Cross-enterprise application sharing method based on dual authority authentication of enterprise and application

By adopting dual authority authentication between enterprise and application in cross-enterprise application sharing, the problem that single authority authentication cannot guarantee security in traditional methods is solved, and more efficient and secure application resource sharing is achieved.

CN119227142BActive Publication Date: 2025-03-18SICHUAN ZHONGDIAN AOSTAR INFORMATION TECHNOLOGIES CO LTD +4
View PDF 2 Cites 0 Cited by

Patent Information

Application Number
CN202411757393.0
Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Filing Date
2024-12-03
Publication Date
2025-03-18
Estimated Expiration
2044-12-03

AI Technical Summary

Technical Problem

Traditional application sharing methods only focus on single permission authentication, and cannot fully guarantee the security and rationality of cross-enterprise application sharing.

Method used

We adopt a cross-enterprise application sharing method based on dual authority authentication of enterprises and applications. Through enterprise authority authentication and application authority authentication, we ensure that only legal enterprises and applications with corresponding authority can share resources.

Benefits of technology

It greatly reduces the risks of unauthorized access and data leakage, improves the security and management efficiency of application sharing, and ensures the rational use and security of application resources.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN119227142B_ABST
    Figure CN119227142B_ABST
Patent Text Reader

Abstract

The present invention relates to the field of data sharing technology, and discloses a cross-enterprise application sharing method based on dual authority authentication of enterprises and applications, including the steps of: feature information acquisition, dual authority authentication, and application sharing. The dual authority authentication mechanism of enterprises and applications of the present invention strictly matches the feature parameters of receiving enterprise information and providing enterprise information, and the attribute parameters of receiving application information and providing application information, effectively preventing unauthorized access and data leakage, and building a solid security line for cross-enterprise resource sharing; clearly dividing enterprise and application feature information, so that the sharing provider can accurately control the sharing object, improve the pertinence and effectiveness of resource sharing, and avoid resource abuse; verify and process the shared resources, and if they are incomplete, they can be re-acquired to ensure that the recipient obtains complete and reliable application resources. At the same time, the method improves resource utilization, promotes cooperation and communication between enterprises, is easy to manage and maintain, and improves the level of enterprise information management.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present invention relates to the technical field of data sharing, and in particular to a cross-enterprise application sharing method based on dual authority authentication of enterprises and applications. Background Art

[0002] In today's era of rapid digital development, cooperation and information exchange between enterprises are becoming more frequent. With the continuous expansion and diversification of corporate business, the demand for cross-enterprise application sharing is becoming more and more urgent. Different enterprises may have their own unique application resources, but in some cases, in order to improve efficiency, reduce costs, and maximize resource utilization, applications need to be shared between different enterprises. However, in the process of cross-enterprise application sharing, there are many challenges. On the one hand, enterprises need to ensure that shared application resources can only be used by legitimate recipients to protect the information security and commercial interests of the enterprise itself. On the other hand, different applications may have different permission requirements, and sophisticated permission management is required to ensure the correct use of applications and data security.

[0003] At present, traditional application sharing methods often only focus on single permission authentication, such as authentication based only on the enterprise level or authentication based only on the application level. This single permission authentication method has certain limitations and cannot fully guarantee the security and rationality of cross-enterprise application sharing.

[0004] Therefore, in order to solve the above problems, there is an urgent need for a cross-enterprise application sharing method based on dual authority authentication of enterprises and applications, so as to achieve more secure, efficient and reasonable application resource sharing and meet the development needs of enterprises in the digital age. Summary of the invention

[0005] The purpose of the present invention is to provide a cross-enterprise application sharing method based on dual authority authentication of the enterprise and the application, which solves the technical problems raised in the background technology.

