Information verification method of cloud platform, cloud server, storage medium and electronic device
By obtaining user datasets from a second cloud platform and verifying the validity of target users, the problem of inconsistent access control across cloud platforms was solved, and cross-platform user verification efficiency and resource sharing were improved.
Patent Information
- Application Number
- CN202210152413.6
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2022-02-18
- Publication Date
- 2026-02-13
- Estimated Expiration
- 2042-02-18
AI Technical Summary
The inconsistent access control methods of existing cloud platforms make unified management impossible, resulting in a waste of human resources. Furthermore, users need to register and verify repeatedly across different cloud platforms, which is inefficient.
By obtaining the user dataset of the target user from the second cloud platform, selecting the target data item and verifying its validity, and using the verification information database, cross-platform user validity verification is achieved, supporting the interconnection of users on multiple cloud platforms.
It enables interconnection between different cloud platforms, improves the efficiency of login verification, reduces the steps of repeated registration and verification, and saves human resources.
Smart Images

Figure CN116668049B_ABST
Abstract
Description
TECHNICAL FIELD
[0001] The present application relates to the field of cloud services, and more particularly, to a cloud platform information verification method, a cloud server, a storage medium and an electronic device. BACKGROUND
[0002] In the related art, a large number of mature cloud computing platforms have emerged due to the rapid development of cloud computing for many years. The functions provided by these cloud platforms are similar. Many large enterprises or government agencies deploy multiple cloud platforms of different brands.
[0003] Each cloud platform in the related art has a set of access control methods, which has the following risks: first, the functions provided by each cloud platform are similar, but the access control pages and API interfaces are not consistent, and cannot be uniformly managed. Second, each cloud platform requires a separate professional engineer to manage permissions, resulting in a waste of human resources. Unlike hardware resources, cloud resources are usually resources rented by users and are temporary in use. Users need to register an account and verify the account every time they temporarily use and log in to a new cloud platform, which is inefficient.
[0004] In view of the above problems in the related art, there is currently no effective solution. SUMMARY
[0005] In order to solve the problems in the related art, the present application provides a cloud platform information verification method, a cloud server, a storage medium and an electronic device.
[0006] According to an aspect of an embodiment of the present application, a cloud platform information verification method is provided, comprising: obtaining a user data set of a target user from a second cloud platform, wherein the second cloud platform is used to record and store the user data set of the target user, the target user is a registered user of the second cloud platform, and the target user is an unregistered user of the first cloud platform; selecting at least one target data item from the user data set; and verifying the validity of the target user in the first cloud platform according to the target data item.
[0007] Further, verifying the validity of the target user in the first cloud platform according to the target data item comprises: returning the target data item to the second cloud platform, so that the second cloud platform verifies the validity of the target data item according to the user data set; receiving a first verification result fed back by the second cloud platform, wherein the first verification result is used to indicate whether the target data item is valid in the second cloud platform; and if the first verification result represents that the target data item is valid data in the second cloud platform, determining that the target user is a valid user in the first cloud platform.
[0008] Further, obtaining the user data set of the target user from the second cloud platform comprises: obtaining a user account of the target user from the second cloud platform; obtaining a client identifier of the target user from the second cloud platform; obtaining an interaction instruction between a client of the target user and the second cloud platform from the second cloud platform; and obtaining registration information of the target user from the second cloud platform, wherein the registration information comprises at least one of the following: an email address, a phone number, a user avatar, and a user name; and wherein the user data set comprises the user account, the client identifier, the interaction instruction, and the registration information.
[0009] Further, after verifying the validity of the target user on the first cloud platform according to the target data item, the method further comprises: if the target user is a valid user on the first cloud platform, storing the user data set to a verification information library of the first cloud platform.
[0010] Further, after storing the user data set to the verification information library of the first cloud platform, the method further comprises: receiving a login request sent by a client of the target user to the first cloud platform, wherein the login request carries login verification information of the target user; verifying the login verification information by using the verification information library; if the login verification information is verified, controlling the client of the target user to access the first cloud platform, and assigning the client of the target user with access control permissions of the first cloud platform.
[0011] Further, verifying the login verification information by using the verification information library comprises: determining whether the login verification information is included in the verification information library; if the login verification information is included in the verification information library, determining that the login verification information is verified; and if the login verification information is not included in the verification information library, determining that the login verification information is not verified.
[0012] Further, the method further comprises: if the login verification information is not verified, forwarding the login verification information to the second cloud platform, so that the second cloud platform verifies the validity of the login verification information according to local data; receiving a second verification result fed back by the second cloud platform, wherein the second verification result is used to indicate whether the login verification information is valid login data on the second cloud platform; and if the second verification result indicates that the login verification information is valid login data on the second cloud platform, controlling the client of the target user to access the first cloud platform, and assigning the client of the target user with access control permissions of the first cloud platform.
