Distributed authorization authentication method based on target server and terminal

Abstract

The invention relates to a distributed authorization authentication method and device based on a target server and a terminal, computer equipment, a storage medium and a computer program product. The method comprises the steps of obtaining a first address of a terminal and respective second addresses of a plurality of candidate servers connected with the terminal in response to an authentication event triggered at the terminal, screening a target server matched with the terminal from the candidate servers based on the first address and the second addresses, and sending a verification certificate to the target server, the method comprises the following steps: acquiring an initial verification result obtained by verifying a verification certificate by a target server, generating authorization request information under the condition that the initial verification result indicates that the verification is passed, sending the authorization request information to the target server by adopting the method, acquiring an authorization authentication result obtained by authenticating the authorization request information by the target server, and sending the authorization authentication result to the target server. Third-party equipment is not needed, and the authentication efficiency is further improved.

Description

Technical Field

[0001] The present application relates to the technical field of Internet of Things, and in particular to a distributed authorization and authentication method, apparatus, computer equipment, storage medium and computer program product based on a target server and a terminal. Background Art

[0002] The Internet of Things enables interconnection between objects and between people and objects. Terminals can exchange information with servers by accessing the Internet of Things. To ensure security, when a terminal initiates an access request, the server needs to authenticate the terminal. Only when the authentication is passed can the terminal be allowed to access the Internet of Things.

[0003] When faced with the challenge of the rapid growth in the number of IoT terminals, the traditional authorization and authentication scheme that relies on third-party authentication equipment still has the problem of low authorization and authentication efficiency. Summary of the invention

[0004] Based on this, it is necessary to provide a distributed authorization authentication method, device, computer equipment, computer-readable storage medium and computer program product based on a target server and a terminal, which can improve the authentication efficiency, in order to address the above technical problems.

[0005] In a first aspect, the present application provides a distributed authorization and authentication method based on a target server and a terminal, which is applied to a terminal, and the method includes:

[0006] In response to an authentication event triggered at the terminal, a first address of the terminal and a second address of each of a plurality of candidate servers connected to the terminal are obtained; based on the first address and each of the second addresses, a target server matching the terminal is screened from each of the candidate servers; a verification certificate is sent to the target server, and an initial verification result obtained by the target server through verification of the verification certificate is obtained; when the initial verification result is that the verification is passed, authorization request information is generated; the authorization request information is sent to the target server, and an authorization authentication result obtained by the target server through authentication of the authorization request information is obtained.

[0007] In one of the embodiments, the generating of the authorization request information includes: determining the authentication order corresponding to the authentication event and generating a random code; substituting the random code into a verification function matching the authentication order to obtain a verification value; and generating the authorization request information carrying the authentication order, the random code and the verification value.

[0008] In one of the embodiments, the method also includes: obtaining a terminal identification of the terminal; performing a hash operation on the terminal identification, the authentication order, the verification value and the random code to obtain a hash check value of the terminal; and determining authorization request information including the hash check value, the authentication order, the random code and the verification value.

[0009] In one embodiment, the initial verification result carries a shared key; the authorization request information including the authentication order, the random code and the verification value is sent to the target server, including: determining the authorization request information including the hash check value, the authentication order, the random code and the verification value; encrypting the authorization request information using the shared key to obtain encrypted information; and sending the encrypted information to the target server.

[0010] In a second aspect, a distributed authorization and authentication method based on a target server and a terminal is provided, which is applied to the target server, and the method includes:

[0011] Obtaining a verification certificate sent by a terminal; the target server is obtained by the terminal in response to an authentication event, based on the first address of the terminal and the second addresses of each of the candidate servers connected to the terminal, by screening from each of the candidate servers; verifying the verification certificate to obtain an initial verification result; if the initial verification result is that the verification is passed, obtaining the authorization request information sent by the terminal; verifying the authorization request information, obtaining and feeding back the authorization authentication result to the terminal.

[0012] In one embodiment, the method further includes: obtaining the current time and the information generation time of the authorization request information; verifying the authorization request information, obtaining and feeding back the authorization authentication result to the terminal, including: when the time interval between the current time and the information generation time is greater than or equal to an interval threshold, verifying the authorization request information, obtaining and feeding back the authorization authentication result to the terminal.

[0013] In one of the embodiments, the authorization request information carries an authentication order, a random code and a verification value; the verification value is obtained by substituting the random code into a verification function that matches the authentication order; the verification of the authorization request information to obtain and feed back the authorization authentication result to the terminal includes: determining a target verification function that matches the authentication order; substituting the random code into the target verification function to obtain a target verification value; and verifying the authorization request information according to the target verification value to obtain and feed back the authorization authentication result to the terminal.

[0014] In a second aspect, the present application also provides a distributed authorization and authentication device based on a target server and a terminal. The device includes:

[0015] An acquisition module is used to obtain a first address of the terminal and a second address of each of a plurality of candidate servers connected to the terminal in response to an authentication event triggered at the terminal; a screening module is used to screen a target server matching the terminal from each of the candidate servers based on the first address and each of the second addresses; a certificate sending module is used to send a verification certificate to the target server and obtain an initial verification result obtained by the target server through verification of the verification certificate; a generation module is used to generate authorization request information when the initial verification result is verification passed; an information sending module is used to send the authorization request information to the target server and obtain an authorization authentication result obtained by the target server through authentication of the authorization request information.

[0016] In a third aspect, the present application further provides a computer device. The computer device includes a memory and a processor, the memory stores a computer program, and the processor implements the following steps when executing the computer program:

[0017] In response to an authentication event triggered at the terminal, a first address of the terminal and a second address of each of a plurality of candidate servers connected to the terminal are obtained; based on the first address and each of the second addresses, a target server matching the terminal is screened from each of the candidate servers; a verification certificate is sent to the target server, and an initial verification result obtained by the target server through verification of the verification certificate is obtained; when the initial verification result is that the verification is passed, authorization request information is generated; the authorization request information is sent to the target server, and an authorization authentication result obtained by the target server through authentication of the authorization request information is obtained.

