An integrated system, interface calling method, authentication method and related device
Patent Information
- Application Number
- CN202310288253.2
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2023-03-22
- Publication Date
- 2026-10-16
- Estimated Expiration
- 2043-03-22
AI Technical Summary
但是,集成系统支持调用的接口较多,导致开发人员需要配置的认证信息较多,配置过程较为繁琐
[0029] This application provides an integrated system, an interface invocation method, an authentication method, and related equipment. The integrated system includes multiple connection modules and a target authentication module. The multiple connection modules connect to target business systems included in a set of business systems, and the target authentication module connects to each target business system included in the set of business systems. The target business systems in the set of business systems require the same authentication information. The target connection module, in response to an instruction to obtain a target interface invocation command, sends an authentication request including a connection module identifier to the target authentication module. The target authentication module, in response to obtaining the authentication request, sends an authentication result to the target connection module identified by the connection module identifier. The target connection module is also used to obtain the authentication result returned by the target authentication module, and the authentication result is used to invoke the target interface. This enables multiple connection modules invoking target business system interfaces to uniformly authenticate through the target authentication module. Developers only need to configure the authentication information of the target authentication module, without needing to configure it for each connection module, reducing the number of times developers need to configure authentication information, simplifying the configuration process, and improving configuration efficiency.
Smart Images

Figure CN116226829B_ABST
Abstract
Description
Technical Field
[0001] This application relates to the field of computer technology, specifically to an integrated system, an interface calling method, an authentication method, and related equipment. Background Technology
[0002] An integration system is used to integrate business services provided by different business systems. The integration system establishes connections with business systems through their interfaces and provides users with the business services supported by the connected business systems. When a user triggers the use of a business service, the integration system calls the interface connected to the business system providing that service and utilizes that business system to provide the service to the user.
[0003] To ensure security, business systems need to authenticate the integration system's permissions before API calls. Developers need to configure corresponding authentication information for the interfaces in the integration system that connect to the business system, so that the integration system can use this authentication information to complete permission authentication before calling the interfaces. However, the integration system supports a large number of API calls, resulting in a large amount of authentication information that developers need to configure, making the configuration process quite cumbersome. Summary of the Invention
[0004] In view of this, this application provides an integrated system, an interface calling method, an authentication method, and related devices, which can reduce the number of times developers need to configure authentication information and simplify the configuration process.
[0005] Based on this, the technical solution provided in this application is as follows:
[0006] In a first aspect, this application provides an integrated system, which includes multiple connection modules and a target authentication module. The multiple connection modules are connected to target business systems included in a set of business systems, and the target authentication module is connected to each target business system included in the set of business systems. The target business systems included in the set of business systems require the same authentication information.
[0007] The target connection module is used to send an authentication request to the target authentication module in response to a call instruction to obtain a target interface. The target interface is an interface of a target business system included in the business system set. The target connection module is a connection module among the plurality of connection modules that connects to the target business system to which the target interface belongs. The authentication request includes a connection module identifier, which is used to identify the target connection module.
[0008] The target authentication module is configured to, in response to obtaining the authentication request, send an authentication result to the target connection module identified by the connection module identifier, wherein the authentication result is obtained by the target authentication module using authentication information in the target business system;
[0009] The target connection module is also used to obtain the authentication result fed back by the target authentication module, and the authentication result is used to call the target interface.
[0010] Secondly, this application provides an interface invocation method, which is applied to a target connection module included in an integrated system. The target connection module is connected to a target business system, which belongs to a set of business systems. The target business systems included in the set of business systems require the same authentication information. The method includes:
[0011] In response to a call instruction to obtain a target interface, an authentication request is sent to the target authentication module included in the integrated system. The target interface is the interface of the target business system. The authentication request includes a connection module identifier, which is used to identify the target connection module. The target authentication module is connected to the target business system and is used to obtain an authentication result based on authentication information in the target business system.
[0012] Obtain the authentication result returned by the target authentication module, and use the authentication result to call the target interface.
[0013] Thirdly, this application provides an authentication method applied to a target authentication module included in an integrated system. The target authentication module is connected to various target business systems included in a set of business systems. The target business systems in the set of business systems require the same authentication information. The method includes:
[0014] In response to an authentication request, an authentication result is sent to the target connection module identified by the connection module identifier included in the authentication request. The authentication result is obtained by the target authentication module using authentication information in the target business system. The authentication result is used to call the target interface. The target connection module is connected to the target business systems included in the business system set and is used to call the target interface of the target business system.
[0015] Fourthly, this application provides an interface invocation device, which is applied to a target connection module included in an integrated system. The target connection module is connected to a target business system, which belongs to a set of business systems. The target business systems included in the set of business systems require the same authentication information. The device includes:
[0016] The receiving unit is used to obtain the calling instructions of the target interface;
[0017] A sending unit is configured to, in response to a call instruction to obtain the target interface, send an authentication request to a target authentication module included in the integrated system. The target interface is an interface of the target business system. The authentication request includes a connection module identifier, which is used to identify the target connection module. The target authentication module is connected to the target business system and is used to obtain an authentication result based on authentication information in the target business system.
[0018] The receiving unit is also used to obtain the authentication result fed back by the target authentication module, and the authentication result is used to call the target interface.
[0019] Fifthly, this application provides an authentication device applied to a target authentication module included in an integrated system. The target authentication module is connected to various target business systems included in a set of business systems. The target business systems in the set of business systems require the same authentication information. The device includes:
[0020] The receiving unit is used to obtain authentication requests;
[0021] A sending unit is configured to, in response to obtaining the authentication request, send an authentication result to the target connection module identified by the connection module identifier included in the authentication request. The authentication result is obtained by the target authentication module using authentication information in the target business system. The authentication result is used to call the target interface. The target connection module is connected to the target business systems included in the business system set and is used to call the target interface of the target business system.
[0022] Sixthly, this application provides an electronic device, comprising:
[0023] One or more processors;
[0024] Storage device, on which one or more programs are stored,
[0025] When the one or more programs are executed by the one or more processors, the one or more processors implement any of the interface invocation methods described in the third aspect, or implement any of the authentication methods described in the fourth aspect.
