License-ticket-based application authorization management and control method and device

Abstract

The invention discloses a License-ticket-based application authorization management and control method and device, and the method comprises the steps: obtaining authorization request information through analyzing an application authorization request transmitted by a to-be-authorized substation, carrying out the matching of the authorization request information through an authorization information database, and outputting an authorization bill; and encrypting the authorization bill, and sending encrypted data to a to-be-authorized substation, so that the substation inquires corresponding authorization information according to the authorization bill, and authorizes according to the authorization information. The use permission of the sub-application is controlled in the form of the authorization bill, so that the probability of authorization failure caused by permission leakage or hardware equipment replacement is reduced, the application authorization management process is simplified, the authorization operation complexity and the operation and maintenance cost of the system are reduced, and the authorization safety and stability of the system are also improved; the application authorization management and control method is also suitable for more complex and extensive system architecture, and the applicability and market competitiveness of the system are improved.

Description

Technical Field

[0001] The present invention relates to the technical field of application authorization management and control, and in particular to a License-ticket-based application authorization management and control method and device. Background Art

[0002] In the field of power systems, especially in the application field involving the configuration file control system of the main substation of the power system relay protection, the management of application authorization is an important aspect. First of all, in the field of power information security, authorization management, as an important part of information security, determines who can access what data and functions, so an effective method is needed to manage the authorization between the main system and the sub-application; in the field of power license management, the system usually controls the use rights of software or services by issuing licenses, so as to achieve access control to the system, so an effective method is needed to solve the problem of cross-hardware device authorization.

[0003] In the existing technology, the authorization between the main system and the subsystem application is usually through user identity-based permission management, that is, the main system passes the user's permission information to the subsystem, and the subsystem determines the applications and functions that the user can access based on this permission information, or it is based on hardware device authorization: the main system generates authorization tokens based on the characteristic information of the hardware device (such as MAC address, CPU serial number, etc.), and passes these tokens to the subsystem, and the subsystem verifies the user's access rights based on these tokens.

[0004] However, because the user's permission information may be obtained and used by malicious users, the permission management method based on user identity is prone to permission leakage problems; correspondingly, because the characteristic information of the hardware device may change, causing the authorization token to become invalid, the authorization method based on hardware devices is easily affected by the replacement of hardware devices. Summary of the invention

[0005] The present invention provides a License-ticket-based application authorization management method and device to improve the security and flexibility of application authorization, while simplifying the application authorization management process and improving the stability and reliability of the system.

[0006] In order to solve the above technical problems, an embodiment of the present invention provides an application authorization management method based on License-ticket, comprising the following steps:

[0007] In response to an application authorization request transmitted by the to-be-authorized substation, the application authorization request is parsed to obtain corresponding authorization request information, the authorization request information is input into a preset authorization information database for matching, and a corresponding authorization ticket is obtained;

[0008] The authorization ticket obtained by matching is encrypted, and the encrypted data is obtained and fed back to the substation to be authorized, so that the substation to be authorized can query the corresponding authorization information according to the authorization ticket and perform authorization according to the authorization information.

[0009] The application authorization management method provided by the present invention responds to and analyzes the application authorization request sent by the substation to be authorized, obtains the authorization request information of the corresponding substation, and inputs the authorization request information into the authorization information database preset by the system for matching, and obtains the authorization ticket corresponding to the application to be authorized of the substation to be authorized, and the authorization ticket is the ticket that uniquely corresponds to the substation to be authorized. By issuing a license, that is, controlling the use rights of the sub-application in the form of an authorization ticket, access control of the system is achieved without relying on user identity or hardware devices, so it is not easy to have the problem of permission leakage or authorization invalidation caused by hardware device replacement, which simplifies the application authorization management process, reduces the complexity of the system's authorization operation and the operation and maintenance cost, and improves the security and stability of the system authorization.

[0010] After matching and obtaining the unique authorization ticket corresponding to the substation to be authorized, the system will encrypt the authorization ticket and feed back the encrypted data to the substation to be authorized, so that the substation can query the authorization information and process the application authorization according to the encrypted data. The above-mentioned application authorization management method can realize application authorization management across multiple systems or networks. Therefore, the application authorization management method provided by the present invention is also applicable to more complex and extensive system architectures, such as cloud computing environments or distributed systems, etc., which improves the applicability and market competitiveness of the system.

[0011] In addition, the sent authorization ticket is encrypted through an encryption algorithm, which improves the security and reliability of data transmission and further reduces the probability of permission data leakage.