[0013] According to another aspect of the embodiments of the present application, a cloud server is provided, which is applied to a first cloud platform and includes: an obtaining module, configured to obtain a user data set of a target user from a second cloud platform, wherein the second cloud platform is configured to record and store the user data set of the target user, the target user is a registered user of the second cloud platform, and the target user is an unregistered user of the first cloud platform; a selecting module, configured to select at least one target data item from the user data set; and a first verifying module, configured to verify validity of the target user in the first cloud platform according to the target data item.
[0014] Further, the first verifying module includes: a feedback unit, configured to feed back the target data item to the second cloud platform, so that the second cloud platform verifies validity of the target data item according to the user data set; a receiving unit, configured to receive a first verification result fed back by the second cloud platform, wherein the first verification result is used to indicate whether the target data item is valid in the second cloud platform; and a determining unit, configured to determine that the target user is a valid user in the first cloud platform if the first verification result indicates that the target data item is valid data in the second cloud platform.
[0015] Further, the obtaining module includes: a first obtaining unit, configured to obtain a user account of the target user from the second cloud platform; a second obtaining unit, configured to obtain a client identifier of the target user from the second cloud platform; a third obtaining unit, configured to obtain an interaction instruction between a client of the target user and the second cloud platform from the second cloud platform; and a fourth obtaining unit, configured to obtain registration information of the target user from the second cloud platform, wherein the registration information includes at least one of the following: an email address, a phone number, a user avatar, and a user name; and the user data set includes the user account, the client identifier, the interaction instruction, and the registration information.
[0016] Further, the apparatus further includes a storage module, configured to store the user data set to a verification information base of the first cloud platform if the target user is a valid user in the first cloud platform after the first verifying module verifies validity of the target user in the first cloud platform according to the target data item.
[0017] Further, the apparatus further comprises: a first receiving module, configured to receive a login request sent by a client of the target user to the first cloud platform after the storage module stores the user data set into the verification information library of the first cloud platform, wherein the login request carries login verification information of the target user; a second verification module, configured to verify the login verification information by using the verification information library; and a first control module, configured to control the client of the target user to access the first cloud platform and allocate access control rights of the first cloud platform to the client of the target user if the login verification information is verified.
[0018] Further, the second verification module comprises: a judging unit, configured to judge whether the login verification information is included in the verification information library; and a determining unit, configured to determine that the login verification information is verified if the login verification information is included in the verification information library, and determine that the login verification information is not verified if the login verification information is not included in the verification information library.
[0019] Further, the apparatus further comprises: a forwarding module, configured to forward the login verification information to the second cloud platform if the login verification information is not verified, so that the second cloud platform verifies validity of the login verification information according to local data; a second receiving module, configured to receive a second verification result fed back by the second cloud platform, wherein the second verification result is used to indicate whether the login verification information is valid login data in the second cloud platform; and a second control module, configured to control the client of the target user to access the first cloud platform and allocate access control rights of the first cloud platform to the client of the target user if the second verification result indicates that the login verification information is valid login data in the second cloud platform.
[0020] According to another aspect of the embodiments of the present application, a storage medium is also provided, which comprises a stored program, wherein the program performs the method steps described above when running.
[0021] According to another aspect of the embodiments of the present application, an electronic device is also provided, which comprises a processor, a communication interface, a memory and a communication bus, wherein the processor, the communication interface and the memory complete mutual communication through the communication bus; wherein: the memory is used to store a computer program; and the processor is used to execute the method steps described above by running the program stored in the memory.
[0022] The embodiments of the present application also provide a computer program product comprising instructions which, when executed on a computer, cause the computer to carry out the steps of the above method.