[0026] In a seventh aspect, this application provides a computer-readable medium having a computer program stored thereon, wherein the program, when executed by a processor, implements the interface calling method described in any of the third aspects, or implements the authentication method described in any of the fourth aspects.
[0027] Eighthly, this application provides a computer program product that, when run on a device, causes the device to execute any of the interface calling methods described in the third aspect, or to execute any of the authentication methods described in the fourth aspect.
[0028] Therefore, this application has the following beneficial effects:
[0029] This application provides an integrated system, an interface invocation method, an authentication method, and related equipment. The integrated system includes multiple connection modules and a target authentication module. The multiple connection modules connect to target business systems included in a set of business systems, and the target authentication module connects to each target business system included in the set of business systems. The target business systems in the set of business systems require the same authentication information. The target connection module, in response to an instruction to obtain a target interface invocation command, sends an authentication request including a connection module identifier to the target authentication module. The target authentication module, in response to obtaining the authentication request, sends an authentication result to the target connection module identified by the connection module identifier. The target connection module is also used to obtain the authentication result returned by the target authentication module, and the authentication result is used to invoke the target interface. This enables multiple connection modules invoking target business system interfaces to uniformly authenticate through the target authentication module. Developers only need to configure the authentication information of the target authentication module, without needing to configure it for each connection module, reducing the number of times developers need to configure authentication information, simplifying the configuration process, and improving configuration efficiency. Attached Figure Description
[0030] Figure 1 This is a schematic diagram of the structure of an integrated system;
[0031] Figure 2 This application provides a schematic diagram of the structure of an integrated system according to an embodiment of the present application.
[0032] Figure 3 This is a schematic diagram of the structure of another integrated system provided in an embodiment of this application;
[0033] Figure 4 A schematic diagram illustrating the interaction between a connection module and a target authentication module, provided for an embodiment of this application;
[0034] Figure 5 This is a schematic diagram of the structure of an interface calling device provided in an embodiment of this application;
[0035] Figure 6 This is a schematic diagram of the structure of an authentication method apparatus provided in an embodiment of this application;
[0036] Figure 7 This is a schematic diagram of the basic structure of an electronic device provided in an embodiment of this application. Detailed Implementation
[0037] To facilitate understanding and explanation of the technical solutions provided in the embodiments of this application, the background technology of this application will be described first.
[0038] See Figure 1 As shown in the figure, this is a schematic diagram of an integrated system. The integrated system includes multiple connection modules. Each connection module is used to call the interface of the business system to provide users with the services provided by the business system.
[0039] In related technologies, developers need to configure authentication information for each connection module. After the integrated system receives a user's request to use a business service, it triggers the connection module capable of calling the interface implementing that service. The connection module uses pre-configured authentication information to send an authentication request, including the authentication information, to the business system. After processing the authentication request, the business system confirms that the connection module has the authority to call the interface and sends an authentication result back to the connection module. Once the connection module successfully authenticates using the authentication information, it calls the business system's interface to provide services to the user. In some cases, the authentication information required by some business systems is the same. Developers need to configure the same authentication information multiple times, making the configuration process cumbersome.
[0040] Based on this, embodiments of this application provide an integrated system, an interface invocation method, an authentication method, and related devices. The integrated system includes multiple connection modules and a target authentication module. The multiple connection modules are connected to target business systems included in a set of business systems, and the target authentication module is connected to each target business system included in the set of business systems. The target business systems in the set of business systems require the same authentication information. The target connection module is used to send an authentication request including a connection module identifier to the target authentication module in response to an instruction to obtain a target interface. The target authentication module is used to send an authentication result to the target connection module identified by the connection module identifier in response to obtaining the authentication request. The target connection module is also used to obtain the authentication result returned by the target authentication module, and the authentication result is used to invoke the target interface. This enables multiple connection modules invoking target business system interfaces to be uniformly authenticated through the target authentication module. Developers only need to configure the authentication information of the target authentication module, without needing to configure it for each connection module, reducing the number of times developers need to configure authentication information, simplifying the configuration process, and improving configuration efficiency.
[0041] To facilitate understanding of the technical solutions provided in the embodiments of this application, the integrated system provided in the embodiments of this application will be described below with reference to the accompanying drawings.
[0042] See Figure 2As shown, this figure is a schematic diagram of the structure of an integrated system provided in an embodiment of this application. The integrated system 200 includes a connection module 2011 connected to interface 2031 and a connection module 2012 connected to interface 2032. Interfaces 2031 and 2032 belong to the same business system 204. Business system 204 belongs to a collection of business systems. The authentication information required for calling interfaces 2031 and 2032 is the same. The integrated system 200 also includes a target authentication module 202. The target authentication module 202 is connected to the business system 204. Developers pre-configure the authentication information of the target authentication module 202. The target authentication module 202 can send an authentication request to the business system 204 based on the authentication information and obtain the authentication result. Before calling interface 2031, the connection module 2011 obtains the authentication result from the target authentication module 202, and before calling interface 2032, the connection module 2012 obtains the authentication result from the target authentication module 202. Based on the authentication result indicating successful authentication, the connection module 2011 calls interface 2031. The connection module 2012 calls interface 2032 based on the authentication result indicating that the authentication has passed.
[0043] See Figure 3 As shown in the figure, this is a schematic diagram of another integrated system provided in an embodiment of this application. The integrated system 300 includes a connection module 3011 connected to interface 3031 and a connection module 3012 connected to interface 3032. Interface 3031 belongs to business system 3041. Interface 3032 belongs to business system 3042. Business systems 3041 and 3042 belong to the same set of business systems. Business systems 3041 and 3042 require the same authentication information. In some possible implementation scenarios, business systems 3041 and 3042 are business systems developed by the same enterprise. In other possible implementation scenarios, business systems 3041 and 3042 are developed by different enterprises. The authentication information required for calling interfaces 3031 and 3032 is the same. The integrated system 300 also includes a target authentication module 302. The target authentication module 302 is connected to business systems 3041 and 3042 respectively. Developers pre-configure the authentication information of the target authentication module 302. The target authentication module 302 can send authentication requests to business systems 3041 and 3042 based on authentication information and obtain authentication results. Before calling interface 3031, connection module 3011 obtains the authentication result from the target authentication module 302, and before calling interface 3032, connection module 3012 does so. Based on the authentication result indicating successful authentication, connection module 3011 calls interface 3031. Based on the authentication result indicating successful authentication, connection module 3012 calls interface 3032.