[0012] As a preferred example, the parsing of the application authorization request to obtain corresponding authorization request information includes:

[0013] Parse the application authorization request, obtain the application to be authorized, user requirement information and user identity information, input the user identity information into a preset identity information database for retrieval, and obtain the corresponding user identity authority;

[0014] The application to be authorized is adjusted according to the user identity authority and the user requirement information to obtain the authorization request information.

[0015] After responding to the application authorization request sent by the substation, the system will parse the application authorization request, obtain the corresponding application to be authorized, user demand information and user identity information, and input the user's identity information into the system's preset identity information database for retrieval, obtain the user's identity authority, that is, determine the user's own authority, and adjust the application to be authorized based on the determined user identity authority and user demand information, that is, determine whether the user's various demand information meets its corresponding authority based on the user's identity authority, and adjust the application to be authorized based on the determined demand information.

[0016] By adjusting the authorized applications through the adjusted demand information, flexible configuration and adjustment of the access rights of substation applications can be achieved, which improves the flexibility of application authorization and reduces the limitations of system application permission management.

[0017] As a preferred example, adjusting the application to be authorized according to the user identity authority and the user requirement information to obtain the authorization request information specifically includes:

[0018] Screening and matching the user demand information according to the user identity authority, extracting and integrating the screened demand information that meets the user identity authority into the user's formal demand;

[0019] The authorization requirement information of the application to be authorized is adjusted according to the user's formal requirement to obtain the authorization request information.

[0020] The user's demand information is screened by the user's identity authority, and the demands that do not meet the user's identity requirements are removed, and the remaining demands that meet the user's identity authority requirements are extracted and integrated into the user's formal demands. Through the above method, the system provided by the present invention can flexibly configure and adjust the access rights of applications according to different applications and user needs, including allocating different application team permissions to users according to different dimensions such as the user's role, responsibility or team.

[0021] Before determining the authorization ticket according to the user's needs, the system also adjusts the user's needs according to the user's own permission information to ensure that the adjusted demand information will not exceed the user's own permissions. In addition, the system can also set different access control policies according to the importance and sensitivity of the application, so as to better protect the security of the system's data and functions.

[0022] As a preferred example, the step of enabling the to-be-authorized substation to query corresponding authorization information according to the authorization ticket and perform authorization according to the authorization information includes:

[0023] The substation to be authorized decrypts the encrypted data to obtain the authorization ticket, and integrates the authorization ticket with corresponding permission request information into an authorization information query request and sends it to the application authorization unit;

[0024] The authorization information query request is verified and retrieved by the application authorization unit to obtain the corresponding authorization information, and the application permission of the application to be authorized is updated according to the authorization information.

[0025] When the authorized substation receives the encrypted data fed back by the system and parses it to obtain the authorization ticket, the system can integrate the authorization ticket and permission request information into an authorization information query request and send it to the application authorization unit of the system to trigger the application authorization operation of the application authorization unit. After the trigger, the system verifies and retrieves the authorization information query request through the application authorization unit, obtains and authorizes the application to be authorized based on the authorization information, and implements the application authorization processing of the substation.

[0026] As a preferred example, the verification and retrieval processing of the authorization information query request by the application authorization unit to obtain the corresponding authorization information includes:

[0027] Verifying the validity of the permission request information in the authorization information query request through the application authorization unit, and inputting the authorization ticket in the authorization information query request that has passed the verification into a preset authorization information database for retrieval and matching;

[0028] All detailed authorization information obtained through matching the authorization ticket is integrated, and the authorization information is output to the substation to be authorized, so that the substation to be authorized updates the application permission of the application to be authorized according to the authorization information.

[0029] Before searching and matching the authorization ticket, the system will also verify the validity of the permission request information in the authorization information query request to ensure that the time of the obtained authorization ticket is within the time limit required by the system, further improving the security and reliability of the authorization data. After determining that the validity test of the permission request information has passed, the system will search and match the corresponding authorization ticket through the preset authorization information database, and authorize the application to be authorized on the authorized substation based on the authorization information retrieved.

[0030] Since the authorization information and authorization tickets of the application to be authorized are uniformly issued and managed by the system, the intervention of third-party certification agencies can also be reduced, thereby reducing the complexity and cost of the system.

