Method, apparatus, program product, and electronic device for cross-system resource access

Abstract

The application discloses a cross-system resource access method and device, a program product and an electronic device, relates to the operation and maintenance technology field, the financial technology field and other related technical fields, and the method comprises the following steps: acquiring the role identifier of a target user in a first system and a second system and login information input by the target user when logging in the first system, the role identifier being used for determining the type of system resources that the target user can access; when the target user needs to switch from the first system to the second system, generating an access request of the target user, and transmitting the role identifier, the login information and the access request to a proxy server; and accessing system resources in the second system based on the role identifier, the login information and the access request through the proxy server. The application solves the technical problem of low user operation efficiency caused by the repeated input of login information when the user accesses across systems in the prior art.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of operation and maintenance technology, the technical field of financial technology and other related technical fields, in particular, relates to a cross-system resource access method and device, program product and electronic equipment. BACKGROUND

[0002] In the existing financial institutions, each financial institution has multiple financial systems for providing financial services for users, in the case that there are same user groups in two different financial systems, the current two financial systems can use the same set of user login information verification mechanism, in the prior art, for the two systems using the same set of user login information verification mechanism, after the user successfully logs in the first system by inputting the user login information, in the case that the user needs to switch to access the second system, the user still needs to re-input the user login information for verification, thereby causing the technical problem of user operation steps being cumbersome and user operation efficiency being low.

[0003] For the above problems, no effective solution has been proposed so far. SUMMARY

[0004] The present application provides a cross-system resource access method, device, program product and electronic equipment, to at least solve the technical problem of low user operation efficiency caused by repeated input of login information when the user accesses across systems in the prior art.

[0005] According to one aspect of the present application, a cross-system resource access method is provided, comprising: obtaining a role identifier of a target user in a first system and a second system and login information input by the target user when logging into the first system, wherein the role identifier is used to determine the type of system resources that the target user can access, and the system resources include system resources in the first system and system resources in the second system; when the target user needs to switch from the first system to the second system, generating an access request of the target user, wherein the access request at least includes an identifier of the first system and an identifier of the system resources in the second system that the target user needs to access; transmitting the role identifier, the login information and the access request to a proxy server; and accessing the system resources in the second system based on the role identifier, the login information and the access request through the proxy server.

[0006] Optionally, the method further comprises: transmitting the login information to a login system through the proxy server, wherein the login system is configured to verify whether the username and the user password in the login information match; generating first prompt information in a case where the username and the user password in the login information do not match, wherein the first prompt information is configured to prompt the target user to re-input the username and the user password; and determining a callback address according to the role identifier and the access request, and accessing the system resource in the second system through the callback address in a case where the username and the user password in the login information match.

[0007] Optionally, the method further comprises: determining N resource types according to the role identifier, wherein N is a positive integer; determining a target resource corresponding to the target user according to the identifier of the system resource included in the access request, wherein the target resource is a system resource requested by the target user to access in the second system; judging whether the target user has access authority to the target resource according to a similarity between a type of the target resource and each of the N resource types; determining a target page according to the identifier of the system resource included in the access request in a case where the target user has the access authority to the target resource, wherein the target page is a web page in the second system including resource information and a download address of the target resource; and taking a web address of the target page as the callback address.

[0008] Optionally, the method further comprises: generating second prompt information in a case where the target user does not have the access authority to the target resource, wherein the second prompt information is request information for the target user to apply for obtaining the access authority to the target resource; sending the second prompt information to an approver corresponding to the target user; updating the role identifier of the target user to a role identifier of a user having the access authority to the target resource in a case where an approval opinion of the approver on the second prompt information is approval; and prohibiting updating the role identifier of the target user in a case where the approval opinion of the approver on the second prompt information is disapproval.

[0009] Optionally, the method further comprises: querying a first information table according to the identifier of the first system, wherein the first information table is configured to store login information of all registered users of the first system; querying a second information table according to the identifier of the second system, wherein the second information table is configured to store login information of all registered users of the second system; and performing a synchronization operation between the first information table and the second information table, wherein the synchronization operation is configured to realize consistency between the first information table and the second information table.

[0010] Optionally, the method further comprises: determining whether the second information table includes the login information of the target user; performing the synchronization operation between the first information table and the second information table at a preset time point if the second information table includes the login information of the target user; and performing the synchronization operation between the first information table and the second information table at a current time point if the second information table does not include the login information of the target user.

[0011] Optionally, the method further comprises: taking the callback address as a response message corresponding to the access request; determining the target browser according to the identifier of the first system, wherein the target browser is a browser used by the target user to access the first system; transmitting the response message to the target browser; and switching a display page of the target browser to a target page corresponding to the callback address based on the response message.

[0012] According to another aspect of the present application, a method for accessing system resources across systems is also provided. The method comprises: obtaining a role identifier of a target user in a first system and a second system and login information input by the target user when logging into the first system, wherein the role identifier is used to determine a type of system resources that the target user can access, and the system resources include system resources in the first system and system resources in the second system; generating an access request of the target user when the target user needs to switch from the first system to the second system, wherein the access request includes at least an identifier of the first system and an identifier of system resources in the second system that the target user needs to access; transmitting the role identifier, the login information and the access request to a proxy server; and accessing the system resources in the second system based on the role identifier, the login information and the access request through the proxy server.

[0013] According to another aspect of the present application, a computer program product is also provided, wherein the computer program product stores a computer program, and the computer program controls the computer program product to perform the method for accessing system resources across systems according to any one of the above aspects when the computer program is executed.

[0014] According to another aspect of the present application, an electronic device is also provided, wherein the electronic device includes one or more processors and a memory, and the memory is configured to store one or more programs, and the one or more programs, when executed by the one or more processors, cause the one or more processors to implement the method for accessing system resources across systems according to any one of the above aspects.