[0044] In this way, developers no longer need to configure authentication information multiple times for different connection modules; they only need to configure the authentication information for the target authentication module to achieve authentication. Configuring authentication information for the target authentication module reduces the number of times developers need to configure authentication information, simplifies the process, and makes it easier for developers to configure authentication information.
[0045] Those skilled in the art will understand that Figure 2 and Figure 3 The schematic diagram shown is merely one example of how embodiments of this application can be implemented. The scope of application of the embodiments of this application is not limited by any aspect of this framework. For example, the integrated system could be a business integration platform developed by a third party. The business system could be a server-side application providing business services or a business platform.
[0046] The integrated system provided in the embodiments of this application is described below.
[0047] The integrated system connects to the target business systems within the business system set. The business system set includes at least one target business system. All target business systems within the business system set require the same authentication information. Each target business system provides an interface to the outside world, allowing users to call services from other business systems through these interfaces. This application does not limit the method of dividing the business system set. In one possible implementation, target business systems developed by the same enterprise and requiring the same authentication information are grouped into the same business system set. In another possible implementation, target business systems requiring the same authentication information are grouped into the same business system set solely based on their authentication information.
[0048] The integrated system comprises multiple connection modules and a target authentication module. The connection modules connect to the target business systems within the set of business systems. Each connection module is used to invoke the interfaces provided by the target business system. It should be noted that a target business system can have multiple interfaces, each providing different services. Different connection modules can be used to invoke different interfaces. The interfaces invoked by the connection modules can be pre-configured.
[0049] This application does not limit the connection method between the connection module and the target business system. In one possible implementation, the business system set includes a target business system, and multiple connection modules are respectively connected to the target business system. In another possible implementation, the business system set includes multiple target business systems. Multiple connection modules can connect to the same target business system. Alternatively, the multiple connection modules may include connection modules that connect to different target business systems.
[0050] The target authentication module connects to each target business system within the business system set. Developers pre-configure the authentication information required for the target authentication module. This authentication information is the information needed to grant permissions for the target business system's authentication interface calls. As an example, the authentication information is identity information, such as an identity identifier, account identifier, and account password. As another example, the authentication information is pre-agreed upon information, such as the encrypted result obtained by encrypting agreed-upon data using a pre-agreed encryption algorithm.
[0051] See Figure 4 As shown in the figure, this figure is a schematic diagram of the interaction between a connection module and a target authentication module provided in an embodiment of this application.
[0052] S401: In response to the call instruction to obtain the target interface, the target connection module sends an authentication request to the target authentication module.
[0053] The target connection module is a user-triggered connection module that needs to call the target interface. It is understood that the integrated system includes multiple implementable business services. Users can trigger the use of these business services. The integrated system triggers the target connection module, which connects to the target interface of the target business system providing the service, to call the target interface. In one possible implementation, the integrated system, in response to the user-triggered business service, sends a call instruction to the target connection module. In another possible implementation, the user selects the target connection module to trigger, generates a call instruction, and sends the instruction to the target connection module. The call instruction triggers the target connection module to call the target interface of the target business system. The target interface of the target business system called by the target connection module is pre-configured. The target interface is one of the interfaces provided by the target business system.
[0054] Upon receiving the invocation command, the target connection module sends an authentication request to the target authentication module. The authentication request includes a connection module identifier. This identifier identifies the target connection module, allowing the target authentication module to provide authentication results based on it. The connection module identifier can be, for example, the name of the target connection module or the number of the target connection template.
[0055] The target authentication module is used for authentication with the target business system. This application does not limit the specific implementation of the target connection module determining the target authentication module. This application provides two implementation methods for the target connection module to determine the target authentication module.
[0056] The first type: There is a correspondence between the target authentication module and the target business system. Before sending an authentication request to the target authentication module, the target connection module first determines the target authentication module based on the correspondence between the target business system to which the target interface to be called by the invocation command belongs and the target authentication module. The correspondence between the target authentication module and the target business system is pre-stored in the integration system. The target connection module can query the target authentication module corresponding to the target business system.
[0057] The second method involves the target connection module pre-configuring a model identifier for the target authentication module. This model identifier is used to identify the target authentication module. The model identifier is pre-configured within the target connection module, and the target connection module sends authentication requests to the target authentication module identified by the model identifier.
[0058] S402: In response to the authentication request, the target authentication module sends the authentication result to the target connection module indicated by the connection module identifier.
[0059] The authentication result is obtained by the target authentication module using authentication information in the target business system. Authentication information is pre-configured information used for authentication in the target business system. It can be configured based on the authentication needs of the target business system and the information available in the integrated system. Authentication information may include, for example, an identity identifier, a user identifier, a password, or a key. It should be noted that in some possible implementations, different target business systems may require different authentication information. The content of the same type of authentication information may also differ. For example, different business systems may all require authentication information including a user identifier and a password. However, the user identifier and password configured by the user may differ across different business systems.
[0060] This application does not limit the implementation method of the target authentication module obtaining the authentication result. In one possible implementation, the target authentication module initiates authentication based on an authentication request. Responding to the authentication request, the target authentication module sends authentication information to the target business system. The target business system can perform authentication based on the authentication information to determine whether the integrated system has the permission to call the interface. The target business system then returns the authentication result to the target authentication module. In another possible implementation, the timing of triggering the target authentication module to perform authentication is not limited. The target authentication module can perform authentication after receiving the authentication request or at other times. The target authentication module sends authentication information to the target business system. The target business system can perform authentication based on the authentication information. After successful authentication by the target business system, it sends the authentication result to the target authentication module. The authentication result is authorization information, such as a password. Thus, after receiving the authentication request, the target authentication module returns the obtained authorization information to the target connection module. Furthermore, the authorization information has a time limit. After the time limit expires, the authorization information becomes invalid. This improves the security of accessing the target business system. The target authentication module also responds to situations where the validity period is less than a threshold by sending authentication information to the target business system and obtaining updated authorization information from the target business system. This ensures that the authorization information obtained by the target authentication module remains valid, allowing the target connection module to call interfaces using valid authorization information without waiting for authentication.
