Object authorization method and system, storage medium and terminal equipment

Abstract

The embodiment of the invention discloses an object authorization method and system, a storage medium and terminal equipment, and is applied to the technical field of communication. After a to-be-authorized party terminal initiates an authorization request, if an authorized user accepts the authorization request, displaying an identity authentication entrance of the authorized user, responding to a triggering operation on the identity authentication entrance, displaying an identity authentication interface of the authorized user based on a target object, and sending the identity authentication interface to the to-be-authorized party terminal; and if the identity authentication interface verifies that the authorized user has the authorization authority for the target object, generating an authorization certificate of the to-be-authorized user based on the target object, and returning the authorization certificate to the to-be-authorized party terminal. The target object is automatically authorized to the to-be-authorized user through triggering of the authorization request, and the security of authorizing the target object to the to-be-authorized user by the authorized user is ensured through verification of the identity authentication interface.

Description

Technical Field

[0001] The present invention relates to the field of communication technology, and in particular to an object authorization method, system, storage medium and terminal equipment. Background Art

[0002] The brand owner is a legal person who owns the brand and has been professionally certified by the trademark department. Generally, the brand owner can authorize the brand to other users. In the prior art, authorization is mainly provided through document mode, and the authenticity of the authorization is verified by the brand owner's certification seal stamped in the document, thereby preventing malicious users from using unauthorized brands by impersonating fake documents.

[0003] However, when brand authorization is performed according to the existing authorization method, there may be situations where non-brand owners falsely authorize users, or users who have not obtained brand authorization forge authorization documents, which will cause certain losses to the brand owner or the user who has obtained brand authorization. Summary of the invention

[0004] The embodiment of the present invention provides an object authorization method, system, storage medium and terminal device, which realize automatic object authorization to ensure the security of object authorization.

[0005] An embodiment of the present invention provides an object authorization method, including:

[0006] Receiving an authorization request sent by a terminal of a party to be authorized, wherein the authorization request is used to request an authorized user to authorize a target object to a user to be authorized;

[0007] If the authorized user accepts the authorization request, displaying the identity authentication entrance of the authorized user;

[0008] In response to a triggering operation on the identity authentication portal, displaying an identity authentication interface of the authorized user based on the target object;

[0009] If it is verified through the identity authentication interface that the authorized user has authorization authority for the target object, an authorization certificate based on the target object is generated for the user to be authorized, and the authorization certificate is returned to the terminal of the party to be authorized.

[0010] Another aspect of the present invention provides an object authorization method, including:

[0011] Displaying an object authorization interface, wherein the object authorization interface includes an authorization control;

[0012] In response to a triggering operation on the authorization control, a user selection interface is displayed, and an authorized user who authorizes the target object is selected from the user selection interface;

[0013] Sending an authorization request to the authorized party terminal corresponding to the authorized user, wherein the authorization request is used to request the authorized user to authorize the target object to the user to be authorized;

[0014] If the authorized user accepts the authorization request and verifies that the authorized user has authorization authority for the target object, the authorization certificate of the user to be authorized based on the target object returned by the authorized party terminal is received.

[0015] Another aspect of the present invention provides an object authorization system, including:

[0016] A request receiving unit, used to receive an authorization request sent by a terminal of a party to be authorized, wherein the authorization request is used to request the authorized user to authorize a target object to the user to be authorized;

[0017] An authentication entry unit, configured to display an identity authentication entry of the authorized user if the authorized user accepts the authorization request;

[0018] An authentication unit, configured to display an identity authentication interface of the authorized user based on the target object in response to a triggering operation on the identity authentication entry;

[0019] The authorization unit is used to generate an authorization certificate for the user to be authorized based on the target object if it is verified through the identity authentication interface that the authorized user has the authorization authority for the target object, and return the authorization certificate to the terminal of the party to be authorized.

[0020] Another aspect of the present invention provides an object authorization system, including:

[0021] An authorization interface unit, used to display an object authorization interface, wherein the object authorization interface includes an authorization control;

[0022] A user selection unit, configured to display a user selection interface in response to a trigger operation on the authorization control, and select an authorized user who authorizes the target object from the user selection interface;

[0023] A request sending unit, used to send an authorization request to the authorized party terminal corresponding to the authorized user, wherein the authorization request is used to request the authorized user to authorize the target object to the user to be authorized;

[0024] The credential receiving unit is used to receive the authorization credential of the user to be authorized based on the target object returned by the authorized party terminal if the authorized user accepts the authorization request and verifies that the authorized user has authorization authority for the target object.

[0025] Another aspect of the embodiment of the present invention further provides a computer-readable storage medium, wherein the computer-readable storage medium stores a plurality of computer programs, wherein the computer programs are suitable for being loaded by a processor and executing the object authorization method as described in one aspect or another aspect of the embodiment of the present invention.

[0026] Another aspect of the embodiment of the present invention further provides a terminal device, including a processor and a memory;

[0027] The memory is used to store multiple computer programs, and the computer programs are used to be loaded by the processor and execute the object authorization method described in one aspect or another aspect of the embodiment of the present invention; the processor is used to implement each computer program in the multiple computer programs.

[0028] It can be seen that in the method of this embodiment, after the terminal of the party to be authorized initiates an authorization request, if the authorized user accepts the authorization request, the identity authentication entrance of the authorized user is displayed, and in response to the triggering operation of the identity authentication entrance, the identity authentication interface of the authorized user based on the target object is displayed. If the authorized user is verified to have authorization authority for the target object through the identity authentication interface, an authorization certificate of the user to be authorized based on the target object is generated and returned to the terminal of the party to be authorized. The authorization of the target object to the user to be authorized is automatically triggered by the authorization request, and the security of the authorized user authorizing the target object to the user to be authorized is guaranteed through the verification of the identity authentication interface. BRIEF DESCRIPTION OF THE DRAWINGS

[0029] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative labor.