[0023] According to the application, the user data set of the target user is acquired from the second cloud platform, the second cloud platform is used for recording and storing the user data set of the target user, the target user is a registered user of the second cloud platform, the target user is an unregistered user of the first cloud platform, at least one target data item is selected from the user data set, the validity of the target user in the first cloud platform is verified according to the target data item, the first cloud platform acquires the user data set of the target user in the second cloud platform and verifies the validity of the target user in the first cloud platform, the interconnection and intercommunication of the same user account on multiple cloud platforms are realized, the technical problem that multiple cloud platforms cannot be interconnected and communicated in the prior art is solved, and the login verification efficiency of the cloud client is improved. BRIEF DESCRIPTION OF DRAWINGS
[0024] The drawings described herein are used to provide further understanding of the application, and form a part of the application. The illustrative embodiments of the application and their descriptions are used to explain the application, and do not constitute an improper limitation on the application. In the drawings:
[0025] Figure 1 is a hardware structure block diagram of a cloud server according to an embodiment of the application;
[0026] Figure 2 is a flowchart of an information verification method of a cloud platform according to an embodiment of the application;
[0027] Figure 3 is a flowchart of an embodiment of the application;
[0028] Figure 4 is a structure block diagram of an information verification device of a cloud platform according to an embodiment of the application. DETAILED DESCRIPTION
[0029] In order to enable those skilled in the art to better understand the scheme of the present application, the technical scheme in the embodiments of the present application will be described clearly and completely below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are only a part of the embodiments of the present application, but not all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those skilled in the art without creative labor should be within the protection scope of the present application. It should be noted that, in the case of no conflict, the embodiments in the present application and the features in the embodiments can be combined with each other.
[0030] It should be noted that the terms "first," "second," etc., in the specification, claims, and accompanying drawings of this application are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be interchanged where appropriate so that the embodiments of this application described herein can be implemented in orders other than those illustrated or described herein. Furthermore, the terms "comprising" and "having," and any variations thereof, are intended to cover non-exclusive inclusion; for example, a process, method, product, or apparatus that comprises a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to such processes, methods, products, or apparatus.
[0031] Example 1
[0032] The method embodiment provided in Embodiment 1 of this application can be executed in a cloud server, computer, or similar computing device. Taking running on a cloud server as an example, Figure 1 This is a hardware structure block diagram of a cloud server according to an embodiment of the present invention. Figure 1 As shown, a cloud server may include one or more ( Figure 1 Only one is shown in the image. A processor 102 (which may include, but is not limited to, a microprocessor MCU or a programmable logic device FPGA, etc.) and a memory 104 for storing data are also shown. Optionally, the cloud server may further include a transmission device 106 for communication functions and an input / output device 108. Those skilled in the art will understand that... Figure 1 The structure shown is for illustrative purposes only and does not limit the structure of the cloud server described above. For example, a cloud server may also include components such as... Figure 1 The more or fewer components shown, or having the same Figure 1 The different configurations shown.
[0033] The memory 104 can be used to store cloud server programs, such as application software programs and modules, like the device linkage program corresponding to the information verification method of a cloud platform in this embodiment of the invention. The processor 102 executes various functional applications and data processing by running the device linkage program stored in the memory 104, thereby implementing the above-described method. The memory 104 may include high-speed random access memory and may also include non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some instances, the memory 104 may further include memory remotely located relative to the processor 102, and these remote memories can be connected to the cloud server via a network. Examples of such networks include, but are not limited to, the Internet, corporate intranets, local area networks, mobile communication networks, and combinations thereof.
[0034] The transmission device 106 is configured to receive or send data via a network. The network can include a wireless network provided by a communication provider of a cloud server. In one example, the transmission device 106 includes a network interface controller (NIC) configured to connect to other network devices via a base station and communicate with the Internet. In one example, the transmission device 106 can be a radio frequency (RF) module configured to communicate with the Internet via a wireless manner.
[0035] In the embodiment, a cloud platform information verification method is provided, Figure 2 is a flowchart of a cloud platform information verification method according to an embodiment of the present application, which is applied to a first cloud platform, such as Figure 2 As shown in the figure, the flowchart includes the following steps:
[0036] In step S202, a user data set of a target user is obtained from a second cloud platform, wherein the second cloud platform is configured to record and store the user data set of the target user, the target user is a registered user of the second cloud platform, and the target user is an unregistered user of the first cloud platform.
[0037] In the embodiment, the cloud platform is also called a cloud computing platform, which is based on hardware resources and software resources to provide storage, computing, and network capabilities, and is divided into three types: a computing cloud platform mainly for data processing, a storage cloud platform mainly for data storage, and a comprehensive cloud platform for storage and processing.
[0038] In step S204, at least one target data item is selected from the user data set.
[0039] Optionally, the user data set includes a plurality of data items, and one or more data items can be selected as the target data item.
[0040] In one example, selecting at least one target data item from the user data set includes judging a user type of the target user, wherein the user type is used to represent a time requirement degree of the target user; if the target user is a first user, M target data items are selected from the user data set, and if the target user is a second user, N target data items are selected from the user data set, wherein the time requirement degree of the first user is greater than that of the second user, M and N are positive integers, and M is less than N. The fewer the selected target data items, the faster the verification rate, the more consistent with the time requirement degree of the target user, and the more the selected target data items, the higher the verification security.