[0061] By utilizing the target authentication module, authentication with the target business system can be performed. Developers only need to configure the authentication information for the target authentication module. Furthermore, multiple connection modules can be authenticated through a single target authentication module. Developers do not need to repeatedly configure the authentication module for multiple connection modules. This reduces the number of times developers need to configure authentication information, simplifies the configuration process, and improves configuration efficiency.
[0062] S403: The target connection module obtains the authentication result fed back by the target authentication module.
[0063] The target connection module obtains the authentication result. The authentication result is used to call the target interface. In one possible implementation, the authentication result indicates successful authentication. The target connection module calls the target interface based on the authentication result. After calling the target interface, it can utilize the business services provided by the target business system. In another possible implementation, the authentication result indicates failed authentication. The target connection module's call to the target interface fails.
[0064] Based on the integrated system provided in the above method embodiments, this application embodiment also provides an interface calling method applied to a target connection module included in the integrated system, the method comprising:
[0065] In response to a call instruction to obtain a target interface, an authentication request is sent to the target authentication module included in the integrated system. The target interface is the interface of the target business system. The authentication request includes a connection module identifier, which is used to identify the target connection module. The target authentication module is connected to the target business system and is used to obtain an authentication result based on authentication information in the target business system.
[0066] Obtain the authentication result returned by the target authentication module, and use the authentication result to call the target interface.
[0067] In one possible implementation, the target authentication module corresponds to the target business system, and before sending the authentication request to the target authentication module, the method further includes:
[0068] The target authentication module is determined based on the correspondence between the target authentication module and the target business system.
[0069] In one possible implementation, the target connection module pre-configures a model identifier for the target authentication module, the model identifier being used to identify the target authentication module, and the step of sending an authentication request to the target authentication module includes:
[0070] Send an authentication request to the target authentication module identified by the model identifier.
[0071] In one possible implementation, the authentication result is authentication passed, and the method further includes:
[0072] The target interface is invoked based on the authentication result.
[0073] For a detailed description of the interface call methods applied to the target connection modules included in the integrated system, please refer to [link / reference]. Figure 4 The relevant descriptions in the illustrated embodiments will not be repeated here.
[0074] Based on the integrated system provided in the above method embodiments, this application embodiment also provides an authentication method applied to a target authentication module included in the integrated system, the method comprising:
[0075] In response to an authentication request, an authentication result is sent to the target connection module identified by the connection module identifier included in the authentication request. The authentication result is obtained by the target authentication module using authentication information in the target business system. The authentication result is used to call the target interface. The target connection module is connected to the target business systems included in the business system set and is used to call the target interface of the target business system.
[0076] In one possible implementation, after responding to the acquisition of the authentication request and before sending the authentication result to the target connection module identified by the connection module identifier, the method further includes:
[0077] Send authentication information to the target business system;
[0078] Obtain the authentication result returned by the target business system.
[0079] In one possible implementation, the authentication result is authorization information, and before sending the authentication result to the target connection module identified by the connection module identifier, the method further includes:
[0080] Send authentication information to the target business system and obtain authorization information from the target business system.
[0081] In one possible implementation, the authorization information has a validity period, and the method further includes:
[0082] In response to determining that the effective time limit is less than a threshold, authentication information is sent to the target business system, and the updated authorization information after the effective time limit is returned by the target business system.
[0083] Based on the interface invocation method provided in the above embodiments, this application also provides an interface invocation apparatus. The interface invocation apparatus is applied to a target connection module included in an integrated system. The interface invocation apparatus will now be described with reference to the accompanying drawings.
[0084] See Figure 5 As shown, this figure is a schematic diagram of the structure of an interface calling device provided in an embodiment of this application. Figure 5 As shown, the interface calling device includes:
[0085] The receiving unit 501 is used to obtain the calling instruction of the target interface;
[0086] The sending unit 502 is configured to send an authentication request to the target authentication module included in the integrated system in response to a call instruction to obtain the target interface. The target interface is the interface of the target business system. The authentication request includes a connection module identifier, which is used to identify the target connection module. The target authentication module is connected to the target business system and is used to obtain an authentication result based on authentication information in the target business system.
[0087] The receiving unit 501 is also used to obtain the authentication result fed back by the target authentication module, and the authentication result is used to call the target interface.
[0088] In some possible implementations, the target authentication module corresponds to the target business system, and the apparatus further includes:
[0089] The determining unit is used to determine the target authentication module based on the correspondence between the target authentication module and the target business system.
[0090] In some possible implementations, the target connection module pre-configures a model identifier for the target authentication module, the model identifier being used to identify the target authentication module, and the sending unit 502 is used to send an authentication request to the target authentication module, including:
[0091] The sending unit 502 is used to send an authentication request to the target authentication module identified by the model identifier.
[0092] In some possible implementations, the authentication result is successful, and the device further includes:
[0093] The invocation unit is used to invoke the target interface based on the authentication result.
[0094] Based on the authentication method provided in the above embodiments, this application also provides an authentication device. The authentication device is applied to a target authentication module included in an integrated system. The authentication device will be described below with reference to the accompanying drawings.
[0095] See Figure 6 As shown, this figure is a schematic diagram of the structure of an authentication device provided in an embodiment of this application. Figure 6 As shown, the authentication device includes:
[0096] Receiving unit 601 is used to obtain authentication requests;
[0097] The sending unit 602 is configured to, in response to obtaining the authentication request, send an authentication result to the target connection module identified by the connection module identifier included in the authentication request. The authentication result is obtained by the target authentication module using authentication information in the target business system. The authentication result is used to call the target interface. The target connection module is connected to the target business systems included in the business system set and is used to call the target interface of the target business system.
[0098] In some possible implementations, the sending unit 602, after responding to obtaining the authentication request, is further configured to send authentication information to the target business system;
[0099] The receiving unit 601 is also used to obtain the authentication result fed back by the target business system.
[0100] In some possible implementations, the authentication result is authorization information;
[0101] The sending unit 602 is also used to send authentication information to the target business system;
[0102] The receiving unit 601 is also used to obtain authorization information fed back by the target business system.
[0103] In some possible implementations, the authorization information has a validity period, and the sending unit 602 is further configured to send authentication information to the target business system in response to determining that the validity period is less than a threshold.