[0030] Figure 1 is a schematic diagram of an object authorization method provided by an embodiment of the present invention;

[0031] Figure 2 is a flow chart of an object authorization method performed by an authorized party terminal provided in an embodiment of the present invention;

[0032] Figure 3 is a flow chart of an object authorization method performed by a terminal to be authorized provided in an embodiment of the present invention;

[0033] Figure 4a It is a flow chart of a method for authorizing a target brand provided by an application example of the present invention;

[0034] Figure 4bIt is a signaling flow chart for authorizing a target brand provided by an application embodiment of the present invention;

[0035] Figure 5a It is a schematic diagram of a brand details interface displayed on a terminal to be authorized in an application embodiment of the present invention;

[0036] Figure 5b It is a schematic diagram displayed on the terminal of the authorized party in an application embodiment of the present invention;

[0037] Figure 5c is a schematic diagram of a confirmation interface before identity authentication in an application embodiment of the present invention;

[0038] Figure 5d is a schematic diagram of a selection interface for selecting a brand in an application embodiment of the present invention;

[0039] Figure 6 is a schematic diagram of a distributed system to which an object authorization method in another application embodiment of the present invention is applied;

[0040] Figure 7 is a schematic diagram of a block structure in another application embodiment of the present invention;

[0041] Figure 8 It is a logical structure diagram of an object authorization system provided by an embodiment of the present invention;

[0042] Fig. 9 is a schematic diagram of the logical structure of another object authorization system provided by an embodiment of the present invention;

[0043] Fig.10 It is a schematic diagram of the logical structure of a terminal device provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0044] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0045] The terms "first", "second", "third", "fourth", etc. (if any) in the specification and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchangeable where appropriate, so that the embodiments of the present invention described herein can, for example, be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units that are clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0046] The embodiment of the present invention provides an object authorization method, which is mainly used in the process of an object owner authorizing other users to use the object. After the object is authorized, the authorized user can use the object. Specifically, Figure 1 As shown, for the user to be authorized, the object authorization can be implemented by operating the terminal 10 of the party to be authorized and following the following method:

[0047] An object authorization interface is displayed, wherein the object authorization interface includes an authorization control; in response to a trigger operation on the authorization control, a user selection interface is displayed, and an authorized user who authorizes the target object is selected from the user selection interface; an authorization request is sent to an authorized party terminal 11 corresponding to the authorized user, wherein the authorization request is used to request the authorized user to authorize the target object to the user to be authorized; if the authorized user accepts the authorization request and verifies that the authorized user has authorization authority for the target object, an authorization certificate of the user to be authorized based on the target object is received from the authorized party terminal 11.

[0048] For the object owner, i.e. the authorized user, the object authorization can be realized by operating the authorized party terminal 11 in the following manner:

[0049] Receive an authorization request sent by the terminal 10 of the party to be authorized, the authorization request is used to request the authorized user to authorize the target object to the user to be authorized; if the authorized user accepts the authorization request, display the identity authentication entrance of the authorized user; in response to the triggering operation of the identity authentication entrance, display the identity authentication interface of the authorized user based on the target object; if it is verified through the identity authentication interface that the authorized user has authorization authority for the target object, generate an authorization certificate for the user to be authorized based on the target object, and return the authorization certificate to the terminal 10 of the party to be authorized.

[0050] In a specific application, the terminal 10 of the party to be authorized and the terminal 11 of the party to be authorized can be separate applications loaded in any electronic device, or small programs under the main application, or a browser that displays the authorization interface, etc., where the electronic device can be but is not limited to any of the following forms of devices: mobile phones, desktop computers, tablet computers, notebooks, smart terminals, etc.

[0051] In the embodiment of the present invention, the authorization of the target object to the user to be authorized is automatically performed through the authorization request trigger, and the security of the authorized user authorizing the target object to the user to be authorized is ensured through the verification of the identity authentication interface.

[0052] An embodiment of the present invention provides an object authorization method, which is mainly a method executed by an authorized party terminal used by an authorized user. The flow chart is as follows: Figure 2 As shown, including:

[0053] Step 101: receiving an authorization request sent by a terminal of a party to be authorized, wherein the authorization request is used to request an authorized user to authorize a target object to a user to be authorized.

[0054] It can be understood that in this embodiment, the user to be authorized can operate the terminal to be authorized and initiate an authorization request through the terminal to be authorized. Specifically, the terminal to be authorized can display an object authorization interface, which includes an authorization control. When the user to be authorized triggers the authorization control, the terminal to be authorized responds to the triggering operation of the authorization control and selects any authorized user to send an authorization request to the corresponding authorized terminal.

[0055] The authorization request here can specifically be an instant messaging message during the instant messaging process between the user to be authorized and the authorized user, or a specific message sent directly to the authorized party's terminal, such as a push message or a subscription message. The specific form of the authorization request is not limited here.

[0056] In some cases, the user to be authorized can specifically specify the target object to be authorized when initiating the authorization request. In this way, the authorization request can include the information of the authorized user and the relevant information of the target object to be authorized, such as the information of the user to which the target object belongs, the attribute information of the target object, etc. In other cases, the user to be authorized does not specifically specify a target object when initiating the authorization request. In this way, the authorization request may not include any information of the target object, but only includes the information of the authorized user.

[0057] Among them, the target object can be anything, such as a trademark, brand, etc. that can be authorized. In general, the authorized user is the owner of the target object, the authorized party terminal is the terminal used by the authorized user, and the user to be authorized is the user who needs to obtain authorization for the target object, and the authorized party terminal is the terminal used by the user to be authorized.

[0058] It should be noted that when the user to be authorized and the authorized user are friends of each other, the initiation of the authorization request will add a layer of security guarantee. Then, when the authorized party terminal receives the authorization request, it can first determine whether the user to be authorized corresponding to the terminal to be authorized that sends the authorization request and the authorized user are interactive friends. If so, continue with the following steps 102 to 104; otherwise, end the process, or it can be prompted that the authorization request is sent to a non-friend user, and it is up to the authorized user to decide whether to receive the authorization request.

[0059] Step 102: If the authorized user accepts the authorization request, the identity authentication entrance of the authorized user is displayed.

[0060] Specifically, after the authorized party terminal receives the authorization request, an acceptance control of the authorization request may be displayed, and the authorized user may trigger the acceptance control. In response to the triggering operation of the acceptance control, the authorized party terminal may trigger the process of steps 102 to 104 .

[0061] Furthermore, if the authorized user ignores the authorization request, the process from steps 102 to 104 will not be triggered; or the authorized party terminal can display a rejection control while displaying the above-mentioned acceptance control. The authorized user can end the process by triggering the rejection control, and the process from steps 102 to 104 will not be triggered.

[0062] In a specific embodiment, the identity authentication entry is an interface for entering the identity authentication process of the authorized user based on the target object, and can be displayed in various forms, such as a QR code, a web link, or other program links, etc., and its form is not limited here.

[0063] Step 103: In response to the triggering operation on the identity authentication portal, an identity authentication interface for the authorized user based on the target object is displayed.

