Multi-system access method, apparatus, device, storage medium, and program product

Abstract

The application relates to a multi-system access method, device, equipment, storage medium and program product. The method comprises the following steps: firstly, in response to a login request of a first system, calling a unified authentication service to obtain authentication credentials of a plurality of takeover systems of the unified authentication service; then, in response to a business function access request triggered in a first system interface, determining a second system to which the business function belongs; then, according to the authentication credentials of the plurality of takeover systems, obtaining target authentication credentials of the second system; finally, accessing the second system through the target authentication credentials. Wherein the plurality of takeover systems in the method comprises the first system and a related system of the first system, and the second system is any one of the plurality of takeover systems. The method can improve the access speed of multi-business systems.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of computer development, and in particular to a multi-system access method, device, equipment, storage medium and program product. BACKGROUND

[0002] With the rapid development of software development technology, various development frameworks and running environments are also constantly updated.

[0003] In this case, it is often faced with the development of new business systems using new technologies, but the functions of the old business systems have not been completely migrated to the new business systems, and the new business systems cannot completely replace the old business systems, resulting in the need for the new and old business systems to run at the same time for a period of time. Based on this, one-time access of the new and old business systems can be realized through unified authentication.

[0004] However, in the related art, when performing one-time access of multiple business systems, there is a problem of slow access speed. SUMMARY

[0005] Therefore, it is necessary to provide a multi-system access method, device, equipment, storage medium and program product capable of improving access speed to solve the above technical problems.

[0006] In a first aspect, the present application provides a multi-system access method applied to a client, comprising:

[0007] In response to a login request of a first system, a unified authentication service is called to obtain authentication credentials of multiple takeover systems of the unified authentication service; the multiple takeover systems include the first system and associated systems of the first system;

[0008] In response to a business function access request triggered in the first system interface, a second system to which the business function belongs is determined; the second system is any one of the takeover systems;

[0009] According to the authentication credentials of the takeover systems, target authentication credentials of the second system are obtained;

[0010] The second system is accessed through the target authentication credentials.

[0011] In one of the embodiments, the login request carries initial authentication credentials of the first system, and before the unified authentication service is called to obtain the authentication credentials of the multiple takeover systems of the unified authentication service, the method further comprises:

[0012] The login interface of the first system is called through the unified authentication service;

[0013] The initial authentication credentials are sent to the first system through the login interface of the first system, and the first system is instructed to verify the initial authentication credentials;

[0014] If the initial authentication credential check pass message returned by the first system is received, it is determined that the login of the first system is successful.

[0015] In one embodiment, the unified authentication service is invoked to obtain authentication credentials of multiple takeover systems of the unified authentication service, including:

[0016] Obtaining authentication credentials of each takeover system;

[0017] Sending the authentication credentials of each takeover system to the client.

[0018] In one embodiment, the takeover systems include non-first takeover systems and / or first takeover systems, and obtaining authentication credentials of each takeover system includes:

[0019] Obtaining authentication credentials of the non-first takeover system in the memory; and / or,

[0020] Sending a system call request to the first takeover system, the system call request being used to obtain authentication credentials of the first takeover system.

[0021] In one embodiment, the business function access request carries a business function identifier, and in response to the business function access request, the second system to which the business function belongs is determined, including:

[0022] According to the business function identifier, the target takeover system to which the business function belongs is obtained from a preset mapping relationship between the business function identifier and the takeover system identifier;

[0023] Determining that the target takeover system is the second system.

[0024] In one embodiment, the second system is accessed through the target authentication credential, including:

[0025] Sending the target authentication credential to the second system, instructing the second system to perform a check on the target authentication credential;

[0026] If a check pass message returned by the second system is received, it is determined that the second system is accessed successfully, and a business interface corresponding to the business function is displayed in the front-end interface.

[0027] In a second aspect, the application further provides a multi-system access device. The device includes:

[0028] The credential invoking module is configured to, in response to a login request of a first system, invoke a unified authentication service to obtain authentication credentials of multiple takeover systems of the unified authentication service; the multiple takeover systems include the first system and associated systems of the first system.

[0029] determine, in response to the service function access request triggered in the first system interface, a second system to which the service function belongs; the second system is any one of the takeover systems;

[0030] obtain, according to the authentication credentials of the takeover systems, target authentication credentials of the second system;

[0031] access the second system by using the target authentication credentials.

[0032] In a third aspect, the present application also provides a computer device. The computer device comprises a memory and a processor, the memory stores a computer program, and the processor implements the steps of the method in any one of the embodiments of the first aspect when executing the computer program.

[0033] In a fourth aspect, the present application also provides a computer readable storage medium. The computer readable storage medium stores a computer program, and the computer program implements the steps of the method in any one of the embodiments of the first aspect when executed by a processor.

[0034] In a fifth aspect, the present application also provides a computer program product. The computer program product comprises a computer program, and the computer program implements the steps of the method in any one of the embodiments of the first aspect when executed by a processor.