[0104] The receiving unit 601 is also used to obtain the authorization information updated after the validity period is fed back by the target business system.
[0105] Based on the interface invocation method and authentication method provided in the above method embodiments, this application also provides an electronic device, including: one or more processors; a storage device storing one or more programs thereon, wherein when the one or more programs are executed by the one or more processors, the one or more processors implement the interface invocation method or authentication method as described in any of the above embodiments.
[0106] The following is for reference. Figure 7 This document illustrates a structural schematic diagram of an electronic device 700 suitable for implementing embodiments of this application. The terminal devices in these embodiments may include, but are not limited to, mobile terminals such as mobile phones, laptops, digital broadcast receivers, PDAs (Personal Digital Assistants), PADs (Portable Android Devices), PMPs (Portable Media Players), in-vehicle terminals (e.g., in-vehicle navigation terminals), and fixed terminals such as digital TVs (televisions), desktop computers, etc. Figure 7 The electronic device shown is merely an example and should not impose any limitation on the functionality and scope of use of the embodiments of this application.
[0107] like Figure 7As shown, the electronic device 700 may include a processing unit (e.g., a central processing unit, a graphics processor, etc.) 701, which can perform various appropriate actions and processes according to a program stored in a read-only memory (ROM) 702 or a program loaded from a storage device 708 into a random access memory (RAM) 703. The RAM 703 also stores various programs and data required for the operation of the electronic device 700. The processing unit 701, ROM 702, and RAM 703 are interconnected via a bus 704. An input / output (I / O) interface 705 is also connected to the bus 704.
[0108] Typically, the following devices can be connected to I / O interface 705: input devices 708 including, for example, touchscreens, touchpads, keyboards, mice, cameras, microphones, accelerometers, gyroscopes, etc.; output devices 707 including, for example, liquid crystal displays (LCDs), speakers, vibrators, etc.; storage devices 708 including, for example, magnetic tapes, hard disks, etc.; and communication devices 709. Communication device 709 allows electronic device 700 to communicate wirelessly or wiredly with other devices to exchange data. Although Figure 7 An electronic device 700 with various devices is shown; however, it should be understood that it is not required to implement or possess all of the devices shown. More or fewer devices may be implemented or possessed alternatively.
[0109] Specifically, according to embodiments of this application, the processes described above with reference to the flowcharts can be implemented as computer software programs. For example, embodiments of this application include a computer program product comprising a computer program carried on a non-transitory computer-readable medium, the computer program containing program code for performing the methods shown in the flowcharts. In such embodiments, the computer program can be downloaded and installed from a network via communication device 709, or installed from storage device 708, or installed from ROM 702. When the computer program is executed by processing device 701, it performs the functions defined in the methods of embodiments of this application.
[0110] The electronic device provided in this application embodiment belongs to the same inventive concept as the interface calling method or authentication method provided in the above embodiments. Technical details not described in detail in this embodiment can be found in the above embodiments, and this embodiment has the same beneficial effects as the above embodiments.
[0111] Based on the interface calling method or authentication method provided in the above method embodiments, this application provides a computer storage medium storing a computer program thereon, wherein the program, when executed by a processor, implements the interface calling method or authentication method as described in any of the above embodiments.
[0112] It should be noted that the computer-readable medium described above in this application can be a computer-readable signal medium or a computer-readable storage medium, or any combination of the two. A computer-readable storage medium can be, for example,—but not limited to—an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any combination thereof. More specific examples of a computer-readable storage medium may include, but are not limited to: an electrical connection having one or more wires, a portable computer disk, a hard disk, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), optical fiber, portable compact disk read-only memory (CD-ROM), optical storage device, magnetic storage device, or any suitable combination thereof. In this application, a computer-readable storage medium can be any tangible medium containing or storing a program that can be used by or in conjunction with an instruction execution system, apparatus, or device. In this application, a computer-readable signal medium can include a data signal propagated in baseband or as part of a carrier wave, carrying computer-readable program code. Such propagated data signals can take various forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination thereof. A computer-readable signal medium can be any computer-readable medium other than a computer-readable storage medium, which can send, propagate, or transmit a program for use by or in connection with an instruction execution system, apparatus, or device. The program code contained on the computer-readable medium can be transmitted using any suitable medium, including but not limited to: wires, optical fibers, RF (radio frequency), etc., or any suitable combination thereof.
[0113] In some implementations, clients and servers can communicate using any currently known or future-developed network protocol such as HTTP (Hypertext Transfer Protocol) and can interconnect with digital data communication (e.g., communication networks) of any form or medium. Examples of communication networks include local area networks (“LANs”), wide area networks (“WANs”), the Internet (e.g., the Internet of Things), and end-to-end networks (e.g., ad hoc end-to-end networks), as well as any currently known or future-developed networks.
[0114] The aforementioned computer-readable medium may be included in the aforementioned electronic device; or it may exist independently and not assembled into the electronic device.
[0115] The aforementioned computer-readable medium carries one or more programs, which, when executed by the electronic device, cause the electronic device to perform the aforementioned interface call method or authentication method.
[0116] Computer program code for performing the operations of this application can be written in one or more programming languages or a combination thereof. These programming languages include, but are not limited to, object-oriented programming languages such as Java, Smalltalk, and C++, as well as conventional procedural programming languages such as the "C" language or similar programming languages. The program code can be executed entirely on the user's computer, partially on the user's computer, as a standalone software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In cases involving remote computers, the remote computer can be connected to the user's computer via any type of network—including a local area network (LAN) or a wide area network (WAN)—or can be connected to an external computer (e.g., via the Internet using an Internet service provider).
[0117] The flowcharts and block diagrams in the accompanying drawings illustrate the architecture, functionality, and operation of possible implementations of systems, methods, and computer program products according to various embodiments of this application. In this regard, each block in a flowchart or block diagram may represent a module, segment, or portion of code containing one or more executable instructions for implementing a specified logical function. It should also be noted that in some alternative implementations, the functions indicated in the blocks may occur in a different order than those indicated in the drawings. For example, two consecutively indicated blocks may actually be executed substantially in parallel, and they may sometimes be executed in reverse order, depending on the functions involved. It should also be noted that each block in the block diagrams and / or flowcharts, and combinations of blocks in the block diagrams and / or flowcharts, can be implemented using a dedicated hardware-based system that performs the specified function or operation, or using a combination of dedicated hardware and computer instructions.