[0064] Specifically, when the authorized party terminal displays the identity authentication interface, in one case, the information of the authorized user can be collected through the identity authentication interface displayed by the current program, and sent to the identity authentication program in real time. The identity authentication program matches the received information of the authorized user with the information stored in the system. If it is consistent with the information stored in the system, the verification is passed, otherwise it fails to pass the verification, and then the identity authentication program returns the verification result (i.e., whether the verification is passed) to the current program to continue the subsequent process. The current program here is the program that initiates and executes the object authorization process in this embodiment, and the identity authentication program is mainly used to verify the real identity of the authorized user and the authenticity of the target object belonging to the authorized user, such as an electronic certificate program.

[0065] Among them, if the authorization request does not include any target object information, the identity authentication program can determine whether the currently collected authorized user information is consistent with the real user information stored in the system, such as determining whether the face of the authorized user is consistent with the real user face stored in the system. If not, the verification fails; if consistent, continue to determine whether there is an associated object under the real user in the system. If so, take the associated object as the target object, and the authorized user has authorization authority for the target object, and the verification passes, otherwise the verification fails.

[0066] Among them, judging whether the currently collected information of the authorized user is consistent with the stored real user information is mainly to verify the real identity of the authorized user. However, if the currently collected information of the authorized user is consistent with the information of a real user, the security of the verification cannot be fully guaranteed. The currently collected information of the authorized user may be video information used by malicious users. Therefore, it is necessary to further verify whether the authorized user is a live user based on the currently collected information of the authorized user. For example, the authorized user is prompted to perform certain actions through the above-mentioned identity authentication interface, and then the action information performed by the authorized user is collected, and it is judged whether the collected action information is consistent with the information prompted in the identity authentication interface to determine whether the authorized user is a live user. If it is a live user, it will continue to determine whether there is a related object under the real user in the system. If it is not a live user, it fails the verification.

[0067] If the authorization request includes the information of the target object, the identity authentication program can determine whether the information of the authorized user currently collected is consistent with the real user information stored in the system. If not, the verification fails. If they are consistent, continue to determine whether the objects associated with the real user (i.e., the authorized user) in the system include the above-mentioned target object. If so, the authorized user has authorization authority for the target object and the verification passes. Otherwise, the verification fails.

[0068] In another case, you can jump directly from the current program to the identity authentication program, and the identity authentication program will display the identity authentication interface. The information of the authorized user will be collected from the identity authentication interface, and the received authorized user information will be matched with the information stored in the system. If it is consistent with the information stored in the system, the verification is successful, otherwise it fails. The identity authentication program can then directly display the verification result (i.e., whether the verification is successful), jump back to the current program, and notify the current program of the verification result to continue the subsequent process.

[0069] Step 104: if the authorized user is verified to have authorization authority for the target object through the identity authentication interface, an authorization certificate based on the target object is generated for the user to be authorized, and the authorization certificate is returned to the terminal of the party to be authorized.

[0070] Specifically, when generating an authorization certificate, the authorized party terminal can generate an authorization certificate based on the content requested by the authorization request. If the authorization request includes information about the target object, the authorized party terminal can directly generate an authorization certificate that authorizes the target object to the user to be authorized. This authorization can be in the form of exclusive authorization or shared authorization.

[0071] If the authorization request does not include any object information, since the authorized user may be associated with multiple objects, the authorized party terminal can first display an authorization selection interface, which includes a selection control for selecting a target object from the objects associated with the authorized user. In this way, the authorized user can select an object through the selection control, and the authorized party terminal will use the object selected through the selection control as the target object and generate an authorization certificate to authorize the target object to the user to be authorized.

[0072] It should be noted that, in a specific embodiment, the authorized terminal can authorize a target object to a user to be authorized based on an initiated authorization request; it can also authorize multiple target objects to a user to be authorized in batches based on an authorization request, such as generating an authorization certificate for each target object, or generating an authorization certificate for multiple target objects, without the need for the user to be authorized to initiate multiple authorization requests, thereby simplifying the authorization process.

[0073] In order to authorize multiple target objects to a user to be authorized in batches, the authorization request initiated by the terminal to be authorized may indicate that the number of target objects to be authorized is multiple, and the information of some or all of the target objects among the multiple target objects may also be indicated in the authorization request. In this way, after receiving the authorization request, if the authorization request includes information corresponding to n target objects respectively, and the number of target objects to be authorized is m, when m is greater than n, the terminal of the authorized party may first display the above-mentioned authorization selection interface when generating the authorization certificate, and select (mn) objects from the objects associated with the authorized user through the selection control in the authorization selection interface, and then generate the authorization certificate according to the information of the selected mn objects and the information corresponding to the n target objects respectively included in the above-mentioned authorization request.

[0074] The authorization certificate can be any form of certificate, such as electronic pictures, electronic files and other information.

[0075] Furthermore, in order to prevent malicious users from maliciously tampering with or forging the authorization certificate after the authorization certificate is generated, the data generated by the above object authorization process can be stored in the blockchain system. Specifically, the authorized party terminal can first obtain the data generated when executing the steps of generating the authorization certificate and returning the authorization certificate to the authorized party terminal (i.e. executing the above step 104), or obtain the data generated during the execution of the above steps 101 to 104, and then generate a transaction based on the obtained data, and store the transaction on the blockchain.

[0076] The data generated by the authorized party terminal in executing the above steps 101 to 104 may include: generated authorization credentials, verification results after verification through the identity authentication interface, and other data.

[0077] Specifically, the acquired data can be hashed to a unique hash value, a transaction is generated based on the hash value and the current timestamp, and then the transaction is added to the blockchain to form a new block. Since each block in the blockchain contains the hash value of the previous block, if the data in the blockchain is tampered with, it is necessary to modify the hash value of the block and all subsequent blocks, which is difficult, making the blockchain an immutable chain.

[0078] It should also be noted that the above steps 101 to 104 are the process of automatically generating and returning the corresponding authorization certificate by the authorized party terminal after the authorized user initiates the authorization request. In the actual application process, the authorized user needs to pay a certain fee to the authorized user, so that the authorized user will authorize the target object to the authorized user. Therefore, in a specific embodiment, during the above object authorization process, the process of payment for the authorization of the target object will be triggered, specifically:

[0079] Before generating the authorization certificate, the authorized party terminal may also initiate a payment request to the terminal of the party to be authorized. The payment request is used to request the user to be authorized to pay a certain fee for the above authorization certificate. If the terminal of the party to be authorized completes the payment according to the payment request, the authorized party terminal will execute this step 104, that is, generate an authorization certificate for the user to be authorized based on the target object.

