Hash power resource transaction processing method and system based on multi-level account system and medium

Abstract

This invention relates to a method, system, and medium for processing computing power resource transactions based on a multi-level account system. The method includes: pre-constructing a multi-level account permission mapping model, which includes preset role groups in the trading platform and preset user accounts in the supplier platform that are mapped to the trading platform; upon receiving a cross-platform access request generated by a user, the trading platform sends a service request to the supplier platform according to the determined business role and user account; the supplier platform generates an encrypted redirection credential encapsulated with a unique identifier of the target resource, a time-sensitive signature, and specific operation permissions based on the service request, and forwards it to the user; the user redirects to the supplier platform based on the encrypted redirection credential, and after verification by the supplier platform, a control connection is established between the user and the corresponding computing power resource in the supplier platform. Compared with the prior art, this invention achieves single sign-on and fast access between resources.

Description

Technical Field

[0001] This invention relates to the field of computing power resource transaction processing technology, and in particular to a computing power resource transaction processing method, system and medium based on a multi-level account system. Background Technology

[0002] As the scale and complexity of artificial intelligence models increase, the consumption of computing resources also rises, leading to the emergence of the computing power economy. As a hub connecting demanders and suppliers, the importance of computing power trading platforms is becoming increasingly prominent. In the existing technical architecture, the trading platform (responsible for matching, payment, and verification) and the supplier's computing power platform (responsible for underlying resource management and container scheduling) are often two independent heterogeneous systems.

[0003] The problems and shortcomings of the existing technology are as follows: 1. Fragmented cross-platform identities and chaotic access control: Existing technologies typically employ independent account systems. After purchasing on the trading platform, the buyer needs to manually register on the supplier platform; when reviewing orders on the trading platform, auditors cannot directly access the supplier platform to verify the authenticity of resources, often requiring them to share the supplier's administrator account, which poses a significant risk of misoperation or resource data leakage.

[0004] 2. Disconnect between transaction and delivery: Currently, most platforms only generate invoice information or voucher codes after order payment, requiring users to manually redeem them on the supplier's platform. This non-atomic operation may lead to issues such as "order paid but resources not activated" or "order refunded but resources not released."

[0005] 3. Poor user experience: Users cannot directly jump to the computing power platform to use computing power resources on the trading platform, resulting in a disjointed operation.

[0006] The invention disclosed in publication number CN115018484A includes a payment redirection method, an aggregated payment platform, a storage medium, and computer equipment. The merchant system receives a payment redirection request, sends a payment redirection link to a third-party payment platform, and the user completes the payment operation through the aggregated payment program. The payment result is then returned to the merchant system. However, this solution only enables the payment operation and still has the following problems: 1. How to establish a dynamic and timely role mapping mechanism between heterogeneous platforms to solve the problem of permission isolation for users such as administrators, auditors, and requesters in different scenarios.

[0007] 2. How to build an event-driven automatic order placement mechanism to ensure strong consistency between the transaction order status and the lifecycle of the underlying computing resources.

[0008] 3. How to implement passwordless redirection carrying resource location information so that users can directly access the operation interface of a specific computing power instance. Summary of the Invention

[0009] The purpose of this invention is to overcome the shortcomings of the existing technology, such as fragmented cross-platform identity and chaotic permission management, disconnect between transactions and delivery, and poor user experience, and to provide a computing power resource transaction processing method, system, and medium based on a multi-level account system.

[0010] The objective of this invention can be achieved through the following technical solutions: A computing power resource transaction processing method based on a multi-level account system, used for computing power resource transaction processing between users, trading platforms, and supplier platforms, includes: A multi-level account permission mapping model is pre-constructed between users, the trading platform, and the supplier platform. This multi-level account permission mapping model includes a preset role group in the trading platform and a preset user account in the supplier platform that is mapped to the trading platform. The user account is used to enable users to obtain temporary permissions in the supplier platform. Upon receiving a user-generated cross-platform access request, the transaction platform identifies and selects the corresponding business role from the role group, and determines the user account with the corresponding permissions on the supplier platform based on the requirements of the cross-platform access request. The transaction platform then sends a service request to the supplier platform based on the determined business role and user account. The cross-platform access request is initiated based on the computing power resources purchased by the user on the transaction platform. The supplier platform generates an encrypted redirection credential containing a unique identifier of the target resource, a time-sensitive signature, and specific operation permissions based on the service request, and forwards it to the user. The user then redirects to the supplier platform based on the encrypted redirection credential. After the supplier platform completes the verification, a control connection is established between the user and the corresponding computing power resource on the supplier platform.

