Third-party authentication credit granting and interaction method and system based on authorization mechanism

Abstract

The invention discloses a third-party certification credit granting and interaction method and system based on an authorization mechanism, and belongs to the technical field of computer application, third-party certification credit granting is achieved through a unified credit granting platform, the unified credit granting platform comprises a service opening module and a security authorization and flow control module, and the service opening module is connected with the security authorization and flow control module. Opening service capability to a third party in a form of publishing a service interface and in a unified interface specification and data format; the security authorization and flow control module provides unified security authorization and flow control functions; and the third party calls the token obtaining interface to obtain the token, carries the token when calling other interfaces, encrypts the token according to a specified encryption mode, and decrypts the token according to an agreed rule after obtaining a return parameter. According to the invention, the security of the authorization process and the data interaction process can be ensured; and meanwhile, the authorization management process of the third party can be simplified through the unified credit granting platform.

Description

Technical Field

[0001] The present invention relates to the technical field of computer application, in particular to a third-party authentication, credit granting and interaction method and system based on an authorization mechanism. Background Art

[0002] With the continuous development of information technology, third-party applications and services are increasingly used in various fields. These third-party applications and services need to obtain authorization and authentication from users when accessing and using user data, ensuring that third-party applications and services can obtain explicit authorization and authentication from users when accessing user data, thereby ensuring data security and reliability. With the continuous development of information technology, third-party applications and services are increasingly used in various fields, and this authentication, credit granting and interaction method is particularly important. At present, the authentication, credit granting and interaction process for third-party applications and services is relatively complex and the security needs to be improved. Summary of the invention

[0003] The technical task of the present invention is to address the above deficiencies and provide a third-party authentication, credit and interaction method and system based on an authorization mechanism, which can ensure the security of the authorization process and data interaction process; at the same time, through a unified credit platform, the authorization management process for third parties can be simplified.

[0004] The technical solution adopted by the present invention to solve its technical problem is:

[0005] A third-party authentication and credit authorization and interaction method based on an authorization mechanism, which implements third-party authentication and credit authorization through a unified credit authorization platform, wherein the unified credit authorization platform includes a service opening module and a security authorization and flow control module.

[0006] The service opening module opens service capabilities to third parties in the form of publishing service interfaces in a unified interface specification and data format, so that third-party developers can easily access and use the services provided by the unified credit granting platform; at the same time, the unified credit granting platform manages the services in a unified manner;

[0007] The security authorization and traffic control module provides unified security authorization and traffic control functions to ensure security and stability during service integration and service opening;

[0008] The third party calls the token acquisition interface to obtain the token. When calling other interfaces, the token is carried and encrypted according to the specified encryption method. After obtaining the return parameters, it is decrypted according to the agreed rules.

[0009] This method integrates service opening, security authorization and traffic control by establishing a unified credit platform, allowing users to bid farewell to cumbersome authorization settings one by one, and complete full authorization of third-party applications or services with one click, greatly simplifying the authorization process and significantly improving operational efficiency. At the same time, this method uses advanced encryption technology and strict access control mechanisms to comprehensively protect the confidentiality, integrity and availability of resources, effectively prevent data leakage and abuse, and fully protect the legitimate rights and interests of users.

[0010] Furthermore, the unified credit platform manages the services in a unified manner, including registration, authentication, authorization, monitoring, etc. of the services, so as to ensure the security and stability of the services.

[0011] Furthermore, the security authorization function can perform identity authentication and permission control on users or applications accessing services to ensure that only legitimate users or applications can access corresponding services.

[0012] Furthermore, the traffic control function can monitor and adjust the traffic of service access to avoid service crash or performance degradation due to excessive access volume.

[0013] Furthermore, the service connection process specifically includes:

[0014] 1) Token Authentication:

[0015] The service open module provides a token authentication interface. The third party uses the appId and appKey issued by the unified credit platform to call the token acquisition interface to obtain the token.

[0016] 2) Interface service:

[0017] After the third party obtains the token, it calls the service and puts the token in the header of the call request, with the key being center-auth-token and value being the value of the token;

[0018] 3) Encryption and decryption.

[0019] Furthermore, the encryption and decryption process is as follows:

[0020] S1. Before calling the service interface, the third party generates a 32-character uuid and encrypts it with the public key as enck;

[0021] S2. When a third party calls a service interface, it must provide the values ​​of appId and enck in the interface parameters.

[0022] S3, the service interface uses the private key to decrypt the enck value into the original uuid, and uses it as the key for SM4 symmetric encryption;

[0023] S4, the interface executes the service, encrypts the returned result using the SM4 encryption algorithm, and returns the encrypted result;

[0024] S5. After the third party obtains the return result of the interface, it uses uuid to perform SM4 decryption.