[0041] In step S206, the validity of the target user in the first cloud platform is verified according to the target data item.
[0042] The target user of the embodiment can be referred to as a user account, a user account and key pair, for example, the target user is account A, which has been registered on the second cloud platform and can log in normally. If account A is also valid on the first cloud platform, account A can be used to directly log in to the first cloud platform, thereby realizing interconnection and intercommunication between multiple cloud platforms.
[0043] Through the above steps, the user data set of the target user is obtained from the second cloud platform, the second cloud platform is used to record and store the user data set of the target user, the target user is a registered user of the second cloud platform, and the target user is an unregistered user of the first cloud platform. At least one target data item is selected from the user data set, and the validity of the target user on the first cloud platform is verified according to the target data item. The first cloud platform obtains the user data set of the target user on the second cloud platform, and verifies the validity of the target user on the first cloud platform, thereby realizing interconnection and intercommunication of the same user account on multiple cloud platforms, solving the technical problem that multiple cloud platforms cannot interconnect and intercommunicate in the prior art, and improving the login verification efficiency of the cloud client.
[0044] In one embodiment of the embodiment, verifying the validity of the target user on the first cloud platform according to the target data item includes: returning the target data item to the second cloud platform, so that the second cloud platform verifies the validity of the target data item according to the user data set; receiving a first verification result fed back by the second cloud platform, wherein the first verification result is used to indicate whether the target data item is valid on the second cloud platform; and if the first verification result indicates that the target data item is valid data on the second cloud platform, determining that the target user is a valid user on the first cloud platform.
[0045] Since the first cloud platform may have information loss errors or expiration failures in the process of obtaining the user data set of the target user from the second cloud platform, in order to ensure the correctness of the user data set, part of the obtained information can be returned to the source server (the second cloud platform) for comparison, thereby ensuring the accuracy and validity of the data. The second cloud platform compares whether the user data set of the target user exists locally, judges whether the user data set is valid data, and obtains related label data of the target user, wherein the label data is used to indicate whether the target user is a safe and activated normal registered user. If the second cloud platform has the user data set of the target user locally, and the user data set is valid data, and the label data indicates that the target user is a safe and activated normal registered user, a first verification result indicating that the verification is successful is returned, that is, the target data item is valid data on the second cloud platform.
[0046] Optionally, obtaining the user data set of the target user from the second cloud platform comprises: obtaining a user account of the target user from the second cloud platform; obtaining a client identifier of the target user from the second cloud platform; obtaining an interaction instruction between a client of the target user and the second cloud platform from the second cloud platform; and obtaining registration information of the target user from the second cloud platform, wherein the registration information comprises at least one of the following: an email address, a phone number, a user avatar, and a user name; and wherein the user data set comprises the user account, the client identifier, the interaction instruction, and the registration information.
[0047] The user data set of the embodiment comprises a registered and bound email address, a client ID, a phone number, a historical operation record on the second cloud platform, a user name, and an address of the target user.
[0048] Optionally, after verifying the validity of the target user on the first cloud platform according to the target data item, the method further comprises: if the target user is a valid user on the first cloud platform, storing the user data set in a verification information library of the first cloud platform.
[0049] In one implementation of the embodiment, after storing the user data set in the verification information library of the first cloud platform, the method further comprises:
[0050] S11, receiving a login request sent by a client of a target user to a first cloud platform, wherein the login request carries login verification information of the target user;
[0051] S12, verifying the login verification information by using a verification information library;
[0052] In one example, verifying the login verification information by using the verification information library comprises: determining whether the login verification information is included in the verification information library; if the login verification information is included in the verification information library, determining that the login verification information is verified successfully; and if the login verification information is not included in the verification information library, determining that the login verification information is verified unsuccessfully.
[0053] In other examples of the embodiment, verifying the login verification information by using the verification information library comprises: extracting a user data set of the target user from the verification information library, selecting account password information and an operation record of the target user from the user data set, determining whether the login verification information contains the account password information, parsing a control instruction sequence in the operation record if the login verification information contains the account password information, determining whether the control instruction sequence is a legal control instruction, reading a time stamp of the control instruction sequence, determining whether a time interval between an operation time of the operation record and a current time is greater than a preset time length based on the time stamp, determining that the login verification information is verified successfully if the control instruction sequence is a legal control instruction and the time interval between the operation time of the operation record and the current time is greater than the preset time length, and determining that the login verification information is verified unsuccessfully otherwise.