[0035] The above-mentioned multi-system access method, device, equipment, storage medium and program product, first, in response to the login request of the first system, the unified authentication service is called to obtain the authentication credentials of the plurality of takeover systems of the unified authentication service; then, in response to the service function access request triggered in the first system interface, the second system to which the service function belongs is determined; then, according to the authentication credentials of the takeover systems, the target authentication credentials of the second system are obtained; finally, the second system is accessed by using the target authentication credentials. Wherein, the plurality of takeover systems in the method comprises the first system and the associated system of the first system, and the second system is any one of the takeover systems. Since the method is based on the authentication credentials to access the client system, and the authentication credentials are obtained in advance by interacting with the plurality of business systems through the unified authentication service, it is equivalent to obtaining the access permission of the plurality of business systems before accessing the plurality of business systems, so that when accessing the business system, only the authentication credentials corresponding to the business system are called from the unified authentication service to access the business system, thereby reducing the access frequency of the unified authentication service and improving the access speed. BRIEF DESCRIPTION OF DRAWINGS

[0036] Figure 1 An application environment diagram of the multi-system access method in one embodiment;

[0037] Figure 2A flowchart of a multi-system access method in one embodiment;

[0038] Figure 3 A flowchart of a multi-system access method in another embodiment;

[0039] Figure 4 A flowchart of an authentication credential obtaining step in one embodiment;

[0040] Figure 5 A flowchart of an authentication credential obtaining step in another embodiment;

[0041] Figure 6 A flowchart of a multi-system access method in another embodiment;

[0042] Figure 7 A flowchart of a multi-system access method in another embodiment;

[0043] Figure 8 A flowchart of a second system determining step in one embodiment;

[0044] Figure 9 A flowchart of a second system accessing step in one embodiment;

[0045] Figure 10 A block diagram of a multi-system access apparatus in one embodiment;

[0046] Figure 11 An internal structure diagram of a computer device in one embodiment. DETAILED DESCRIPTION

[0047] In order to make the purpose, technical scheme and advantages of the present application clearer, the present application is further described in detail below with reference to the drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and not used to limit the present application.

[0048] The multi-system access method provided by the embodiments of the present application can be applied in an application environment as shown in Figure 1 . Specifically, the client 102 communicates with the server 104 by calling the unified authentication service to obtain authentication credentials and accesses the client 102 according to the authentication credentials. The unified authentication service can be integrated on the server 104 or placed on a cloud or other network server. The server 104 can be implemented by an independent server or a server cluster composed of multiple servers.

[0049] In one embodiment, as shown in Figure 2 , a multi-system access method is provided. The method is applied in Figure 1The client 102 in the system is taken as an example for illustration, including the following steps:

[0050] S202, in response to the login request of the first system, calling the unified authentication service to obtain the authentication credentials of the plurality of takeover systems of the unified authentication service; the plurality of takeover systems include the first system and the associated system of the first system.

[0051] The login request is generated based on the access demand of the user to the system on the client. For example, the client contains a shortcut of the system, and the access demand can be established by the user clicking or double-clicking the shortcut of the system according to the mouse, and the access demand is sent to the client to generate the login request.

[0052] The unified authentication service is a service using module with the unified identity authentication service as the core. When the user logs in the unified identity authentication service, all systems supporting the unified identity authentication service can be used.

[0053] The authentication credential is composed of an authentication credential ID and an authentication credential key. One pair of authentication credentials can only be valid once, and multiple binding relationships need to generate multiple pairs of authentication credentials. In addition, the authentication credential can be returned in the form of authentication credentials based on different development frameworks, such as session, token, etc. The category of the authentication credential is not limited in the embodiment of the application. It should be noted that the unified authentication service contains the authentication credentials of multiple mutually trusted systems, and the authentication credentials correspond to the systems one by one, that is, according to the authentication credentials of the unified authentication service, the corresponding system can be accessed.

[0054] It should be noted that the system usually contains multiple business blocks. According to the different types of business blocks, multiple new systems containing different business blocks can be derived. In order to enable the user to smoothly access multiple business functions according to the authentication credentials after responding to the login request of the system, all business blocks are unified in one system, which means that the user accesses any type of business block through the login request of the first system. Further, the plurality of systems containing all business blocks are taken as the plurality of takeover systems, and in the plurality of takeover systems, the system to which the interface of all business blocks belongs is taken as the first system. Since the business blocks of the new system are also displayed in the interface of the first system, the new system is taken as the associated system of the first system.

[0055] Specifically, when the user enters the first system through the client, the login request of the first system is triggered first, and the first system contains the business blocks of all takeover systems; then, in response to the login request of the first system, according to the interaction relationship between the unified authentication service and the plurality of takeover systems including the first system, the unified authentication service is called to obtain the authentication credentials of the plurality of takeover systems.

[0056] S204, in response to the service function access request triggered in the first system interface, determining a second system to which the service function belongs; the second system is any one of the takeover systems.

[0057] The service function refers to specific operation steps that can realize a certain function, and is usually in the form of a link, a button, etc. in the system interface, so as to facilitate the user to enter conveniently. For example, if the teacher homework correction system is the first system, the first system interface can include the subjective question offline correction service function, the objective question intelligent correction service function, the score comprehensive analysis service function, etc. and the different service functions are displayed in different forms in the first system interface, so that the teacher can access them according to actual needs.

[0058] It should be noted that each or multiple service functions can correspond to a system, and all service function access interfaces are unified in the first system to make the user unaware of logging into multiple systems when accessing different service functions. At this time, the first system interface includes not only the original service function access interface of the first system, but also the service function access interface of the associated system of the first system.

[0059] Specifically, according to the service function access request triggered in the first system interface, the service function system corresponding to the service function access request is determined. If the service function access request is the service function access request of the first system, it is determined that the second system to which the service function belongs is the first system. If the service function access request is the service function access request of the associated system of the first system, it is determined that the second system to which the service function belongs is the associated system of the first system.