[0018] In a fourth aspect, the present application further provides a computer-readable storage medium. The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the following steps are implemented:

[0019] In response to an authentication event triggered at the terminal, a first address of the terminal and a second address of each of a plurality of candidate servers connected to the terminal are obtained; based on the first address and each of the second addresses, a target server matching the terminal is screened from each of the candidate servers; a verification certificate is sent to the target server, and an initial verification result obtained by the target server through verification of the verification certificate is obtained; when the initial verification result is that the verification is passed, authorization request information is generated; the authorization request information is sent to the target server, and an authorization authentication result obtained by the target server through authentication of the authorization request information is obtained.

[0020] In a fifth aspect, the present application further provides a computer program product. The computer program product includes a computer program, and when the computer program is executed by a processor, the following steps are implemented:

[0021] In response to an authentication event triggered at the terminal, a first address of the terminal and a second address of each of a plurality of candidate servers connected to the terminal are obtained; based on the first address and each of the second addresses, a target server matching the terminal is screened from each of the candidate servers; a verification certificate is sent to the target server, and an initial verification result obtained by the target server through verification of the verification certificate is obtained; when the initial verification result is that the verification is passed, authorization request information is generated; the authorization request information is sent to the target server, and an authorization authentication result obtained by the target server through authentication of the authorization request information is obtained.

[0022] The above-mentioned distributed authorization authentication method, device, computer equipment, storage medium and computer program product based on the target server and the terminal, in response to the authentication event triggered at the terminal, obtains the first address of the terminal and the second addresses of each of the multiple candidate servers connected to the terminal, and based on the first address and each second address, selects the target server matching the terminal from each candidate server, and can select the target server closer to the terminal device, thereby reducing the authentication time and improving the authentication efficiency. Send a verification certificate to the target server, obtain the initial verification result obtained by the target server verifying the verification certificate, and generate authorization request information when the initial verification result is that the verification is passed. Using the above method, the authorization request information is sent to the target server, and the authorization authentication result obtained by the target server authenticating the authorization request information is obtained, without the need for third-party equipment, further improving the authentication efficiency. BRIEF DESCRIPTION OF THE DRAWINGS

[0023] FIG1 is an application environment diagram of a distributed authorization and authentication method based on a target server and a terminal in one embodiment;

[0024] FIG2 is a schematic flow chart of a distributed authorization and authentication method based on a target server and a terminal applied to a terminal in one embodiment;

[0025] 3 is a schematic diagram of a process of a distributed authorization and authentication method based on a target server and a terminal and applied to a target server in one embodiment;

[0026] FIG4 is a flow diagram of a distributed authorization and authentication mechanism for a central server to push an APP to an IoT terminal in one embodiment;

[0027] FIG5 is a diagram of a distributed system architecture of the Internet of Things in one embodiment;

[0028] FIG6 is a flow chart of a distributed authorization and authentication mechanism for a central server to push an APP to an IoT terminal in another embodiment;

[0029] FIG7 is a structural block diagram of a distributed authorization and authentication device based on a target server and a terminal in one embodiment;

[0030] FIG. 8 is a diagram showing the internal structure of a computer device in one embodiment. DETAILED DESCRIPTION

[0031] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0032] The distributed authorization and authentication method based on the target server and the terminal provided in the embodiment of the present application can be applied in the application environment shown in FIG1. ​​The terminal 102 communicates with the target server 104 through the network. The data storage system can store the data that the target server 104 needs to process. The data storage system can be integrated on the target server 104, or it can be placed on the cloud or other network servers.

[0033] In response to an authentication event triggered at the terminal, the terminal 102 obtains a first address of the terminal and respective second addresses of a plurality of candidate servers connected to the terminal. Based on the first address and the second addresses, the terminal 102 screens a target server 104 that matches the terminal from the candidate servers. The terminal 102 sends a verification certificate to the target server and obtains an initial verification result obtained by the target server through verification of the verification certificate. When the initial verification result is that the verification is passed, the terminal 102 generates authorization request information. The terminal 102 sends the authorization request information to the target server 104 and obtains an authorization authentication result obtained by the target server 104 through authentication of the authorization request information.

[0034] The terminal 102 may be, but is not limited to, various personal computers, laptops, smart phones, tablet computers, IoT devices, and portable wearable devices. IoT devices may be smart speakers, smart TVs, smart air conditioners, smart car-mounted devices, etc. Portable wearable devices may be smart watches, smart bracelets, head-mounted devices, etc. The target server 104 may be implemented as an independent server or a server cluster consisting of multiple servers.

[0035] In one embodiment, as shown in FIG. 2 , a distributed authorization and authentication method based on a target server and a terminal is provided, and the method is applied to the terminal in FIG. 1 as an example for explanation, including:

[0036] S202: In response to an authentication event triggered at the terminal, obtain a first address of the terminal and respective second addresses of a plurality of candidate servers connected to the terminal.

[0037] The terminal can be an IoT terminal. More specifically, an IoT terminal is a device that connects the sensor network layer and the transmission network layer in the IoT to collect data and send data to the network layer. It is responsible for multiple functions such as data collection, preliminary processing, encryption, and transmission.

[0038] The authentication event indicates the trigger event before the terminal is authenticated. The trigger event can be triggered automatically or manually. For example, the trigger event is automatically triggered every preset period. The authentication event is triggered, indicating that the terminal attempts to access the Internet of Things. If the authentication is successful, it means that the terminal has been connected to the Internet of Things and has passed the server authentication.

[0039] The first address of the terminal may represent the network address of the terminal in the Internet of Things, such as an IP address, etc. The first address of the terminal may also represent the actual geographical location of the terminal, such as the geographical coordinates of the terminal.

[0040] The candidate server may be a server in the Internet of Things. More specifically, the candidate server may be a central server, a distributed server, or other servers.

[0041] The second address of the candidate server indicates the network location of the server in the Internet of Things, such as an IP address, etc. The second address of the candidate server may also indicate the actual geographical location of the candidate server, such as the geographical coordinates of the candidate server.

[0042] The connection between the candidate server and the terminal indicates the possibility of communication connection between the candidate server and the terminal, but does not mean that the candidate server and the terminal have been authenticated and substantial data exchange has occurred. It is understandable that substantial data exchange can only occur between the candidate server and the terminal if the terminal has been authenticated by the candidate server.