[0015] In the present application, first, the role identifier of the target user in the first system and the second system and the login information input by the target user when logging into the first system are acquired, wherein the role identifier is used to determine the type of system resources that the target user can access, and the system resources include system resources in the first system and system resources in the second system, then, when the target user needs to switch from the first system to the second system, the access request of the target user is generated, wherein the access request at least includes the identifier of the first system and the identifier of the system resources in the second system that the target user needs to access, after that, the role identifier, the login information and the access request are transmitted to the proxy server, finally, the system resources in the second system are accessed by the proxy server based on the role identifier, the login information and the access request.

[0016] From the above, after the user successfully logs into the first system by inputting the login information, the present application first acquires the role identifier which can determine the type of system resources that the user accesses and the login information, in the case that the user needs to access across systems, the access request corresponding to the user is generated, and the role identifier, the login information and the access request are transmitted to the proxy server together, then, the present application realizes the access of the user to the system resources in the second system through the proxy server according to the role identifier, the login information and the access request, therefore, when the user logs in across systems, the present application avoids the operation step of repeatedly inputting the login information by the user.

[0017] Therefore, the present application realizes the purpose of omitting the operation step that the user needs to repeatedly input the user login information for verification when switching to access the second system in the prior art by the proxy server according to the role identifier, the login information and the access request, and the present application can directly locate to the page corresponding to the system resources that the user needs to access in the second system through the proxy server according to the role identifier, the login information and the access request, instead of automatically jumping to the system homepage of the second system after the login information repeatedly input by the user is verified in the prior art, compared with the prior art, the technical scheme of the present application further improves the user experience, in summary, the present application realizes the technical effect of reducing the operation complexity of the user logging in across systems, and further solves the technical problem of low user operation efficiency caused by the user repeatedly inputting the login information when accessing across systems in the prior art. BRIEF DESCRIPTION OF DRAWINGS

[0018] The drawings described herein are used to provide further understanding of the present application, and form a part of the present application, the illustrative embodiments of the present application and the description thereof are used to explain the present application, and do not constitute improper limitation on the present application. In the drawings:

[0019] Figure 1 is a flowchart of an optional cross-system resource access method according to an embodiment of the present application;

[0020] Figure 2 is a flowchart of an optional first system switching to a second system for access according to an embodiment of the present application;

[0021] Figure 3 is a schematic diagram of an optional access device for cross-system resources according to an embodiment of the present application;

[0022] Figure 4 is a schematic diagram of an optional electronic device according to an embodiment of the present application. DETAILED DESCRIPTION

[0023] In order to enable persons skilled in the art to better understand the present application, the technical solutions in the embodiments of the present application will be described clearly and completely below with reference to the drawings in the embodiments of the present application. Obviously, the described embodiments are only a part of the embodiments of the present application, but not all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by persons skilled in the art without creative work should fall within the scope of protection of the present application.

[0024] It should be noted that the terms "first", "second", and the like in the specification and claims of the present application and the above-described drawings are used to distinguish similar objects, and do not necessarily have to describe a specific order or sequence. It should be understood that the data thus used can be interchanged under appropriate circumstances, so that the embodiments of the present application described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "include" and "have" and any variations thereof are intended to cover non-exclusive inclusion, for example, a process, method, system, product or device including a series of steps or units does not have to be limited to only those steps or units clearly listed, but can include other steps or units not clearly listed or inherent to the process, method, product or device.

[0025] It should also be noted that the relevant information (including login information of target users and relevant information of system resources) and data (including but not limited to data for display and analyzed data) involved in the present application are all information and data authorized by users or authorized by all parties. For example, an interface is provided between the system and the relevant users or institutions. Before obtaining the relevant information, the interface needs to send a request for obtaining the relevant information to the aforementioned users or institutions, and after receiving the consent information feedback from the aforementioned users or institutions, the relevant information is obtained.

[0026] In addition, the collection, storage, use, processing, transmission, provision, disclosure and application of the related information and related data involved in the present application comply with the relevant laws, regulations and standards of the relevant regions, and necessary security measures are taken, which do not violate public order and good customs. In addition, the present application provides a corresponding operation portal for users to choose to authorize or refuse to authorize. If the user chooses to refuse to authorize, the corresponding expert decision-making process is entered.

[0027] According to an embodiment of the present application, an embodiment of a method for generating application code is provided. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a set of computer executable instructions, and although a logical order is shown in the flowchart, in some cases, the steps shown or described herein can be executed in an order different from that shown.

[0028] The present application provides an access system (referred to as an access system) for performing the cross-system resource access method in the present application, Figure 1 is a flowchart of an optional cross-system resource access method according to an embodiment of the present application, as Figure 1 shown, the method comprises the following steps:

[0029] Step S101, obtaining the role identification of the target user in the first system and the second system and the login information input by the target user when logging in the first system.

[0030] In step S101, the role identification is used to determine the type of system resources that the target user can access, and the system resources include system resources in the first system and system resources in the second system.

[0031] Optionally, the system resources at least include the system resources of the first system and the system resources of the second system.

[0032] Optionally, the first system and the second system use the same user login information verification mechanism. Assuming that the corresponding role identification of user a in the first system is the first role identification, the corresponding role identification of user a in the second system is also the first role identification.

[0033] Step S102, generating an access request of the target user when the target user needs to switch from the first system to the second system.

[0034] In step S102, the access request at least includes the identification of the first system and the identification of the system resources in the second system that the target user needs to access.

[0035] Optionally, since the identification of the first system and the identification of the system resource in the second system that the target user needs to access are included in the access request, after the proxy server receives the access request of the target user, the proxy system can determine whether the user login information verification mechanisms used by the two systems (i.e., the first system and the second system) that need to perform cross-system access are the same according to the access request.

[0036] In step S103, the role identification, the login information, and the access request are transmitted to the proxy server.

