Authentication method, device and related products for request in heterogeneous network
By obtaining and processing identity registration requests in heterogeneous networks, and mapping them to shared authentication components for authentication, the problem of difficult authentication under multi-cloud deployment is solved and cross-cloud platform identity authentication is achieved.
Patent Information
- Application Number
- CN202111591138.X
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2021-12-23
- Publication Date
- 2025-01-24
- Estimated Expiration
- 2041-12-23
AI Technical Summary
Multi-cloud deployment makes it more difficult for cloud computing users to authenticate between different cloud platforms.
In heterogeneous networks, by obtaining the identity registration request, mapping it to the shared authentication interface, performing structured processing, constructing the identity authentication request message, and mapping it to the shared authentication component for authentication.
The difficulty of certification required in the heterogeneous network has been reduced, and the identity authentication of the cross -cloud platform is achieved.
Smart Images

Figure CN114329380B_ABST
Abstract
Description
Technical Field
[0001] The present application relates to the field of heterogeneous technologies, and in particular to a method, device and related products for authenticating requests in a heterogeneous network. Background Art
[0002] With the continuous development of cloud computing technology, various cloud platform products are also constantly enriched. Different cloud service providers have launched their own basic community cloud platform products in the fields of private cloud, public cloud, and community cloud. With more and more choices, more and more cloud computing users are also deploying their own businesses on different cloud platforms, showing a development trend of hybrid cloud and multi-cloud deployment. However, multi-cloud deployment leads to higher difficulty in certification. Summary of the invention
[0003] Based on the above problems, the embodiments of the present application provide a method, device and related products for authenticating requests in a heterogeneous network.
[0004] The embodiments of the present application disclose the following technical solutions:
[0005] A method for authenticating a request in a heterogeneous network, comprising:
[0006] Obtain identity registration requests in heterogeneous networks and map the received identity registration requests to a shared authentication interface;
[0007] Performing structured processing on the identity registration request to obtain an object access request, and issuing the object access request;
[0008] Constructing an identity authentication request message according to the object access request, wherein the identity authentication request message includes a message header and a message body, wherein the message header includes a request identifier of the identity registration request, and the message body includes a request container, and the request container is used to store attribute data of the identity registration request;
[0009] The identity authentication request message is mapped to a shared authentication component to authenticate the identity authentication request message.
[0010] Optionally, the performing structured processing on the identity registration request to obtain an object access request and issuing the object access request includes: adding a request validity period statement to the identity registration request to perform structured processing to obtain the object access request, and issuing the object access request.
[0011] Optionally, obtaining an identity registration request in a heterogeneous network, and performing a convolution-like processing on the received identity registration request to map it to a shared authentication interface, including: obtaining an identity registration request in a heterogeneous network, and performing a convolution-like processing on the received identity registration request to map it to a shared authentication interface.
[0012] Optionally, constructing an identity authentication request message according to the object access request includes: obtaining at least one of a credit rating, a historical legitimacy statement, and a heterogeneous access permission description of a user corresponding to the access request, and adding the at least one of the credit rating, a historical legitimacy statement, and a heterogeneous access permission description to the request container.
[0013] Optionally, mapping the identity authentication request message to a shared authentication component to authenticate the identity authentication request message includes: obtaining a shared token, adding the token to the identity authentication request message to map it to the shared authentication component to authenticate the identity authentication request message.
[0014] Optionally, mapping the identity authentication request message to a shared authentication component to authenticate the identity authentication request message includes: obtaining shared credentials, adding the credentials to the identity authentication request message to map to the shared authentication component to authenticate the identity authentication request message.
[0015] Optionally, mapping the identity authentication request message to a shared authentication component to authenticate the identity authentication request message includes: mapping the identity authentication request message to an authentication component shared locally on a unified authentication server to authenticate the identity authentication request message.
[0016] Optionally, after obtaining the identity registration request in the heterogeneous network, the method includes: parsing the identity registration request to obtain a timestamp, and adding the identity registration request to an identity authentication time sequence based on the timestamp.
[0017] Optionally, parsing the identity registration request to obtain a timestamp, and adding the identity registration request to an identity authentication time sequence based on the timestamp, includes: parsing the identity registration request to obtain a timestamp, and generating an authorization authentication statement based on the timestamp to add the identity registration request to the identity authentication time sequence.