[0043] Specifically, in response to an authentication event triggered at the terminal, the terminal obtains a first address of the terminal and respective second addresses of a plurality of candidate servers connected to the terminal.

[0044] S204: Filter a target server matching the terminal from among the candidate servers based on the first address and the second addresses.

[0045] The target server may represent a candidate server adjacent to the network location of the terminal, or the target server may represent a candidate server adjacent to the geographical location of the terminal.

[0046] There are multiple ways to select a target server matching the terminal from the candidate servers. Specifically, the terminal selects a candidate server whose second address is closest to the first address from the candidate servers based on the first address and the second addresses as the target server matching the terminal. In one embodiment, several candidate servers closest to the terminal can also be selected as the target server.

[0047] The first address includes a first network location and a first geographical location, and the second address includes a second network location and a second geographical location.

[0048] In one of the embodiments, the terminal selects a target server matching the terminal from among the candidate servers according to the first network location and the second network location.

[0049] In one of the embodiments, the terminal selects a target server matching the terminal from among candidate servers according to the first geographical location and the second geographical location.

[0050] S206, sending the verification certificate to the target server, and obtaining an initial verification result obtained by the target server through verification of the verification certificate.

[0051] The verification certificate may be a digital certificate, which may be configured in a server or a terminal. For example, the verification certificate may be an SSL certificate.

[0052] The initial verification result indicates whether the target server has been configured for the verification certificate. More specifically, the initial verification result includes verification passed and verification failed. Verification passed indicates that the verification certificate is successfully configured in both the target server and the terminal, and verification failed indicates that the verification certificate fails to be configured in the target server or the terminal.

[0053] S208: When the initial verification result is that the verification is passed, generate authorization request information.

[0054] The authorization request information indicates request information for determining whether the terminal is legitimate. For example, if the authorization request information is determined to be legitimate, it can be considered that the terminal has passed the authentication of the server. If the authorization request information is determined to be illegal, it can be considered that the terminal has not passed the authentication of the server.

[0055] Specifically, when the initial verification result is that the verification is passed, the terminal generates authorization request information. When the initial verification result is that the verification is not passed, the terminal uploads the initial verification result to the system log.

[0056] The authorization request information may include multiple authorization sub-information, such as the authentication order of the authentication event, the random code of the terminal and the verification value, wherein the random code is substituted into the verification function matching the authentication order to obtain the verification value.

[0057] Specifically, when the initial verification result is that the verification is passed, the terminal performs message encapsulation on the authentication order, the random code and the verification value to obtain authorization request information.

[0058] S210, sending the authorization request information to the target server, and obtaining the authorization authentication result obtained by the target server authenticating the authorization request information.

[0059] The authorization authentication result indicates the authentication result of the authorization request information, and the authorization authentication result includes authorization authentication passed and authorization authentication failed.

[0060] If the authorization authentication passes, it means that the terminal passes the authentication of the target server. If the authorization authentication fails, it means that the terminal fails the authentication of the target server.

[0061] Specifically, the authorization request information may include multiple authorization sub-information. When each authorization sub-information passes the server authentication, the authorization authentication result obtained by the target server authenticating the authorization request information is obtained, and the authorization authentication result is that the authorization authentication passes. When there is at least one authorization sub-information that fails to pass the server authentication, the authorization authentication result obtained by the target server authenticating the authorization request information is obtained, and the authorization authentication result is that the authorization authentication fails.

[0062] In the above-mentioned distributed authorization authentication method based on the target server and the terminal, in response to the authentication event triggered at the terminal, the first address of the terminal and the second addresses of each of the multiple candidate servers connected to the terminal are obtained, and based on the first address and each second address, the target server matching the terminal is screened from each candidate server, so that the target server closer to the terminal device can be screened, thereby reducing the authentication time and improving the authentication efficiency. A verification certificate is sent to the target server, and an initial verification result obtained by the target server verifying the verification certificate is obtained. When the initial verification result is that the verification is passed, authorization request information is generated, and the above-mentioned method is used to send the authorization request information to the target server, and obtain the authorization authentication result obtained by the target server authenticating the authorization request information, without the need for third-party equipment, further improving the authentication efficiency.

[0063] In one embodiment, generating authorization request information includes: determining an authentication order corresponding to an authentication event, generating a random code, substituting the random code into a verification function that matches the authentication order to obtain a verification value, and generating authorization request information carrying the authentication order, the random code and the verification value.

[0064] The authorization request information is used to be sent to the target server. If the target server determines that the authorization request information is legal, it means that the terminal is successfully authenticated by the server.

[0065] The authorization request information generally includes a plurality of authorization sub-information, for example, the authentication order of the authentication event, the random code of the terminal and the verification value.

[0066] Among them, the authentication order corresponding to the authentication event represents the order of the authentication event in each triggering event. More specifically, the authentication order corresponding to the authentication event represents the generation order of the authentication event for the terminal. For example, if the first authentication is performed between the terminal and the target server, the authentication order corresponding to the authentication event can be 0. If the second authentication is performed between the terminal and the target server, the authentication order corresponding to the authentication event can be 1. After each authentication, the terminal is authenticated normally by the target server, but after a preset period of time, the authentication status automatically becomes invalid. At this time, the terminal needs to initiate a new authentication process, and the authentication order corresponding to the responded authentication event is increased by one, and so on.

[0067] The random code may be a random password generated for the terminal. There are many ways to generate a random password, which are not limited here.

[0068] The verification function indicates a function that matches the authentication order. More specifically, the verification function may indicate a function that determines the match based on the numerical value of the authentication order. For example, when the authentication order is 1, the first verification function is matched, and when the authentication order is 2, the second verification function is matched. The verification function may also indicate a function that determines the match based on the parity of the authentication order. For example, when the authentication order is a cardinality, the third verification function is matched, and when the authentication order is an even number, the fourth verification function is matched.

[0069] The verification value may represent a function value of a verification function. For example, a random code is substituted into a verification function that matches the authentication sequence to obtain a function value of the verification function, namely, the verification value.

[0070] There are many ways to generate authorization request information carrying the authentication sequence, random code and verification value, for example, the authentication sequence, random code and verification value are concatenated to obtain the authorization request information. Another example is to encrypt the authentication sequence, random code and verification value according to a preset encryption algorithm to obtain the authorization request information, etc.