[0037] Optionally, the proxy server is a server located between the client and the target server, which acts as an intermediary between the client and the target server. The proxy server can help the client send a request to the target server and return the response of the target server to the client. The proxy server can be used to realize the functions of filtering message content and hiding the real IP address of the client.

[0038] Optionally, in the case where the target user needs to switch from the first system to the second system for access, the first system is taken as the client of the proxy server, and the second system is taken as the corresponding target server of the proxy server.

[0039] In step S104, the proxy server accesses the system resource in the second system based on the role identification, the login information, and the access request.

[0040] Optionally, the proxy server generates a callback address based on the role identification, the login information, and the access request, wherein the callback address is the access address of the system resource in the second system that the target user needs to access. Then, the target user can directly jump to the display page of the system resource in the second system that needs to be accessed by accessing the callback address.

[0041] From the above content, it can be known that, after the user successfully logs in the first system by inputting the login information, the role identification and the login information that can determine the type of the system resource accessed by the user are first acquired. In the case where the user needs to perform cross-system access, the access request corresponding to the user is generated, and the role identification, the login information, and the access request are collectively transmitted to the proxy server. Then, the proxy server realizes the access of the user to the system resource in the second system according to the role identification, the login information, and the access request. Therefore, the application avoids the operation step of repeated input of login information when the user performs cross-system login.

[0042] It can be seen that the application achieves the purpose of omitting the operation step of repeating the input of user login information for verification when the user switches to access the second system in the prior art by the proxy server according to the role identifier, the login information and the access request, and the application can directly locate the page corresponding to the system resource that the user needs to access in the second system through the proxy server according to the role identifier, the login information and the access request, instead of automatically jumping to the system homepage of the second system after the user login information repeatedly input by the user is verified in the prior art. Compared with the prior art, the technical scheme of the application further improves the user experience. In summary, the application achieves the technical effect of reducing the operation complexity of cross-system login of the user, and further solves the technical problem of low user operation efficiency caused by the repeated input of login information by the user when accessing across systems in the prior art.

[0043] In an optional embodiment, the login information includes a username and a user password input by the target user when logging in the first system. In the current embodiment, the access system first transmits the login information to the login system through the proxy server, wherein the login system is used to verify whether the username and the user password in the login information match. Then, in the case that the username and the user password in the login information do not match, the access system generates first prompt information, wherein the first prompt information is used to prompt the target user to re-input the username and the user password. In addition, in the case that the username and the user password in the login information match, the access system determines the callback address according to the role identifier and the access request, and accesses the system resource in the second system through the callback address.

[0044] Optionally, after the target user logs in the first system and inputs the username and the user password, the access system transmits the login information including the username and the user password to the login system, and then the login system verifies whether the username and the user password of the target user match. In the case that the username and the user password of the target user match, the login system generates Cookie information with a validity period, wherein the Cookie information can be used to track the activity of the user, record the preference of the user and identify the identity of the user.

[0045] Then, the target user successfully logs in the first system, in the case that the target user needs to switch from the first system to the second system for access, the access system transmits the role identifier, the login information and the access request to the proxy server together, after the proxy server transmits the login system of the target user again to the login system, the login system acquires the Cookie information corresponding to the target user according to the identifier of the target user, in the case that the Cookie information corresponding to the target user is within the effective period, the login system generates a third prompt information, and feeds back the third prompt information to the proxy server, wherein the third prompt information is used to represent that the username and the user password of the target user match, then the proxy server determines the callback address according to the role identifier and the access request.

[0046] Optionally, by the above-mentioned embodiment, the way of determining whether the username and the user password of the target user match through the effective period of the Cookie information corresponding to the target user can omit the repeated verification operation of the login system on the username and the user password, thereby reducing the workload of the login system, and further improving the work efficiency of the login system.

[0047] In an optional embodiment, the access system first determines N resource types according to the role identifier, wherein N is a positive integer, secondly, the access system determines the target resource corresponding to the target user according to the identifier of the system resource included in the access request, wherein the target resource is the system resource requested to be accessed by the target user in the second system, then the access system judges whether the target user has the access right to the target resource according to the similarity between the type of the target resource and each resource type in the N resource types, and then in the case that the target user has the access right to the target resource, the access system determines the target page according to the identifier of the system resource included in the access request, wherein the target page is a network page including the resource information and the download address of the target resource in the second system, and the access system takes the website address of the target page as the callback address.

[0048] Optionally, in the prior art, the user can avoid inputting the login information in two systems through the proxy server, thereby achieving the technical effect of login-free access when the target user performs cross-system access, but in the embodiment of the prior art, after the target user switches the system for access, the target user will first jump to the system homepage of the new system switched to, and cannot directly jump to the resource page which the target user needs to access, thereby causing the technical problem of low user experience.

[0049] Compared with the prior art, the application determines the callback address according to the role identifier and the access request through the proxy server, and the page corresponding to the callback address includes resource information and a download address of a system resource in the second system requested to be accessed by the target user, so that the target user can directly obtain the system resource in the second system indicated by the access request according to the callback address, without first jumping to the system homepage of the new system switched to and then adjusting to the target page through clicking, thereby improving the user experience.

[0050] In an optional embodiment, after determining whether the target user has the access right to the target resource according to the type of the target resource and the similarity between each resource type in the N resource types, in the case that the target user does not have the access right to the target resource, the access system generates the target page according to the identifier of the system resource included in the access request, and generates second prompt information, wherein the second prompt information is request information for the target user to apply for the access right to the target resource, and then the access system sends the second prompt information to the approver corresponding to the target user, and in the case that the approval opinion of the approver on the second prompt information is approval, the access system updates the role identifier of the target user to the role identifier of the user having the access right to the target resource, and in the case that the approval opinion of the approver on the second prompt information is disapproval, the access system prohibits updating the role identifier of the target user.