[0080] It can be seen that in the method of this embodiment, after the terminal of the party to be authorized initiates an authorization request, if the authorized user accepts the authorization request, the identity authentication entrance of the authorized user is displayed, and in response to the triggering operation of the identity authentication entrance, the identity authentication interface of the authorized user based on the target object is displayed. If the authorized user is verified to have authorization authority for the target object through the identity authentication interface, an authorization certificate of the user to be authorized based on the target object is generated and returned to the terminal of the party to be authorized. The authorization of the target object to the user to be authorized is automatically triggered by the authorization request, and the security of the authorized user authorizing the target object to the user to be authorized is guaranteed through the verification of the identity authentication interface.

[0081] Another embodiment of the present invention provides an object authorization method, which is mainly a method executed by a terminal to be authorized used by a user to be authorized. The flow chart is as follows: Figure 3 As shown, including:

[0082] Step 201: display an object authorization interface, which includes an authorization control.

[0083] It can be understood that if the user to be authorized needs to obtain authorization for a certain object, he can operate the terminal to be authorized so that the terminal to be authorized displays the object authorization interface. The object authorization interface may include an authorization control, and the user can trigger the authorization control to initiate the authorization process of any object (ie, the target object).

[0084] Step 202: In response to a trigger operation on the authorization control, a user selection interface is displayed, and an authorized user who authorizes the target object is selected from the user selection interface.

[0085] Among them, the authorized user and the user to be authorized need to be friends with each other. When the user to be authorized initiates an authorization request and selects the authorized user, it can be implemented in a variety of ways. For example, the terminal of the party to be authorized can display the friend list of the user to be authorized on the user selection interface, so that any friend user can be selected from the friend list as the authorized user, and the following step 203 is performed for the authorized user. In this case, the friend list is mainly a friend list formed between users registered under the object authorization system, and is not a friend list formed by users in other systems (such as WeChat, etc.).

[0086] For another example, the terminal of the party to be authorized can display a sharing control on the user selection interface, so that when the user to be authorized triggers the sharing control, the terminal of the party to be authorized will provide a list of instant messaging programs, and when an instant messaging program is selected from the list of instant messaging programs, a friend list of the user to be authorized under the instant messaging program is displayed, so that any friend user can be selected as the authorized user, and the following step 203 is performed for the authorized user. In this case, the friend list is mainly a friend list formed between users registered under the instant messaging system selected by the user (such as WeChat, Enterprise WeChat, etc.).

[0087] Step 203: Send an authorization request to the authorized party terminal corresponding to the authorized user. The authorization request is used to request the authorized user to authorize the target object to the user to be authorized.

[0088] In one case, when the terminal of the party to be authorized responds to the triggering operation of the above-mentioned authorization control, it can first display an authorization parameter setting interface, and the authorization parameter setting interface includes an object setting control. The user can set the information of the target object to be authorized through the object setting control, such as the name, owner name, etc., and can also set the number of target objects to be authorized and other information. After entering the information of the target object through the object setting control, when sending an authorization request, the information of the target object entered from the object setting control can be included in the authorization request, thereby requesting the authorized user to authorize a specific target object to the user to be authorized.

[0089] In another case, the above-mentioned object authorization interface can specifically be a details interface of the target object, and the authorization control included in the details interface is the authorization control of the target object. In this way, the authorization request initiated by the authorization control directly includes the information of the target object, and the authorized user does not need to separately set the information of the target object that needs to be authorized.

[0090] In another case, when the authorized user initiates an authorization request without setting any parameters of the target object, when sending the authorization request, no information of the target object will be included in the authorization request, so the authorized terminal will select an object associated with the authorized user for authorization.

[0091] Further, after the authorized party terminal receives the authorization request, the authorized party terminal authorizes the target object in a method specifically described in the above embodiment, which will not be described in detail here.

[0092] Step 204: If the authorized user accepts the authorization request and verifies that the authorized user has authorization authority for the target object, the authorization certificate of the user to be authorized based on the target object returned by the authorized party terminal is received.

[0093] It should also be noted that the above steps 201 to 204 are the process of the user to be authorized directly initiating an authorization request and automatically receiving the corresponding authorization certificate. In the actual application process, the user to be authorized needs to pay a certain fee to the authorized user, so that the authorized user will authorize the target object to the user to be authorized. Therefore, in a specific embodiment, during the above object authorization process, the process of payment for the authorization of the target object will be triggered, specifically:

[0094] The terminal of the party to be authorized receives a payment request initiated by the terminal of the authorized party. The payment request is used to request the user to be authorized to pay a certain fee for the authorization voucher to be generated. After the terminal of the party to be authorized completes the payment according to the payment request and sends the payment success information to the terminal of the authorized party, the terminal will receive the authorization voucher of the user to be authorized based on the target object returned by the terminal of the authorized party.

[0095] It can be seen that in this embodiment, the user to be authorized initiates an authorization request at the terminal to be authorized and sends it to the terminal to be authorized, so that the authorized user is triggered by the authorization request to automatically authorize the target object to the user to be authorized, and the security of the authorized user authorizing the target object to the user to be authorized is guaranteed during the authorization process.

[0096] The object authorization method of the present invention is described below with a specific application example. In this embodiment, the object to be authorized is specifically the target brand, the user to be authorized is user 1 who needs to authorize the brand, and the authorized user is the brand owner. Figure 4a and Figure 4b As shown, the authorization process for the target brand in this embodiment may include the following steps:

[0097] Step 301 , user 1 operates the terminal of the party to be authorized so that the terminal of the party to be authorized displays an object authorization interface. In this embodiment, it may be a detail interface of a target brand, and the detail interface includes an authorization control.

[0098] For example Figure 5a The authorization control included in the details interface of a certain brand shown is specifically a button of "Initiate Brand Authorization", and user 1 can click the button to initiate an authorization request.

[0099] Step 302, when user 1 triggers the authorization control, the terminal of the party to be authorized will display a user selection interface, which includes a sharing control. When user 1 triggers the sharing control, the terminal of the party to be authorized will display a list of instant messaging programs. When user 1 selects an instant messaging program from the list of instant messaging programs, the terminal of the party to be authorized will display a list of user 1's friends under the instant messaging program.