[0071] Specifically, the terminal determines the authentication order corresponding to the authentication event, generates a random code, substitutes the random code into a verification function matching the authentication order, obtains a verification value, and generates authorization request information carrying the authentication order, the random code and the verification value.

[0072] In one embodiment, the terminal may determine the authentication order of the authentication events according to the order of the trigger events. The terminal may also determine the authentication order of the authentication events according to the authentication order of the historical authentication events.

[0073] In one of the embodiments, the terminal brings the random code into the verification function that matches the authentication order to obtain the function value (verification value) of the verification function. The terminal obtains the message template, encapsulates the authentication order, random code and verification value into the preset message template according to the format of the message template, and obtains the authorization request message.

[0074] In this embodiment, the authentication order corresponding to the authentication event is determined, and a random code is generated. The random code is substituted into a verification function that matches the authentication order to obtain a verification value, and authorization request information carrying the authentication order, random code and verification value is generated, thereby avoiding message leakage and improving the transmission security of the authorization request message between the terminal and the server.

[0075] In one embodiment, the distributed authorization and authentication method based on the target server and the terminal also includes: obtaining the terminal identification of the terminal, performing a hash operation on the terminal identification, the authentication order, the verification value and the random code to obtain the hash check value of the terminal, and determining the authorization request information containing the hash check value, the authentication order, the random code and the verification value.

[0076] Among them, the terminal identification represents a unique identification for the identity of the terminal device, based on which it can be distinguished from other terminal devices or other IoT devices. The terminal identification may include: a hardware feature code HFC and a user identification code UIC. Among them, the hardware feature code (HFC), HFC corresponds to different hardware terminals one by one, and is generated by information such as the hardware model and serial number through an encryption algorithm. The user identification code (UIC), UIC corresponds to different user identities one by one, and is generated by user personal information through an encryption algorithm.

[0077] The hash operation refers to an operation based on a hash function, or an operation based on a hash function, wherein the hash function or the hash function may be a function that maps input data of any length to output data of a fixed length.

[0078] The hash check value indicates the result of a hash operation. More specifically, the hash check value indicates a function value obtained based on a hash function operation.

[0079] Specifically, the terminal obtains the terminal identification of the terminal, performs a hash operation based on the terminal identification, authentication order, verification value and random code to obtain the hash check value of the terminal, and determines the authorization request information including the hash check value, authentication order, random code and verification value.

[0080] In one of the embodiments, the terminal performs a hash operation based on the hardware feature code, the user identification code, the authentication sequence, the verification value, and the random code to obtain a hash check value of the terminal.

[0081] In this embodiment, the terminal identification of the terminal is obtained, a hash operation is performed on the terminal identification, authentication order, verification value and random code to obtain the hash check value of the terminal, the authorization request information including the hash check value, authentication order, random code and verification value is determined, and the terminal identification, authentication order, verification value and random code are encrypted to avoid message leakage and improve the transmission security of the authorization request message between the terminal and the server.

[0082] In one embodiment, the initial verification result carries a shared key, and sends the authorization request information containing the authentication order, random code and verification value to the target server, including: determining the authorization request information containing the hash check value, authentication order, random code and verification value, encrypting the authorization request information using the shared key to obtain encrypted information, and sending the encrypted information to the target server.

[0083] The shared key refers to the key carried in the initial verification result after the verification certificate completes the verification.

[0084] For example, a shared key (also called a session key) is generated during the handshake process between the terminal and the server. This process goes through a series of encryption and decryption operations, ultimately allowing both parties to use a common key to encrypt and decrypt data.

[0085] The encrypted information refers to information obtained by encrypting the hash check value, authentication sequence, random code and verification value in the authorization request information according to the shared key.

[0086] The functions of the shared key include, but are not limited to, encrypting data, decrypting data, and ensuring data integrity. Encrypted data can ensure the confidentiality of data during transmission. Whether it is login credentials, personal data or transaction information, they are encrypted by the session key during transmission, and even if the data is intercepted, it cannot be interpreted by unauthorized third parties. Decrypted data can only be decrypted by the server holding the corresponding private key (or the terminal holding the corresponding key if the server requires terminal identity authentication). Ensuring data integrity means that the shared key can prevent data from being tampered with during transmission. The receiver can verify whether the data remains intact during transmission.

[0087] In this embodiment, the initial verification result carries a shared key, determines the authorization request information including a hash check value, an authentication order, a random code and a verification value, encrypts the authorization request information using the shared key to obtain encrypted information, and sends the encrypted information to the target server to ensure the security of the data during the transmission process and to ensure data integrity.

[0088] In one embodiment, as shown in FIG3 , a distributed authorization authentication method based on a target server and a terminal is provided, and the method is applied to the target server in FIG1 as an example for explanation, including:

[0089] S302: Obtain a verification certificate sent by the terminal.

[0090] The target server is obtained by the terminal in response to the authentication event, by screening from the candidate servers based on the first address of the terminal and the second addresses of the plurality of candidate servers connected to the terminal.

[0091] The target server may be an authorized server, a regional server, or a central server.

[0092] The verification certificate may be a digital certificate, which may be configured in a server or a terminal. For example, the verification certificate may be an SSL certificate.

[0093] S304: Verify the verification certificate to obtain an initial verification result.

[0094] Among them, the initial verification result indicates whether the target server has been configured for the verification certificate. More specifically, the initial verification result includes verification passed and verification failed. Verification passed indicates that the verification certificate is successfully configured in both the target server and the terminal, and verification failed indicates that the verification certificate fails to be configured in the target server or the terminal.

[0095] Specifically, if the initial verification result passes, the target server can obtain the authorization request information from the terminal.

[0096] In one of the embodiments, after the target server verifies the verification certificate and obtains an initial verification result, the terminal may generate authorization request information if the initial verification result is verification passed, so that the target server can obtain the authorization request information sent by the terminal.

[0097] S306, obtaining the verification certificate sent by the terminal; when the initial verification result is that the verification is passed, obtaining the authorization request information sent by the terminal.

[0098] Wherein, the authorization request information represents request information for determining whether the terminal is legitimate. Exemplarily, when the authorization request information is determined to be legitimate, it can be considered that the terminal has passed the authentication of the server, and if the authorization request information is determined to be illegal, it can be considered that the terminal has not passed the authentication of the server.