[0018] An authentication device for a request in a heterogeneous network, comprising:
[0019] A first processing unit, configured to obtain an identity registration request in a heterogeneous network, and map the received identity registration request to a shared authentication interface;
[0020] A second processing unit is used to perform structured processing on the identity registration request to obtain an object access request, and issue the object access request;
[0021] a third processing unit, configured to construct an identity authentication request message according to the object access request, wherein the identity authentication request message includes a message header and a message body, wherein the message header includes a request identifier of the identity registration request, and the message body includes a request container, and the request container is used to store attribute data of the identity registration request;
[0022] The fourth processing unit is used to map the identity authentication request message to a shared authentication component to authenticate the identity authentication request message.
[0023] Optionally, the second processing unit is specifically configured to: add a request validity period declaration to the identity registration request to perform structured processing to obtain an object access request, and issue the object access request.
[0024] Optionally, the first processing unit is specifically used to: obtain an identity registration request in a heterogeneous network, and perform convolution-like processing on the received identity registration request to map it to a shared authentication interface.
[0025] Optionally, the third processing unit is specifically used to: obtain at least one of a credit rating, a historical legitimacy statement, and a heterogeneous access permission description of a user who initiates the access request, and add the at least one of the credit rating, a historical legitimacy statement, and a heterogeneous access permission description to the request container.
[0026] Optionally, the fourth processing unit is specifically used to: obtain a shared token, add the token to the identity authentication request message to map it to a shared authentication component, so as to authenticate the identity authentication request message.
[0027] Optionally, the fourth processing unit is specifically configured to: obtain a shared credential, add the credential to the identity authentication request message to map it to a shared authentication component, and authenticate the identity authentication request message.
[0028] Optionally, the fourth processing unit is specifically configured to: map the identity authentication request message to an authentication component shared locally on the unified authentication server to authenticate the identity authentication request message.
[0029] Optionally, the first processing unit is specifically configured to parse the identity registration request to obtain a timestamp, and based on the timestamp, add the identity registration request to an identity authentication time sequence.
[0030] Optionally, the first processing unit is specifically configured to parse the identity registration request to obtain a timestamp, and generate an authorization authentication statement based on the timestamp to add the identity registration request to an identity authentication time sequence.
[0031] An electronic device comprises: a memory and a processor, wherein the memory stores a computer executable program, and the processor is used to execute the computer executable program to implement the method described in any one of the embodiments of the present application.
[0032] A computer storage medium having a computer executable program stored thereon, wherein the computer executable program, when executed, implements the method described in any one of the embodiments of the present application.
[0033] In an embodiment of the present application, an identity registration request in a heterogeneous network is obtained, and the received identity registration request is mapped to a shared authentication interface; the identity registration request is structured to obtain an object access request, and the object access request is published; according to the object access request, an identity authentication request message is constructed, and the identity authentication request message includes a message header and a message body, the message header includes a request identifier of the identity registration request, and the message body includes a request container, and the request container is used to store attribute data of the identity registration request; the identity authentication request message is mapped to a shared authentication component to authenticate the identity authentication request message, thereby reducing the difficulty of authentication. BRIEF DESCRIPTION OF THE DRAWINGS
[0034] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative labor.
[0035] Figure 1 A flowchart of an authentication method for a request in a heterogeneous network according to an embodiment of the present application;
[0036] Figure 2 This is a schematic diagram of the structure of an authentication device requested in a heterogeneous network according to an embodiment of the present application;
[0037] Figure 3 This is a schematic diagram of the structure of an electronic device according to an embodiment of the present application;
[0038] Figure 4 This is a schematic diagram of the hardware structure of the electronic device according to an embodiment of the present application. DETAILED DESCRIPTION
[0039] The implementation of any technical solution of the embodiments of the present application does not necessarily require achieving all of the above advantages at the same time.
[0040] In order to enable those skilled in the art to better understand the scheme of the present invention, the technical scheme in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.