[0054] By the scheme of the present example, a certain threshold is set for allowing multi-platform user settings, so as to ensure that the user target is a normal user on the second cloud platform, and avoid DOS attacks and malicious logins of the user on multiple cloud platforms by using temporary accounts.
[0055] By using the local authentication information library of the first cloud platform for authentication, the authentication speed can be improved.
[0056] S13, if the login authentication information is verified, the client of the target user is controlled to access the first cloud platform, and the access control permission of the first cloud platform is allocated to the client of the target user.
[0057] In another aspect of the present embodiment, it further includes: if the login authentication information fails to be verified, forwarding the login authentication information to the second cloud platform, so that the second cloud platform verifies the validity of the login authentication information according to the local data; receiving the second verification result fed back by the second cloud platform, wherein the second verification result is used to indicate whether the login authentication information is valid login data in the second cloud platform; if the second verification result indicates that the login authentication information is valid login data in the second cloud platform, controlling the client of the target user to access the first cloud platform, and allocating the access control permission of the first cloud platform to the client of the target user.
[0058] In the case of local verification failure in the first cloud platform, the login authentication information is continuously forwarded to the second cloud platform for proxy verification, which improves the verification efficiency, realizes the interconnection and intercommunication between multiple cloud platforms, and enables the user to register an account on one cloud platform and directly log in on multiple cloud platforms.
[0059] In one implementation scenario of the present embodiment, taking the first cloud platform as cloud platform manufacturer B and the second cloud platform as cloud platform manufacturer A as an example, Figure 3 is a flowchart of the embodiment of the present embodiment, which includes the following steps:
[0060] S01: cloud platform manufacturer A provides a user interface protocol to cloud platform manufacturer B or platform A and platform B use each other's user interface protocol, which is used to obtain user information of the other platform, because each platform has its own users, and other platforms need to obtain the information through special ways. The user information of each cloud platform manufacturer is confidential and unique, and other manufacturers need to agree to obtain it; when the users of the two platforms interoperate (but need to be verified), the user does not need to re-register an account, and the user can operate the products under the two platforms.
[0061] S02: Cloud platform vendor B calls the user interface protocol of platform A to obtain user information of platform A, wherein the user information includes client device ID used by the user, control instruction issued by the user, and the like, and the information and operation are processed and recorded by cloud platform A to confirm whether the operation is valid.
[0062] S03: Some important information or all information in the extracted information is selectively extracted, and the amount of selected information determines the accuracy of verification and the speed of verification. The more information extracted, the more accurate the verification result, and the longer the waiting time. In contrast, extracting only a few key information can improve the verification rate.
[0063] S11: Cloud platform vendor A and vendor B jointly develop a dedicated private protocol for mutual transmission of the obtained user private information, to avoid that a third-party vendor intercepts the user information through an illegal way, and to improve the stability and speed of transmission.
[0064] S12 and S21: Platform B transmits the extracted user information to platform A through the dedicated private protocol, because platform A has accurate user information records, as long as the information obtained by platform B is compared with the accurate information of platform A, it can be determined whether the information is valid, and finally whether the user is valid is transmitted back to platform B. This process can be performed simultaneously for a large number of users.
[0065] S22: Cloud platform vendor B can store the verified information in its own platform, and store the information as a verification information library. When the same user needs to be verified next time, the information can be directly obtained from the information library to quickly verify the validity of the user, without the need to return to platform A for comparison and verification, thereby reducing resource waste.
[0066] Through the above steps, the validity of the user information obtained by one cloud platform vendor from another cloud platform can be verified efficiently and accurately, and the same user can be verified quickly using the verification library next time.
[0067] By using the scheme of the embodiment, the validity of the user information obtained from other platforms can be verified by different cloud platforms, and the verification efficiency is changed. Cloud platform vendors can verify the validity of the user information obtained from each other, the verification speed is changed by adjusting the accuracy of verification, different cloud platform vendors can verify the validity of the user, and the user validity can be quickly verified by selecting fast verification or accurate verification, and a verification database can be established by multiple cloud platforms to quickly verify the same user.
[0068] Through the description of the above embodiments, those skilled in the art can clearly understand that the method according to the above embodiments can be realized by means of software necessary general mechanical equipment, of course, can also be realized by hardware, but in many cases the former is a better embodiment. Based on such understanding, the technical solutions of the present application can be embodied in the form of software controlling mechanical equipment, which is stored in a storage medium (such as ROM / RAM, magnetic disk, optical disk) and includes a plurality of instructions for enabling a mechanical equipment (cloud service device, etc.) to execute the method described in each embodiment of the present application.