[0011] Furthermore, the method also includes: When transaction order status change information is generated in the trading platform, a resource instantiation instruction is sent to the supplier platform's API to adjust the status of computing resources according to the transaction order status change information.

[0012] Furthermore, the process of determining the user account includes: Based on the user's operational intent and order attributes in the cross-platform access request, determine the corresponding temporary permissions and select user accounts that meet the temporary permissions.

[0013] Furthermore, the method employs a context-based redirection method using dual tokens to process cross-platform access requests. The processing steps of this dual-token context-based redirection method include the following: User-generated cross-platform access requests; The trading platform determines the required business roles and user accounts based on the cross-platform access request and sends an HTTP request to the authorization interface of the supplier platform. The supplier platform generates dual tokens based on the HTTP request and returns them to the transaction platform. The dual tokens include an access token and a refresh token. The access token is used for short-term access, and the refresh token is used to request a new access token and refresh token after the access token expires. The trading platform uses the dual tokens as the query parameter of the access link to construct an encrypted redirection credential; The user generates an access link and concatenates it with the encrypted redirection credential to generate a redirection link to access the supplier platform; The supplier platform parses and verifies the redirect link. If the verification passes, a control connection is established between the user and the corresponding computing resources in the supplier platform.

[0014] Furthermore, the method employs an AK / SK signature algorithm-based anti-tampering redirection method for processing cross-platform access requests. The processing steps of this AK / SK signature algorithm-based anti-tampering redirection method include the following: User-generated cross-platform access requests; The trading platform determines the required business roles and user accounts based on the cross-platform access request, generates a public key and a private key that is only initialized and displayed once, and saves the private key to the supplier platform; constructs a string to be signed based on the public key and the required business roles and user accounts, and encrypts the string to be signed using the private key to obtain the signature result, so as to construct the redirect link; Users access the supplier platform through the redirect link, and the supplier platform performs security verification on the redirect link. The security verification process includes: obtaining the corresponding stored private key based on the public key in the redirect link; reconstructing the signature result based on the public key, private key, and information in the redirect link; and comparing it with the signature result in the redirect link for verification. If the verification passes, a control connection is established between the user and the corresponding computing resources in the supplier platform.

[0015] Furthermore, the security verification process also includes: checking whether the timestamp of the redirect link is within a preset deviation threshold range.

[0016] Furthermore, the cross-platform access request is used to define the computing task of the computing resources, which is defined by the specification parameters of the order lifecycle and the business role.

[0017] Furthermore, the supplier platform has a corresponding underlying computing power resource pool, which includes multiple tradable computing power resources.

[0018] This invention also provides a computing resource transaction processing system that implements the computing resource transaction processing method based on a multi-level account system as described above, comprising: Users are used to generate cross-platform access requests and redirect to the supplier's platform based on encrypted redirect credentials; The trading platform is used to pre-build a multi-level account permission mapping model between users, the trading platform, and the supplier platform. This multi-level account permission mapping model includes a preset role group in the trading platform and a preset user account in the supplier platform that maps to the trading platform. The user account is used to grant users temporary permissions in the supplier platform. When a cross-platform access request generated by a user is received, the platform identifies and selects the corresponding business role from the role group, determines the user account with the corresponding permissions in the supplier platform according to the requirements of the cross-platform access request, and sends a service request to the supplier platform according to the determined business role and user account. The supplier platform generates an encrypted redirection credential containing a unique identifier for the target resource, a time-sensitive signature, and specific operation permissions based on the service request, and forwards it to the user. After verifying the received encrypted redirection credential, it establishes a control connection between the user and the corresponding computing resources in the supplier platform.

[0019] The present invention also provides a computer-readable storage medium on which a computer program is stored, the computer program being executed by a processor using the method described above.

[0020] Compared with the prior art, the present invention has the following advantages: (1) In order to realize collaborative transaction processing between users, transaction platforms and supplier platforms, the present invention first constructs a multi-level account permission mapping model among the three. It can analyze the operation intention and order attributes based on the user's cross-platform access request, assign the corresponding business role and user account with corresponding permissions in the supplier platform, realize permission isolation, and realize the automatic redirection of user requests to the corresponding supplier platform. During the redirection process, the transaction platform and the supplier platform generate an encrypted redirection credential that encapsulates the unique identifier of the target resource, the time-sensitive signature, and specific operation permissions based on a dynamic permission mapping model. Users can directly redirect to the supplier platform based on this encrypted redirection credential. After the supplier platform completes the verification, a control connection is established between the user and the corresponding computing power resource on the supplier platform, rather than a general portal homepage, thereby achieving single sign-on and fast access between resources.