[0006] The purpose of the present invention can be achieved through the following technical solutions:

[0007] The cross-enterprise application sharing method based on dual authority authentication of the enterprise and the application includes the following steps:

[0008] Step 1: Acquisition of feature information

[0009] Obtain enterprise characteristic information and application characteristic information participating in application resource sharing;

[0010] Step 2: Two-factor authentication

[0011] When the application sharing recipient initiates an application sharing request to the application sharing provider, the application sharing provider performs enterprise authority authentication on the application sharing recipient based on the receiving enterprise information of the application sharing recipient;

[0012] After the enterprise authority authentication is passed, the application authority authentication is carried out. The application sharing provider authenticates the application authority of the application sharing receiver based on the application information received by the application sharing receiver.

[0013] Step 3: Application Sharing

[0014] After the enterprise and the application pass dual authority authentication, the application sharing recipient receives the application resources shared by the application sharing provider.

[0015] As a further solution of the present invention: the enterprise characteristic information includes:

[0016] The receiving enterprise information of the application sharing recipient includes multiple characteristic parameters;

[0017] The enterprise information provided by the application sharing provider includes a plurality of characteristic parameter sets corresponding to the plurality of characteristic parameters respectively;

[0018] And each characteristic parameter set contains a plurality of pre-set characteristic parameters respectively;

[0019] As a further solution of the present invention: wherein, the application sharing receiver refers to the party that receives application content, functions or services shared by other parties in the application sharing scenario; the application sharing provider refers to the party that provides its own application resources to other parties for use in the application sharing scenario.

[0020] As a further solution of the present invention: the application characteristic information includes:

[0021] The receiving application information of the application sharing receiver includes multiple attribute parameters;

[0022] Application information provided by the application sharing provider: including multiple attribute parameter sets corresponding to the multiple attribute parameters respectively;

[0023] And each attribute parameter set contains a plurality of preset attribute parameters.

[0024] As a further solution of the present invention: the enterprise authority authentication method is as follows:

[0025] StepA.1. The application sharing provider obtains the receiving enterprise information of the application sharing recipient;

[0026] Then, multiple characteristic parameters in the received enterprise information are marked as N i , i=[1, 2, ...n], n represents the number of all feature parameters;

[0027] Step A.2: Mark multiple feature parameters in multiple feature parameter sets corresponding to the application sharing provider as F i,j ; j = [1, 2, ... m], m represents the number of feature parameters in the feature parameter set corresponding to the i-th feature parameter, and i and j both represent the number;

[0028] That is F i,j =[F i,1 ,F i,2 ,……F i,m ];

[0029] StepA.3, let the value of i be 1, 2, ... n in sequence;

[0030] Then N i With F i,j match:

[0031] If in N i ∈F i,j If all of them are true, the application sharing recipient meets the permission authentication of the application sharing provider, that is, the enterprise permission authentication is passed;

[0032] If N i ∈F i,j , if one of the items is not true, the application sharing recipient does not meet the enterprise authority authentication of the application sharing provider, that is, the enterprise authority authentication fails.

[0033] As a further solution of the present invention: the application authority authentication method is as follows

[0034] Step B.1. The application sharing provider obtains the receiving application information of the application sharing receiver;

[0035] Then, multiple attribute parameters in the received application information are marked as K r , r=[1, 2, …v], v represents the number of all attribute parameters;

[0036] Step B.2, mark multiple attribute parameters of multiple attribute parameter sets corresponding to the application sharing provider as H r,t , t=[1, 2, …, e], e represents the number of attribute parameters in the attribute parameter set corresponding to the rth attribute parameter;

[0037] That is H r,t =[H r,1 ,H r,2 ,……H r,e ];

[0038] Step B.3, let the value of r be 1, 2, ..., v in sequence;

[0039] Then K r With H r,t match:

[0040] If in K r ∈H r,t If all of them are true, the application sharing receiver meets the permission authentication of the application sharing provider, that is, the application permission authentication is passed;

[0041] If K r ∈H r,t , if one of the items is not true, the application sharing receiver does not meet the application permission authentication of the application sharing provider, that is, the application permission authentication fails.

[0042] As a further solution of the present invention: the method also verifies the application resources shared by the application sharing provider to the application sharing recipient, and determines the integrity of the relevant application resources reacquired by the application sharing recipient from the sharing provider based on the verification result.