[0100] Step 303: When user 1 selects a friend user from the friend list as an authorized user, an authorization request is sent to the authorized party terminal corresponding to the authorized user, and the authorization request includes the target brand information and the like.

[0101] In this embodiment, the friend user selected by user 1 is specifically the owner of the target brand.

[0102] Step 304: After receiving the authorization request, the authorized party terminal displays an acceptance control for the authorization request. When the authorized user triggers the acceptance control, the authorized party terminal displays an identity authentication entry for the authorized user.

[0103] For example Figure 5b As shown, the acceptance control of the authorization request displayed on the authorized party terminal is specifically a prompt button "Your friend has sent a brand authorization request, please click to enter". The authorized user can click the prompt button, and the authorized party terminal will display the authorized user's identity authentication entrance.

[0104] In some specific embodiments, an authorization request can only be initiated or accepted by two friends, but cannot be forwarded. To ensure this, it can be implemented by but not limited to the following methods:

[0105] (1) When the terminal to be authorized sends an authorization request, it will carry the information of the user 1, such as nickname, avatar or logo, in the authorization request. When the terminal to be authorized receives the authorization request, it can determine whether the user 1 is a friend user of the authorized user based on the information of the user 1 carried in the authorization request, thereby ensuring that the authorization request is sent and received between two friends.

[0106] (2) User 1 can only share the authorization request with user 1's friends through the sharing control of the terminal to be authorized, and cannot share it with other users.

[0107] (3) User 1 can subscribe to a specific message on the terminal of the party to be authorized. The specific message is a message that the corresponding terminal of the friend user of user 1 will return to the terminal of the authorized party after receiving the authorization request. In this way, when the authorized party terminal receives the above authorization request, it returns the specific message to the terminal of the party to be authorized. When the terminal of the party to be authorized receives the specific message, it means that the authorization request has been received by the friend user.

[0108] Step 305, the authorized user triggers the identity authentication entrance, and the authorized party terminal will display the authorized user's identity authentication interface based on the target brand. The authorized user verifies whether the authorized user has authorization authority for the target brand through the identity authentication interface. If the verification passes, the following step 306 is executed; if the verification fails, the process ends, and a verification failure message can also be sent to the terminal to be authorized.

[0109] Specifically, when the authorized user triggers the identity authentication entry, the authorized party terminal will jump from the current program to the identity authentication program, and the identity authentication program will collect the authorized user's information and determine whether the collected authorized user information is consistent with the real user information stored in the system. If they are consistent, it will continue to determine whether the brands owned by the real user include the target brand in the above authorization request. If they are included, it means that the authorized user has authorization authority for the target brand and the verification is passed. Otherwise, the verification fails. Finally, the identity authentication program will return the verification result to the current program for subsequent processes.

[0110] For example Figure 5c As shown, when the authorized user triggers the identity authentication entrance, the authorized terminal can display a confirmation interface, which prompts the user whether to enter the identity authentication program for identity authentication, and displays "Yes" and "No" selection buttons. If the authorized user clicks the "Yes" button, it will go to the identity authentication program to proceed.

[0111] In this embodiment, in order to ensure the communication security between the current program and the identity authentication program, the communication between the current program and the identity authentication program can be implemented using encryption algorithms such as Advanced Encryption Standard (AES), specifically:

[0112] Introduce the crypto-js library into the current program. The crypto-js library supports multiple encryption algorithms, including the AES algorithm. Generate a random key for encrypting and decrypting data, such as using the method CryptoJS.lib.WordArray.random in the crypto-js library to generate a random byte array, and then convert the byte array into a Base64 string as the key.

[0113] Then use the AES algorithm to encrypt the data. For example, you can use the CryptoJS.AES.encrypt method in the crypto-js library to encrypt. In this process, you need to pass in the data to be encrypted, the key, and some optional parameters, such as the encryption mode, the padding mode, etc. The encrypted data is also a Base64 string, which can be obtained through the toString method.

[0114] When decrypting data, use the AES algorithm to decrypt the encrypted data. You can use the method CryptoJS.AES.decrypt in the crypto-js library to decrypt. Specifically, you need to pass in the data to be decrypted, the key, and some optional parameters, such as the encryption mode, padding mode, etc. The decrypted data is a WordArray object, and the original data can be obtained through the toString method.

[0115] It should be noted that, in order to ensure the security of encryption, a secure random number generator can be used to generate a key. In addition, the encrypted data can also be Base64 encoded for transmission over the network.

[0116] Step 306: Generate an authorization certificate for user 1 based on the target brand, and return the authorization certificate to the terminal of the party to be authorized, where the authorization certificate can be viewed.

[0117] In this embodiment, in order to improve the credibility of the generated authorization certificate, the authorization certificate can be encrypted and decrypted using a public key + private key. Specifically:

[0118] First generate a pair of public and private keys, for example, use the crypto.generateKeyPairSync method in the crypto library to generate a pair of keys. Use the public key to encrypt the authorization credential, for example, use the crypto.publicEncrypt method in the crypto library to encrypt, and you need to pass in the authorization credential to be encrypted and the public key. If you need to use the authorization credential, use the private key to decrypt the encrypted authorization credential, for example, use the crypto.privateDecrypt method in the crypto library to decrypt, and you need to pass in the data to be decrypted, the private key, and some optional parameters, such as the private key encryption algorithm and password.

[0119] In order to protect the security of the private key, the private key is generally encrypted and a password is used to protect the private key.

[0120] Furthermore, after the terminal of the party to be authorized obtains the authorization credential, if other modules or programs need to call the authorization credential, the user 1 may first select the authorization credential received by the terminal of the party to be authorized and provide it to other modules or programs.

[0121] It should be noted that in the above embodiment, the authorization request initiated by user 1 directly carries the information of the target brand that needs to be authorized, so that the authorized party terminal will automatically authorize the target brand. In other embodiments, when user 1 initiates the authorization request, the authorization control is not triggered on the details interface of a certain brand, and the authorization request initiated by the authorization control does not carry any object information, so that after receiving the authorization request, the authorized party terminal can first display the authorization selection interface when generating the authorization certificate based on the target brand.

[0122] Specific as Figure 5d The authorization selection interface shown includes a list of entities and a list of brands associated with the authorized user for the authorized user to select, and buttons for "Cancel" and "Go to the next step". The entity list includes multiple organizations (such as companies, etc.) to which the brand belongs, and the brand list includes multiple brands. If the authorized user selects a brand under one of the entities and clicks the "Go to the next step" button, the authorized terminal will generate an authorization certificate based on the brand selected by the authorized user.