[0021] (2) This invention provides two types of jump methods: context-carrying jump based on dual tokens and anti-tampering jump based on AK / SK signature algorithm. The method can be selected according to the needs of different manufacturers to realize cross-domain deep jump of context and signature.

[0022] (3) The anti-tampering redirection method based on the AK / SK signature algorithm of this invention can regenerate the signature using the same method as the transaction platform during the verification process on the supplier platform, based on the obtained public key and the pre-stored private key, and compare and verify it with the obtained signature. This method does not require the supplier platform to call the transaction platform's interface in real time during verification. It can complete the high-security level verification through local calculation, thus achieving a balance between security and efficiency. Attached Figure Description

[0023] Figure 1 This is a flowchart illustrating a computing resource transaction processing method based on a multi-level account system provided in an embodiment of the present invention. Figure 2 This is a flowchart illustrating a context-carrying jump method based on dual tokens provided in an embodiment of the present invention; Figure 3 This is a schematic diagram of the data processing process of a computing power resource transaction processing method based on a multi-level account system provided in an embodiment of the present invention; Figure 4 This is a flowchart illustrating an anti-tampering redirection method based on the AK / SK signature algorithm provided in an embodiment of the present invention. Detailed Implementation

[0024] To make the objectives, technical solutions, and advantages of the embodiments of the present invention clearer, the technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. The components of the embodiments of the present invention described and shown in the accompanying drawings can generally be arranged and designed in various different configurations.

[0025] Therefore, the following detailed description of the embodiments of the invention provided in the accompanying drawings is not intended to limit the scope of the claimed invention, but merely to illustrate selected embodiments of the invention. All other embodiments obtained by those skilled in the art based on the embodiments of the invention without inventive effort are within the scope of protection of the invention.

[0026] It should be noted that similar labels and letters in the following figures indicate similar items. Therefore, once an item is defined in one figure, it does not need to be further defined and explained in subsequent figures.

[0027] Example 1 like Figure 1 As shown, this embodiment provides a computing power resource transaction processing method based on a multi-level account system, used for computing power resource transaction processing between users, trading platforms, and supplier platforms, including the following steps: S1: Pre-build a multi-level account permission mapping model between users, trading platforms and supplier platforms. This multi-level account permission mapping model includes a preset role group in the trading platform and a preset user account in the supplier platform that is mapped to the trading platform. The user account is used to enable users to obtain temporary permissions in the supplier platform. S2: When generating transaction order status change information in the trading platform, a resource instantiation instruction is sent to the supplier platform's API to adjust the status of computing resources according to the transaction order status change information; S3: Upon receiving a cross-platform access request generated by a user, the transaction platform identifies and selects the corresponding business role from the role group, and determines the user account with the corresponding permissions on the supplier platform based on the requirements of the cross-platform access request. The transaction platform then sends a service request to the supplier platform based on the determined business role and user account. The cross-platform access request is initiated based on the computing power resources purchased by the user on the transaction platform. S4: The supplier platform generates an encrypted redirection credential containing a unique identifier of the target resource, a time-sensitive signature, and specific operation permissions based on the service request, and forwards it to the user; the user redirects to the supplier platform based on the encrypted redirection credential, and after the supplier platform completes the verification, a control connection is established between the user and the corresponding computing power resource in the supplier platform.

[0028] In step S1, in this embodiment, when constructing the multi-level account permission mapping model, role groups (admin / auditor / demander / supplier) are preset on the transaction platform, and user accounts mapped to the transaction platform are maintained on the supplier platform. Based on the current operation intention (such as purchase and use) and order attributes of the transaction platform user, the set of temporary permissions that the user should have when jumping to the supplier platform is calculated in real time.

[0029] The temporary permission set here is provided by the supplier. Different permissions will be subject to different restrictions when redirecting to the supplier's platform. After the redirection, the supplier should provide the service. This is equivalent to a resource request and redirection process.

[0030] In addition, each vendor platform maintains its own independent identity authentication system and underlying computing resource pool (such as GPU containers or virtual machines). The computing resources are used to execute computing tasks purchased by the demander, where the task is defined by specification parameters and business roles associated with a specific order lifecycle.