[0060] For example, if the teacher homework correction system is the first system, the subjective question offline correction service function included in the first system interface is the service function of the first system itself, and the objective question intelligent correction service function corresponds to system A and the score comprehensive analysis service function corresponds to system B. When the user triggers the subjective question offline correction service function in the first system interface, the first system including the subjective question offline correction service function is determined as the second system. When the user triggers the objective question intelligent correction service function in the first system interface, system B including the objective question intelligent correction service function is determined as the second system. When the user triggers the score comprehensive analysis service function in the first system interface, system C including the score comprehensive analysis service function is determined as the second system.

[0061] S206, according to the authentication credentials of each takeover system, obtaining the target authentication credentials of the second system.

[0062] It should be noted that the authentication credentials of each takeover system include the authentication credentials of the first system and the authentication credentials of the associated system of the first system. Since the second system is any one of the takeover systems, the corresponding authentication credentials of the second system are in the authentication credentials of each takeover system, so the authentication credentials of the second system can be obtained from the authentication credentials of each takeover system, and the authentication credentials of the second system in the takeover system are taken as the target authentication credentials.

[0063] Exemplarily, if the second system is the first system in the takeover system, the authentication credentials of the first system are obtained in the authentication credentials of the takeover system, and the authentication credentials of the first system are taken as the target credentials of the second system; if the second system is the associated system of the first system in the takeover system, the authentication credentials of the associated system of the first system are obtained in the authentication credentials of the takeover system, and the authentication credentials of the associated system of the first system are taken as the target credentials of the second system.

[0064] S208, access the second system through the target authentication credentials.

[0065] After obtaining the target authentication credentials, the second system can be accessed by the business function with the target credentials. Specifically, the second system first verifies the target authentication credentials, and if the verification is passed, the second system displays the corresponding business function.

[0066] In the embodiment of the application, first, in response to the login request of the first system, the authentication credentials of the plurality of takeover systems of the unified authentication service are obtained by calling the unified authentication service; then, in response to the business function access request triggered in the first system interface, the second system to which the business function belongs is determined; then, the target authentication credentials of the second system are obtained according to the authentication credentials of each takeover system; finally, the second system is accessed through the target authentication credentials. The plurality of takeover systems in the method include the first system and the associated system of the first system, and the second system is any one of the takeover systems. Since the method is based on the authentication credentials of the client system, and the authentication credentials are obtained in advance by interacting with the unified authentication service and the plurality of business systems, it is equivalent to obtaining the access permission of the plurality of business systems before accessing the plurality of business systems, so that when accessing the business system, only the authentication credentials corresponding to the business system are called from the unified authentication service to access the business system, thereby reducing the access frequency of the unified authentication service and improving the access speed.

[0067] Before calling the authentication credentials, it is usually judged based on the login request of the first system to reduce invalid calls. The embodiment of the application is a multi-system access method based on a successful login request. Based on this, the specific judgment steps before calling the authentication credentials are described below through an embodiment.

[0068] In one embodiment, as shown in FIG. 4, the method for accessing a plurality of systems based on a unified authentication service includes the following steps.Figure 3 As shown, the login request carries initial authentication credentials of the first system, and before calling the unified authentication service to obtain authentication credentials of the plurality of takeover systems of the unified authentication service, the method further comprises:

[0069] S302, calling a login interface of the first system by calling the unified authentication service.

[0070] It should be noted that before obtaining the authentication credentials according to the login request, the unified authentication service center first judges the state of the login request. If the login request is successful, it indicates that the access permission of the plurality of takeover systems of the unified authentication service is opened, and the unified authentication service can obtain the authentication credentials according to the login request. If the login request fails, it indicates that the permission of the plurality of takeover systems of the unified authentication service is uniformly closed, and the unified authentication service cannot obtain the authentication credentials.

[0071] Specifically, the unified authentication service center is first called according to the login request, and then the login interface of the first system is called by the unified authentication service center. The login interface carries the initial authentication credentials of the first system.

[0072] S304, sending the initial authentication credentials to the first system through the login interface of the first system, and instructing the first system to verify the initial authentication credentials.

[0073] Specifically, the login request carries the initial authentication credentials of the first system, and the first system is preconfigured with authentication credentials. When the login interface responds to the login request, the login interface of the first system receives the login request with the initial authentication credentials and verifies the initial authentication credentials. It should be noted that the initial authentication credentials include the authentication credentials of the first system and the initial secret key, and the verification of the initial authentication credentials by the first system includes verification of all contents of the initial authentication credentials.

[0074] For example, if the login interface is a login interface combined with an account and a password, the initial authentication credentials are an initial account and an initial password, and the first system includes a preset account and a preset password. At this time, the verification process is divided into account verification and password verification: the first system compares the initial account of the initial authentication credentials with the preset account. If the initial account is not the preset user account, the verification fails and the password verification is not needed. If the initial account is the preset user account, the initial password is compared with the preset password. If the initial password is consistent with the preset password, the verification is passed, otherwise the verification fails.

[0075] Exemplarily, if the form of the login interface is the form of a token, the initial authentication credential is an initial token with a time stamp, and the first system comprises a preset token with a time. The verification process at this time is divided into time verification and token verification: the first system compares the initial token with the preset token with a time, if the tokens are different, the verification fails, and the time verification is not needed; if the tokens are the same, the time stamp of the initial token is further judged, if the time stamp is within the preset time range, the verification succeeds, otherwise the verification fails.

[0076] S306, if the initial authentication credential verification pass message returned by the first system is received, it is determined that the login of the first system succeeds.

[0077] If the initial authentication credential verification pass message returned by the first system is received, it indicates that the initial authentication credential is the user authentication credential of the first system, that is, the login succeeds. Otherwise, the verification fails, which indicates that the initial authentication credential is not the user authentication credential of the first system.