[0118] The units described in the embodiments of this application can be implemented in software or in hardware. The name of the unit / module does not necessarily limit the unit itself; for example, a voice data acquisition module can also be described as a "data acquisition module".
[0119] The functions described above in this document can be performed, at least in part, by one or more hardware logic components. For example, exemplary types of hardware logic components that can be used, without limitation, include: Field Programmable Gate Arrays (FPGAs), Application-Specific Integrated Circuits (ASICs), Application Standard Products (ASSPs), System-on-Chip (SoCs), Complex Programmable Logic Devices (CPLDs), and so on.
[0120] In the context of this application, a machine-readable medium can be a tangible medium that may contain or store a program for use by or in conjunction with an instruction execution system, apparatus, or device. A machine-readable medium can be a machine-readable signal medium or a machine-readable storage medium. Machine-readable media can be, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, apparatus, or devices, or any suitable combination of the foregoing. More specific examples of machine-readable storage media include electrical connections based on one or more wires, portable computer disks, hard disks, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), optical fibers, portable compact disk read-only memory (CD-ROM), optical storage devices, magnetic storage devices, or any suitable combination of the foregoing.
[0121] According to one or more embodiments of this application, [Example 1] provides an integrated system, which includes multiple connection modules and a target authentication module. The multiple connection modules are connected to target business systems included in a set of business systems, and the target authentication module is connected to each target business system included in the set of business systems. The target business systems included in the set of business systems require the same authentication information.
[0122] The target connection module is used to send an authentication request to the target authentication module in response to a call instruction to obtain a target interface. The target interface is an interface of a target business system included in the business system set. The target connection module is a connection module among the plurality of connection modules that connects to the target business system to which the target interface belongs. The authentication request includes a connection module identifier, which is used to identify the target connection module.
[0123] The target authentication module is configured to, in response to obtaining the authentication request, send an authentication result to the target connection module identified by the connection module identifier, wherein the authentication result is obtained by the target authentication module using authentication information in the target business system;
[0124] The target connection module is also used to obtain the authentication result fed back by the target authentication module, and the authentication result is used to call the target interface.
[0125] According to one or more embodiments of this application, [Example 2] provides an integrated system in which the target authentication module, after responding to the acquisition of the authentication request and before sending the authentication result to the target connection module identified by the connection module identifier, is further configured to send authentication information to the target business system and obtain the authentication result fed back by the target business system.
[0126] According to one or more embodiments of this application, [Example 3] provides an integrated system in which the authentication result is authorization information. The target authentication module is further configured to send authentication information to the target business system and obtain authorization information fed back by the target business system before sending the authentication result to the target connection module identified by the connection module identifier.
[0127] According to one or more embodiments of this application, [Example 4] provides an integrated system in which the authorization information has a validity period. The target authentication module is further configured to send authentication information to the target business system in response to determining that the validity period is less than a threshold, and to obtain the authorization information updated with the validity period from the target business system.
[0128] According to one or more embodiments of this application, [Example 5] provides an integrated system in which the target authentication module has a corresponding relationship with the target business system. The target connection module is further configured to determine the target authentication module according to the corresponding relationship between the target authentication module and the target business system before sending an authentication request to the target authentication module.
[0129] According to one or more embodiments of this application, [Example Six] provides an integrated system in which the target connection module pre-configures a model identifier of the target authentication module, the model identifier being used to identify the target authentication module, and the target connection module being used to send an authentication request to the target authentication module, including:
[0130] The target connection module is used to send an authentication request to the target authentication module identified by the model identifier.
[0131] According to one or more embodiments of this application, [Example Seven] provides an integrated system in which the authentication result is successful, and the target connection module is further configured to call the target interface based on the authentication result.
[0132] According to one or more embodiments of this application, [Example Eight] provides an interface invocation method. The method is applied to a target connection module included in an integrated system. The target connection module is connected to a target business system, which belongs to a set of business systems. The target business systems included in the set of business systems require the same authentication information. The method includes:
[0133] In response to a call instruction to obtain a target interface, an authentication request is sent to the target authentication module included in the integrated system. The target interface is the interface of the target business system. The authentication request includes a connection module identifier, which is used to identify the target connection module. The target authentication module is connected to the target business system and is used to obtain an authentication result based on authentication information in the target business system.
[0134] Obtain the authentication result returned by the target authentication module, and use the authentication result to call the target interface.
[0135] According to one or more embodiments of this application, [Example Nine] provides an interface invocation method, wherein the target authentication module has a corresponding relationship with the target business system, and before sending an authentication request to the target authentication module, the method further includes:
[0136] The target authentication module is determined based on the correspondence between the target authentication module and the target business system.
[0137] According to one or more embodiments of this application, [Example 10] provides an interface invocation method, wherein the target connection module pre-configures a model identifier of the target authentication module, the model identifier being used to identify the target authentication module, and the step of sending an authentication request to the target authentication module includes:
[0138] Send an authentication request to the target authentication module identified by the model identifier.
[0139] According to one or more embodiments of this application, [Example 11] provides an interface call method, wherein the authentication result is successful, and the method further includes:
[0140] The target interface is invoked based on the authentication result.
[0141] According to one or more embodiments of this application, [Example Twelve] provides an authentication method, the method being applied to a target authentication module included in an integrated system, the target authentication module being connected to various target business systems included in a set of business systems, the target business systems included in the set of business systems requiring the same authentication information, the method comprising:
[0142] In response to an authentication request, an authentication result is sent to the target connection module identified by the connection module identifier included in the authentication request. The authentication result is obtained by the target authentication module using authentication information in the target business system. The authentication result is used to call the target interface. The target connection module is connected to the target business systems included in the business system set and is used to call the target interface of the target business system.
[0143] According to one or more embodiments of this application, [Example Thirteen] provides an authentication method, which, after responding to obtaining the authentication request and before sending the authentication result to the target connection module identified by the connection module identifier, further includes:
[0144] Send authentication information to the target business system;
[0145] Obtain the authentication result returned by the target business system.
[0146] According to one or more embodiments of this application, [Example Fourteen] provides an authentication method, wherein the authentication result is authorization information, and before sending the authentication result to the target connection module identified by the connection module identifier, the method further includes:
[0147] Send authentication information to the target business system and obtain authorization information from the target business system.