[0043] As a further solution of the present invention: the verification processing method is as follows:

[0044] Step 1: Get basic data

[0045] First, in the application sharing provider, obtain the basic data of the application resources before transmission;

[0046] Then, in the application sharing receiver, basic data of the application resource after transmission is obtained, wherein the basic data includes but is not limited to the data size, creation time, and quantitative characteristic values ​​of multiple attributes corresponding to the data hash value of the application resource;

[0047] A data hash value refers to a fixed-length value obtained by calculating an application resource using a hash algorithm;

[0048] Step 2: Mark the quantized feature values

[0049] In the basic data of the application resource before transmission, the quantitative feature values ​​of multiple attributes are extracted and marked as U g , g = 1, 2, ... s, s represents the number of multiple attributes of the basic data, U g Indicates the quantitative characteristic value of the attribute in the basic data corresponding to the application sharing provider;

[0050] In the basic data of the application resource after transmission, the quantitative feature values ​​of multiple attributes are extracted and marked as B g , g = 1, 2, ... s, s represents the number of multiple attributes of the basic data, B g Indicates the quantitative characteristic value of the attribute in the basic data corresponding to the application sharing receiver;

[0051] Step 3: Calculate the verification coefficient

[0052] pass , calculate the verification coefficient P0 of the application resource;

[0053] Step 4: Determine integrity

[0054] Determine the integrity of the application resources after transmission based on the verification coefficient P0;

[0055] If P0>0+β, it is determined that the application resources received by the application sharing receiver are incomplete, and the application sharing receiver then reacquires the relevant application resources from the sharing provider;

[0056] Wherein, β is a preset weighted value, and β is a positive number;

[0057] If P0≤0+β, it is determined that the application resources received by the application sharing receiver are complete, which means that the application sharing receiver does not need to reacquire the relevant application resources from the sharing provider.

[0058] Beneficial effects of the present invention:

[0059] The present invention provides a dual authority authentication mechanism, including enterprise authority authentication and application authority authentication, which ensures that only legitimate enterprises and applications with corresponding authority can share resources, greatly reducing the risk of unauthorized access and data leakage; in enterprise authority authentication, the characteristic parameters of the received enterprise information are strictly matched with the characteristic parameter set of the provided enterprise information, and only when all are established can the authentication be passed, thereby ensuring the security at the enterprise level; application authority authentication also adopts a strict matching method to ensure that the recipient's application meets the authority requirements of the provider, further enhancing the security at the application level.

[0060] The present invention clearly divides enterprise characteristic information and application characteristic information, so that the sharing provider can accurately control which enterprises and which applications can receive shared resources, thereby achieving precise control over the sharing scope; different enterprises and applications can share resources according to their own needs and permissions, thereby improving the pertinence and effectiveness of resource sharing.

[0061] The present invention verifies the shared application resources and determines the integrity of the application resources after transmission by calculating the verification coefficient, thereby ensuring that the resources obtained by the receiver are complete; if the resources are determined to be incomplete, the receiver can re-acquire the relevant application resources from the sharing provider, thereby ensuring the reliability of resource sharing.

[0062] The present invention, cross-enterprise application sharing enables enterprises to fully utilize each other's advantageous application resources, avoids duplicate development, and improves resource utilization; it promotes cooperation and communication between enterprises, and provides more opportunities and possibilities for the development of enterprises.

[0063] The present invention clarifies the authority authentication mode and verification processing method, makes the sharing process easy to manage and maintain, and reduces the management cost; provides a standardized resource sharing mechanism for enterprises, and helps to improve the information management level of enterprises. BRIEF DESCRIPTION OF THE DRAWINGS

[0064] The present invention will be further described below in conjunction with the accompanying drawings.

[0065] Figure 1 It is a flow chart of a cross-enterprise application sharing method based on dual authority authentication of enterprise and application of the present invention.