[0069] Embodiment 2
[0070] In this embodiment, a cloud platform information verification device is also provided for implementing the above embodiments and preferred embodiments, which have been described and will not be repeated. As used below, the term "module" can be a combination of software and / or hardware that implements a predetermined function. Although the devices described in the following embodiments are preferably implemented in software, hardware, or a combination of software and hardware can also be implemented and conceived.
[0071] Figure 4 is a structural block diagram of a cloud server according to an embodiment of the present application, which is applied to a first cloud platform, as shown in Figure 4 The device comprises an acquisition module 40, a selection module 42, and a first verification module 44, wherein
[0072] The acquisition module 40 is configured to acquire a user data set of a target user from a second cloud platform, wherein the second cloud platform is configured to record and store the user data set of the target user, the target user is a registered user of the second cloud platform, and the target user is an unregistered user of the first cloud platform.
[0073] The selection module 42 is configured to select at least one target data item from the user data set.
[0074] The first verification module 44 is configured to verify the validity of the target user in the first cloud platform according to the target data item.
[0075] Optionally, the first verification module comprises a feedback unit configured to feed back the target data item to the second cloud platform, so that the second cloud platform verifies the validity of the target data item according to the user data set; a receiving unit configured to receive a first verification result fed back by the second cloud platform, wherein the first verification result is used to indicate whether the target data item is valid in the second cloud platform; and a determination unit configured to determine that the target user is a valid user in the first cloud platform if the first verification result indicates that the target data item is valid data in the second cloud platform.
[0076] Optionally, the obtaining module comprises: a first obtaining unit, configured to obtain the user account of the target user from the second cloud platform; a second obtaining unit, configured to obtain the client identifier of the target user from the second cloud platform; a third obtaining unit, configured to obtain the interaction instruction between the client of the target user and the second cloud platform from the second cloud platform; and a fourth obtaining unit, configured to obtain the registration information of the target user from the second cloud platform, wherein the registration information comprises at least one of the following: an email address, a phone number, a user avatar, and a user name; and wherein the user data set comprises the user account, the client identifier, the interaction instruction, and the registration information.
[0077] Optionally, the apparatus further comprises a storage module, configured to, after the first verification module verifies the validity of the target user on the first cloud platform according to the target data item, store the user data set to a verification information library of the first cloud platform if the target user is a valid user on the first cloud platform.
[0078] Optionally, the apparatus further comprises: a first receiving module, configured to, after the storage module stores the user data set to the verification information library of the first cloud platform, receive a login request sent by the client of the target user to the first cloud platform, wherein the login request carries login verification information of the target user; a second verification module, configured to verify the login verification information by using the verification information library; and a first control module, configured to, if the login verification information is verified, control the client of the target user to access the first cloud platform and allocate the target user's client with access control authority of the first cloud platform.
[0079] Optionally, the second verification module comprises: a judging unit, configured to judge whether the login verification information is included in the verification information library; and a determining unit, configured to, if the login verification information is included in the verification information library, determine that the login verification information is verified; and if the login verification information is not included in the verification information library, determine that the login verification information is not verified.
[0080] Optionally, the apparatus further comprises a forwarding module configured to forward the login authentication information to the second cloud platform if the login authentication information fails to pass the verification, so that the second cloud platform verifies the validity of the login authentication information according to local data; a second receiving module configured to receive a second verification result fed back by the second cloud platform, wherein the second verification result is used to indicate whether the login authentication information is valid login data in the second cloud platform; and a second control module configured to control the client of the target user to access the first cloud platform and assign the client of the target user with access control authority of the first cloud platform if the second verification result indicates that the login authentication information is valid login data in the second cloud platform.
[0081] It should be noted that the above modules can be implemented by software or hardware, and for the latter, the following implementation manners can be used, but are not limited thereto: the above modules are located in the same processor; or the above modules are located in different processors in any combination.
[0082] Embodiment 3
[0083] Embodiments of the present application also provide a storage medium having a computer program stored therein, wherein the computer program is configured to execute the steps in any of the method embodiments when running.
[0084] Optionally, in the present embodiment, the above storage medium can be configured to store a computer program for executing the following steps:
[0085] S1, obtaining a user data set of a target user from a second cloud platform, wherein the second cloud platform is configured to record and store the user data set of the target user, the target user is a registered user of the second cloud platform, and the target user is an unregistered user of the first cloud platform;
[0086] S2, selecting at least one target data item from the user data set;
[0087] S3, verifying the validity of the target user in the first cloud platform according to the target data item.