[0031] Correspondingly, an embodiment of the present invention further provides an application authorization control device based on License-ticket, wherein the application authorization control device includes a request response module and an application authorization module; wherein:

[0032] The request response module is used to respond to the application authorization request of the to-be-authorized substation, parse the application authorization request, obtain corresponding authorization request information, input the authorization request information into a preset authorization information database for matching, and obtain a corresponding authorization ticket;

[0033] The application authorization module is used to encrypt the authorization ticket obtained by matching, obtain and feed back the encrypted data to the substation to be authorized, so that the substation to be authorized can query the corresponding authorization information according to the authorization ticket and perform authorization according to the authorization information.

[0034] As a preferred example, the request response module parses the application authorization request to obtain corresponding authorization request information, including:

[0035] Parse the application authorization request, obtain the application to be authorized, user requirement information and user identity information, input the user identity information into a preset identity information database for retrieval, and obtain the corresponding user identity authority;

[0036] The application to be authorized is adjusted according to the user identity authority and the user requirement information to obtain the authorization request information.

[0037] As a preferred example, the request response module adjusts the application to be authorized according to the user identity authority and the user requirement information to obtain the authorization request information, specifically including:

[0038] Screening and matching the user demand information according to the user identity authority, extracting and integrating the screened demand information that meets the user identity authority into the user's formal demand;

[0039] The authorization requirement information of the application to be authorized is adjusted according to the user's formal requirement to obtain the authorization request information.

[0040] As a preferred example, the application authorization module enables the to-be-authorized substation to query corresponding authorization information according to the authorization ticket and perform authorization according to the authorization information, including:

[0041] The substation to be authorized decrypts the encrypted data to obtain the authorization ticket, and integrates the authorization ticket with corresponding permission request information into an authorization information query request and sends it to the application authorization unit;

[0042] The authorization information query request is verified and retrieved by the application authorization unit to obtain the corresponding authorization information, and the application permission of the application to be authorized is updated according to the authorization information.

[0043] As a preferred example, the application authorization module verifies and retrieves the authorization information query request through the application authorization unit to obtain the corresponding authorization information, including:

[0044] Verifying the validity of the permission request information in the authorization information query request through the application authorization unit, and inputting the authorization ticket in the authorization information query request that has passed the verification into a preset authorization information database for retrieval and matching;

[0045] All detailed authorization information obtained through matching the authorization ticket is integrated, and the authorization information is output to the substation to be authorized, so that the substation to be authorized updates the application permission of the application to be authorized according to the authorization information. BRIEF DESCRIPTION OF THE DRAWINGS

[0046] Figure 1 : A flowchart of an embodiment of a License-ticket-based application authorization management and control method provided by the present invention;

[0047] Figure 2 : A structural diagram of an embodiment of a License-ticket-based application authorization management and control device provided by the present invention. DETAILED DESCRIPTION

[0048] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0049] Embodiment 1

[0050] Please refer to Figure 1 , a flowchart of an embodiment of a method for application authorization management based on a License-ticket provided by the present invention includes steps 101 to 102, each of which is specifically as follows:

[0051] Step 101: In response to an application authorization request transmitted by a substation to be authorized, the application authorization request is parsed to obtain corresponding authorization request information, the authorization request information is input into a preset authorization information database for matching, and a corresponding authorization ticket is obtained.

[0052] The application authorization management method provided by the embodiment of the present invention responds to and parses the application authorization request sent by the substation to be authorized, obtains the authorization request information of the corresponding substation, and inputs the authorization request information into the authorization information database preset by the system for matching, and obtains the authorization ticket corresponding to the application to be authorized of the substation to be authorized, and the authorization ticket is the ticket that uniquely corresponds to the substation to be authorized. By issuing a license, that is, controlling the use rights of the sub-application in the form of an authorization ticket, access control to the system is achieved without relying on user identity or hardware devices, so it is not easy to have the problem of permission leakage or authorization invalidation caused by hardware device replacement, which simplifies the application authorization management process, improves system management efficiency, reduces the complexity of system authorization operations and operation and maintenance costs, and improves the security and stability of system authorization.

[0053] In this embodiment, parsing the application authorization request to obtain corresponding authorization request information includes:

[0054] Parse the application authorization request, obtain the application to be authorized, user requirement information and user identity information, input the user identity information into a preset identity information database for retrieval, and obtain the corresponding user identity authority;

[0055] The application to be authorized is adjusted according to the user identity authority and the user requirement information to obtain the authorization request information.

[0056] After responding to the application authorization request sent by the substation, the system will parse the application authorization request, obtain the corresponding application to be authorized, user demand information and user identity information, and input the user's identity information into the system's preset identity information database for retrieval, obtain the user's identity authority, that is, determine the user's own authority, and adjust the application to be authorized based on the determined user identity authority and user demand information, that is, determine whether the user's various demand information meets its corresponding authority based on the user's identity authority, and adjust the application to be authorized based on the determined demand information.

