency and authentication security can be improved.

Description

technical field [0001] The invention relates to the technical field of authorization and authentication, in particular to a proxy service-based authorization authentication method, a proxy service-based authorization authentication device, a proxy service-based multi-system authorization authentication device, and a corresponding storage medium. Background technique [0002] The central authentication service CAS system is used for the connection of multiple systems between two enterprises. CAS supports multiple application system docking and single sign-on requirements, but most of the existing solutions are based on an authorization center, and all keys are managed and issued by the authorization center. However, in the actual system application process, users may come from Due to the system resources granted by multiple authorization centers, the data owner may also share the data with users managed by other authorization centers. In addition, the access control technolo...

AI Technical Summary

Problems solved by technology

CAS supports multiple application system docking and single sign-on requirements, but most of the existing solutions are based on an authorization center, and all keys are managed and issued by the authorization center. However, in the actual system application process, users may come from Based on the system resources granted by multiple authorization centers, the data owner may also share the data with users managed by other authorization centers

In addition, the access control technology based on attribute encryption will also bring a huge management burden, especially the problem of revocation has always been difficult

[0003] The different system resources required by the users managed by the authorization center and the users of multiple systems may be changing dynamically, and the resources of some application systems may be added, or the resources of some systems may be canceled, which is very important for the authority of CAS The grading granularity requirements are extremely high, and it becomes difficult to maintain the permissions of some application systems

Images