[0088] Optionally, in the present embodiment, the above storage medium can be further configured to store a computer program for executing the following steps:
[0089] S1, obtaining a user data set of a target user from a second cloud platform, wherein the second cloud platform is configured to record and store the user data set of the target user, the target user is a registered user of the second cloud platform, and the target user is an unregistered user of the first cloud platform;
[0090] S2, selecting at least one target data item from the user data set;
[0091] S3, verifying validity of the target user in the first cloud platform according to the target data item.
[0092] Optionally, in the embodiment, the storage medium can include but is not limited to a U disk, a read-only memory (ROM), a random access memory (RAM), a mobile hard disk, a magnetic disk or an optical disk, and various computer program storage media.
[0093] Embodiments of the application also provide an electronic device including a memory and a processor, the memory storing a computer program, and the processor being configured to execute the computer program to perform the steps in any of the above method embodiments.
[0094] Optionally, the electronic device can further include a transmission device and an input / output device, wherein the transmission device is connected to the processor, and the input / output device is connected to the processor.
[0095] Optionally, in the embodiment, the processor can be configured to execute the following steps through the computer program:
[0096] S1, obtaining first state information of a first device;
[0097] S2, judging whether the first state information of the first device meets a preset linkage condition;
[0098] S3, controlling a device state of a second device if the preset linkage condition is met.
[0099] Optionally, in the embodiment, the processor can be further configured to execute the following steps through the computer program:
[0100] S1, judging whether a device state of the first device changes;
[0101] S2, obtaining the latest first state information from the first device through message queue telemetry transport (MQTT) if the device state of the first device changes, and storing the first state information to a first topic;
[0102] S3, pushing the first state information to a second device, so that the second device controls the device state of the second device through the first state information, wherein the first device and the second device are connected to an MQTT server through a message middleware.
[0103] Optionally, the specific examples in the embodiments can refer to the examples described in the above embodiments and optional implementation manners, and the embodiments will not be described here again.
[0104] The serial numbers of the embodiments of the present application are only for description, and do not represent the advantages and disadvantages of the embodiments.
[0105] In the above embodiments of the present application, the description of each embodiment has its own focus, and the parts not described in detail in a certain embodiment can be referred to the related description of other embodiments.
[0106] In the several embodiments provided by the present application, it should be understood that the disclosed technology can be implemented in other ways. Of course, the embodiment described above is only schematic. For example, the division of units is only a logical function division, and there can be another division manner in actual implementation. For example, a plurality of units or components can be combined or integrated into another system, or some features can be ignored or not executed. In addition, the displayed or discussed mutual couplings or direct couplings or communication connections between different parts can be indirect couplings or communication connections through some interfaces, units or modules, and can be electrical or other forms.
[0107] The units described as separate components can or can not be physically separate, and the components shown as units can or can not be physical units, that is, they can be located in one place, or can be distributed on a plurality of network units. According to actual needs, part or all of the units can be selected to achieve the purpose of the embodiments.
[0108] In addition, each functional unit in each embodiment of the present application can be integrated in one processing unit, or each unit can be physically present separately, or two or more units can be integrated in one unit. The integrated unit can be realized in the form of hardware or in the form of a software functional unit.
[0109] The integrated unit, if implemented in the form of a software function unit and sold or used as an independent product, can be stored in a computer readable storage medium. Based on such understanding, the technical solutions of the present application essentially or say the part that contributes to the prior art or the whole or part of the technical solutions can be embodied in the form of a software product. The computer software product is stored in a storage medium and includes a plurality of instructions for causing a computer device (which can be a personal computer, a server or a network device, etc.) to execute all or part of the steps of the method described in the various embodiments of the present application. The aforementioned storage medium includes: a U disk, a read-only memory (ROM, Read-Only Memory), a random access memory (RAM, Random Access Memory), a mobile hard disk, a magnetic disk or an optical disk, and various media that can store program codes.
[0110] The above is only the preferred embodiment of the present application, and it should be pointed out that for those skilled in the art, without departing from the principles of the present application, a number of improvements and refinements can be made, which should be considered as the protection scope of the present application.
Claims
1. A method for verifying information of a cloud platform, characterized in that, The application is applied to a first cloud platform, comprising: obtaining a user data set of a target user from a second cloud platform, wherein the second cloud platform is used for recording and storing the user data set of the target user, the target user is a registered user of the second cloud platform, and the target user is an unregistered user of the first cloud platform; selecting at least one target data item from the user data set; the step of selecting at least one target data item from the user data set comprises: judging a user type of the target user, wherein the user type is used for representing a time requirement degree of the target user; if the target user is a first user, selecting M target data items from the user data set, and if the target user is a second user, selecting N target data items from the user data set, wherein the time requirement degree of the first user is greater than that of the second user, M and N are positive integers, and M is less than N; verifying validity of the target user in the first cloud platform according to the target data item; the step of verifying validity of the target user in the first cloud platform according to the target data item comprises: returning the target data item to the second cloud platform, so that the second cloud platform verifies validity of the target data item according to the user data set; receiving a first verification result fed back by the second cloud platform, wherein the first verification result is used for indicating whether the target data item is valid in the second cloud platform; if the first verification result represents that the target data item is valid data in the second cloud platform, determining that the target user is a valid user in the first cloud platform.