[0057] By adjusting the authorized applications through the adjusted demand information, flexible configuration and adjustment of the access rights of substation applications can be achieved, which improves the flexibility of application authorization and reduces the limitations of system application permission management.

[0058] Further, in this embodiment, adjusting the application to be authorized according to the user identity authority and the user requirement information to obtain the authorization request information specifically includes:

[0059] Screening and matching the user demand information according to the user identity authority, extracting and integrating the screened demand information that meets the user identity authority into the user's formal demand;

[0060] The authorization requirement information of the application to be authorized is adjusted according to the user's formal requirement to obtain the authorization request information.

[0061] The user's demand information is screened by the user's identity authority, and the demands that do not meet the user's identity requirements are removed, and the remaining demands that meet the user's identity authority requirements are extracted and integrated into the user's formal demands. Through the above method, the system provided by the present invention can flexibly configure and adjust the access rights of applications according to different applications and user needs, including allocating different application team permissions to users according to different dimensions such as the user's role, responsibility or team.

[0062] Before determining the authorization ticket according to the user's needs, the system also adjusts the user's needs according to the user's own permission information to ensure that the adjusted demand information will not exceed the user's own permissions. In addition, the system can also set different access control policies according to the importance and sensitivity of the application, so as to better protect the security of the system's data and functions.

[0063] Step 102: encrypt the authorization ticket obtained by matching, obtain and feed back the encrypted data to the substation to be authorized, so that the substation to be authorized can query the corresponding authorization information according to the authorization ticket and perform authorization according to the authorization information.

[0064] After matching and obtaining the unique authorization ticket corresponding to the substation to be authorized, the system will encrypt the authorization ticket and feed back the encrypted data to the substation to be authorized, so that the substation can query the authorization information and process the application authorization according to the encrypted data. The above-mentioned application authorization management method can realize application authorization management across multiple systems or networks. Therefore, the application authorization management method provided by the present invention is also applicable to more complex and extensive system architectures, such as cloud computing environments or distributed systems, etc., which improves the applicability and market competitiveness of the system.

[0065] In addition, the sent authorization ticket is encrypted through an encryption algorithm, which improves the security and reliability of data transmission and further reduces the probability of permission data leakage.

[0066] Specifically, in this embodiment, the substation to be authorized queries corresponding authorization information according to the authorization ticket and performs authorization according to the authorization information, including:

[0067] The substation to be authorized decrypts the encrypted data to obtain the authorization ticket, and integrates the authorization ticket with corresponding permission request information into an authorization information query request and sends it to the application authorization unit;

[0068] The authorization information query request is verified and retrieved by the application authorization unit to obtain the corresponding authorization information, and the application permission of the application to be authorized is updated according to the authorization information.

[0069] When the authorized substation receives the encrypted data fed back by the system and parses it to obtain the authorization ticket, the system can integrate the authorization ticket and permission request information into an authorization information query request and send it to the application authorization unit of the system to trigger the application authorization operation of the application authorization unit. After the trigger, the system verifies and retrieves the authorization information query request through the application authorization unit, obtains and authorizes the application to be authorized based on the authorization information, and implements the application authorization processing of the substation.

[0070] Furthermore, in this embodiment, the verification and retrieval processing of the authorization information query request by the application authorization unit to obtain the corresponding authorization information includes:

[0071] Verifying the validity of the permission request information in the authorization information query request through the application authorization unit, and inputting the authorization ticket in the authorization information query request that has passed the verification into a preset authorization information database for retrieval and matching;

[0072] All detailed authorization information obtained through matching the authorization ticket is integrated, and the authorization information is output to the substation to be authorized, so that the substation to be authorized updates the application permission of the application to be authorized according to the authorization information.

[0073] Before searching and matching the authorization ticket, the system will also verify the validity of the permission request information in the authorization information query request to ensure that the time of the obtained authorization ticket is within the time limit required by the system, further improving the security and reliability of the authorization data. After determining that the validity test of the permission request information has passed, the system will search and match the corresponding authorization ticket through the preset authorization information database, and authorize the application to be authorized on the authorized substation based on the authorization information retrieved.

[0074] Since the authorization information and authorization tickets of the application to be authorized are uniformly issued and managed by the system, the intervention of third-party certification agencies can also be reduced, thereby reducing the complexity and cost of the system.