[0031] In step S2, in order to ensure that the user's operation on the supplier platform is effective and secure, the status of orders and the resources associated with the orders between the transaction platform and the supplier platform must be absolutely synchronized.

[0032] Therefore, it is necessary to build an order-driven resource lifecycle synchronization algorithm. When events such as delisting, successful payment, or order cancellation occur on the trading platform, cross-domain API calls need to be triggered. This algorithm includes mechanisms such as compensatory destruction, order status synchronization, and resource merging.

[0033] The aforementioned resource lifecycle synchronization algorithm ensures that when the order status on the trading platform undergoes a critical change, the corresponding resource status on the supplier platform can change immediately and correctly.

[0034] In step S3, the process of determining the user account includes: Based on the user's operational intent and order attributes in the cross-platform access request, determine the corresponding temporary permissions and select user accounts that meet the temporary permissions.

[0035] In step S4, to achieve cross-domain deep jumps in context and signature, two different jump methods are provided as follows: 1. Context-based redirection method based on dual tokens like Figure 2 and Figure 3 As shown, the processing steps for context-based redirection using dual tokens include the following: User-generated cross-platform access requests; The trading platform determines the required business roles and user accounts based on the cross-platform access request and sends an HTTP request to the authorization interface of the supplier platform. The supplier platform generates dual tokens based on the HTTP request and returns them to the trading platform. The dual tokens include an access token and a refresh token. The access token is used for short-term access, and the refresh token is used to request a new access token and refresh token after the access token expires. The trading platform uses the dual tokens as the query parameter of the access link to construct an encrypted redirect credential; The user generates an access link and concatenates it with an encrypted redirect credential to generate a redirect link to access the supplier platform; The supplier platform parses and verifies the redirect link. If the verification passes, a control connection is established between the user and the corresponding computing resources in the supplier platform.

[0036] Essentially, when a user clicks "Use," the trading platform's backend server first sends a server-side HTTP request to the supplier platform's authorization interface to obtain a token. Upon receiving the token, the trading platform uses it as a query parameter in the URL to generate a redirect link for the frontend to access the supplier platform and then redirects to the specified page.

[0037] 2. Anti-tampering redirection method based on AK / SK signature algorithm like Figure 4 As shown, the tamper-proof redirection process based on the AK / SK signature algorithm includes the following steps: User-generated cross-platform access requests; The trading platform determines the required business roles and user accounts based on the cross-platform access request, generates a public key and a private key that is only displayed once during initialization, and saves the private key to the supplier platform; it constructs a string to be signed based on the public key and the required business roles and user accounts, and encrypts the string to be signed using the private key to obtain the signature result, so as to construct the redirect link; Users access the supplier platform via a redirect link. The supplier platform performs security verification on the redirect link. The security verification process includes: obtaining the corresponding stored private key based on the public key in the redirect link; reconstructing the signature result based on the public key, private key, and information in the redirect link; and comparing it with the signature result in the redirect link for verification. If the verification passes, a control connection is established between the user and the corresponding computing resources in the supplier platform.

[0038] Preferably, the security verification process also includes: checking whether the timestamp of the redirect link is within a preset deviation threshold range.

[0039] Essentially, the process involves first generating a public key and a private key on the trading platform, which are then displayed only once during initialization. Suppliers can save this generated key to the platform. The trading platform then constructs a string to be signed (AK + timestamp + useID + body), uses SK to perform HMAC-SHA256 encryption to generate the corresponding signature, constructs the request URL, and accesses the platform through this URL. The platform verifies the obtained signature, first checking if the timestamp is within a threshold to prevent malicious repeated access via the obtained URL, and then encrypting it using the locally stored AK / SK and comparing it with the sent signature. After verification, the platform locates the corresponding internal resource based on the transmitted userID and redirects the user to the specified page.

[0040] Both different redirection methods can be used directly, and can be adapted to the methods provided by the target manufacturer.

[0041] The above-mentioned approach can be summarized as including the following coordination and response processes.

[0042] Coordination includes any of the following operations: identifying a status change of a computing power transaction order, such as moving from "paid" to "pending delivery"; identifying the submission of a cross-platform access request initiated by a demand-side user for a specific purchased computing power resource; and identifying the mapping relationship between the business role permissions of the transaction platform and the resource operation policies of the supplier platform, such as distinguishing between demand-side users with redirection permissions and administrators with only process management permissions.