[0078] In the embodiment of the application, the initial authentication credential is verified through the login interface of the first system, and only when the verification succeeds, the authentication credential of the system is called, which can reasonably avoid invalid calling of the authentication credential of the system.

[0079] When accessing multiple systems, the authentication credential of the system is usually obtained based on the unified authentication service to realize fast access to the business function of the system. Based on this, the following describes the step of obtaining the authentication credential through an embodiment.

[0080] In an embodiment, as shown in Figure 4 , the authentication credential of multiple takeover systems of the unified authentication service is obtained by calling the unified authentication service, including:

[0081] S402, the authentication credential of each takeover system is obtained.

[0082] When the first system passes the verification, the authentication credential of each takeover system is needed to access each system, and the authentication credential of each takeover system comprises the authentication credential of the first system and the authentication credential of the associated system of the first system. Specifically, the authentication credential of each takeover system can be directly triggered by the client according to the first system verification pass information; or the authentication credential of each takeover system can be obtained by triggering the calling instruction according to the first system verification pass information.

[0083] Optionally, the authentication credential of each takeover system is located in the unified authentication service, and when the first system passes the verification, the authentication credential of each takeover system of the unified authentication service center is directly called.

[0084] Optionally, the authentication credential of the associated system of the first system is located in the unified authentication service, the authentication credential of the first system is located in the first system, when the first system is verified, the authentication credential of the first system is received from the first system by the unified authentication service center, and the authentication credential of each takeover system is obtained by combining the authentication credential of the associated system of the first system in the unified authentication service center.

[0085] S404, the authentication credential of each takeover system is sent to the client.

[0086] It should be noted that the client needs the authentication credential of the takeover system when accessing the takeover system, and therefore the authentication credential of each takeover system is returned to the client for the client to access each takeover system.

[0087] In the embodiment of the application, the authentication credential of each takeover system is sent to the client, so that the client has corresponding authentication credentials to support system access when facing different takeover systems, thereby avoiding multiple verifications of the client to the system and improving the access speed of the client to different takeover systems.

[0088] When responding to the login request of the system, the authentication credential of all takeover systems of the system is usually obtained to complete the access to all business functions. Based on this, the acquisition steps of the authentication credential of each takeover system in different situations are described below through an embodiment.

[0089] In an embodiment, as shown in Figure 5 The takeover system includes a non-first takeover system and / or a first takeover system, and the authentication credential of each takeover system is obtained, including:

[0090] S502, the authentication credential of the non-first takeover system is obtained in the memory; and / or,

[0091] S504, a system call request is sent to the first takeover system, and the system call request is used to obtain the authentication credential of the first takeover system.

[0092] The first takeover system refers to the associated system of the first system which is first associated with the system authentication center, and the non-first takeover system refers to the associated system of the first system which has been associated with the authentication service center.

[0093] For example, when the takeover system is all non-first takeover systems, the authentication credential of the non-first takeover system can be directly called in the memory, or the authentication credential of the non-first takeover system can be called from the memory according to the judgment instruction of the takeover system.

[0094] As shown in Figure 6As shown, the new system is a non-first takeover system, the old system is the first system, when the browser / client responds to the system login instruction, the uniform authentication service center first sends the login interface of the old system to the old system for verification, then on the basis of successful login of the old system, the authentication credentials of the old system are obtained, and at the same time the uniform authentication service center calls the authentication credentials of the new system in the memory; then the authentication credentials of the old system and the authentication credentials of the non-first takeover new system are uniformly returned to the browser / client; finally, according to the authentication credentials of the old system and the authentication credentials of the non-first takeover new system, the function access on the interface of the old system is performed. It should be noted that the login interface of the old system integrates the business function access interface of the new system.

[0095] Exemplarily, when the takeover system includes a non-first takeover system and a first takeover system, the authentication credentials of the non-first takeover system need to be obtained in the memory at the same time, and a calling request is sent to the first takeover system through the authentication service center to call the authentication credentials of the non-first takeover system from the memory.

[0096] As shown, the new system is a non-first takeover system, the old system is the first system, when the browser / client responds to the system login instruction, the uniform authentication service center first sends the login interface of the old system to the old system for verification, then on the basis of successful login of the old system, the authentication credentials of the old system are obtained, and at the same time the uniform authentication service center calls the authentication credentials of the new system in the memory; then the authentication credentials of the old system and the authentication credentials of the non-first takeover new system are uniformly returned to the browser / client; finally, according to the authentication credentials of the old system and the authentication credentials of the non-first takeover new system, the function access on the interface of the old system is performed. It should be noted that the login interface of the old system integrates the business function access interface of the new system. Figure 7 As shown, the new system is a non-first takeover system, the old system is the first system, when the browser / client responds to the system login instruction, the uniform authentication service center first sends the login interface of the old system to the old system for verification, then on the basis of successful login of the old system, the authentication credentials of the old system are obtained, and at the same time the uniform authentication service center calls the authentication credentials of the new system in the memory; then the authentication credentials of the old system and the authentication credentials of the non-first takeover new system are uniformly returned to the browser / client; finally, according to the authentication credentials of the old system and the authentication credentials of the non-first takeover new system, the function access on the interface of the old system is performed. It should be noted that the login interface of the old system integrates the business function access interface of the new system.

[0097] In the embodiment of the application, the authentication credentials are obtained through the interaction of the uniform authentication service and the plurality of takeover systems, and all the authentication credentials are uniformly returned to the browser / client, which can shield the time difference in obtaining the authentication credentials of the first takeover and the non-first takeover system, ensure the time consistency of the user entering the business access, and make the user experience of accessing the system better.