[0025] The present invention also claims to protect a third-party authentication and interactive system based on an authorization mechanism, including a service opening module and a security authorization and flow control module.

[0026] The service opening module opens service capabilities to third parties in the form of publishing service interfaces in a unified interface specification and data format, so that third-party developers can easily access and use the services provided by the unified credit granting platform; at the same time, the unified credit granting platform manages the services in a unified manner;

[0027] The security authorization and traffic control module provides unified security authorization and traffic control functions to ensure security and stability during service integration and service opening;

[0028] The system is used to implement the above-mentioned third-party authentication, credit granting and interaction method based on the authorization mechanism.

[0029] Furthermore, the third party calls the token acquisition interface to obtain the token, carries the token when calling other interfaces and encrypts it according to the specified encryption method, and decrypts it according to the agreed rules after obtaining the return parameters;

[0030] The service docking process specifically includes:

[0031] 1) Token Authentication:

[0032] The service open module provides a token authentication interface. The third party uses the appId and appKey issued by the unified credit platform to call the token acquisition interface to obtain the token.

[0033] 2) Interface service:

[0034] After the third party obtains the token, it calls the service and puts the token in the header of the call request, with the key being center-auth-token and value being the value of the token;

[0035] 3) Encryption and decryption.

[0036] The present invention also claims protection for a third-party authentication and interaction device based on an authorization mechanism, comprising: at least one memory and at least one processor;

[0037] The at least one memory is used to store a machine-readable program;

[0038] The at least one processor is used to call the machine-readable program to implement the above method.

[0039] The present invention also claims protection for a computer-readable medium having computer instructions stored thereon, which can implement the above method when executed by a processor.

[0040] Compared with the prior art, the third-party authentication, credit granting and interaction method and system of the present invention based on the authorization mechanism has the following beneficial effects:

[0041] By establishing a unified credit authorization platform, the present invention no longer requires users to set authorization for third-party applications or services one by one. Authorization can be completed through a unified credit authorization platform, which can greatly simplify the authorization process and improve operational efficiency. At the same time, in the process of data sharing, encryption technology, access control mechanism and other means are used to ensure the confidentiality, integrity and availability of data, which helps prevent data leakage and abuse, protect the legitimate rights and interests of users, and bring more convenience and value to users. BRIEF DESCRIPTION OF THE DRAWINGS

[0042] Figure 1 The present invention is a flowchart of a third-party authentication, authorization and interaction method based on an authorization mechanism provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0043] The present invention will be further described below in conjunction with specific embodiments.

[0044] The embodiment of the present invention provides a third-party authentication and credit and interaction method based on an authorization mechanism, and realizes third-party authentication and credit through a unified credit platform. The unified credit platform includes a service exposure module and a security authorization and flow control module. Through these capability modules, the unified credit platform can ensure safe, efficient and orderly data interaction and business collaboration with third parties.

[0045] The service opening module opens service capabilities to third parties in the form of publishing service interfaces with unified interface specifications and data formats, so that third-party developers can easily access and use the services provided by the unified credit platform; at the same time, the unified credit platform manages the services in a unified manner, including registration, authentication, authorization, monitoring, etc. of the services, to ensure the security and stability of the services.

[0046] The security authorization and traffic control module provides unified security authorization and traffic control functions to ensure security and stability during service integration and service opening. The security authorization function can authenticate and control the permissions of users or applications accessing services to ensure that only legitimate users or applications can access the corresponding services. The traffic control function can monitor and adjust the traffic of service access to avoid service crashes or performance degradation due to excessive access.

[0047] The service connection process includes: the third party calls the token acquisition interface to obtain the token, carries the token when calling other interfaces and encrypts it according to the specified encryption method, and decrypts it according to the agreed rules after obtaining the return parameters. The details are as follows:

[0048] 1. Token authentication:

[0049] The service opening module provides a token authentication interface. The third party uses the appId and appKey issued by the unified credit platform to call the token acquisition interface to obtain the token.

[0050] 2. Interface service:

[0051] After the third party obtains the token, it calls the service and puts the token in the header of the call request. The key is center-auth-token and value is the value of the token.

[0052] 3. Encryption and decryption.

[0053] The encryption and decryption process is as follows:

[0054] S1. Before calling the service interface, the third party generates a 32-character uuid, encrypts it with the public key SM2 and uses it as enck.

[0055] S2. When a third party calls a service interface, it must provide the values ​​of appId and enck in the interface parameters.

[0056] S3. The service interface uses the private key to decrypt the enck value into the original uuid, and uses it as the key for SM4 symmetric encryption.