[0123] It can be seen that in the authorization process for the target brand in this embodiment:

[0124] 1. Prevent forgery of authorization credentials: When obtaining authorization credentials online, identity verification and other methods can be used to ensure that the identity of the authorized user is authentic and valid, preventing malicious users from forging authorization credentials, thereby improving the reliability of the authorization process

[0125] 2. Prevent tampering of authorization letters: When obtaining authorization credentials online, technologies such as digital signatures can be used to ensure the integrity and authenticity of the authorization credentials, prevent the authorization credentials from being tampered with or forged, and thus improve the security of the authorization process.

[0126] 3. Improve efficiency and convenience: Obtaining authorization credentials online can automate the authorization process, reducing manual operations and time consumption. At the same time, authorized users can authorize anytime and anywhere, improving the convenience and efficiency of authorization.

[0127] 4. Improve user experience: Obtaining authorization credentials online can provide a more friendly and intelligent authorization interface, making it easier for users to understand and operate the authorization process, thereby improving user satisfaction and experience.

[0128] The object authorization method in the present invention is illustrated below by another specific application example. The object authorization system in the embodiment of the present invention is mainly a distributed system 100, which may include a client 300 and multiple nodes 200 (any form of computing device in the access network, such as a server, a user terminal), and the client 300 and the node 200 are connected through network communication.

[0129] Take the distributed system as the blockchain system as an example, see Figure 6 This is an optional structural diagram of the distributed system 100 provided by the embodiment of the present invention applied to the blockchain system, which is formed by multiple nodes 200 (any form of computing devices in the access network, such as servers, user terminals) and clients 300, and a point-to-point protocol network is formed between the nodes. The point-to-point protocol is an application layer protocol running on the Transmission Control Protocol (TCP). In a distributed system, any machine such as a server or a terminal can join and become a node, and the node includes a hardware layer, an intermediate layer, an operating system layer, and an application layer.

[0130] See also Figure 6 The functions of each node in the blockchain system shown include:

[0131] 1) Routing: a basic function of a node, used to support communication between nodes.

[0132] In addition to the routing function, the node can also have the following functions:

[0133] 2) Applications, which are deployed in the blockchain to implement specific businesses according to actual business needs, record data related to the implementation of functions to form record data, carry digital signatures in the record data to indicate the source of the task data, and send the record data to other nodes in the blockchain system for other nodes to add the record data to the temporary block when they successfully verify the source and integrity of the record data.

[0134] For example, the business implemented by the application includes: code to implement the object authorization function, which mainly includes:

[0135] An authorization request is received from a terminal of a party to be authorized, wherein the authorization request is used to request an authorized user to authorize a target object to the user to be authorized; if the authorized user accepts the authorization request, an identity authentication entrance of the authorized user is displayed; in response to a triggering operation on the identity authentication entrance, an identity authentication interface of the authorized user based on the target object is displayed; if it is verified through the identity authentication interface that the authorized user has authorization authority for the target object, an authorization certificate of the user to be authorized based on the target object is generated, and the authorization certificate is returned to the terminal of the party to be authorized.

[0136] Alternatively, the object authorization functions mainly include:

[0137] An object authorization interface is displayed, wherein the object authorization interface includes an authorization control; in response to a trigger operation on the authorization control, a user selection interface is displayed, and an authorized user who authorizes the target object is selected from the user selection interface; an authorization request is sent to an authorized party terminal corresponding to the authorized user, wherein the authorization request is used to request the authorized user to authorize the target object to the user to be authorized; if the authorized user accepts the authorization request and verifies that the authorized user has authorization authority for the target object, an authorization credential of the user to be authorized based on the target object is received from the authorized party terminal.

[0138] 3) Blockchain, including a series of blocks that are connected to each other in the order of their generation. Once a new block is added to the blockchain, it will not be removed. The block records the record data submitted by the nodes in the blockchain system.

[0139] See also Figure 7 An optional schematic diagram of the block structure provided by the embodiment of the present invention, each block includes the hash value of the transaction record stored in this block (the hash value of this block) and the hash value of the previous block, and each block is connected by the hash value to form a blockchain. In addition, the block can also include information such as the timestamp when the block was generated. Blockchain is essentially a decentralized database, a string of data blocks generated by cryptographic methods, and each data block includes relevant information for verifying the validity of its information (anti-counterfeiting) and generating the next block.

[0140] The embodiment of the present invention further provides an object authorization system, such as the above-mentioned authorized party terminal, whose structural diagram is shown in FIG. Figure 8 As shown, it may specifically include:

[0141] The request receiving unit 20 is used to receive an authorization request sent by a terminal of a party to be authorized, wherein the authorization request is used to request the authorized user to authorize the target object to the user to be authorized.

[0142] The authentication entry unit 21 is used to display the identity authentication entry of the authorized user if the authorized user accepts the authorization request received by the request receiving unit 20.

[0143] The authentication unit 22 is used to display the identity authentication interface of the authorized user based on the target object in response to the triggering operation of the identity authentication entrance displayed by the authentication entrance unit 21.

[0144] The authorization unit 23 is used to generate an authorization certificate for the user to be authorized based on the target object if the authorized user has the authorization authority for the target object through the identity authentication interface displayed by the authentication unit 22, and return the authorization certificate to the terminal of the party to be authorized.

[0145] Wherein, the information of the authorized user is collected through the identity authentication interface; if the information of the authorized user is consistent with the stored real user information, and the authorization request includes the information of the target object, it is determined that the objects associated with the authorized user include the target object, and the authorized user has authorization authority for the target object. Further, if the information of the authorized user is consistent with the stored real user information, and the authorization request does not include the information of any object, it is determined that there is an object associated with the authorized user, and the associated object is used as the target object, and the authorized user has authorization authority for the target object.

[0146] The authorization unit 23 is also used to initiate a payment request to the terminal of the party to be authorized before generating the authorization certificate, and the payment request is used to request the user to be authorized to pay for the authorization certificate; if the terminal of the party to be authorized completes the payment according to the payment request, the step of generating the authorization certificate of the user to be authorized based on the target object is executed.

[0147] Specifically, when the authorization unit 23 generates the authorization certificate for the user to be authorized based on the target object, it is specifically used to display an authorization selection interface if the authorization request does not include information about the target object, and the authorization selection interface includes a selection control for selecting the target object from the objects associated with the authorized user; the object selected by the selection control is used as the target object, and an authorization certificate is generated to authorize the target object to the user to be authorized.