[0099] Specifically, when the initial verification result is that the verification is passed, the target server obtains the authorization request information sent by the terminal. When the initial verification result is that the verification is not passed, the target server uploads the initial verification result to the database corresponding to the server.

[0100] S308, obtaining the verification certificate sent by the terminal, verifying the authorization request information, obtaining and feeding back the authorization authentication result to the terminal.

[0101] The verification of the authorization request information includes respectively verifying a plurality of authorization sub-information in the authorization request information to obtain an authorization authentication result.

[0102] Specifically, when each authorization sub-information passes the verification, the target server determines the authorization authentication result as authorization authentication passed. When at least one authorization sub-information fails the verification, the target server determines the authorization authentication result as authorization authentication failed.

[0103] In this embodiment, the verification certificate is verified to obtain an initial verification result. When the initial verification result is that the verification is passed, the authorization request information sent by the terminal is obtained, the authorization request information is verified, and the authorization authentication result is obtained and fed back to the terminal. The verification certificate is verified and the authorization request information is verified, thereby improving the accuracy of the authentication.

[0104] In one embodiment, the method also includes: obtaining the current time and the information generation time of the authorization request information, verifying the authorization request information, obtaining and feeding back the authorization authentication result to the terminal, including: when the time interval between the current time and the information generation time is greater than or equal to the interval threshold, verifying the authorization request information, obtaining and feeding back the authorization authentication result to the terminal.

[0105] The current time may be the time when the authorization request information arrives at the target server, or may be the time when the authorization request information starts to be processed in the target server.

[0106] The information generation time indicates the time when the authorization request information is generated. More specifically, if the authorization request information is encapsulated, the information generation time indicates the time when the message encapsulation is completed.

[0107] The interval threshold represents the preset value configured for the current time and the information generation time.

[0108] When the time interval between the current time and the information generation time is greater than or equal to the interval threshold, it means that the time interval is long and it is not a high-frequency access.

[0109] When the time interval between the current time and the information generation time is less than the interval threshold, it means that the time interval is short. It may be due to high-frequency access. The APP side frequently requests verification, causing the authorization server to crash. This is beneficial to improving the stability of the authorization server.

[0110] Specifically, the target server obtains the information generation time of the authorization request information from the terminal, which can be encapsulated in the authorization request information or sent to the target server separately. The target server reads the data interaction record of the server database to obtain the current time when the authorization request information reaches the target server.

[0111] Specifically, when the time interval between the current time and the information generation time is greater than or equal to the interval threshold, the target server verifies the authorization request information, obtains and feeds back the authorization authentication result to the terminal. When the time interval between the current time and the information generation time is less than the interval threshold, the target server directly determines that the authorization authentication result of the authorization request information is authorization authentication failure.

[0112] In this embodiment, the current time and the information generation time of the authorization request information are obtained. When the time interval between the current time and the information generation time is greater than or equal to the interval threshold, the authorization request information is verified, and the authorization authentication result is obtained and fed back to the terminal to prevent high-frequency access from affecting the load of the target server and crashing the target server, which is beneficial to improving the stability of the target server.

[0113] In one embodiment, the authorization request information carries an authentication order, a random code and a verification value, and the verification value is obtained by substituting the random code into a verification function that matches the authentication order. The authorization request information is verified to obtain and feed back the authorization authentication result to the terminal, including: determining a target verification function that matches the authentication order, substituting the random code into the target verification function to obtain a target verification value, and verifying the authorization request information according to the target verification value to obtain and feed back the authorization authentication result to the terminal.

[0114] The target verification function represents a function that matches the authentication order. More specifically, the target verification function may represent a function that determines the match according to the numerical value of the authentication order. For example, when the authentication order is 1, the first verification function is matched, and when the authentication order is 2, the second verification function is matched. The verification function may also represent a function that determines the match according to the parity of the authentication order. For example, when the authentication order is a cardinality, the third verification function is matched, and when the authentication order is an even number, the fourth verification function is matched.

[0115] The target verification value may represent the function value of the target verification function. For example, the random code is substituted into the target verification function that matches the authentication order to obtain the function value of the target verification function, namely, the target verification value.

[0116] If the target verification value and the verification value are the same, it means that the authorization authentication result is authorization authentication passed. If the target verification value and the verification value are different, it means that the authorization authentication result is authorization authentication failed.

[0117] Specifically, the target server may obtain the authentication sequence record for the terminal and obtain the real-time authentication sequence. If the real-time authentication sequence and the authentication sequence are the same, it may indicate that the authorization request information has passed the verification.

[0118] Specifically, the target server can determine a target verification function that matches the authentication order, substitute the random code into the target verification function to obtain a target verification value, and if the target verification value and the verification value are equal, output the result of authorization authentication passing to the terminal; if the target verification value and the verification value are not equal, output the result of authorization authentication failing to the terminal.

[0119] In this embodiment, a target verification function that matches the authentication order is determined, and the random code is substituted into the target verification function to obtain a target verification value. According to the target verification value, the authorization request information is verified, and the authorization authentication result is obtained and fed back to the terminal, thereby avoiding message leakage and improving the transmission security of the authorization request message between the terminal and the server.

[0120] In one embodiment, as shown in FIG4 , a distributed authorization and authentication mechanism is provided for a central server to push an APP to an IoT terminal, which is applied to the terminal and includes:

[0121] S402: In response to an authentication event triggered at the terminal, obtain a first address of the terminal and respective second addresses of a plurality of candidate servers connected to the terminal.

[0122] Among them, in the face of the challenge of the rapid growth of the number of IoT terminals, the traditional centralized authorization and authentication scheme has problems such as high latency and network congestion. Therefore, a distributed authorization and authentication mechanism is introduced. This mechanism is applied to the distributed system architecture diagram of the IoT as shown in Figure 5. The system model divides the network into two key platforms: the core network platform (Core Network Platform, CNP) and the edge network platform (Edge Network Platform, ENP). The CNP is equipped with a center server (Center Server, CS), which consists of a center authorization server (Center Authorization Server, CAS) and a center authorization database (Center Authorization Database, CAD). The ENP is equipped with multiple distributed servers (Distributed Server, DS), which are similarly composed of a distributed authorization server (Distributed Authorization Server, DAS) and a distributed authorization database (Distributed Authorization Database, DAD). The IoT terminal directly exchanges information with the nearest DS to complete the authorization and authentication process. The model is agreed upon as follows: (1) Each DS (regional server) is independent of each other, does not belong to each other, and has a unique server ID. (2) During the entire process of IoT terminal authorization and authentication, the communication interaction between DS (regional server) and CS (central server) is reliable and trustworthy.