[0066] Figure 2 It is a flowchart of verification processing in the cross-enterprise application sharing method based on dual authority authentication of enterprise and application of the present invention. DETAILED DESCRIPTION

[0067] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention. Example

[0068] See also Figure 1 and Figure 2 As shown, the present invention is a cross-enterprise application sharing method based on dual authority authentication of enterprise and application, comprising the following steps:

[0069] Step 1: Acquisition of feature information

[0070] Obtain enterprise characteristic information and application characteristic information participating in application resource sharing;

[0071] Enterprise characteristic information includes:

[0072] The receiving enterprise information of the application sharing recipient: including but not limited to the enterprise name, enterprise scale, and multiple characteristic parameters corresponding to the enterprise industry;

[0073] The enterprise information provided by the application sharing provider includes, but is not limited to, multiple characteristic parameter sets corresponding to the enterprise name set, enterprise scale set, and enterprise industry set;

[0074] Each characteristic parameter set contains a plurality of pre-set characteristic parameters, for example, the enterprise name set contains a plurality of corresponding enterprise names that are allowed to receive applications, the enterprise scale set contains a plurality of corresponding enterprise scale sets that are allowed to receive applications, and the enterprise industry set contains a plurality of corresponding enterprise industries that are allowed to receive applications;

[0075] The application sharing receiver refers to the party that receives the application content, functions or services shared by other parties in the application sharing scenario; the application sharing provider refers to the party that provides its own application resources to other parties for use in the application sharing scenario;

[0076] Application feature information includes:

[0077] Received application information of the application sharing recipient: including but not limited to multiple attribute parameters corresponding to the application name, application function, and application type;

[0078] Application information provided by the application sharing provider: including but not limited to multiple attribute parameter sets corresponding to the application name set, application function set, and application type set;

[0079] Each attribute parameter set contains a plurality of preset attribute parameters, for example, the application name set contains a plurality of application names corresponding to the applications allowed to be received, the application function set contains a plurality of application function sets corresponding to the applications allowed to be received, and the application type set contains a plurality of application types corresponding to the applications allowed to be received;

[0080] Step 2: Two-factor authentication

[0081] Step A: Enterprise authority authentication

[0082] When the application sharing recipient initiates an application sharing request to the application sharing provider, the application sharing provider performs enterprise authority authentication on the application sharing recipient based on the receiving enterprise information of the application sharing recipient;

[0083] The permission authentication method is as follows:

[0084] StepA.1. The application sharing provider obtains the receiving enterprise information of the application sharing recipient;

[0085] Then, multiple characteristic parameters in the received enterprise information are marked as N i , i=[1, 2, ...n], n represents the number of all feature parameters;

[0086] In this embodiment, N1 may refer to the enterprise name, N2 may refer to the enterprise scale, and N3 may refer to the enterprise industry;

[0087] Step A.2: Mark multiple feature parameters in multiple feature parameter sets corresponding to the application sharing provider as Fi,j ; j = [1, 2, ... m], m represents the number of feature parameters in the feature parameter set corresponding to the i-th feature parameter, and i and j both represent the number;

[0088] In this embodiment, F 1,j It can refer to the first or second company name in the company name collection, F 2,j It can refer to the scale of the enterprise in the enterprise scale concentration, F 3,j It can refer to the size of the enterprise in the enterprise industry concentration;

[0089] That is F i,j =[F i,1 ,F i,2 ,……F i,m ];

[0090] StepA.3, let the value of i be 1, 2, ... n in sequence;

[0091] Then N i With F i,j match:

[0092] If in N i ∈F i,j If all of them are established, the application sharing receiver meets the permission authentication of the application sharing provider, that is, the enterprise permission authentication is passed. Then, after the enterprise permission authentication is passed, the application sharing provider sends the enterprise permission authentication message to the application sharing receiver;

[0093] If N i ∈F i,j , if one of the items is not true, the application sharing receiver does not meet the enterprise authority authentication of the application sharing provider, that is, the enterprise authority authentication fails;

[0094] Step B: Application Permission Authentication

[0095] After the enterprise authority authentication is passed, the application authority authentication is carried out. The application sharing provider authenticates the application authority of the application sharing receiver based on the application information received by the application sharing receiver.