[0148] The authorization unit 23 is also used to display the authorization selection interface if the authorization request includes information corresponding to n target objects respectively and the number of target objects that need to be authorized is m, and m is greater than n, and select mn objects from the objects associated with the authorized user through the authorization control; and generate the authorization certificate according to the information of the mn objects and the information corresponding to the n target objects respectively.

[0149] Furthermore, the object authorization system of this embodiment may also include:

[0150] The blockchain unit 24 is used to obtain the data generated when the authorization unit 23 executes the steps of generating the authorization certificate and returning the authorization certificate to the terminal of the party to be authorized; generate a transaction based on the obtained data, and store the transaction on the blockchain.

[0151] It can be seen that in this embodiment, when the terminal of the party to be authorized initiates an authorization request, if the authorized user accepts the authorization request, the object authorization system of this embodiment will display the identity authentication entrance of the authorized user, and in response to the triggering operation of the identity authentication entrance, display the identity authentication interface of the authorized user based on the target object, and if the authorized user is verified to have authorization authority for the target object through the identity authentication interface, an authorization certificate of the user to be authorized based on the target object is generated and returned to the terminal of the party to be authorized. The authorization of the target object to the user to be authorized is automatically performed through the authorization request trigger, and the security of the authorized user authorizing the target object to the user to be authorized is guaranteed through the verification of the identity authentication interface.

[0152] The embodiment of the present invention further provides an object authorization system, such as the above-mentioned terminal to be authorized, and its structural diagram is as follows: Fig. 9 As shown, it may specifically include:

[0153] The authorization interface unit 30 is used to display an object authorization interface, in which the object authorization interface includes authorization controls.

[0154] The user selection unit 31 is used to display a user selection interface in response to a triggering operation on the authorization control displayed by the authorization interface unit 30, and select an authorized user who authorizes the target object from the user selection interface.

[0155] The request sending unit 32 is used to send an authorization request to the authorized party terminal corresponding to the authorized user selected by the user selecting unit 31, wherein the authorization request is used to request the authorized user to authorize the target object to the user to be authorized.

[0156] The credential receiving unit 33 is used to receive the authorization credential of the user to be authorized based on the target object returned by the authorized party terminal if the authorized user accepts the authorization request sent by the request sending unit 32 and verifies that the authorized user has authorization authority for the target object.

[0157] Furthermore, the object authorization unit of this embodiment also includes:

[0158] The parameter setting unit 34 is used to display an authorization parameter setting interface in response to a triggering operation on the authorization control, and the authorization parameter setting interface includes an object setting control; the information of the target object is input through the object setting control; and the request sending unit 32 is specifically used to send an authorization request to the authorized party terminal, and the authorization request includes the input target object information.

[0159] The payment unit 35 is used to receive a payment request initiated by the authorized party terminal, and the payment request is used to request the user to be authorized to pay the authorization certificate; after the payment is completed according to the payment request, the above-mentioned certificate receiving unit 33 will receive the authorization certificate of the user to be authorized based on the target object returned by the authorized party terminal.

[0160] The embodiment of the present invention further provides a terminal device, the structural diagram of which is shown in FIG. Fig.10 As shown, the terminal device may have relatively large differences due to different configurations or performances, and may include one or more central processing units (CPU) 40 (for example, one or more processors) and memory 41, and one or more storage media 42 (for example, one or more mass storage devices) storing application programs 421 or data 422. Among them, the memory 41 and the storage medium 42 can be short-term storage or permanent storage. The program stored in the storage medium 42 may include one or more modules (not shown in the figure), and each module may include a series of instruction operations in the terminal device. Furthermore, the central processing unit 40 can be configured to communicate with the storage medium 42 to execute a series of instruction operations in the storage medium 42 on the terminal device.

[0161] Specifically, the application 421 stored in the storage medium 42 includes an object-authorized application, and the program may include the request receiving unit 20, the authentication entry unit 21, the authentication unit 22, the authorization unit 23 and the blockchain unit 24 in the above-mentioned object authorization system, which will not be described in detail here. Furthermore, the central processor 40 can be configured to communicate with the storage medium 42 and execute a series of operations corresponding to the object-authorized application stored in the storage medium 42 on the terminal device.

[0162] The terminal device may also include one or more power supplies 43, one or more wired or wireless network interfaces 44, one or more input and output interfaces 45, and / or one or more operating systems 423, such as Windows Server TM, Mac OS X TM, Unix TM, Linux TM, FreeBSD TM, etc.

[0163] The steps performed by the authorized party terminal in the above method embodiment can be based on the Fig.10 The structure of the terminal device shown.

[0164] Furthermore, the embodiment of the present invention also provides another terminal device, the structure of which can be as described above. Fig.10 The terminal device shown in the figure is different in that, in the terminal device of this embodiment:

[0165] Specifically, the application stored in the storage medium includes an object-authorized application, and the program may include the authorization interface unit 30, the user selection unit 31, the request sending unit 32, the credential receiving unit 33, the parameter setting unit 34 and the payment unit 35 in the above-mentioned object authorization system, which are not described in detail here. Furthermore, the central processor can be configured to communicate with the storage medium and execute a series of operations corresponding to the object-authorized application stored in the storage medium on the terminal device. And the steps performed by the terminal to be authorized described in the above-mentioned method embodiment can be based on the structure of the terminal device.

[0166] Furthermore, another aspect of the embodiment of the present invention also provides a computer-readable storage medium, which stores multiple computer programs, and the computer programs are suitable for being loaded by a processor and executing the object authorization method executed by the authorized party terminal or the authorized party terminal respectively.

[0167] Another aspect of the embodiment of the present invention further provides a terminal device, including a processor and a memory;

[0168] The memory is used to store multiple computer programs, and the computer programs are used to be loaded by the processor and execute the object authorization method as respectively executed by the authorized party terminal or the authorized party terminal; the processor is used to implement each computer program in the multiple computer programs.

[0169] Further, according to one aspect of the present application, a computer program product or a computer program is provided, the computer program product or the computer program includes computer instructions, the computer instructions are stored in a computer-readable storage medium. A processor of a computer device reads the computer instructions from the computer-readable storage medium, and the processor executes the computer instructions, so that the computer device executes the object authorization method provided in the above various optional implementations.