[0041] In an embodiment of the present application, an identity registration request in a heterogeneous network is obtained, and the received identity registration request is mapped to a shared authentication interface; the identity registration request is structured to obtain an object access request, and the object access request is published; according to the object access request, an identity authentication request message is constructed, and the identity authentication request message includes a message header and a message body, the message header includes a request identifier of the identity registration request, and the message body includes a request container, and the request container is used to store attribute data of the identity registration request; the identity authentication request message is mapped to a shared authentication component to authenticate the identity authentication request message, thereby reducing the difficulty of authentication.
[0042] In the following embodiments of the present application, the execution entity of the method may be an authentication server, which serves as an intermediate scheduling platform.
[0043] Figure 1 FIG. 1 is a flow chart of an authentication method for requesting in a heterogeneous network according to an embodiment of the present application; Figure 1 As shown, it includes:
[0044] S101, obtaining an identity registration request in a heterogeneous network, and mapping the received identity registration request to a shared authentication interface;
[0045] Optionally, in this embodiment, an identity registration request in a heterogeneous network is obtained, and the received identity registration request is subjected to a convolution-like processing to be mapped to a shared authentication interface, including: obtaining an identity registration request in a heterogeneous network, and performing a convolution-like processing on the received identity registration request to be mapped to a shared authentication interface.
[0046] In this embodiment, when performing the quasi-convolution processing, each data component in the identity registration request is extracted and converted into a matrix vector, and the quasi-convolution processing is performed with the set core matrix, so as to achieve mapping to the shared authentication interface.
[0047] In this embodiment, the size of the set core matrix is adapted to the dimensions of each data component in the identity registration request.
[0048] Of course, in some embodiments, the specific element values in the core matrix are flexibly set according to demand, or are adaptively adjusted as the application scenario is used.
[0049] Optionally, in this embodiment, after obtaining the identity registration request in the heterogeneous network, it includes: parsing the identity registration request to obtain a timestamp, and adding the identity registration request to an identity authentication time sequence based on the timestamp.
[0050] In this embodiment, based on the identity authentication time sequence, the identity registration request can be effectively managed according to the timestamp, thereby avoiding data conflicts in the data processing process. When the identity registration request is to be used later, the identity authentication time sequence can be directly inquired.
[0051] Optionally, in this embodiment, parsing the identity registration request to obtain a timestamp, and adding the identity registration request to an identity authentication time sequence based on the timestamp, includes: parsing the identity registration request to obtain a timestamp, and generating an authorization authentication statement based on the timestamp to add the identity registration request to the identity authentication time sequence.
[0052] In this embodiment, there is no special limitation on the parsing method of the identity registration request, such as based on get or post method.
[0053] S102, performing structured processing on the identity registration request to obtain an object access request, and issuing the object access request;
[0054] In this embodiment, the structured processing of the identity registration request to obtain an object access request and issuing the object access request includes: adding a request validity period statement to the identity registration request to structure the request to obtain the object access request, and issuing the object access request. Structuring based on the request validity period statement is equivalent to realizing a secondary identification of the identity registration request, thereby improving the security of subsequent authentication.
[0055] Specifically, when structuring, for example, the identity registration request with the request validity period statement added is structured in XML to obtain an XML text stream, which is directly used as the object access request. Further, the object access request is published, for example, through a hyperlink or form.
[0056] S103: construct an identity authentication request message according to the object access request, wherein the identity authentication request message includes a message header and a message body;
[0057] The message header includes a request identifier of the identity registration request, the message body includes a request container, and the request container is used to store attribute data of the identity registration request;
[0058] In this embodiment, constructing an identity authentication request message according to the object access request includes: obtaining at least one of a credit rating, a historical legitimacy statement, and a heterogeneous access permission description of a user who initiates the access request, and adding it to the request container.
[0059] Specifically, in this embodiment, the attribute data of the identity registration request includes at least one of the user's credit rating, historical legitimacy statement, and heterogeneous access rights statement. Specifically, the credit rating, historical legitimacy statement, and heterogeneous access rights statement are equivalent to strengthening security.
[0060] S104: Map the identity authentication request message to a shared authentication component to authenticate the identity authentication request message.
[0061] Optionally, in this embodiment, mapping the identity authentication request message to a shared authentication component to authenticate the identity authentication request message includes: obtaining a shared token, adding the token to the identity authentication request message to map it to the shared authentication component to authenticate the identity authentication request message.