[0148] According to one or more embodiments of this application, [Example Fifteen] provides an authentication method, wherein the authorization information has a validity period, and the method further includes:
[0149] In response to determining that the effective time limit is less than a threshold, authentication information is sent to the target business system, and the updated authorization information after the effective time limit is returned by the target business system.
[0150] According to one or more embodiments of this application, [Example Sixteen] provides an interface calling device, the device being applied to a target connection module included in an integrated system, the target connection module being connected to a target business system, the target business system belonging to a set of business systems, the target business systems included in the set of business systems requiring the same authentication information, the device comprising:
[0151] The receiving unit is used to obtain the calling instructions of the target interface;
[0152] A sending unit is configured to, in response to a call instruction to obtain the target interface, send an authentication request to a target authentication module included in the integrated system. The target interface is an interface of the target business system. The authentication request includes a connection module identifier, which is used to identify the target connection module. The target authentication module is connected to the target business system and is used to obtain an authentication result based on authentication information in the target business system.
[0153] The receiving unit is also used to obtain the authentication result fed back by the target authentication module, and the authentication result is used to call the target interface.
[0154] According to one or more embodiments of this application, [Example Seventeen] provides an interface invocation device, wherein the target authentication module corresponds to the target business system, and the device further includes:
[0155] The determining unit is used to determine the target authentication module based on the correspondence between the target authentication module and the target business system.
[0156] According to one or more embodiments of this application, [Example 18] provides an interface calling device, wherein the target connection module pre-configures a model identifier of the target authentication module, the model identifier being used to identify the target authentication module, and the sending unit is used to send an authentication request to the target authentication module, including:
[0157] The sending unit is used to send an authentication request to the target authentication module identified by the model identifier.
[0158] According to one or more embodiments of this application, [Example 19] provides an interface invocation device, wherein the authentication result is successful, and the device further includes:
[0159] The invocation unit is used to invoke the target interface based on the authentication result.
[0160] According to one or more embodiments of this application, [Example 20] provides an authentication device applied to a target authentication module included in an integrated system. The target authentication module is connected to various target business systems included in a set of business systems. The target business systems in the set of business systems require the same authentication information. The device includes:
[0161] The receiving unit is used to obtain authentication requests;
[0162] A sending unit is configured to, in response to obtaining the authentication request, send an authentication result to the target connection module identified by the connection module identifier included in the authentication request. The authentication result is obtained by the target authentication module using authentication information in the target business system. The authentication result is used to call the target interface. The target connection module is connected to the target business systems included in the business system set and is used to call the target interface of the target business system.
[0163] According to one or more embodiments of this application, [Example 21] provides an authentication device, wherein the sending unit, after responding to obtaining the authentication request, is further configured to send authentication information to the target business system;
[0164] The receiving unit is also used to obtain the authentication result fed back by the target business system.
[0165] According to one or more embodiments of this application, [Example 22] provides an authentication device, wherein the authentication result is authorization information;
[0166] The sending unit is also used to send authentication information to the target business system;
[0167] The acquisition unit is also used to acquire authorization information fed back by the target business system.
[0168] According to one or more embodiments of this application, [Example 23] provides an authentication device, wherein the authorization information has a validity period, and the sending unit is further configured to send authentication information to the target business system in response to determining that the validity period is less than a threshold;
[0169] The acquisition unit is also used to acquire the authorization information updated after the validity period was fed back by the target business system.
[0170] According to one or more embodiments of this application, [Example 24] provides an electronic device, including:
[0171] One or more processors;
[0172] Storage device, on which one or more programs are stored,
[0173] When the one or more programs are executed by the one or more processors, the one or more processors implement the interface invocation method as described in any of [Example 8]-[Example 11], or implement the authentication method as described in any of [Example 12]-[Example 15].
[0174] According to one or more embodiments of this application, [Example 25] provides a computer-readable medium characterized in that it stores a computer program thereon, wherein when the program is executed by a processor, it implements an interface calling method as described in any of [Example 8]-[Example 11], or implements an authentication method as described in any of [Example 12]-[Example 15].
[0175] It should be noted that the various embodiments in this specification are described in a progressive manner, with each embodiment focusing on the differences from other embodiments. Similar or identical parts between embodiments can be referred to interchangeably. For the systems or apparatus disclosed in the embodiments, since they correspond to the methods disclosed in the embodiments, the descriptions are relatively simple, and relevant parts can be referred to the method section.
[0176] It should be understood that in this application, "at least one (item)" means one or more, and "more than" means two or more. "And / or" is used to describe the relationship between related objects, indicating that three relationships can exist. For example, "A and / or B" can represent three cases: only A exists, only B exists, and both A and B exist simultaneously, where A and B can be singular or plural. The character " / " generally indicates that the preceding and following related objects are in an "or" relationship. "At least one (item) of the following" or similar expressions refer to any combination of these items, including any combination of single or plural items. For example, at least one (item) of a, b, or c can represent: a, b, c, "a and b", "a and c", "b and c", or "a and b and c", where a, b, and c can be single or multiple.
[0177] It should also be noted that, in this document, relational terms such as "first" and "second" are used only to distinguish one entity or operation from another, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Furthermore, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or apparatus. Without further limitations, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes said element.
[0178] The steps of the methods or algorithms described in conjunction with the embodiments disclosed herein can be implemented directly by hardware, a software module executed by a processor, or a combination of both. The software module can be located in random access memory (RAM), main memory, read-only memory (ROM), electrically programmable ROM, electrically erasable programmable ROM, registers, hard disk, removable disk, CD-ROM, or any other form of storage medium known in the art.
[0179] The above description of the disclosed embodiments enables those skilled in the art to make or use this application. Various modifications to these embodiments will be readily apparent to those skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of this application. Therefore, this application is not to be limited to the embodiments shown herein, but is to be accorded the widest scope consistent with the principles and novel features disclosed herein.