[0123] When the IoT terminal requests authorization and authentication for the first time, if the corresponding HFC or UIC information does not exist in the DAD of the DS, the DS will send a query request to the CAD in the CS. If the information is legal, the DS will copy the HFC and UIC information to the DAD for the next update; otherwise, it will return authorization and authentication failure in sequence. For the secondary authorization and authentication of the same IoT terminal, the authorization and authentication process can be completed directly through information interaction between DSs. In this distributed authorization and authentication mechanism, the regional servers on the edge platform work in parallel, which can not only effectively reduce network latency and congestion problems, but also improve the efficiency of authorization and authentication, and enhance the scalability and fault tolerance of the system, providing reliable protection for the secure access of large-scale IoT terminals.

[0124] S404: Filter a target server matching the terminal from among the candidate servers based on the first address and the second addresses.

[0125] Exemplarily, the method of determining the target server also includes: searching online for a valid address of a nearby authorization server (AS) through a network, and then determining the authorization server with the nearest valid address as the target server.

[0126] S406, sending the verification certificate to the target server, and obtaining an initial verification result obtained by the target server through verification of the verification certificate.

[0127] S408: When the initial verification result is that the verification is passed, determine the authentication order corresponding to the authentication event and generate a random code.

[0128] S410, substitute the random code into a verification function that matches the authentication order to obtain a verification value.

[0129] S412: Obtain a terminal identifier of the terminal.

[0130] S414, performing a hash operation on the terminal identification, authentication sequence, verification value and random code to obtain a hash check value of the terminal.

[0131] S416, determining the authorization request information including the hash check value, the authentication order, the random code and the verification value.

[0132] The authorization request information specifically includes: Req{HFC, UIC, OP, CHKSUM, T1}, Req{HFC, UIC, OP, CHKSUM, T1} is a composite data type, where the operation type OP={COUNT, VERIFY, RCODE}, COUNT, VERIFY, RCODE respectively represent the authentication order, the verification value and the random code, the random code can be a 6-digit integer, CHKSUM represents the hash check value of the three data items HFC, UIC, OP, and T1 represents the information generation time of the authorization request information.

[0133] S418, using the shared key to encrypt the authorization request information to obtain encrypted information.

[0134] The initial verification result carries the shared key.

[0135] Exemplarily, the terminal uses the shared key generated by the SSL certificate verification process to encrypt the authorization request data Req{HFC, UIC, OP, CHKSUM, T1}.

[0136] S420, sending the encrypted information to the target server.

[0137] S422, obtaining the authorization authentication result obtained by the target server authenticating the authorization request information.

[0138] In this embodiment, in response to the authentication event triggered at the terminal, the first address of the terminal and the second addresses of each of the multiple candidate servers connected to the terminal are obtained. Based on the first address and each second address, the target server matching the terminal is screened from each candidate server, and the target server closer to the terminal device can be screened, thereby reducing the authentication time and improving the authentication efficiency. A verification certificate is sent to the target server, and the initial verification result obtained by the target server verifying the verification certificate is obtained. When the initial verification result is that the verification is passed, the authorization request information is generated. The above method is used to send the authorization request information to the target server, and the authorization authentication result obtained by the target server authenticating the authorization request information is obtained, without the aid of a third-party device, further improving the authentication efficiency. In this method, the proposed distributed method makes full use of the devices on the edge of the network closer to the user device to provide cloud services, which can effectively solve the problem of high transmission delay in the traditional centralized processing method. Through APP authorization authentication, the application can ensure that only authenticated users can use its services, so that the system can better control the access volume and resource utilization, which helps to maintain the stability and reliability of the service and solve the problems of low efficiency and low security of authorization authentication in the prior art.

[0139] In one embodiment, as shown in FIG6 , a distributed authorization and authentication mechanism for a central server to push an APP to an IoT terminal is also provided, which is applied to a target server and includes:

[0140] S602: Obtain a verification certificate sent by the terminal.

[0141] The target server is obtained by the terminal in response to the authentication event, by screening from the candidate servers based on the first address of the terminal and the second addresses of the plurality of candidate servers connected to the terminal.

[0142] Exemplarily, after the target server obtains the encrypted Req{HFC, UIC, OP, CHKSUM, T1}, it first uses the shared key generated by the SSL certificate verification process to decrypt the authorization request data Req{HFC, UIC, OP, CHKSUM, T1}.

[0143] S604: Verify the verification certificate to obtain an initial verification result.

[0144] S606: When the initial verification result is that the verification is passed, obtain the authorization request information sent by the terminal.

[0145] S608, obtaining the current time and the information generation time of the authorization request information.

[0146] S610: When the time interval between the current time and the information generation time is greater than or equal to the interval threshold, verify the authorization request information, obtain and feed back the authorization authentication result to the terminal.

[0147] For example, first verify the legitimacy of T1 to see if it exceeds the specified minimum time interval for request verification. If not, continue with the subsequent verification. If it exceeds, determine that the authorization request data Req{HFC,UIC,OP,CHKSUM,T1} is illegal and reject the authorization application. This step is to prevent high-frequency malicious attacks, and the APP side frequently requests verification, which causes the authorization server to crash, and is conducive to improving the stability of the authorization server.

[0148] The authorization request information carries the authentication order, random code and verification value.

[0149] S612, determine a target verification function that matches the authentication order.

[0150] S614, substitute the random code into the target verification function to obtain the target verification value.

[0151] S616, verify the authorization request information according to the target verification value, obtain and feed back the authorization authentication result to the terminal.