[0043] In response to any of the above identifications, perform any of the following operations: By listening for changes in the order state machine, automatically trigger the sending of a resource instantiation instruction to the supplier platform's API and bind the returned resource identifier to the transaction order to achieve automated resource activation; Based on a dynamic permission mapping model, generate an encrypted redirection credential that encapsulates the target resource's unique identifier, time-sensitive signature, and specific operation permissions; and by verifying this encrypted redirection credential, perform context-sensitive deep routing to directly redirect the user's client session to the console page of the specific computing power instance bound to the order on the supplier platform, rather than the general portal homepage, thereby achieving single sign-on and one-click access to resources.

[0044] Example 2 This embodiment provides a computing resource transaction processing system that implements the computing resource transaction processing method based on a multi-level account system as described in Embodiment 1, including: Users are used to generate cross-platform access requests and redirect to the supplier's platform based on encrypted redirect credentials; The trading platform is used to pre-build a multi-level account permission mapping model between users, the trading platform, and the supplier platform. This multi-level account permission mapping model includes a preset role group in the trading platform and a preset user account in the supplier platform that maps to the trading platform. The user account is used to grant users temporary permissions in the supplier platform. When a cross-platform access request generated by a user is received, the corresponding business role is identified and selected from the role group, and the user account with the corresponding permissions in the supplier platform is determined according to the requirements of the cross-platform access request. The service request is then sent to the supplier platform according to the determined business role and user account. The supplier platform generates an encrypted redirection credential containing a unique identifier for the target resource, a time-sensitive signature, and specific operation permissions based on the service request, and forwards it to the user. After verifying the received encrypted redirection credential, it establishes a control connection between the user and the corresponding computing resources in the supplier platform.

[0045] It should be noted that the specific content and beneficial effects of this system can be found in the above method embodiments, and will not be repeated here.

[0046] This embodiment also provides a computer-readable storage medium storing a computer program, which is executed by a processor as the computing power resource transaction processing method based on a multi-level account system as described in Embodiment 1.

[0047] The computer program code used to implement the methods of the present invention can be written in any combination of one or more programming languages. This computer program code can be provided to a processor or controller of a general-purpose computer, a special-purpose computer, or other programmable data processing device, such that when executed by the processor or controller, the computer program code causes the functions / operations specified in the flowcharts and / or block diagrams to be implemented. The computer program code can be executed entirely on the machine, partially on the machine, as a standalone software package partially on the machine and partially on a remote machine, or entirely on a remote machine or server.

[0048] In the context of this invention, a computer-readable storage medium can be a tangible medium that may contain or store a program for use by or in conjunction with an instruction execution system, apparatus, or device. A computer-readable storage medium can be a machine-readable signal medium or a machine-readable storage medium. A computer-readable storage medium can be, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, apparatus, or devices, or any suitable combination of the foregoing. More specific examples of machine-readable storage media include electrical connections based on one or more wires, portable computer disks, hard disks, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), optical fibers, portable compact disk read-only memory (CD-ROM), optical storage devices, magnetic storage devices, or any suitable combination of the foregoing.

[0049] The preferred embodiments of the present invention have been described in detail above. It should be understood that those skilled in the art can make numerous modifications and variations based on the concept of the present invention without creative effort. Therefore, all technical solutions that can be obtained by those skilled in the art based on the concept of the present invention through logical analysis, reasoning, or limited experimentation on the basis of existing technology should be within the scope of protection defined by the claims.

Claims

1. A method for processing computing power resource transactions based on a multi-level account system, used for processing computing power resource transactions between users, trading platforms, and supplier platforms, characterized in that, include: A multi-level account permission mapping model is pre-constructed between users, the trading platform, and the supplier platform. This multi-level account permission mapping model includes a preset role group in the trading platform and a preset user account in the supplier platform that is mapped to the trading platform. The user account is used to enable users to obtain temporary permissions in the supplier platform. Upon receiving a user-generated cross-platform access request, the transaction platform identifies and selects the corresponding business role from the role group, and determines the user account with the corresponding permissions on the supplier platform based on the requirements of the cross-platform access request. The transaction platform then sends a service request to the supplier platform based on the determined business role and user account. The cross-platform access request is initiated based on the computing power resources purchased by the user on the transaction platform. The supplier platform generates an encrypted redirection credential containing a unique identifier of the target resource, a time-sensitive signature, and specific operation permissions based on the service request, and forwards it to the user. The user then redirects to the supplier platform based on the encrypted redirection credential. After the supplier platform completes the verification, a control connection is established between the user and the corresponding computing power resource on the supplier platform.