[0098] In response to the service function access request, the system to which the service function belongs is usually entered in the system to which the service function belongs. Based on this, the determination step of the system to which the multiple service functions belong is described below through an embodiment.

[0099] In an embodiment, as shown in Figure 8 The service function access request carries a service function identifier, and in response to the service function access request, the second system to which the service function belongs is determined, comprising:

[0100] S802, according to the service function identifier, from the preset mapping relationship between the service function identifier and the takeover system identifier, the target takeover system to which the service function belongs is obtained.

[0101] The service function identifier is a mark that can distinguish each service function and is in the service function access request. The takeover system identifier corresponds to the service function identifier and is on the interface of the takeover system. The service function identifier can be in the form of a button or a text link, which is not limited by the present application.

[0102] Further, multiple service functions can be integrated in one takeover system, so one takeover system identifier corresponds to multiple service function identifiers, that is, multiple different service function identifiers enter the same takeover system.

[0103] Specifically, the service function identifier is substituted into the preset mapping relationship, and the takeover system containing the service function is obtained according to the correspondence between the service function identifier and the takeover system identifier, and the takeover system containing the service function is taken as the target takeover system.

[0104] S804, determining that the target takeover system is the second system.

[0105] The second system can be the first system or the associated system of the first system.

[0106] When the service function identifier carried in the service function access request corresponds to the service function of the first system, the authentication credential of the first system is required when accessing the service function, that is, the first system is the target takeover system, and because the target takeover system is the second system, the second system at this time is the first system.

[0107] When the service function identifier carried in the service function access request corresponds to the service function of the associated system of the first system, the authentication credential of the associated system of the first system is required when accessing the service function, that is, the associated system of the first system is the target takeover system, and because the target takeover system is the second system, the second system at this time is the associated system of the first system.

[0108] In the embodiment of the application, the second system is determined through the preset mapping relationship, so that the system determination result obtained intuitively according to the business function is more accurate, and when facing frequent business function access requests, the mapping relationship can also be used to realize quick switching, and the corresponding system adjustment mode is more flexible.

[0109] After obtaining the authentication credential of the second system, the access to the second system is specifically through a certain business function of the second system. Based on this, the specific access steps of the second system are described below through an embodiment.

[0110] In one embodiment, as shown in Figure 9 the target authentication credential is used to access the second system, including:

[0111] S902, the target authentication credential is sent to the second system, and the second system is instructed to check the target authentication credential.

[0112] S904, if a check-through message returned by the second system is received, it is determined that the access to the second system is successful, and the business interface corresponding to the business function is displayed in the front-end interface.

[0113] After obtaining the target authentication credential, the second system can be accessed based on the target authentication credential. Specifically, the target credential is sent to the second system, and when the second system receives the target credential, the target authentication credential is checked to check whether the target authentication credential matches the second system. If the check is passed, it indicates that the target authentication credential matches the second system, that is, the second system can be accessed through the target authentication credential, and at this time the second system will display the business function of the second system in the front-end interface.

[0114] In the embodiment of the application, the business function of the second system is accessed through the target authentication credential, which can quickly display the business function of the second system for customer access when the second system verification is passed, thereby avoiding the influence of the customer's access experience due to the too long loading page time.

[0115] In one specific embodiment, a multi-system access method is provided, and the embodiment includes:

[0116] (1) The unified authentication service calls the login interface of the first system.

[0117] (2) The initial authentication credential is sent to the first system through the login interface of the first system, and the first system is instructed to check the initial authentication credential.

[0118] (3) If an initial authentication credential check-through message returned by the first system is received, it is determined that the login to the first system is successful.

[0119] (4) obtaining the authentication credential of the non-first time taken-over system in the memory; and / or sending a system call request to the first time taken-over system, the system call request being used to obtain the authentication credential of the first time taken-over system.

[0120] (5) sending the authentication credential of each taken-over system to the client.

[0121] (6) obtaining the target taken-over system to which the business function belongs from a preset mapping relationship between the business function identifier and the taken-over system identifier.

[0122] (7) obtaining the target authentication credential of the second system according to the authentication credential of each taken-over system.

[0123] (8) determining that the target taken-over system is the second system.

[0124] (9) sending the target authentication credential to the second system, and instructing the second system to verify the target authentication credential.

[0125] (10) if a verification pass message returned by the second system is received, it is determined that the second system is accessed successfully, and a business interface corresponding to the business function is displayed in the front-end interface.

[0126] In the embodiments of the present application, first, in response to the login request of the first system, the authentication credential of the plurality of taken-over systems of the unified authentication service is obtained by calling the unified authentication service; then, in response to the business function access request triggered in the first system interface, the second system to which the business function belongs is determined; then, the target authentication credential of the second system is obtained according to the authentication credential of each taken-over system; finally, the second system is accessed through the target authentication credential. The plurality of taken-over systems in the method include the first system and the associated system of the first system, and the second system is any one of the plurality of taken-over systems. Since the method is based on the authentication credential to access the client system, and the authentication credential is obtained in advance by the unified authentication service and the plurality of business systems, it is equivalent to obtaining the access permission of the plurality of business systems before accessing the plurality of business systems, so that when accessing the business system, only the authentication credential corresponding to the business system is called from the unified authentication service to access it, thereby reducing the access frequency of the unified authentication service and improving the access speed.