[0051] Optionally, the department level of the department to which the approver belongs is greater than or equal to the department level of the department to which the target user belongs.

[0052] Optionally, the application determines N resource types to which the target user has the access right through the role identifier, and then determines whether the system resource in the second system requested to be accessed by the target user carried in the access request belongs to the N resource types corresponding to the role identifier, thereby achieving the purpose of controlling the resource access right of the target user when the target user accesses the first system / second system.

[0053] Optionally, in the case that the target user needs to access a certain system resource in the second system, but the role identifier corresponding to the target user does not have the access right to the system resource, the target user can apply to the superior department, and then the superior department allocates the corresponding approver to the target user, and the corresponding approver approves the request information for the target user to apply for the access right to the target resource, and in the case that the approval is passed, the application updates the role identifier of the target user, thereby achieving the purpose of customizing the range of the system resources that can be accessed by the target user, and further improving the user experience.

[0054] In an alternative embodiment, after transmitting the login information to the login system through the proxy server, the access system first queries the first information table according to the identification of the first system, wherein the first information table is used to store the login information of all registered users of the first system, then the access system queries the second information table according to the identification of the second system, wherein the second information table is used to store the login information of all registered users of the second system, and then the access system performs the synchronization operation between the first information table and the second information table, wherein the synchronization operation is used to realize the consistency between the first information table and the second information table.

[0055] Optionally, the access system performs the synchronization operation between the first information table and the second information table, thereby ensuring that the login information of the registered users in the first system and the second system is the same, and the first system and the second system have the same user login information verification mechanism, so that in the case that the target user successfully logs in any one of the first system and the second system, in the case that the target user needs to switch to another system for access, the application can simplify the verification process, thereby realizing the effect that the target user can access another system without login verification.

[0056] In an alternative embodiment, the access system first determines whether the second information table includes the login information of the target user, and in the case that the second information table includes the login information of the target user, the access system performs the synchronization operation between the first information table and the second information table at a preset time, and in the case that the second information table does not include the login information of the target user, the access system performs the synchronization operation between the first information table and the second information table at the current time.

[0057] Optionally, the first system and the second system usually perform the synchronization operation between the first information table and the second information table at a fixed time in each day / week / month, assuming that the access system finds that user a has only registered the first system, and user a has not registered the second system, the access system updates the specified execution time of the synchronization operation between the first information table and the second information table to the current time, thereby avoiding waiting for the fixed time to perform the synchronization operation, ensuring that user a can timely realize cross-system access to the second system, thereby realizing the purpose of improving user experience.

[0058] In an alternative embodiment, after determining the callback address according to the role identification and the access request, the access system first transmits the callback address as a response message corresponding to the access request, then the access system determines the target browser according to the identification of the first system, wherein the target browser is the browser used by the target user to access the first system, then the access system transmits the response message to the target browser, and finally the access system switches the display page of the target browser to the target page corresponding to the callback address based on the response message.

[0059] Optionally, the target page is a network page including resource information and a download address of the target resource in the second system.

[0060] Optionally, the browser used by the target user to access the first system is the target browser. After obtaining the callback address, the application encapsulates the callback address into a response message corresponding to the access request, and transmits the response message to the target browser. Then, the access system switches the display page of the target browser to the target page corresponding to the callback address based on the response message, so as to realize cross-system access between the first system and the second system without the target user's awareness.

[0061] In an optional embodiment, Figure 2 is a flowchart of switching a first system to a second system for access according to an embodiment of the application, Figure 2 System A in the above is equivalent to the first system in the application, Figure 2 System B in the above is equivalent to the second system in the application, Figure 2 the browser in the above is the target browser in the application. As Figure 2 shown, the method comprises the following steps:

[0062] Step 1, the target user accesses the page X of the system B through the browser in the system A, wherein the page X of the system B is equivalent to the target page in the application.

[0063] Step 2, when the system A requests the proxy server, the following contents are attached in addition to the user login information of the system A itself:

[0064] 1) System source mark from: used to identify that the request comes from the system A, wherein the system source mark from is equivalent to the identification of the first system included in the access request of the application;

[0065] 2) Resource page identification resourceName: used to identify the resource page of the system B to be accessed, i.e. page X, wherein the resource page identification resourceName is equivalent to the identification of the system resource of the second system requested by the target user to access in the access request of the application;

[0066] 3) System role identification role: i.e. the user role agreed by both systems to confirm the resource page access permission control, wherein the system role identification role is equivalent to the role identification in the application.

[0067] Step 3, through the proxy rule pre-configured by the proxy server, the request of the system A is proxied to Figure 2The uniform login system in the system A (i.e. the login system in the present application) and the callback address (i.e. the callback address in the present application) is the page X of the system B.

[0068] Step 4, verifying the user legitimacy by the uniform login system.

[0069] Step 5, returning the authenticated user information to the system B by the uniform authentication system, and attaching the resource source mark, the resource page identification and the system role identification.

[0070] Step 6, the system B jumps to the page X: realizing the customization of the page X according to the resource source mark from (i.e. the special processing in the present application), and realizing the access permission control of the target user according to the system role identification role. Figure 2

[0071] Step 7, after the system B finishes the processing, returning the content of the page X to the browser, thus completing the process of switching the access from the system A to the system B.

[0072] Optionally, the page in the system B switches the access to the page in the system A.

[0073] In the present application, first, the role identification of the target user in the first system and the second system and the login information input by the target user when logging into the first system are acquired, wherein the role identification is used to determine the type of the system resources that the target user can access, and the system resources include the system resources in the first system and the system resources in the second system, then, when the target user needs to switch from the first system to the second system, the access request of the target user is generated, wherein the access request at least includes the identification of the first system and the identification of the system resources in the second system that the target user needs to access, after that, the role identification, the login information and the access request are transmitted to the proxy server, finally, the system resources in the second system are accessed by the proxy server based on the role identification, the login information and the access request.