[0096] Step B.1. The application sharing provider obtains the receiving application information of the application sharing receiver;

[0097] Then, multiple attribute parameters in the received application information are marked as K r , r=[1, 2, …v], v represents the number of all attribute parameters;

[0098] In this embodiment, K1 may refer to the application name, K2 may refer to the application function, and K3 may refer to the application type;

[0099] Step B.2, mark multiple attribute parameters of multiple attribute parameter sets corresponding to the application sharing provider as H r,t , t=[1, 2, …, e], e represents the number of attribute parameters in the attribute parameter set corresponding to the rth attribute parameter;

[0100] In this embodiment, H 1,t It can refer to the number of application names in the application name set, H 2,t It can refer to the application function in the application function set, H 3,t It can refer to the application type in the application type set;

[0101] That is H r,t =[H r,1 ,H r,2 ,……H r,e ];

[0102] Step B.3, let the value of r be 1, 2, ..., v in sequence;

[0103] Then K r With H r,t match:

[0104] If in K r ∈H r,t If all of them are established, the application sharing receiver meets the permission authentication of the application sharing provider, that is, the application permission authentication is passed. Then, after the application permission authentication is passed, the application sharing provider sends an application permission authentication message to the application sharing receiver;

[0105] If K r ∈H r,t , if one of the items is not true, the application sharing receiver does not meet the application permission authentication of the application sharing provider, that is, the application permission authentication fails;

[0106] Step 3: Application Sharing

[0107] After the enterprise and the application pass dual authority authentication, the application sharing recipient receives the application resources shared by the application sharing provider;

[0108] In this embodiment, after the enterprise and the application pass dual authority authentication, the application sharing receiver receives multiple application resources that can be shared from the application sharing provider;

[0109] The multiple sharable application resources are set by the application sharing provider according to the application sharing receiver.

[0110] This embodiment uses the dual mechanisms of enterprise authority authentication and application authority authentication to ensure that only recipients that meet specific enterprise characteristics and application requirements can obtain application sharing; this greatly reduces the risk of unauthorized enterprise or inappropriate application access and improves the security of application sharing; clear authority authentication processes and standards make enterprise management in the application sharing process more standardized and efficient; enterprises can easily monitor and manage application sharing to ensure the rational use and security of application resources; the automated authority authentication process reduces manual intervention, reduces management costs and error rates, and improves the operational efficiency and management level of the enterprise; providers can accurately select enterprises and applications that are allowed to receive applications based on their own business needs and security policies, thereby improving the efficiency and value of application sharing; recipients can initiate application sharing requests to appropriate providers based on their own enterprise characteristics and application requirements, thereby obtaining application resources that best meet their own needs and improving the business capabilities and competitiveness of the enterprise; the cross-enterprise application sharing method breaks down information barriers between enterprises and promotes cooperation and communication between enterprises; different enterprises can achieve complementary advantages through sharing application resources and jointly promote the development and innovation of the industry. Example

[0111] As the second embodiment of the present invention, when the present application is implemented, compared with the first embodiment, the technical solution of the present embodiment is different from that of the first embodiment only in that,

[0112] The application resources shared by the application sharing provider to the application sharing recipient are also verified, and the specific method is as follows:

[0113] The first step is to obtain the basic data of application resources before transmission in the application sharing provider;

[0114] Then, in the application sharing receiver, basic data of the application resources after the transmission is obtained;

[0115] The basic data includes, but is not limited to, the data size of the application resource, the creation time, and the quantitative characteristic values ​​of multiple attributes corresponding to the data hash value;

[0116] A data hash value refers to a fixed-length value obtained by calculating an application resource using a hash algorithm;

[0117] In this embodiment, the data size of the application resource is in bytes. If the data size of an application resource is 20480 Bytes, its quantized feature value is 20480;

[0118] The creation time of an application resource is expressed in year, month, day, hour, and minute. If the creation time of an application resource is 13:55 on August 12, 2004, its quantitative characteristic value is 20048121355.