2. The computing power resource transaction processing method based on a multi-level account system according to claim 1, characterized in that, The method further includes: When transaction order status change information is generated in the trading platform, a resource instantiation instruction is sent to the supplier platform's API to adjust the status of computing resources according to the transaction order status change information.

3. The computing power resource transaction processing method based on a multi-level account system according to claim 1, characterized in that, The process of determining the user account includes: Based on the user's operational intent and order attributes in the cross-platform access request, determine the corresponding temporary permissions and select user accounts that meet the temporary permissions.

4. The computing power resource transaction processing method based on a multi-level account system according to claim 1, characterized in that, The method employs a context-based redirection mechanism using dual tokens to process cross-platform access requests. The process of this dual-token context-based redirection includes the following steps: User-generated cross-platform access requests; The trading platform determines the required business roles and user accounts based on the cross-platform access request and sends an HTTP request to the authorization interface of the supplier platform. The supplier platform generates dual tokens based on the HTTP request and returns them to the transaction platform. The dual tokens include an access token and a refresh token. The access token is used for short-term access, and the refresh token is used to request a new access token and refresh token after the access token expires. The trading platform uses the dual tokens as the query parameter of the access link to construct an encrypted redirection credential; The user generates an access link and concatenates it with the encrypted redirection credential to generate a redirection link to access the supplier platform; The supplier platform parses and verifies the redirect link. If the verification passes, a control connection is established between the user and the corresponding computing resources in the supplier platform.

5. The computing power resource transaction processing method based on a multi-level account system according to claim 1, characterized in that, The method employs an AK / SK signature algorithm-based anti-tampering redirection approach to process cross-platform access requests. The processing steps of this AK / SK signature algorithm-based anti-tampering redirection approach include the following: User-generated cross-platform access requests; The trading platform determines the required business roles and user accounts based on the cross-platform access request, generates a public key and a private key that is only initialized and displayed once, and saves the private key to the supplier platform; constructs a string to be signed based on the public key and the required business roles and user accounts, and encrypts the string to be signed using the private key to obtain the signature result, so as to construct the redirect link; Users access the supplier platform through the redirect link, and the supplier platform performs security verification on the redirect link. The security verification process includes: obtaining the corresponding stored private key based on the public key in the redirect link; reconstructing the signature result based on the public key, private key, and information in the redirect link; and comparing it with the signature result in the redirect link for verification. If the verification passes, a control connection is established between the user and the corresponding computing resources in the supplier platform.

6. The computing power resource transaction processing method based on a multi-level account system according to claim 5, characterized in that, The security verification process also includes: checking whether the timestamp of the redirect link is within a preset deviation threshold range.

7. The computing power resource transaction processing method based on a multi-level account system according to claim 1, characterized in that, The cross-platform access request is used to define the computing task of the computing resources, which is defined by the specification parameters of the order lifecycle and the business role.

8. The computing power resource transaction processing method based on a multi-level account system according to claim 1, characterized in that, The supplier platform has a corresponding underlying computing power resource pool, which includes multiple tradable computing power resources.

9. A computing resource transaction processing system that implements the computing resource transaction processing method based on a multi-level account system as described in any one of claims 1-8, characterized in that, include: Users are used to generate cross-platform access requests and redirect to the supplier's platform based on encrypted redirect credentials; The trading platform is used to pre-build a multi-level account permission mapping model between users, the trading platform, and the supplier platform. This multi-level account permission mapping model includes a preset role group in the trading platform and a preset user account in the supplier platform that is mapped to the trading platform. The user account is used to enable users to obtain temporary permissions in the supplier platform. Upon receiving a user-generated cross-platform access request, the system identifies and selects the corresponding business role from the role group, determines the user account with the corresponding permissions on the supplier platform based on the requirements of the cross-platform access request, and sends a service request to the supplier platform based on the determined business role and user account. The supplier platform generates an encrypted redirection credential containing a unique identifier for the target resource, a time-sensitive signature, and specific operation permissions based on the service request, and forwards it to the user. After verifying the received encrypted redirection credential, it establishes a control connection between the user and the corresponding computing resources in the supplier platform.

10. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores a computer program, which is executed by a processor according to any one of claims 1 to 8.

Images