[0074] From the above content, it can be known that, after the user inputs the login information and successfully logs into the first system, the present application first acquires the role identification that can determine the type of the system resources that the user accesses and the login information, in the case that the user needs to perform the cross-system access, the corresponding access request of the user is generated, and the role identification, the login information and the access request are collectively transmitted to the proxy server, then, the present application realizes the access of the user to the system resources in the second system by the proxy server according to the role identification, the login information and the access request, thus, the present application avoids the operation step of repeatedly inputting the login information by the user when the user performs the cross-system login.

[0075] ​It can be seen that the application achieves the purpose of omitting the operation step of repeating the input of user login information for verification when the user switches to access the second system in the prior art by the proxy server according to the role identifier, the login information and the access request, and the application can directly locate the page corresponding to the system resource that the user needs to access in the second system according to the role identifier, the login information and the access request through the proxy server, instead of automatically jumping to the system homepage of the second system after the login information input repeatedly by the user is verified in the prior art. Compared with the prior art, the technical scheme of the application further improves the user experience. In summary, the application achieves the technical effect of reducing the operation complexity of cross-system login of the user, and further solves the technical problem of low user operation efficiency caused by the repeated input of login information when the user accesses across systems in the prior art.

[0076] According to another aspect of the embodiment of the application, a cross-system resource access device is further provided, Figure 3 is a schematic diagram of an optional cross-system resource access device according to the embodiment of the application, as Figure 3 shown, the cross-system resource access device comprises an acquisition unit 301, a first generation unit 302, a first transmission unit 303 and an access unit 304.

[0077] Optionally, the acquisition unit is configured to acquire a role identifier of a target user in a first system and a second system and login information input by the target user when logging in the first system, wherein the role identifier is used to determine the type of system resources that the target user can access, and the system resources include system resources in the first system and system resources in the second system; the first generation unit is configured to generate an access request of the target user when the target user needs to switch from the first system to the second system, wherein the access request at least includes an identifier of the first system and an identifier of system resources in the second system that the target user needs to access; the first transmission unit is configured to transmit the role identifier, the login information and the access request to a proxy server; and the access unit is configured to access the system resources in the second system based on the role identifier, the login information and the access request through the proxy server.

[0078] In an optional embodiment, the login information includes a username and a user password input by the target user when logging in the first system, and the access unit comprises a transmission subunit, a first generation subunit and a first determination subunit.

[0079] Optionally, the transmitting subunit is configured to transmit the login information to a login system through the proxy server, the login system is configured to verify whether the username and the user password in the login information match, the first generating subunit is configured to generate first prompt information in a case where the username and the user password in the login information do not match, the first prompt information is configured to prompt the target user to re-input the username and the user password, and the first determining subunit is configured to determine a callback address according to the role identifier and the access request and access a system resource in the second system through the callback address in a case where the username and the user password in the login information match.

[0080] In an optional embodiment, the first determining subunit comprises a first determining module, a second determining module, a judging module, a third determining module, and a fourth determining module.

[0081] Optionally, the first determining module is configured to determine N resource types according to the role identifier, the second determining module is configured to determine a target resource corresponding to the target user according to the identifier of the system resource included in the access request, the target resource is a system resource requested to be accessed by the target user in the second system, the judging module is configured to judge whether the target user has access authority to the target resource according to a similarity between a type of the target resource and each resource type of the N resource types, the third determining module is configured to determine a target page according to the identifier of the system resource included in the access request in a case where the target user has the access authority to the target resource, the target page is a web page in the second system including resource information and a download address of the target resource, and the fourth determining module is configured to take a web address of the target page as the callback address.

[0082] In an optional embodiment, the cross-system resource access device further comprises a second generating unit, a sending unit, an updating unit, and a disabling unit.

[0083] Optionally, the second generating unit is configured to generate a second prompt information in a case where the target user does not have the access authority to the target resource, the second prompt information is request information of the target user for applying to obtain the access authority to the target resource, the sending unit is configured to send the second prompt information to an approver corresponding to the target user, the updating unit is configured to update the role identifier of the target user to a role identifier of a user role having the access authority to the target resource in a case where an approval opinion of the approver on the second prompt information is approval, and the disabling unit is configured to disable updating of the role identifier of the target user in a case where the approval opinion of the approver on the second prompt information is disapproval.

[0084] In an alternative embodiment, the cross-system resource access device further comprises a first query unit, a second query unit, and an execution unit.

[0085] Optionally, the first query unit is configured to query a first information table according to the first system identifier, wherein the first information table is configured to store login information of all registered users of the first system; the second query unit is configured to query a second information table according to the second system identifier, wherein the second information table is configured to store login information of all registered users of the second system; and the execution unit is configured to perform a synchronization operation between the first information table and the second information table, wherein the synchronization operation is configured to achieve consistency between the first information table and the second information table.

[0086] In an alternative embodiment, the execution unit comprises a judgment subunit, a first execution subunit, and a second execution subunit.

[0087] Optionally, the judgment subunit is configured to judge whether the second information table comprises login information of a target user; the first execution subunit is configured to perform the synchronization operation between the first information table and the second information table at a preset time point if the second information table comprises the login information of the target user; and the second execution subunit is configured to perform the synchronization operation between the first information table and the second information table at a current time point if the second information table does not comprise the login information of the target user.

[0088] In an alternative embodiment, the cross-system resource access device further comprises a first determination unit, a second determination unit, a second transmission unit, and a switching unit.

[0089] Optionally, the first determination unit is configured to take the callback address as a response message corresponding to the access request; the second determination unit is configured to determine a target browser according to the first system identifier, wherein the target browser is a browser used by a target user when accessing the first system; the second transmission unit is configured to transmit the response message to the target browser; and the switching unit is configured to switch a display page of the target browser to a target page corresponding to the callback address based on the response message.