[0170] A person skilled in the art may understand that all or part of the steps in the various methods of the above-mentioned embodiments may be completed by instructing the relevant hardware through a program, and the program may be stored in a computer-readable storage medium, and the storage medium may include: a read-only memory (ROM), a random access memory (RAM), a disk or an optical disk, etc.

[0171] The above is a detailed introduction to an object authorization method, system, storage medium and terminal device provided in an embodiment of the present invention. Specific examples are used in this article to illustrate the principles and implementation methods of the present invention. The description of the above embodiments is only used to help understand the method of the present invention and its core idea; at the same time, for general technical personnel in this field, according to the idea of ​​the present invention, there will be changes in the specific implementation method and application scope. In summary, the content of this specification should not be understood as a limitation on the present invention.

Claims

1. An object authorization method, characterized in that: include: Receiving an authorization request sent by a terminal of a party to be authorized, wherein the authorization request is used to request an authorized user to authorize a target object to a user to be authorized; If the authorized user accepts the authorization request, displaying the identity authentication entrance of the authorized user; In response to a triggering operation on the identity authentication portal, displaying an identity authentication interface of the authorized user based on the target object; If it is verified through the identity authentication interface that the authorized user has authorization authority for the target object, an authorization certificate based on the target object is generated for the user to be authorized, and the authorization certificate is returned to the terminal of the party to be authorized.

2. The method according to claim 1, characterized in that Verifying through the identity authentication interface that the authorized user has authorization authority for the target object specifically includes: Collecting the information of the authorized user through the identity authentication interface; If the information of the authorized user is consistent with the stored real user information, and the authorization request includes the information of the target object, and it is determined that the objects associated with the authorized user include the target object, then the authorized user has authorization authority for the target object.

3. The method according to claim 2, characterized in that The step of verifying through the identity authentication interface that the authorized user has authorization authority for the target object also includes: If the information of the authorized user is consistent with the stored real user information, and the authorization request does not include any object information, it is determined that the authorized user is associated with an object, and the associated object is used as the target object, then the authorized user has authorization authority for the target object.

4. The method according to any one of claims 1 to 3, characterized in that Before generating the authorization credential of the user to be authorized based on the target object, the method further includes: Initiating a payment request to the terminal of the party to be authorized, wherein the payment request is used to request the user to be authorized to pay for the authorization voucher; If the terminal of the party to be authorized completes the payment according to the payment request, the step of generating the authorization certificate of the user to be authorized based on the target object is performed.

5. The method according to any one of claims 1 to 3, characterized in that: The generating of the authorization credential of the user to be authorized based on the target object specifically includes: If the authorization request does not include the information of the target object, displaying an authorization selection interface, the authorization selection interface including a selection control for selecting the target object from objects associated with the authorized user; The object selected by the selection control is used as the target object, and an authorization credential is generated to authorize the target object to the user to be authorized.

6. The method according to claim 5, characterized in that If the authorization request includes information corresponding to n target objects respectively and the number of target objects to be authorized is m, where m is greater than n, the authorization request further includes: Display the authorization selection interface, and select mn objects from the objects associated with the authorized user through the authorization control; The authorization certificate is generated according to the information of the mn objects and the information corresponding to the n target objects.

7. The method according to any one of claims 1 to 3, characterized in that: The method further comprises: Acquire data generated when executing the steps of generating the authorization certificate and returning the authorization certificate to the terminal of the party to be authorized; A transaction is generated based on the acquired data, and the transaction is stored on the blockchain.

8. An object authorization method, characterized in that: include: Displaying an object authorization interface, wherein the object authorization interface includes an authorization control; In response to a triggering operation on the authorization control, a user selection interface is displayed, and an authorized user who authorizes the target object is selected from the user selection interface; Sending an authorization request to the authorized party terminal corresponding to the authorized user, wherein the authorization request is used to request the authorized user to authorize the target object to the user to be authorized; If the authorized user accepts the authorization request and verifies that the authorized user has authorization authority for the target object, the authorization certificate of the user to be authorized based on the target object returned by the authorized party terminal is received.

9. The method according to claim 8, characterized in that The response to the triggering operation of the authorization control further includes: Displaying an authorization parameter setting interface, wherein the authorization parameter setting interface includes an object setting control; Input the information of the target object through the object setting control; The sending of the authorization request to the authorized party terminal corresponding to the authorized user specifically includes: sending the authorization request to the authorized party terminal, wherein the authorization request includes the input target object information.

10. The method according to claim 8 or 9, characterized in that Before receiving the authorization certificate of the user to be authorized based on the target object returned by the authorized party terminal, the method further includes: Receiving a payment request initiated by the authorized party terminal, wherein the payment request is used to request the user to be authorized to pay for the authorization voucher; After completing the payment according to the payment request, receiving the authorization certificate of the user to be authorized based on the target object returned by the authorized party terminal.

11. An object authorization system, characterized in that: include: A request receiving unit, used to receive an authorization request sent by a terminal of a party to be authorized, wherein the authorization request is used to request the authorized user to authorize a target object to the user to be authorized; An authentication entry unit, configured to display an identity authentication entry of the authorized user if the authorized user accepts the authorization request; An authentication unit, configured to display an identity authentication interface of the authorized user based on the target object in response to a triggering operation on the identity authentication entry; The authorization unit is used to generate an authorization certificate for the user to be authorized based on the target object if it is verified through the identity authentication interface that the authorized user has the authorization authority for the target object, and return the authorization certificate to the terminal of the party to be authorized.

12. An object authorization system, characterized in that: include: An authorization interface unit, used to display an object authorization interface, wherein the object authorization interface includes an authorization control; A user selection unit, configured to display a user selection interface in response to a trigger operation on the authorization control, and select an authorized user who authorizes the target object from the user selection interface; A request sending unit, used to send an authorization request to the authorized party terminal corresponding to the authorized user, wherein the authorization request is used to request the authorized user to authorize the target object to the user to be authorized; The credential receiving unit is used to receive the authorization credential of the user to be authorized based on the target object returned by the authorized party terminal if the authorized user accepts the authorization request and verifies that the authorized user has authorization authority for the target object.

13. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a plurality of computer programs, and the computer programs are suitable for being loaded by a processor and executing the object authorization method according to any one of claims 1 to 10.

14. A terminal device, characterized in that: including a processor and a memory; The memory is used to store a plurality of computer programs, and the computer programs are used to be loaded by a processor and execute the object authorization method according to any one of claims 1 to 10; the processor is used to implement each computer program in the plurality of computer programs.

Images