[0062] Optionally, in this embodiment, mapping the identity authentication request message to a shared authentication component to authenticate the identity authentication request message includes: obtaining shared credentials, adding the credentials to the identity authentication request message to map to the shared authentication component to authenticate the identity authentication request message.
[0063] In this embodiment, the token or the credential may be generated by a network node with the highest credibility in the heterogeneous network.
[0064] Specifically, mapping to a shared authentication component is performed, such as mapping through a built HTTP service.
[0065] Optionally, mapping the identity authentication request message to a shared authentication component to authenticate the identity authentication request message includes: mapping the identity authentication request message to an authentication component shared locally on a unified authentication server to authenticate the identity authentication request message.
[0066] In this embodiment, all identity authentication request messages are specifically shared by the authentication component locally on the unified authentication server, thereby ensuring that all identity authentication request messages can have a unified interactive interface standard, improving the channel specificity of authentication in heterogeneous networks, and ensuring the security of the authentication process.
[0067] In this embodiment, the shared authentication component authenticates the identity authentication request message, including judging the timeliness of the request, the above-mentioned token, and the matching of the above-mentioned credentials. When it meets the preset matching criteria, it can be determined to be legal, otherwise it is determined to be illegal.
[0068] Figure 2 Schematic diagram of the structure of an authentication device for requesting in a heterogeneous network according to an embodiment of the present application; Figure 2 As shown, it includes:
[0069] The first processing unit 201 is used to obtain an identity registration request in a heterogeneous network and map the received identity registration request to a shared authentication interface;
[0070] The second processing unit 202 is used to perform structured processing on the identity registration request to obtain an object access request, and issue the object access request;
[0071] The third processing unit 203 is used to construct an identity authentication request message according to the object access request, wherein the identity authentication request message includes a message header and a message body, wherein the message header includes a request identifier of the identity registration request, and the message body includes a request container, and the request container is used to store attribute data of the identity registration request;
[0072] The fourth processing unit 204 is configured to map the identity authentication request message to a shared authentication component to authenticate the identity authentication request message.
[0073] Optionally, in some embodiments, the second processing unit is specifically configured to: add a request validity period declaration to the identity registration request to perform structured processing to obtain an object access request, and issue the object access request.
[0074] Optionally, in some embodiments, the first processing unit is specifically used to: obtain an identity registration request in a heterogeneous network, and perform convolution-like processing on the received identity registration request to map it to a shared authentication interface.
[0075] Optionally, in some embodiments, the third processing unit is specifically used to: obtain at least one of a credit rating, a historical legitimacy statement, and a heterogeneous access permission description of a user who initiates the access request, and add it to the request container.
[0076] Optionally, in some embodiments, the fourth processing unit is specifically used to: obtain a shared token, add the token to the identity authentication request message to map it to the shared authentication component, so as to authenticate the identity authentication request message.
[0077] Optionally, in some embodiments, the fourth processing unit is specifically used to: obtain shared credentials, add the credentials to the identity authentication request message to map to the shared authentication component, so as to authenticate the identity authentication request message.
[0078] Optionally, in some embodiments, the fourth processing unit is specifically configured to: map the identity authentication request message to an authentication component shared locally on the unified authentication server to authenticate the identity authentication request message.
[0079] Optionally, in some embodiments, the first processing unit is specifically configured to parse the identity registration request to obtain a timestamp, and based on the timestamp, add the identity registration request to an identity authentication time sequence.
[0080] Optionally, in some embodiments, the first processing unit is specifically configured to parse the identity registration request to obtain a timestamp, and generate an authorization authentication statement based on the timestamp to add the identity registration request to an identity authentication time sequence.
[0081] The embodiment of the present application further provides a computer storage medium, on which a computer executable program is stored, and when the computer executable program is executed, the method described in any one of the embodiments of the present application is implemented.
[0082] The embodiments of the present application further provide a computer program product, wherein a computer executable program is stored on the computer program product, and when the computer executable program is executed, the method described in any one of the embodiments of the present application is implemented.