[0090] In the present application, first, the role identifier of the target user in the first system and the second system and the login information input by the target user when logging into the first system are acquired, wherein the role identifier is used to determine the type of system resources that the target user can access, and the system resources include system resources in the first system and system resources in the second system, then, when the target user needs to switch from the first system to the second system, the access request of the target user is generated, wherein the access request at least includes the identifier of the first system and the identifier of the system resources in the second system that the target user needs to access, after that, the role identifier, the login information and the access request are transmitted to the proxy server, finally, the system resources in the second system are accessed by the proxy server based on the role identifier, the login information and the access request.

[0091] From the above, after the user successfully logs into the first system by inputting the login information, the present application first acquires the role identifier which can determine the type of system resources that the user accesses and the login information, in the case that the user needs to perform cross-system access, the access request corresponding to the user is generated, and the role identifier, the login information and the access request are transmitted to the proxy server together, then, the present application realizes the access of the user to the system resources in the second system through the proxy server according to the role identifier, the login information and the access request, therefore, when the user performs cross-system login, the present application avoids the operation step of repeatedly inputting the login information by the user.

[0092] Therefore, the present application realizes the purpose of omitting the operation step that the user needs to repeatedly input the user login information for verification when switching to access the second system in the prior art by the proxy server according to the role identifier, the login information and the access request, and the present application can directly locate to the page corresponding to the system resources that the user needs to access in the second system through the proxy server according to the role identifier, the login information and the access request, instead of automatically jumping to the system homepage of the second system after the login information repeatedly input by the user is verified in the prior art, compared with the prior art, the technical scheme of the present application further improves the user experience, in summary, the present application realizes the technical effect of reducing the operation complexity of the user cross-system login, and further solves the technical problem of low user operation efficiency caused by the repeated input of the login information by the user in the cross-system access in the prior art.

[0093] According to another aspect of the embodiment of the present application, a computer program product is also provided, the computer program product includes a stored computer program, wherein when the computer program runs, the computer program product controls the execution of the cross-system resource access method of any one of the above.

[0094] According to another aspect of the embodiments of the present application, an electronic device is also provided, which includes a processor and a memory storing executable instructions of the processor, wherein the processor is configured to perform the cross-system resource access method according to any one of the above embodiments by executing the executable instructions.

[0095] Optionally, Figure 4 is a schematic diagram of an optional electronic device according to the embodiments of the present application, as Figure 4 shown, the embodiments of the present application provide an electronic device, which includes a processor, a memory and a program stored in the memory and executable in the processor, and the processor implements the cross-system resource access method according to any one of the above embodiments when executing the program.

[0096] Optionally, the processor, when executing the program, can implement the following steps: obtaining a role identifier of a target user in a first system and a second system and login information input by the target user when logging in the first system, wherein the role identifier is used to determine a type of system resources accessible by the target user, and the system resources include system resources in the first system and system resources in the second system; generating an access request of the target user when the target user needs to switch from the first system to the second system, wherein the access request at least includes an identifier of the first system and an identifier of the system resources in the second system that the target user needs to access; transmitting the role identifier, the login information and the access request to a proxy server; and accessing the system resources in the second system based on the role identifier, the login information and the access request by the proxy server.

[0097] Optionally, the login information includes a username and a user password input by the target user when logging in the first system, and the processor, when executing the program, can implement the following steps: transmitting the login information to a login system by the proxy server, wherein the login system is used to verify whether the username and the user password in the login information match; generating first prompt information in a case where the username and the user password in the login information do not match, wherein the first prompt information is used to prompt the target user to re-input the username and the user password; and determining a callback address according to the role identifier and the access request, and accessing the system resources in the second system through the callback address in a case where the username and the user password in the login information match.

[0098] Optionally, the processor, when executing the program, can implement the following steps: determining N resource types according to the role identifier, wherein N is a positive integer; determining the target resource corresponding to the target user according to the identifier of the system resource included in the access request, wherein the target resource is a system resource requested to be accessed by the target user in the second system; judging whether the target user has access authority to the target resource according to the similarity between the type of the target resource and each of the N resource types; in the case that the target user has access authority to the target resource, determining the target page according to the identifier of the system resource included in the access request, wherein the target page is a web page in the second system including resource information and a download address of the target resource; and taking the web address of the target page as the callback address.

[0099] Optionally, the processor, when executing the program, can implement the following steps: in the case that the target user does not have access authority to the target resource, prohibiting the generation of the target page according to the identifier of the system resource included in the access request, and generating second prompt information, wherein the second prompt information is request information for the target user to apply for access authority to the target resource; sending the second prompt information to an approver corresponding to the target user; in the case that the approval opinion of the approver on the second prompt information is approval, updating the role identifier of the target user to a role identifier of a user having access authority to the target resource; and in the case that the approval opinion of the approver on the second prompt information is disapproval, prohibiting the updating of the role identifier of the target user.

[0100] Optionally, the processor, when executing the program, can implement the following steps: querying the first information table according to the identifier of the first system, wherein the first information table is used to store login information of all registered users of the first system; querying the second information table according to the identifier of the second system, wherein the second information table is used to store login information of all registered users of the second system; and performing a synchronization operation between the first information table and the second information table, wherein the synchronization operation is used to realize consistency between the first information table and the second information table.

[0101] Optionally, the processor, when executing the program, can implement the following steps: judging whether the second information table includes the login information of the target user; in the case that the second information table includes the login information of the target user, performing the synchronization operation between the first information table and the second information table at a preset time; and in the case that the second information table does not include the login information of the target user, performing the synchronization operation between the first information table and the second information table at a current time.