[0057] S4. The interface executes the service, encrypts the returned result using the SM4 encryption algorithm, and returns the encrypted result.

[0058] S5. After the third party obtains the return result of the interface, it uses uuid to perform SM4 decryption.

[0059] This method uses advanced encryption technology and access control mechanisms to ensure the security of the authorization process and data interaction process. At the same time, third-party applications or services are regularly monitored and evaluated to ensure that they always meet security standards and requirements. It achieves:

[0060] 1. Improve security: Through the authorization and authentication mechanism, unauthorized access and data leakage can be prevented, and the confidentiality, integrity and availability of resources during transmission and storage can be ensured, thereby improving security.

[0061] 2. Simplify the management process: Through a unified credit platform, the authorization management process for third parties can be simplified.

[0062] The embodiment of the present invention also provides a third-party authentication and authorization system based on an authorization mechanism, which is used to implement the third-party authentication and authorization method based on an authorization mechanism described in the above embodiment. The authorization mechanism is used to ensure the security and reliability of the authentication and authorization process of third-party applications or services, which helps to improve the security and reliability of the system.

[0063] The system includes a service opening module and a security authorization and flow control module.

[0064] The service opening module opens service capabilities to third parties in the form of publishing service interfaces with unified interface specifications and data formats, so that third-party developers can easily access and use the services provided by the unified credit platform; at the same time, the unified credit platform manages the services in a unified manner, including registration, authentication, authorization, monitoring, etc. of the services, to ensure the security and stability of the services.

[0065] The security authorization and traffic control module provides unified security authorization and traffic control functions to ensure security and stability during service integration and service opening. The security authorization function can authenticate and control the permissions of users or applications accessing services to ensure that only legitimate users or applications can access the corresponding services. The traffic control function can monitor and adjust the traffic of service access to avoid service crashes or performance degradation due to excessive access.

[0066] The third party calls the token acquisition interface to obtain the token. When calling other interfaces, the token is carried and encrypted according to the specified encryption method. After obtaining the return parameters, it is decrypted according to the agreed rules.

[0067] The service docking process specifically includes:

[0068] 1. Token authentication:

[0069] The service opening module provides a token authentication interface. The third party uses the appId and appKey issued by the unified credit platform to call the token acquisition interface to obtain the token.

[0070] 2. Interface service:

[0071] After the third party obtains the token, it calls the service and puts the token in the header of the call request. The key is center-auth-token and value is the value of the token.

[0072] 3. Encryption and decryption:

[0073] The encryption and decryption process is as follows:

[0074] S1. Before calling the service interface, the third party generates a 32-character uuid and encrypts it with the public key as enck;

[0075] S2. When a third party calls a service interface, it must provide the values ​​of appId and enck in the interface parameters.

[0076] S3, the service interface uses the private key to decrypt the enck value into the original uuid, and uses it as the key for SM4 symmetric encryption;

[0077] S4, the interface executes the service, encrypts the returned result using the SM4 encryption algorithm, and returns the encrypted result;

[0078] S5. After the third party obtains the return result of the interface, it uses uuid to perform SM4 decryption.

[0079] The embodiment of the present invention also provides a third-party authentication and interaction device based on the authorization mechanism, comprising: at least one memory and at least one processor;

[0080] The at least one memory is used to store a machine-readable program;

[0081] The at least one processor is used to call the machine-readable program to implement the third-party authentication, authorization and interaction method based on the authorization mechanism described in the above embodiment.

[0082] The embodiment of the present invention also provides a computer-readable medium, on which computer instructions are stored, and when the computer instructions are executed by a processor, the processor executes the third-party authentication, authorization and interaction method based on the authorization mechanism described in the above embodiment. Specifically, a system or device equipped with a storage medium can be provided, on which a software program code that implements the functions of any of the above embodiments is stored, and a computer (or CPU or MPU) of the system or device reads and executes the program code stored in the storage medium.

[0083] In this case, the program code itself read from the storage medium can realize the function of any one of the above-mentioned embodiments, and thus the program code and the storage medium storing the program code constitute a part of the present invention.

[0084] The storage medium embodiments for providing the program code include a floppy disk, a hard disk, a magneto-optical disk, an optical disk (such as CD-ROM, CD-R, CD-RW, DVD-ROM, DVD-RAM, DVD-RW, DVD+RW), a magnetic tape, a non-volatile memory card, and a ROM. Alternatively, the program code can be downloaded from a server computer by a communication network.

[0085] In addition, it should be clear that the functions of any of the above embodiments can be implemented not only by executing the program code read by the computer, but also by enabling an operating system operating on the computer to complete part or all of the actual operations based on instructions from the program code.