[0152] After completing the T1 check, the legitimacy of CHKSUM in the authorization request data Req{HFC, UIC, OP, CHKSUM, T1} needs to be verified. Specifically, the target server uses the agreed algorithm to compare the hash value of the three data items HFC, UIC, and OP with CHKSUM to see if they are equal. If they are equal, continue with the subsequent verification. Otherwise, the authorization request data Req{HFC, UIC, OP, CHKSUM, T1} is determined to be illegal and the authorization application is rejected. This step is to ensure that the three data items HFC, UIC, and OP cannot be tampered with, so that AS can increase the trust level of LA.

[0153] Specifically, after completing the verification of CHKSUM, verify the legitimacy of OP. Specifically, the target server uses the monotonicity and boundedness of the cosine function H1(x) = cos(π×10^(-6) x) and the inverse sine function H2(x) = arcsin(πx) to effectively reduce the overlap rate of the numerical values ​​of the calculation results and the demand for numerical storage space, thereby reducing the probability of misjudgment. In addition, due to the high randomness of the random password RCODE, the calculation results of H1(x) and H2(x) are variable. This innovative feature of variability has significant advantages in promoting legitimate users to discover illegal users in a timely manner. In AS, the L value is set to be a copy value of the number of COUNT applications. When a legitimate user's normal application is authenticated, the L value will increase one by one according to the number of applications. However, if the abnormal application of an illegal user is authenticated, the L value will also increase. Then, legitimate users can quickly identify potential illegal users by monitoring the abnormal changes in the L value step jump. When a possible authentication risk is detected, the user authentication process can be forcibly started, making all previous interaction data invalid, thereby improving the security level of transmitted data. In this way, legitimate users can better protect the security of their data and quickly respond to potential threats from illegal users.

[0154] Specifically, substitute RCODE in OP into the first verification function H1(x)=cos(π×10^(-6) x) to get V1=H1(RCODE), and then substitute V1 into the second verification function H2(x)=arcsin(πx) to get V2=H2(V1). If COUNT is an odd number, judge V1==VERIFY. If not, return the information of rejecting the authorization application, upload the failure information to the system log, and end the authorization process. Otherwise, set SL=LICENSED, SL is the license authorization status, if COUNT is an even number, judge V2==VERIFY. If not, return the information of rejecting the authorization application, upload the failure information to the system log, and end the authorization process. Otherwise, set SL=LICENSED.

[0155] Specifically, after completing the verification of the OP, the target server returns the authorization authentication result to the terminal.

[0156] Among them, if the verification of T1, CHKSUM, and OP all pass, the authorization authentication result is determined to be authorization authentication passed; if at least one of T1, CHKSUM, and OP fails to pass, the authorization authentication result is determined to be authorization authentication failed.

[0157] In this embodiment, the verification certificate is verified to obtain an initial verification result. When the initial verification result is that the verification is passed, the authorization request information sent by the terminal is obtained, the authorization request information is verified, and the authorization authentication result is obtained and fed back to the terminal. The verification certificate is verified and the authorization request information is verified, thereby improving the accuracy of the authentication. In this method, the distributed method makes full use of the devices on the edge of the network that are closer to the user device to provide cloud services, which can effectively solve the problem of high transmission delay in the traditional centralized processing method. Through APP authorization authentication, the application can ensure that only authenticated users can use its services, so that the system can better control the access volume and resource utilization, which helps to maintain the stability and reliability of the service and solve the problems of low efficiency and low security of authorization authentication in the prior art.

[0158] It should be understood that, although the various steps in the flowcharts involved in the above-mentioned embodiments are displayed in sequence according to the indication of the arrows, these steps are not necessarily executed in sequence according to the order indicated by the arrows. Unless there is a clear explanation in this article, the execution of these steps does not have a strict order restriction, and these steps can be executed in other orders. Moreover, at least a part of the steps in the flowcharts involved in the above-mentioned embodiments can include multiple steps or multiple stages, and these steps or stages are not necessarily executed at the same time, but can be executed at different times, and the execution order of these steps or stages is not necessarily to be carried out in sequence, but can be executed in turn or alternately with other steps or at least a part of the steps or stages in other steps.

[0159] Based on the same inventive concept, the embodiment of the present application also provides a distributed authorization authentication device based on a target server and a terminal for implementing the above-mentioned distributed authorization authentication method based on a target server and a terminal. The implementation scheme for solving the problem provided by the device is similar to the implementation scheme recorded in the above-mentioned method, so the specific limitations in the embodiments of one or more distributed authorization authentication devices based on a target server and a terminal provided below can refer to the above-mentioned limitations on the distributed authorization authentication method based on a target server and a terminal, and will not be repeated here.

[0160] In one embodiment, as shown in FIG. 7 , a distributed authorization authentication device based on a target server and a terminal is provided, including: an acquisition module 702, a screening module 704, a certificate sending module 706, a generation module 708 and an information sending module 710, wherein:

[0161] An acquisition module 702, configured to acquire, in response to an authentication event triggered at the terminal, a first address of the terminal and respective second addresses of a plurality of candidate servers connected to the terminal;

[0162] A screening module 704, configured to screen a target server matching the terminal from among the candidate servers based on the first address and the second addresses;

[0163] The certificate sending module 706 is used to send the verification certificate to the target server and obtain the initial verification result obtained by the target server verifying the verification certificate;

[0164] A generating module 708, configured to generate authorization request information when the initial verification result is that the verification is passed;

[0165] The information sending module 710 is used to send the authorization request information to the target server and obtain the authorization authentication result obtained by the target server authenticating the authorization request information.

[0166] In one of the embodiments, the generation module is also used to determine the authentication order corresponding to the authentication event and generate a random code; substitute the random code into the verification function matching the authentication order to obtain a verification value; and generate authorization request information carrying the authentication order, random code and verification value.

[0167] In one of the embodiments, the distributed authorization and authentication device based on the target server and the terminal also includes: a calculation module for obtaining the terminal identification of the terminal; performing a hash operation on the terminal identification, the authentication order, the verification value and the random code to obtain the hash check value of the terminal; and determining the authorization request information including the hash check value, the authentication order, the random code and the verification value.

[0168] In one of the embodiments, the initial verification result carries a shared key; the information sending module 710 is also used to determine the authorization request information including a hash check value, an authentication order, a random code and a verification value; the authorization request information is encrypted using the shared key to obtain encrypted information; and the encrypted information is sent to the target server.