[0102] Optionally, the processor, when executing the program, can implement the following steps: taking the callback address as a response message corresponding to the access request; determining the target browser according to the identifier of the first system, wherein the target browser is a browser used by the target user when accessing the first system; transmitting the response message to the target browser; and switching a display page of the target browser to a target page corresponding to the callback address based on the response message.

[0103] In the present application, first, the role identifier of the target user in the first system and the second system and the login information input by the target user when logging in the first system are acquired, wherein the role identifier is used to determine the type of system resources that the target user can access, and the system resources include system resources in the first system and system resources in the second system, then, when the target user needs to switch from the first system to the second system, the access request of the target user is generated, wherein the access request at least includes the identifier of the first system and the identifier of the system resources in the second system that the target user needs to access, after that, the role identifier, the login information and the access request are transmitted to the proxy server, finally, the proxy server accesses the system resources in the second system based on the role identifier, the login information and the access request.

[0104] From the above, it can be seen that, after the user successfully logs in the first system by inputting the login information, the present application first acquires the role identifier capable of determining the type of system resources that the user can access and the login information, in the case that the user needs to perform cross-system access, the access request corresponding to the user is generated, and the role identifier, the login information and the access request are collectively transmitted to the proxy server, then, the present application realizes the access of the user to the system resources in the second system through the proxy server according to the role identifier, the login information and the access request, therefore, the present application avoids the operation step of repeatedly inputting the login information of the user when the user performs cross-system login.

[0105] Therefore, the present application realizes the purpose of omitting the operation step of repeatedly inputting the login information of the user when the user switches to access the second system in the prior art, and the present application can directly locate to the page corresponding to the system resources that the user needs to access in the second system through the proxy server according to the role identifier, the login information and the access request, instead of automatically jumping to the system homepage of the second system after the login information repeatedly input by the user is verified in the prior art, compared with the prior art, the technical scheme of the present application further improves the user experience, in summary, the present application realizes the technical effect of reducing the operation complexity of the user in cross-system login, and further solves the technical problem of low user operation efficiency caused by repeatedly inputting the login information when the user performs cross-system access in the prior art.

[0106] The above-mentioned embodiments or examples disclosed in the present application are not exhaustive, and only illustrate some embodiments or examples, and are not specifically limited to the protection scope of the present application. In the case of no contradiction, each step in a certain embodiment or example in the present application can be implemented as an independent example, and the steps can be combined arbitrarily, for example, the scheme after removing some steps in a certain embodiment or example can also be implemented as an independent example, and the order of the steps in a certain embodiment or example can be exchanged arbitrarily, in addition, the optional mode or optional example in a certain embodiment or example can be combined arbitrarily; in addition, the embodiments or examples can be combined arbitrarily, for example, the steps of different embodiments or examples can be combined arbitrarily, a certain embodiment or example can be combined with the optional mode or optional example of other embodiments or examples.

[0107] In the above-mentioned embodiments of the present application, the description of each embodiment has its own focus, and the parts not described in detail in a certain embodiment can be referred to the related description of other embodiments.

[0108] The present application is described with reference to flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each flow and / or block in the flowcharts and / or block diagrams, and the combination of the flows and / or blocks in the flowcharts and / or block diagrams can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device produce a device implemented in the flowcharts and / or block diagrams. Figure 1 The functions specified in one flow or multiple flows and / or blocks Figure 1 The functions specified in one flow or multiple flows and / or blocks

[0109] These computer program instructions can also be stored in a computer readable memory capable of guiding the computer or other programmable data processing device to work in a specific way, so that the instructions stored in the computer readable memory produce a product including instruction devices, which implement the flowcharts and / or block diagrams. Figure 1 The functions specified in one flow or multiple flows and / or blocks Figure 1 The functions specified in one flow or multiple flows and / or blocks

[0110] These computer program instructions can also be loaded into a computer or other programmable data processing device, so that a series of operation steps are performed on the computer or other programmable device to produce a computer implemented process, so that the instructions executed on the computer or other programmable device provide a device for implementing the flowcharts and / or block diagrams. Figure 1 The functions specified in one flow or multiple flows and / or blocks Figure 1steps of a function specified in one or more blocks.

[0111] In one typical arrangement, the computing device includes one or more processors (CPUs), input / output interfaces, network interfaces, and memory. The memory can include non-persistent memory and / or nonvolatile memory, e.g., read-only memory (ROM) or flash memory, among others in the form of a computer-readable medium. Memory is an example of computer-readable media.

[0112] Computer-readable media includes permanent and non-permanent, removable and non-removable media implemented in any method or technology for storage of information such as computer-readable instructions, data structures, program modules, or other data. Examples of computer storage media include, but are not limited to, phase-change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, compact disc read-only memory (CD-ROM), digital versatile discs (DVDs) or other optical storage, magnetic cassettes, magnetic tape, magnetic disk storage or other magnetic storage devices, or any other non-transmission medium that can be used to store information accessible to a computing device. According to the definition provided herein, computer-readable media does not include transitory media, such as modulated data signals and carrier waves.

[0113] It should also be noted that the terms "comprising," "including," and any other variation thereof are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but can also include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without further limitation, an element preceded by "comprises a" does not, without more constraints, foreclose the existence of additional identical elements in the process, method, article, or apparatus that comprises the element.

[0114] Those skilled in the art will appreciate that embodiments of the present application can be devised for a method, a system, or a computer program product. Accordingly, the present application can take the form of an entirely hardware embodiment, an entirely software embodiment or an embodiment combining software and hardware aspects. Furthermore, the present application can take the form of a computer program product on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROMs, optical storage devices, and the like) embodying computer-readable program code.

[0115] The above merely provides an example of the present application, and is not intended to limit the present application. For those skilled in the art, the present application can have various modifications and changes. Any modifications, equivalent replacements, improvements, etc. made within the spirit and principle of the present application shall fall into the scope of claims of the present application.