[0086] In addition, it can be understood that the program code read from the storage medium is written to a memory provided in an expansion board inserted into the computer or written to a memory provided in an expansion unit connected to the computer, and then based on the instructions of the program code, a CPU installed on the expansion board or the expansion unit is enabled to perform part or all of the actual operations, thereby realizing the functions of any of the above-mentioned embodiments.

[0087] The present invention is shown and described in detail above through the accompanying drawings and preferred embodiments. However, the present invention is not limited to these disclosed embodiments. Based on the above multiple embodiments, those skilled in the art can know that the code review methods in the above different embodiments can be combined to obtain more embodiments of the present invention, and these embodiments are also within the protection scope of the present invention.

Claims

1. A third-party authentication and interaction method based on an authorization mechanism, characterized in that: The third-party authentication and credit is realized through a unified credit platform, which includes a service opening module and a security authorization and flow control module. The service opening module opens service capabilities to third parties in the form of publishing service interfaces in a unified interface specification and data format, so that third-party developers can access and use the services provided by the unified credit granting platform; at the same time, the unified credit granting platform manages the services in a unified manner; The security authorization and traffic control module provides unified security authorization and traffic control functions to ensure security and stability during service integration and service opening; The third party calls the token acquisition interface to obtain the token. When calling other interfaces, the token is carried and encrypted according to the specified encryption method. After obtaining the return parameters, it is decrypted according to the agreed rules.

2. A third-party authentication and interaction method based on an authorization mechanism according to claim 1, characterized in that: The unified credit granting platform manages the services in a unified manner, including registration, authentication, authorization, and monitoring of the services, to ensure the security and stability of the services.

3. A third-party authentication and interaction method based on an authorization mechanism according to claim 1, characterized in that: The security authorization function can perform identity authentication and permission control on users or applications accessing services to ensure that only legitimate users or applications can access corresponding services.

4. A third-party authentication and interaction method based on an authorization mechanism according to claim 1 or 3, characterized in that: The flow control function can monitor and adjust the flow of service access to avoid service crash or performance degradation due to excessive access volume.

5. A third-party authentication and interaction method based on an authorization mechanism according to claim 1, characterized in that: The service docking process specifically includes: 1) Token Authentication: The service open module provides a token authentication interface. The third party uses the appId and appKey issued by the unified credit platform to call the token acquisition interface to obtain the token. 2) Interface service: After the third party obtains the token, it calls the service and puts the token in the header of the call request, with the key being center-auth-token and value being the value of the token; 3) Encryption and decryption.

6. A third-party authentication and interaction method based on an authorization mechanism according to claim 5, characterized in that: The encryption and decryption process is as follows: S1. Before calling the service interface, the third party generates a 32-character uuid and encrypts it with the public key as enck; S2. When a third party calls a service interface, it must provide the values ​​of appId and enck in the interface parameters. S3, the service interface uses the private key to decrypt the enck value into the original uuid, and uses it as the key for SM4 symmetric encryption; S4, the interface executes the service, encrypts the returned result using the SM4 encryption algorithm, and returns the encrypted result; S5. After the third party obtains the return result of the interface, it uses uuid to perform SM4 decryption.

7. A third-party authentication and interaction system based on an authorization mechanism, characterized in that: Including service opening module and security authorization and flow control module, The service opening module opens service capabilities to third parties in the form of publishing service interfaces in a unified interface specification and data format, so that third-party developers can access and use the services provided by the unified credit granting platform; at the same time, the unified credit granting platform manages the services in a unified manner; The security authorization and traffic control module provides unified security authorization and traffic control functions to ensure security and stability during service integration and service opening; The system is used to implement the third-party authentication, authorization and interaction method based on the authorization mechanism as described in any one of claims 1 to 6.

8. A third-party authentication and interaction system based on authorization mechanism according to claim 7, characterized in that: The third party calls the token acquisition interface to obtain the token. When calling other interfaces, the token is carried and encrypted according to the specified encryption method. After obtaining the return parameters, it is decrypted according to the agreed rules. The service docking process specifically includes: 1) Token Authentication: The service open module provides a token authentication interface. The third party uses the appId and appKey issued by the unified credit platform to call the token acquisition interface to obtain the token. 2) Interface service: After the third party obtains the token, it calls the service and puts the token in the header of the call request, with the key being center-auth-token and value being the value of the token; 3) Encryption and decryption.

9. A third-party authentication and interaction device based on an authorization mechanism, characterized in that: include: at least one memory and at least one processor; The at least one memory is used to store a machine-readable program; The at least one processor is used to call the machine-readable program to implement the method described in any one of claims 1 to 6.

10. A computer-readable medium, characterized in that The computer readable medium stores computer instructions, which, when executed by a processor, can implement the method described in any one of claims 1 to 6.

Images