[0119] The second step is to extract the quantitative feature values ​​of multiple attributes from the basic data of the application resources before transmission and mark them as U g , g = 1, 2, ... s, s represents the number of multiple attributes of the basic data, U g Indicates the quantitative characteristic value of the attribute in the basic data corresponding to the application sharing provider;

[0120] In the basic data of the application resource after transmission, the quantitative feature values ​​of multiple attributes are extracted and marked as B g , g = 1, 2, ... s, s represents the number of multiple attributes of the basic data, B g Indicates the quantitative characteristic value of the attribute in the basic data corresponding to the application sharing receiver;

[0121] Step 3: Pass , calculate the verification coefficient P0 of the application resource;

[0122] Step 4: Determine the integrity of the application resources after transmission based on the verification coefficient P0;

[0123] If P0>0+β, it is determined that the application resources received by the application sharing receiver are incomplete, and the application sharing receiver then reacquires the relevant application resources from the sharing provider;

[0124] Wherein, β is a preset weighted value, which is the maximum value of the allowable error;

[0125] If P0≤0+β, it is determined that the application resources received by the application sharing receiver are complete, which means that the application sharing receiver does not need to reacquire the relevant application resources from the sharing provider.

[0126] This embodiment verifies the application resources shared by the application sharing provider with the application sharing recipient, ensuring the integrity of the application resources after transmission; if the application resources are determined to be incomplete, the application sharing recipient can reacquire the relevant application resources from the sharing provider, thereby ensuring the reliability of application sharing; by quantifying the characteristic values ​​of basic data and calculating the verification coefficient, a scientific and effective method for determining the integrity of application resources is provided. Example

[0127] As the third embodiment of the present invention, when the present application is specifically implemented, compared with the first and second embodiments, the technical solution of this embodiment is to combine the solutions of the first and second embodiments mentioned above for implementation.

[0128] This embodiment combines the advantages of embodiment one and embodiment two, and not only realizes dual authority authentication of the enterprise and the application, improving the security and management efficiency of application sharing, but also verifies the shared application resources to ensure the integrity and reliability of the application resources, further improving the quality and value of cross-enterprise application sharing.

[0129] The above formulas are all dimensionless and numerical calculations. The formula is a formula for the most recent real situation obtained by collecting a large amount of data and performing software simulation. The preset parameters and thresholds in the formula are set by technicians in this field according to actual conditions.

[0130] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art who is familiar with the present technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

Claims

1. A cross-enterprise application sharing method based on dual authority authentication between enterprise and application, characterized in that: The method comprises the following steps: Step 1: Acquisition of feature information Obtain enterprise characteristic information and application characteristic information participating in application resource sharing; Enterprise characteristic information includes: The receiving enterprise information of the application sharing recipient includes multiple characteristic parameters; The enterprise information provided by the application sharing provider includes a plurality of characteristic parameter sets corresponding to the plurality of characteristic parameters, and each characteristic parameter set contains a plurality of pre-set characteristic parameters; Application feature information includes: The receiving application information of the application sharing receiver includes multiple attribute parameters; The application information provided by the application sharing provider includes a plurality of attribute parameter sets corresponding to the plurality of attribute parameters, and each attribute parameter set contains a plurality of preset attribute parameters; Step 2: Two-factor authentication When the application sharing recipient initiates an application sharing request to the application sharing provider, the application sharing provider performs enterprise authority authentication on the application sharing recipient based on the receiving enterprise information of the application sharing recipient; then, after the enterprise authority authentication is passed, the application authority authentication is performed, and the application sharing provider performs application authority authentication on the application sharing recipient based on the receiving application information of the application sharing recipient; Step 3: Application Sharing After the enterprise and the application pass dual authority authentication, the application sharing recipient receives the application resources shared by the application sharing provider.

2. The cross-enterprise application sharing method based on enterprise and application dual authority authentication according to claim 1 is characterized in that: The enterprise authority authentication method is as follows: StepA.