[0127] It should be understood that although each step in the flowchart involved in the above embodiments is shown in sequence according to the arrow, these steps are not necessarily executed in the order indicated by the arrow. Unless explicitly stated herein, the execution of these steps is not strictly limited in sequence, and these steps can be executed in other orders. Moreover, at least part of the steps in the flowchart involved in the above embodiments can include multiple steps or multiple stages, which are not necessarily executed at the same time, but can be executed at different times, and the execution order of these steps or stages is not necessarily sequential, but can be alternately executed with other steps or steps or stages in other steps.

[0128] Based on the same inventive concept, the embodiments of the present application also provide a multi-system access device for implementing the above-mentioned multi-system access method. The implementation scheme for solving the problem provided by the device is similar to the implementation scheme described in the above method, so the specific limitations in one or more multi-system access device embodiments provided below can refer to the limitations of the multi-system access method in the above text, which will not be repeated here.

[0129] In one embodiment, as shown in Figure 10 A multi-system access device 1000 is provided, including a credential calling module 1002, a system determining module 1004, a credential obtaining module 1006, and a system access module 1008, wherein:

[0130] The credential calling module 1002 is configured to, in response to a login request of a first system, call a unified authentication service to obtain authentication credentials of a plurality of takeover systems of the unified authentication service; the plurality of takeover systems include the first system and a related system of the first system;

[0131] The system determining module 1004 is configured to, in response to a business function access request triggered in a first system interface, determine a second system to which the business function belongs; the second system is any one of the plurality of takeover systems;

[0132] The credential obtaining module 1006 is configured to obtain target authentication credentials of the second system according to the authentication credentials of the plurality of takeover systems;

[0133] The system access module 1008 is configured to access the second system through the target authentication credentials.

[0134] In one embodiment, the multi-system access device 1000 further includes:

[0135] An interface calling module is configured to call a login interface of the first system by calling the unified authentication service;

[0136] The credential verification module is configured to send the initial authentication credential to the first system through a login interface of the first system, and instruct the first system to verify the initial authentication credential.

[0137] The login judgment module is configured to determine that the login of the first system is successful if the initial authentication credential verification pass message returned by the first system is received.

[0138] In an embodiment, the credential calling module 1002 includes:

[0139] The first obtaining unit is configured to obtain the authentication credential of each takeover system.

[0140] The second obtaining unit is configured to send the authentication credential of each takeover system to the client.

[0141] In an embodiment, the first obtaining unit is further configured to obtain the authentication credential of the system that is not taken over for the first time in the memory, and / or send a system calling request to the system that is taken over for the first time, the system calling request being used to obtain the authentication credential of the system that is taken over for the first time.

[0142] In an embodiment, the system determination module 1004 includes:

[0143] The third obtaining unit is configured to obtain the target takeover system to which the business function belongs according to the business function identifier, from a preset mapping relationship between the business function identifier and the takeover system identifier.

[0144] The system determination unit is configured to determine that the target takeover system is the second system.

[0145] In an embodiment, the system access module 1008 includes:

[0146] The verification instruction unit is configured to send the target authentication credential to the second system, and instruct the second system to verify the target authentication credential.

[0147] The business display unit is configured to determine that the access to the second system is successful if the verification pass message returned by the second system is received, and display the business interface corresponding to the business function in the front-end interface.

[0148] In an embodiment, a computer device is provided, which can be a terminal, and an internal structure diagram of the computer device can be as shown in Figure 11The computer device includes a processor, a memory, an input / output interface, a communication interface, a display unit and an input device. The processor, the memory and the input / output interface are connected through a system bus, and the communication interface, the display unit and the input device are connected to the system bus through the input / output interface. The processor of the computer device is configured to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system and a computer program. The internal memory provides an environment for the operating system and the computer program in the non-volatile storage medium to run. The input / output interface of the computer device is configured to exchange information between the processor and external devices. The communication interface of the computer device is configured to perform wired or wireless communication with external terminals. The wireless communication can be achieved through WIFI, mobile cellular network, NFC (Near Field Communication) or other technologies. The computer program is executed by the processor to implement a multi-system access method. The display unit of the computer device is configured to form a visually visible picture, which can be a display screen, a projection device or a virtual reality imaging device. The display screen can be a liquid crystal display screen or an electronic ink display screen. The input device of the computer device can be a touch layer overlaid on the display screen, or a key, trackball or touchpad arranged on the shell of the computer device, or an external keyboard, touchpad or mouse, etc.

[0149] Those skilled in the art can understand that, Figure 11 The structure shown in the figure is only a block diagram of part of the structure related to the scheme of the present application, and does not constitute a limitation on the computer device to which the scheme of the present application is applied. The specific computer device can include more or fewer components than those shown in the figure, or combine certain components, or have a different arrangement of components.

[0150] In one embodiment, a computer device is provided, including a memory and a processor, the memory storing a computer program, and the processor executing the computer program to implement the following steps:

[0151] In response to a login request of the first system, a unified authentication service is called to obtain authentication credentials of a plurality of takeover systems of the unified authentication service; the plurality of takeover systems includes the first system and an associated system of the first system;

[0152] In response to a business function access request triggered in the first system interface, a second system to which the business function belongs is determined; the second system is any one of the plurality of takeover systems;

[0153] According to the authentication credentials of the plurality of takeover systems, a target authentication credential of the second system is obtained;

[0154] The second system is accessed through the target authentication credential.

[0155] In one embodiment, the processor, when executing the computer program, further implements the following steps:

[0156] calling a login interface of the first system through the unified authentication service;

[0157] sending the initial authentication credential to the first system through the login interface of the first system, instructing the first system to verify the initial authentication credential;

[0158] if a verification pass message of the initial authentication credential returned by the first system is received, determining that the login of the first system is successful.