[0083] Figure 3 Schematic diagram of the electronic device structure of the present application embodiment; Figure 3 As shown, it includes: a memory 301 and a processor 302, the memory stores a computer executable program, and the processor is used to execute the computer executable program to implement the method described in any embodiment of the present application.
[0084] Figure 4 Schematic diagram of the hardware structure of the electronic device of the present application embodiment; Figure 4 As shown, the hardware structure of the electronic device may include: a processor 401, a communication interface 402, a computer readable medium 403 and a communication bus 404;
[0085] The processor 401, the communication interface 402, and the computer-readable medium 403 communicate with each other via a communication bus 404;
[0086] Optionally, the communication interface 402 may be an interface of a communication module, such as an interface of a GSM module;
[0087] The processor 401 may be specifically configured to run an executable program stored in the memory, thereby executing all or part of the processing steps of any of the above method embodiments.
[0088] The processor 401 may be a general-purpose processor, including a central processing unit (CPU), a network processor (NP), etc.; it may also be a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a field-programmable gate array (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components. The methods, steps and logic block diagrams disclosed in the embodiments of the present application may be implemented or executed. The general-purpose processor may be a microprocessor or the processor may also be any conventional processor, etc.
[0089] The electronic devices of the embodiments of the present application exist in various forms, including but not limited to:
[0090] (1) Mobile communication devices: These devices are characterized by their mobile communication functions and their main purpose is to provide voice and data communications. These terminals include: smart phones (such as iPhone), multimedia phones, functional phones, and low-end phones.
[0091] (2) Ultra-mobile personal computer devices: These devices fall into the category of personal computers, have computing and processing capabilities, and generally also have mobile Internet access features. These terminals include: PDA, MID and UMPC devices, such as iPad.
[0092] (3) Portable entertainment devices: These devices can display and play multimedia content. They include audio and video players (such as iPods), handheld game consoles, e-books, as well as smart toys and portable car navigation devices.
[0093] (4) Server: A device that provides computing services. The server consists of a processor 710, a hard disk, memory, a system bus, etc. The server is similar to a general computer architecture, but because it needs to provide highly reliable services, it has higher requirements in terms of processing power, stability, reliability, security, scalability, and manageability.
[0094] (5) Other electronic devices with data interaction functions.
[0095] It should be pointed out that, according to the needs of implementation, the various components / steps described in the embodiments of the present application can be split into more components / steps, or two or more components / steps or partial operations of components / steps can be combined into new components / steps to achieve the purpose of the embodiments of the present application.
[0096] The above-mentioned method according to the embodiment of the present application can be implemented in hardware, firmware, or implemented as software or computer code that can be stored in a recording medium (such as a CD ROM, RAM, floppy disk, hard disk or magneto-optical disk), or implemented as a computer code originally stored in a remote recording medium or a non-temporary machine-readable medium downloaded through a network and stored in a local recording medium, so that the method described herein can be stored in such software processing on a recording medium using a general-purpose computer, a special-purpose processor or programmable or special-purpose hardware (such as an ASIC or FPGA). It can be understood that a computer, a processor, a microprocessor controller or programmable hardware includes a storage component (e.g., RAM, ROM, flash memory, etc.) that can store or receive software or computer code, and when the software or computer code is accessed and executed by a computer, a processor or hardware, the verification code generation method described herein is implemented. In addition, when a general-purpose computer accesses a code for implementing the verification code generation method shown here, the execution of the code converts the general-purpose computer into a special-purpose computer for executing the verification code generation method shown here.
[0097] Those of ordinary skill in the art will appreciate that the units and method steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of the embodiments of the present application.
[0098] The above implementation methods are only used to illustrate the embodiments of the present application, and are not limitations on the embodiments of the present application. Ordinary technicians in the relevant technical field can make various changes and modifications without departing from the spirit and scope of the embodiments of the present application. Therefore, all equivalent technical solutions also belong to the scope of the embodiments of the present application. The scope of patent protection of the embodiments of the present application should be limited by the claims.