1. The application sharing provider obtains the receiving enterprise information of the application sharing receiver; Then, multiple characteristic parameters in the received enterprise information are marked as N i , i=[1, 2, ...n], n represents the number of all feature parameters; Step A.2: Mark multiple feature parameters in multiple feature parameter sets corresponding to the application sharing provider as F i,j ; j = [1, 2, ... m], m represents the number of feature parameters in the feature parameter set corresponding to the i-th feature parameter, and i and j both represent the number; That is F i,j =[F i,1 ,F i,2 ,……F i,m ]; StepA.3, let the value of i be 1, 2, ... n in turn; Then N i With F i,j match: If in N i ∈F i,j If all of them are established, the application sharing recipient meets the permission authentication of the application sharing provider, that is, the enterprise permission authentication is passed.

3. The cross-enterprise application sharing method based on enterprise and application dual authority authentication according to claim 2 is characterized in that: In Step A.3, if N i ∈F i,j , if one of the items is not true, the application sharing recipient does not meet the enterprise authority authentication of the application sharing provider, that is, the enterprise authority authentication fails.

4. The cross-enterprise application sharing method based on enterprise and application dual authority authentication according to claim 1 is characterized in that: The application permission authentication method is as follows: Step B.

1. The application sharing provider obtains the receiving application information of the application sharing receiver; Then, multiple attribute parameters in the received application information are marked as K r , r=[1, 2, …v], v represents the number of all attribute parameters; Step B.2, mark multiple attribute parameters of multiple attribute parameter sets corresponding to the application sharing provider as H r,t , t=[1, 2, …, e], e represents the number of attribute parameters in the attribute parameter set corresponding to the rth attribute parameter; That is H r,t =[H r,1 ,H r,2 ,……H r,e ]; Step B.3, let the value of r be 1, 2, ..., v in sequence; Then K r With H r,t match: If in K r ∈H r,t If all of them are established, the application sharing recipient meets the permission authentication of the application sharing provider, that is, the application permission authentication is passed.

5. The cross-enterprise application sharing method based on enterprise and application dual authority authentication according to claim 4 is characterized in that: In Step B.3, if K r ∈H r,t , if one of the items is not true, the application sharing receiver does not meet the application permission authentication of the application sharing provider, that is, the application permission authentication fails.

6. The cross-enterprise application sharing method based on enterprise and application dual authority authentication according to claim 1 is characterized in that: in, An application sharing receiver refers to a party that receives application content, functions or services shared by other parties in an application sharing scenario; an application sharing provider refers to a party that provides its own application resources to other parties for use in an application sharing scenario.

7. The cross-enterprise application sharing method based on enterprise and application dual authority authentication according to claim 1 is characterized in that: The method also verifies the application resources shared by the application sharing provider to the application sharing receiver, and determines the integrity of the relevant application resources reacquired by the application sharing receiver from the sharing provider according to the verification result.

8. The cross-enterprise application sharing method based on enterprise and application dual authority authentication according to claim 7 is characterized in that: Verification is handled as follows: The first step is to obtain the basic data of application resources before transmission in the application sharing provider; Then, in the application sharing receiver, basic data of the application resources after transmission is obtained, wherein the basic data includes quantitative characteristic values ​​of multiple attributes; The second step is to extract the quantitative feature values ​​of multiple attributes from the basic data of the application resources before transmission and mark them as U g , g = 1, 2, ... s, s represents the number of multiple attributes of the basic data; In the basic data of the application resource after transmission, the quantitative feature values ​​of multiple attributes are extracted and marked as B g , g = 1, 2, ... s, s represents the number of multiple attributes of the basic data; Step 3: Pass , calculate the verification coefficient P0 of the application resource; Step 4: Determine the integrity of the application resources after transmission based on the verification coefficient P0; If P0>0+β, it is determined that the application resources received by the application sharing receiver are incomplete, and the application sharing receiver then reacquires the relevant application resources from the sharing provider; otherwise, it is determined that the application resources received by the application sharing receiver are complete; wherein β is a preset weighted value, and β is a positive number.

Citation Information

Patent Citations

  • Informatization application cluster platform of small and medium enterprises

    CN102324074A

  • Unified authentication method and device based on enterprise service gateway

    CN117240533A