[0159] In one embodiment, the processor, when executing the computer program, further implements the following steps:

[0160] obtaining authentication credentials of each takeover system;

[0161] sending the authentication credentials of each takeover system to the client.

[0162] In one embodiment, the processor, when executing the computer program, further implements the following steps:

[0163] obtaining, in the memory, the authentication credential of the system that is not taken over for the first time; and / or,

[0164] sending a system call request to the system taken over for the first time, the system call request being used to obtain the authentication credential of the system taken over for the first time.

[0165] In one embodiment, the processor, when executing the computer program, further implements the following steps:

[0166] obtaining, according to the business function identifier, a target takeover system to which the business function belongs, from a preset mapping relationship between business function identifiers and takeover system identifiers;

[0167] determining that the target takeover system is the second system.

[0168] In one embodiment, the processor, when executing the computer program, further implements the following steps:

[0169] sending the target authentication credential to the second system, instructing the second system to verify the target authentication credential;

[0170] if a verification pass message returned by the second system is received, determining that the second system is accessed successfully, and displaying a business interface corresponding to the business function in the front-end interface.

[0171] In one embodiment, a computer readable storage medium is provided, and the computer readable storage medium stores a computer program, which, when executed by a processor, implements the following steps:

[0172] In response to the login request of the first system, the unified authentication service is invoked to obtain authentication credentials of a plurality of takeover systems of the unified authentication service; the plurality of takeover systems include the first system and a related system of the first system;

[0173] In response to a service function access request triggered in the first system interface, a second system to which the service function belongs is determined; the second system is any one of the plurality of takeover systems;

[0174] According to the authentication credentials of the plurality of takeover systems, target authentication credentials of the second system are obtained;

[0175] The second system is accessed through the target authentication credentials.

[0176] In one embodiment, the processor, when executing the computer program, further implements the following steps:

[0177] The login interface of the first system is invoked by invoking the unified authentication service;

[0178] The initial authentication credentials are sent to the first system through the login interface of the first system, and the first system is instructed to verify the initial authentication credentials;

[0179] If a verification pass message of the initial authentication credentials returned by the first system is received, it is determined that the login of the first system is successful.

[0180] In one embodiment, the processor, when executing the computer program, further implements the following steps:

[0181] Obtain the authentication credentials of the plurality of takeover systems;

[0182] The authentication credentials of the plurality of takeover systems are sent to the client.

[0183] In one embodiment, the processor, when executing the computer program, further implements the following steps:

[0184] In the memory, obtain the authentication credentials of the system that is not taken over for the first time; and / or,

[0185] The system call request is sent to the system taken over for the first time, and the system call request is used to obtain the authentication credentials of the system taken over for the first time.

[0186] In one embodiment, the processor, when executing the computer program, further implements the following steps:

[0187] According to the service function identifier, from a preset mapping relationship between the service function identifier and the takeover system identifier, a target takeover system to which the service function belongs is obtained;

[0188] It is determined that the target takeover system is the second system.

[0189] In one embodiment, the processor, when executing the computer program, further implements the following steps:

[0190] sending the target authentication credential to the second system, instructing the second system to check the target authentication credential;

[0191] if a check-through message returned by the second system is received, determining that the second system is accessed successfully, and displaying a business interface corresponding to the business function in the front-end interface.

[0192] In one embodiment, a computer program product is provided, comprising a computer program which, when executed by a processor, implements the following steps:

[0193] in response to a login request of the first system, calling the unified authentication service to obtain authentication credentials of a plurality of takeover systems of the unified authentication service; the plurality of takeover systems comprising the first system and a related system of the first system;

[0194] in response to a business function access request triggered in the first system interface, determining a second system to which the business function belongs; the second system being any one of the plurality of takeover systems;

[0195] obtaining a target authentication credential of the second system according to the authentication credentials of the plurality of takeover systems;

[0196] accessing the second system through the target authentication credential.

[0197] In one embodiment, the processor further implements the following steps when executing the computer program:

[0198] calling a login interface of the first system by calling the unified authentication service;

[0199] sending the initial authentication credential to the first system through the login interface of the first system, instructing the first system to check the initial authentication credential;

[0200] if an initial authentication credential check-through message returned by the first system is received, determining that the login of the first system is successful.

[0201] In one embodiment, the processor further implements the following steps when executing the computer program:

[0202] obtaining authentication credentials of the plurality of takeover systems;

[0203] sending the authentication credentials of the plurality of takeover systems to the client.

[0204] In one embodiment, the processor further implements the following steps when executing the computer program:

[0205] obtaining the authentication credential of the system which is not taken over for the first time in the memory; and / or,

[0206] The system call request is sent to the first takeover system, and the system call request is used to obtain authentication credentials of the first takeover system.

[0207] In one embodiment, the processor, when executing the computer program, also implements the following steps:

[0208] According to the business function identifier, the target takeover system to which the business function belongs is obtained from a preset mapping relationship between the business function identifier and the takeover system identifier.

[0209] It is determined that the target takeover system is the second system.

[0210] In one embodiment, the processor, when executing the computer program, also implements the following steps:

[0211] The target authentication credentials are sent to the second system, and the second system is instructed to verify the target authentication credentials.

[0212] If a verification pass message returned by the second system is received, it is determined that the second system is accessed successfully, and a business interface corresponding to the business function is displayed in the front-end interface.

[0213] It should be noted that the user information (including but not limited to user equipment information, user personal information, etc.) and data (including but not limited to data for analysis, stored data, displayed data, etc.) involved in the present application are all information and data authorized by the user or authorized by all parties, and the collection, use and processing of related data need to comply with relevant national and regional laws, regulations and standards.