Claims
1. A method for authenticating a request in a heterogeneous network, characterized in that: include: Obtaining an identity registration request in a heterogeneous network, performing a convolution-like process on the received identity registration request to map it to a shared authentication interface, performing a structured process on the identity registration request to obtain an object access request, and issuing the object access request; Constructing an identity authentication request message according to the object access request, wherein the identity authentication request message includes a message header and a message body, wherein the message header includes a request identifier of the identity registration request, and the message body includes a request container, and the request container is used to store attribute data of the identity registration request; Mapping the identity authentication request message to a shared authentication component to authenticate the identity authentication request message; Among them, when performing the quasi-convolution processing, each data component in the identity registration request is extracted and converted into a matrix vector, and the quasi-convolution processing is performed with the set kernel matrix, so as to achieve mapping to the shared authentication interface; After obtaining the identity registration request in the heterogeneous network, the method includes: parsing the identity registration request to obtain a timestamp, and adding the identity registration request to the identity authentication time sequence based on the timestamp; The step of parsing the identity registration request to obtain a timestamp, and adding the identity registration request to an identity authentication time sequence based on the timestamp, comprises: parsing the identity registration request to obtain a timestamp, and generating an authorization authentication statement based on the timestamp to add the identity registration request to the identity authentication time sequence; When structuring, the identity registration request with the request validity period statement added is structured in XML to obtain an XML text stream, which is directly used as an object access request.
2. The authentication method for requests in a heterogeneous network according to claim 1, characterized in that: The structurally processing the identity registration request to obtain an object access request and issuing the object access request includes: adding a request validity period statement to the identity registration request to structurally process the request to obtain an object access request, and issuing the object access request.
3. The authentication method for requests in a heterogeneous network according to claim 1, characterized in that: The constructing of the identity authentication request message according to the object access request includes: obtaining at least one of a credit rating, a historical legitimacy statement, and a heterogeneous access permission description of a user corresponding to the access request, and adding the at least one of the credit rating, a historical legitimacy statement, and a heterogeneous access permission description to the request container.
4. An authentication device for a request in a heterogeneous network, characterized in that: include: A first processing unit, configured to obtain an identity registration request in a heterogeneous network, and perform a convolution-like processing on the received identity registration request to map it to a shared authentication interface; A second processing unit is used to perform structured processing on the identity registration request to obtain an object access request, and issue the object access request; a third processing unit, configured to construct an identity authentication request message according to the object access request, wherein the identity authentication request message includes a message header and a message body, wherein the message header includes a request identifier of the identity registration request, and the message body includes a request container, and the request container is used to store attribute data of the identity registration request; a fourth processing unit, configured to map the identity authentication request message to a shared authentication component to authenticate the identity authentication request message; Among them, when performing the quasi-convolution processing, each data component in the identity registration request is extracted and converted into a matrix vector, and the quasi-convolution processing is performed with the set kernel matrix, so as to achieve mapping to the shared authentication interface; After obtaining the identity registration request in the heterogeneous network, the method includes: parsing the identity registration request to obtain a timestamp, and adding the identity registration request to the identity authentication time sequence based on the timestamp; The step of parsing the identity registration request to obtain a timestamp, and adding the identity registration request to an identity authentication time sequence based on the timestamp, comprises: parsing the identity registration request to obtain a timestamp, and generating an authorization authentication statement based on the timestamp to add the identity registration request to the identity authentication time sequence; When structuring, the identity registration request with the request validity period statement added is structured in XML to obtain an XML text stream, which is directly used as an object access request.
5. The authentication device for requesting in a heterogeneous network according to claim 4, characterized in that: The second processing unit is specifically configured to: add a request validity period statement to the identity registration request to perform structured processing to obtain an object access request, and issue the object access request.
6. The authentication device for requesting in a heterogeneous network according to claim 4, characterized in that: The third processing unit is specifically used to obtain at least one of the credit rating, historical legitimacy statement, and heterogeneous access permission description of the user who initiates the access request, and add the at least one of the above to the request container.
7. An electronic device, characterized in that: include: A memory and a processor, wherein the memory stores a computer executable program, and the processor is used to execute the computer executable program to implement the method according to any one of claims 1 to 3.
8. A computer storage medium, characterized in that: The computer storage medium stores a computer executable program, and the computer executable program implements the method according to any one of claims 1 to 3 when executed.
Citation Information
Patent Citations
User identity information acquisition method and device, storage medium and processor
CN111800547A
Cross-domain security interaction method and system, terminal and storage medium
CN113612770A