[0169] Each module in the above-mentioned distributed authorization and authentication device based on the target server and the terminal can be implemented in whole or in part by software, hardware and their combination. Each of the above-mentioned modules can be embedded in or independent of the processor in the computer device in the form of hardware, or can be stored in the memory in the computer device in the form of software, so that the processor can call and execute the corresponding operations of each of the above modules.

[0170] In one embodiment, a computer device is provided, which may be a server, and its internal structure diagram may be shown in FIG8. The computer device includes a processor, a memory, an input / output interface (Input / Output, referred to as I / O) and a communication interface. The processor, the memory and the input / output interface are connected via a system bus, and the communication interface is connected to the system bus via the input / output interface. The processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program and a database. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The database of the computer device is used to store authorization request information data. The input / output interface of the computer device is used to exchange information between the processor and an external device. The communication interface of the computer device is used to communicate with an external terminal through a network connection. When the computer program is executed by the processor, a distributed authorization authentication method based on a target server and a terminal is implemented.

[0171] Those skilled in the art will understand that the structure shown in FIG. 8 is merely a block diagram of a partial structure related to the solution of the present application, and does not constitute a limitation on the computer device to which the solution of the present application is applied. The specific computer device may include more or fewer components than shown in the figure, or combine certain components, or have a different arrangement of components.

[0172] In one embodiment, a computer device is provided, including a memory and a processor, wherein a computer program is stored in the memory, and the above method steps are implemented when the processor executes the computer program.

[0173] In one embodiment, a computer-readable storage medium is provided, on which a computer program is stored, and when the computer program is executed by a processor, the above method steps are implemented.

[0174] In one embodiment, a computer program product is provided, comprising a computer program, which implements the above method steps when executed by a processor.

[0175] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to the memory, database or other medium used in the embodiments provided in this application can include at least one of non-volatile and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetoresistive random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. As an illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM). The database involved in each embodiment provided in this application may include at least one of a relational database and a non-relational database. Non-relational databases may include distributed databases based on blockchains, etc., but are not limited to this. The processor involved in each embodiment provided in this application may be a general-purpose processor, a central processing unit, a graphics processor, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, etc., but are not limited to this.

[0176] The technical features of the above embodiments may be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0177] The above-described embodiments only express several implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the present application. It should be pointed out that, for a person of ordinary skill in the art, several variations and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the present application shall be subject to the attached claims.

Claims

1. A distributed authorization and authentication method based on a target server and a terminal, characterized in that: Applied to a terminal, the method comprises: In response to an authentication event triggered at the terminal, acquiring a first address of the terminal and respective second addresses of a plurality of candidate servers connected to the terminal; Based on the first address and each of the second addresses, screening a target server matching the terminal from each of the candidate servers; Sending a verification certificate to the target server, and obtaining an initial verification result obtained by the target server verifying the verification certificate; If the initial verification result is that the verification is passed, generating authorization request information; The authorization request information is sent to the target server, and an authorization authentication result obtained by the target server authenticating the authorization request information is obtained.

2. The method according to claim 1, characterized in that The generating of the authorization request information includes: Determine the authentication order corresponding to the authentication event and generate a random code; Substituting the random code into a verification function matching the authentication order to obtain a verification value; Generate authorization request information carrying the authentication order, the random code and the verification value.

3. The method according to claim 2, characterized in that The method further comprises: Obtaining a terminal identification of the terminal; Performing a hash operation on the terminal identification, the authentication order, the verification value and the random code to obtain a hash check value of the terminal; Determine authorization request information including the hash check value, the authentication order, the random code and the verification value.

4. The method according to claim 3, characterized in that The initial verification result carries a shared key; the authorization request information including the authentication order, the random code and the verification value is sent to the target server, including: Determine authorization request information including the hash check value, the authentication order, the random code and the verification value; Using the shared key to encrypt the authorization request information to obtain encrypted information; The encrypted information is sent to the target server.

5. A distributed authorization authentication method based on a target server and a terminal, characterized in that: Applied to a target server, the method comprises: Acquire the verification certificate sent by the terminal; the target server is obtained by the terminal in response to the authentication event, based on the first address of the terminal and the second addresses of each of the plurality of candidate servers connected to the terminal, by screening from the candidate servers; an initial verification result obtained by verifying the verification certificate; When the initial verification result is that the verification is passed, obtaining authorization request information sent by the terminal; The authorization request information is verified to obtain and feed back an authorization authentication result to the terminal.

6. The method according to claim 5, characterized in that The method further comprises: Obtain the current time and the information generation time of the authorization request information; The verifying the authorization request information to obtain and feed back the authorization authentication result to the terminal includes: When the time interval between the current time and the information generation time is greater than or equal to the interval threshold, the authorization request information is verified to obtain and feed back an authorization authentication result to the terminal.

7. The method according to claim 5 or 6, characterized in that: The authorization request information carries an authentication order, a random code and a verification value; the verification value is obtained by substituting the random code into a verification function matching the authentication order; The verifying the authorization request information to obtain and feed back the authorization authentication result to the terminal includes: determining a target verification function that matches the authentication sequence; Substituting the random code into the target verification function to obtain a target verification value; The authorization request information is verified according to the target verification value, and an authorization authentication result is obtained and fed back to the terminal.

8. A distributed authorization and authentication device based on a target server and a terminal, characterized in that: The device comprises: an acquisition module, configured to acquire, in response to an authentication event triggered at a terminal, a first address of the terminal and respective second addresses of a plurality of candidate servers connected to the terminal; A screening module, configured to screen a target server matching the terminal from the candidate servers based on the first address and the second addresses; A certificate sending module, used to send a verification certificate to the target server, and obtain an initial verification result obtained by the target server verifying the verification certificate; A generating module, used for generating authorization request information when the initial verification result is verification passed; The information sending module is used to send the authorization request information to the target server and obtain the authorization authentication result obtained by the target server authenticating the authorization request information.

9. A computer device comprising a memory and a processor, wherein the memory stores a computer program, wherein: When the processor executes the computer program, the steps of the method according to any one of claims 1 to 7 are implemented.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 7 are implemented.

Images