Claims
1. An integrated system, characterized in that, The integrated system includes multiple connection modules and a target authentication module. The multiple connection modules are connected to the target business systems included in the business system set, and the target authentication module is connected to each target business system included in the business system set. The target business systems included in the business system set require the same authentication information. The target connection module among the plurality of connection modules is used to send an authentication request to the target authentication module in response to a call instruction to obtain a target interface. The target interface is an interface of a target business system included in the business system set. The target connection module is the connection module among the plurality of connection modules that is connected to the target business system to which the target interface belongs. The authentication request includes a connection module identifier, which is used to identify the target connection module. The target authentication module is used to send an authentication result to the target connection module indicated by the connection module identifier in response to obtaining the authentication request. The authentication result is obtained by the target authentication module using the authentication information in the target business system. The target connection module is also used to obtain the authentication result fed back by the target authentication module, and the authentication result is used to call the target interface.
2. The system according to claim 1, characterized in that, The target authentication module, after responding to the acquisition of the authentication request and before sending the authentication result to the target connection module identified by the connection module identifier, is further configured to send authentication information to the target business system and obtain the authentication result fed back by the target business system.
3. The system according to claim 1, characterized in that, The authentication result is authorization information. The target authentication module is also used to send authentication information to the target business system and obtain authorization information fed back by the target business system before sending the authentication result to the target connection module identified by the connection module identifier.
4. The system according to claim 3, characterized in that, The authorization information has a validity period. The target authentication module is also used to send authentication information to the target business system in response to determining that the validity period is less than a threshold, and to obtain the authorization information updated with the validity period from the target business system.
5. The system according to claim 1, characterized in that, The target authentication module has a corresponding relationship with the target business system. The target connection module is further configured to determine the target authentication module based on the corresponding relationship between the target authentication module and the target business system before sending an authentication request to the target authentication module.
6. The system according to claim 1, characterized in that, The target connection module pre-configures a model identifier for the target authentication module. This model identifier identifies the target authentication module. The target connection module sends an authentication request to the target authentication module, including: The target connection module is used to send an authentication request to the target authentication module identified by the model identifier.
7. The system according to claim 1, characterized in that, If the authentication result is successful, the target connection module is also used to call the target interface based on the authentication result.
8. An interface invocation method, characterized in that, The method is applied to a target connection module included in an integrated system. The target connection module is connected to a target business system, which belongs to a set of business systems. The target business systems included in the set of business systems require the same authentication information. The method includes: In response to a call instruction to obtain a target interface, an authentication request is sent to the target authentication module included in the integrated system. The target interface is the interface of the target business system. The authentication request includes a connection module identifier, which is used to identify the target connection module. The target authentication module is connected to the target business system and is used to obtain an authentication result based on authentication information in the target business system. Obtain the authentication result returned by the target authentication module, and use the authentication result to call the target interface.
9. The method according to claim 8, characterized in that, The target authentication module has a corresponding relationship with the target business system. Before sending the authentication request to the target authentication module, the method further includes: The target authentication module is determined based on the correspondence between the target authentication module and the target business system.
10. The method according to claim 8, characterized in that, The target connection module pre-configures a model identifier for the target authentication module, the model identifier being used to identify the target authentication module. Sending an authentication request to the target authentication module includes: Send an authentication request to the target authentication module identified by the model identifier.
11. The method according to claim 8, characterized in that, The authentication result is successful, and the method further includes: The target interface is invoked based on the authentication result.
12. An authentication method, characterized in that, The method is applied to a target authentication module included in an integrated system. The target authentication module is connected to various target business systems included in a set of business systems. The target business systems in the set of business systems require the same authentication information. The method includes: In response to an authentication request, an authentication result is sent to the target connection module indicated by the connection module identifier included in the authentication request. The authentication result is obtained by the target authentication module using authentication information in the target business system. The authentication result is used to call the target interface. The target connection module is connected to the target business systems included in the business system set and is used to call the target interface of the target business system.
13. The method according to claim 12, characterized in that, After responding to the acquisition of the authentication request and before sending the authentication result to the target connection module identified by the connection module identifier, the method further includes: Send authentication information to the target business system; Obtain the authentication result returned by the target business system.
14. The method according to claim 12, characterized in that, The authentication result is authorization information. Before sending the authentication result to the target connection module identified by the connection module identifier, the method further includes: Send authentication information to the target business system and obtain authorization information from the target business system.
15. The method according to claim 14, characterized in that, The authorization information has a validity period, and the method further includes: In response to determining that the effective time limit is less than a threshold, authentication information is sent to the target business system, and the updated authorization information after the effective time limit is returned by the target business system.
16. An interface calling device, characterized in that, The device is applied to a target connection module included in an integrated system. The target connection module is connected to a target business system, which belongs to a set of business systems. The target business systems included in the set of business systems require the same authentication information. The device includes: The receiving unit is used to obtain the calling instructions of the target interface; A sending unit is configured to, in response to a call instruction to obtain the target interface, send an authentication request to a target authentication module included in the integrated system. The target interface is an interface of the target business system. The authentication request includes a connection module identifier, which is used to identify the target connection module. The target authentication module is connected to the target business system and is used to obtain an authentication result based on authentication information in the target business system. The receiving unit is also used to obtain the authentication result fed back by the target authentication module, and the authentication result is used to call the target interface.
17. An authentication device, characterized in that, The device is applied to a target authentication module included in an integrated system. The target authentication module is connected to various target business systems included in a set of business systems. The target business systems in the set of business systems require the same authentication information. The device includes: The receiving unit is used to obtain authentication requests; A sending unit is configured to, in response to obtaining the authentication request, send an authentication result to a target connection module indicated by a connection module identifier included in the authentication request. The authentication result is obtained by the target authentication module using authentication information in the target business system. The authentication result is used to call a target interface. The target connection module is connected to the target business systems included in the business system set and is used to call the target interface of the target business system.
18. An electronic device, characterized in that, include: One or more processors; Storage device, on which one or more programs are stored, When the one or more programs are executed by the one or more processors, the one or more processors implement the interface invocation method as described in any one of claims 8-11, or implement the authentication method as described in any one of claims 12-15.
19. A computer-readable medium, characterized in that, It stores a computer program, wherein when the program is executed by a processor, it implements the interface calling method as described in any one of claims 8-11, or the authentication method as described in any one of claims 12-15.
Citation Information
Patent Citations
Authentication collaboration system and authentication collaboration method
CN102739400A
Authority control method and device, equipment and storage medium
CN113239377A