Claims

1. A method of accessing cross-system resources, the method comprising: The method comprises: obtaining a role identifier of a target user in a first system and a second system and login information input by the target user when logging into the first system, wherein the role identifier is used to determine a type of system resources accessible to the target user, the system resources comprising system resources in the first system and system resources in the second system, and the login information comprises a username and a user password input by the target user when logging into the first system; generating an access request of the target user when the target user needs to switch from the first system to the second system, wherein the access request comprises at least an identifier of the first system and an identifier of a system resource in the second system that the target user needs to access; transmitting the role identifier, the login information and the access request to a proxy server; accessing the system resource in the second system based on the role identifier, the login information and the access request by the proxy server; wherein accessing the system resource in the second system based on the role identifier, the login information and the access request by the proxy server comprises: transmitting the login information to a login system by the proxy server, wherein the login system is used to verify whether the username and the user password in the login information match; in a case where the username and the user password in the login information match, determining a callback address according to the role identifier and the access request, and accessing the system resource in the second system through the callback address; wherein determining the callback address according to the role identifier and the access request comprises: determining N resource types according to the role identifier, wherein N is a positive integer; determining a target resource corresponding to the target user according to the identifier of the system resource included in the access request, wherein the target resource is a system resource requested to be accessed by the target user in the second system; judging whether the target user has access authority to the target resource according to a similarity between a type of the target resource and each of the N resource types; in a case where the target user has access authority to the target resource, determining a target page according to the identifier of the system resource included in the access request, wherein the target page is a web page in the second system comprising resource information and a download address of the target resource; taking a web address of the target page as the callback address.

2. The method of claim 1, wherein, accessing the system resource in the second system based on the role identifier, the login information and the access request by the proxy server comprises: in a case where the username and the user password in the login information do not match, generating first prompt information, wherein the first prompt information is used to prompt the target user to re-input the username and the user password.

3. The method of claim 1, wherein, after judging whether the target user has access authority to the target resource according to the similarity between the type of the target resource and each of the N resource types, the cross-system resource access method further comprises: In a case where the target user does not have access permission to the target resource, a target page is prohibited from being generated according to identification of a system resource included in the access request, and second prompt information is generated, wherein the second prompt information is request information for the target user to apply for access permission to the target resource; The second prompt information is sent to an approver corresponding to the target user; In a case where an approval opinion of the approver on the second prompt information is approval, a role identifier of the target user is updated to a role identifier of a user role having access permission to the target resource; In a case where the approval opinion of the approver on the second prompt information is disapproval, the role identifier of the target user is prohibited from being updated.

4. The method of claim 1, wherein, After the login information is transmitted to a login system through the proxy server, the cross-system resource access method further includes: First information table is queried according to the identification of the first system, wherein the first information table is used to store login information of all registered users of the first system; Second information table is queried according to the identification of the second system, wherein the second information table is used to store login information of all registered users of the second system; Synchronization operation between the first information table and the second information table is performed, wherein the synchronization operation is used to realize consistency between the first information table and the second information table.

5. The method of claim 4, wherein, The synchronization operation between the first information table and the second information table includes: It is judged whether the second information table includes the login information of the target user; In a case where the second information table includes the login information of the target user, the synchronization operation between the first information table and the second information table is performed at a preset time; In a case where the second information table does not include the login information of the target user, the synchronization operation between the first information table and the second information table is performed at a current time.

6. The method of claim 1, wherein, After the callback address is determined according to the role identifier and the access request, the cross-system resource access method further includes: The callback address is used as a response message corresponding to the access request; A target browser is determined according to the identification of the first system, wherein the target browser is a browser used by the target user when accessing the first system; The response message is transmitted to the target browser; Based on the response message, a display page of the target browser is switched to a target page corresponding to the callback address.

7. An apparatus for accessing cross-system resources, the apparatus comprising: includes: An acquisition unit is configured to acquire a role identifier of a target user in a first system and a second system and login information input by the target user when logging in the first system, wherein the role identifier is used to determine a type of system resources accessible by the target user, and the system resources include system resources in the first system and system resources in the second system; The first generating unit is configured to generate an access request of the target user when the target user needs to switch from the first system to a second system, wherein the access request comprises at least an identifier of the first system and an identifier of a system resource in the second system that the target user needs to access; The first transmission unit is configured to transmit the role identifier, the login information, and the access request to a proxy server; The access unit is configured to access the system resource in the second system based on the role identifier, the login information, and the access request through the proxy server; The access unit comprises at least: The transmission subunit is configured to transmit the login information to a login system through the proxy server, wherein the login system is configured to verify whether a username and a user password in the login information match; The first determination subunit is configured to determine a callback address according to the role identifier and the access request, and access the system resource in the second system through the callback address when the username and the user password in the login information match; The first determination subunit comprises at least: The first determination module is configured to determine N resource types according to the role identifier, wherein N is a positive integer; The second determination module is configured to determine a target resource corresponding to the target user according to the identifier of the system resource included in the access request, wherein the target resource is a system resource requested to be accessed by the target user in the second system; The judgment module is configured to determine whether the target user has access authority to the target resource according to a similarity between a type of the target resource and each resource type in the N resource types; The third determination module is configured to determine a target page according to the identifier of the system resource included in the access request when the target user has the access authority to the target resource, wherein the target page is a web page in the second system that comprises resource information and a download address of the target resource; The fourth determination module is configured to take a web address of the target page as the callback address.

8. A computer program product, characterised in that, The computer program product comprises a computer program, wherein the computer program controls the computer program product to execute the cross-system resource access method in any one of claims 1 to 6 when the computer program runs.

9. An electronic device, comprising: The computer program product comprises one or more processors and a memory, wherein the memory is configured to store one or more programs, and the one or more programs, when executed by the one or more processors, cause the one or more processors to implement the cross-system resource access method in any one of claims 1 to 6.

Images