[0214] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be completed by instructing the relevant hardware through a computer program. The computer program can be stored in a non-volatile computer readable storage medium, and when the computer program is executed, the processes of the above-mentioned embodiments of the methods can be included. Any reference to memory, database or other medium used in the embodiments provided in the present application can include at least one of non-volatile and volatile memory. The non-volatile memory can include read-only memory (Read-Only Memory, ROM), magnetic tape, floppy disk, flash memory, optical storage, high-density embedded non-volatile memory, resistive memory (ReRAM), magnetoresistive random access memory (Magnetoresistive Random Access Memory, MRAM), ferroelectric memory (Ferroelectric Random Access Memory, FRAM), phase change memory (Phase Change Memory, PCM), graphene memory, etc. The volatile memory can include random access memory (Random Access Memory, RAM) or external cache memory, etc. As an illustration but not limitation, the RAM can be in various forms, such as static random access memory (Static Random Access Memory, SRAM) or dynamic random access memory (Dynamic Random Access Memory, DRAM), etc. The database involved in the embodiments provided in the present application can include at least one of a relational database and a non-relational database. The non-relational database can include a distributed database based on a block chain, etc., without being limited thereto. The processor involved in the embodiments provided in the present application can be a general-purpose processor, a central processing unit, a graphics processing unit, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, etc., without being limited thereto.

[0215] Any combination of the technical features of the above embodiments can be made. In order to make the description simple, all possible combinations of the technical features in the above embodiments are not described, however, as long as the combination of the technical features does not exist contradictory, it should be considered as the scope of the present application.

[0216] The above embodiments only express several implementation manners of the present application, and the description is more specific and detailed, but it should not be understood as a limitation on the scope of the patent of the present application. It should be noted that for those skilled in the art, without departing from the concept of the present application, a number of modifications and improvements can be made, which are within the scope of protection of the present application. Therefore, the protection scope of the present application should be subject to the appended claims.

Claims

1. A method for accessing multiple systems, characterized in that, Applied to a client, the method includes: In response to a login request from the first system, the unified authentication service is invoked to obtain authentication credentials from multiple takeover systems of the unified authentication service; the multiple takeover systems include the first system and its associated systems. In response to a business function access request triggered in the first system interface, based on the business function identifier carried in the business function access request, the target takeover system to which the business function belongs is obtained from the preset mapping relationship between business function identifiers and takeover system identifiers; and the target takeover system is determined to be the second system. Obtain the target authentication credentials of the second system from the authentication credentials of each of the aforementioned takeover systems; Access the second system using the target authentication credentials.

2. The method according to claim 1, characterized in that, The login request carries the initial authentication credentials of the first system. Before invoking the unified authentication service to obtain the authentication credentials of the multiple takeover systems of the unified authentication service, the method further includes: The login interface of the first system is invoked through the unified authentication service; The initial authentication credentials are sent to the first system through the login interface of the first system, instructing the first system to verify the initial authentication credentials; If the system receives a message indicating that the initial authentication credentials have been verified, the login to the first system is considered successful.

3. The method according to any one of claims 1 or 2, characterized in that, The step of invoking the unified authentication service to obtain authentication credentials from multiple takeover systems includes: Obtain the authentication credentials of each of the aforementioned takeover systems; Send the authentication credentials of each of the takeover systems to the client.

4. The method according to claim 3, characterized in that, The takeover system includes systems that are not being taken over for the first time and / or systems that are being taken over for the first time. Obtaining the authentication credentials for each of the takeover systems includes: Retrieve the authentication credentials of the non-first-time takeover system from memory; and / or, A system call request is sent to the system being taken over for the first time. The system call request is used to obtain the authentication credentials of the system being taken over for the first time.

5. The method according to claim 1 or 2, characterized in that, Accessing the second system via the target authentication credentials includes: Send the target authentication credential to the second system, instructing the second system to verify the target authentication credential; If a verification pass message is received from the second system, it is determined that the access to the second system was successful, and the business interface corresponding to the business function is displayed on the front-end interface.

6. A multi-system access device, characterized in that, The device includes: The credential retrieval module is used to respond to a login request from the first system by invoking the unified authentication service to obtain authentication credentials from multiple takeover systems of the unified authentication service; the multiple takeover systems include the first system and its associated systems. The system determination module is used to respond to a business function access request triggered in the first system interface, and obtain the target takeover system to which the business function belongs from a preset mapping relationship between business function identifiers and takeover system identifiers based on the business function identifier carried in the business function access request; and determine the target takeover system as the second system. The credential acquisition module is used to acquire the target authentication credential of the second system from the authentication credentials of each of the takeover systems; The system access module is used to access the second system using the target authentication credentials.

7. The apparatus according to claim 6, characterized in that, The login request carries the initial authentication credentials of the first system, and the device includes: The interface call module is used to call the login interface of the first system through the unified authentication service. The credential verification module is used to send the initial authentication credential to the first system through the login interface of the first system, and instruct the first system to verify the initial authentication credential. The login determination module is used to determine that the login to the first system is successful if it receives an initial authentication credential verification success message returned by the first system.

8. A computer device comprising a memory and a processor, wherein the memory stores a computer program, characterized in that, When the processor executes the computer program, it implements the steps of the method according to any one of claims 1 to 5.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by a processor, it implements the steps of the method according to any one of claims 1 to 5.

10. A computer program product, comprising a computer program, characterized in that, When the computer program is executed by a processor, it implements the steps of the method according to any one of claims 1 to 5.

Images