2. A method as claimed in claim 1, characterized in that the step of obtaining the user data set of the target user from the second cloud platform comprises: obtaining a user account of the target user from the second cloud platform; obtaining a client identifier of the target user from the second cloud platform; obtaining an interaction instruction between a client of the target user and the second cloud platform from the second cloud platform; obtaining registration information of the target user from the second cloud platform, wherein the registration information comprises at least one of the following: an email address, a phone number, a user avatar, and a user name; wherein the user data set comprises the user account, the client identifier, the interaction instruction, and the registration information.
3. A method as claimed in claim 1, characterized in that after verifying validity of the target user in the first cloud platform according to the target data item, the method further comprises: if the target user is a valid user in the first cloud platform, storing the user data set into a verification information library of the first cloud platform.
4. A method as claimed in claim 3, characterised in that, after storing the user data set into the verification information library of the first cloud platform, the method further comprises: receiving a login request sent by a client of the target user to the first cloud platform, wherein the login request carries login verification information of the target user; verifying the login verification information by using the verification information library; if the login verification information is verified, controlling the client of the target user to access the first cloud platform, and assigning the target user's client with an access control right of the first cloud platform.
5. A method as claimed in claim 4, characterised in that, the step of verifying the login verification information by using the verification information library comprises: determining whether the login authentication information is included in the authentication information library; if the login authentication information is included in the authentication information library, determining that the login authentication information is verified; if the login authentication information is not included in the authentication information library, determining that the login authentication information is not verified.
6. A method as claimed in claim 4, characterised in that, The method further comprises: if the login authentication information is not verified, forwarding the login authentication information to the second cloud platform, so that the second cloud platform verifies the validity of the login authentication information according to local data; receiving a second verification result fed back by the second cloud platform, wherein the second verification result is used to indicate whether the login authentication information is valid login data in the second cloud platform; if the second verification result indicates that the login authentication information is valid login data in the second cloud platform, controlling the client of the target user to access the first cloud platform and assigning the target user's client the access control right of the first cloud platform.
7. A cloud server, characterized by application in a first cloud platform, comprising: an acquisition module configured to acquire a user data set of a target user from a second cloud platform, wherein the second cloud platform is configured to record and store the user data set of the target user, the target user is a registered user of the second cloud platform, and the target user is an unregistered user of the first cloud platform; a selection module configured to select at least one target data item from the user data set, wherein the selection of the at least one target data item from the user data set comprises determining a user type of the target user, wherein the user type is used to represent a time requirement degree of the target user; if the target user is a first user, selecting M target data items from the user data set, and if the target user is a second user, selecting N target data items from the user data set, wherein the time requirement degree of the first user is greater than that of the second user, M and N are positive integers, and M is less than N; a first verification module configured to verify the validity of the target user in the first cloud platform according to the target data item; the first verification module comprises a feedback unit configured to feed back the target data item to the second cloud platform, so that the second cloud platform verifies the validity of the target data item according to the user data set; a receiving unit configured to receive a first verification result fed back by the second cloud platform, wherein the first verification result is used to indicate whether the target data item is valid in the second cloud platform; and a determination unit configured to determine that the target user is a valid user in the first cloud platform if the first verification result indicates that the target data item is valid data in the second cloud platform.
8. A storage medium, characterized by The storage medium comprises a stored program, wherein the program executes the method steps of any one of claims 1 to 6 when running.
9. An electronic device comprising a processor, a communication interface, a memory and a communication bus, wherein, The processor, the communication interface, and the memory complete mutual communication through a communication bus; wherein: the memory is configured to store a computer program; the processor is configured to execute the method steps of any one of claims 1 to 6 by running the program stored in the memory. The processor, the communication interface, and the memory complete mutual communication through a communication bus; wherein: the memory is configured to store a computer program; the processor is configured to execute the method steps of any one of claims 1 to 6 by running the program stored in the memory.
Citation Information
Patent Citations
Single sign-on method and system, server and storage medium
CN109729045A
Single sign-on verification method based on cloud technology and related equipment
CN110324307A
Business data processing method and device and server
CN111917773A