[0075] Embodiment 2

[0076] As a specific embodiment corresponding to the first embodiment provided by the present invention, the second embodiment also provides a model control system and control method based on License-ticket application authorization, the system includes three system module functions: relay protection master station control system, relay protection substation control application and License-ticket application authorization module. Among them, the relay protection substation control application is similar to the substation to be authorized described in the first embodiment, the relay protection master station control system is similar to the system provided in the first embodiment, and the License-ticket application authorization module is similar to the application authorization unit described in the first embodiment.

[0077] The image model control system provided in this embodiment is mainly used in the field of configuration file control of power system relay protection master and substations. Using this system to perform permission control on power system relay protection master and substation configuration files can effectively prevent permission information from being obtained and used by malicious users, while realizing authorization management across hardware devices and avoiding the impact of hardware device replacement on authorization.

[0078] In this embodiment, the system will first divide the permissions for the SCD file management functions such as SCD file query, SCD file acquisition, SCD file management and SCD tools in the image model management system in the License-ticket application authorization module. The user can select the corresponding function and the sub-functions included in the selected function for authorization, and generate the corresponding License-ticket authorization ticket, and then save the generated authorization ticket in the database of the License-ticket application module. Among them, the ticket contains a unique identification ID number, and the authorization details of the corresponding function can be queried and obtained through the identification ID number.

[0079] After determining the authorization database of the License-ticket application authorization module, the relay protection master station graphic model control system can perform authorization control on the relay protection substation control application, including:

[0080] When the relay protection substation graphic model control application is initialized, it will send the corresponding authorization application to the relay protection main station graphic model control system, and the main station will select the corresponding ticket as the application authorization of the corresponding substation according to the received application, encrypt the ticket through the encryption algorithm SM2 and transmit it to the corresponding substation, so that the corresponding substation can obtain the unique ID number of the ticket authorization ticket corresponding to the current substation.

[0081] In this embodiment, the ticket is preferably encrypted by encryption algorithm SM2, and the specific encryption procedure is as follows:

[0082]

[0083]

[0084] Among them, the program "ECPublicKeyParameters ecPublicKeyParameters=" is used to load the public key.

[0085] After the substation obtains the unique ID number of the ticket authorization ticket, it can obtain the application authorization details of the substation management application in the License-ticket application authorization module according to the unique ID number. After obtaining the detailed information, the permission update of the system application can be completed, thus realizing the full process of application authorization based on License-ticket.

[0086] In the field of power systems, the authorization control method mentioned above can be used to perform permission control, which can effectively solve the problem of functional authorization between the main system and sub-applications of the graphic model control system, which can not only improve the security of the system, but also reduce the complexity and cost of the system.

[0087] In the field of power information security, the authorization management method provided in this embodiment greatly improves the security of system data and functions. Through effective application authorization, unauthorized users can be prevented from accessing data and functions in the system, thereby protecting the security of the system.

[0088] In the field of power license management, the license management method provided in this embodiment can control the use rights of software or services by issuing licenses, thereby realizing access control to the system. It can not only improve the security of the power system, but also conveniently manage application authorization issues across multiple systems or networks.

[0089] In summary, the authorization management and control method provided in this embodiment has broad application prospects and market demands in application fields such as the power system field, the power information security field, and the power license management field.

[0090] In order to better illustrate the working principle and step flow of a License-ticket-based application authorization management method and device of the present invention, it is possible but not limited to refer to the relevant records above.

[0091] Accordingly, see Figure 2 , Figure 2 The structure diagram of an embodiment of the application authorization control device based on License-ticket provided by the present invention. Figure 2 As shown, the application authorization management device includes a request response module 201 and an application authorization module 202; wherein:

[0092] The request response module 201 is used to respond to the application authorization request of the substation to be authorized, parse the application authorization request, obtain corresponding authorization request information, input the authorization request information into a preset authorization information database for matching, and obtain a corresponding authorization ticket.

[0093] Furthermore, the request response module 201 parses the application authorization request to obtain corresponding authorization request information, including:

[0094] Parse the application authorization request, obtain the application to be authorized, user requirement information and user identity information, input the user identity information into a preset identity information database for retrieval, and obtain the corresponding user identity authority;

[0095] The application to be authorized is adjusted according to the user identity authority and the user requirement information to obtain the authorization request information.

[0096] Furthermore, the request response module 201 adjusts the application to be authorized according to the user identity authority and the user requirement information to obtain the authorization request information, specifically including:

[0097] Screening and matching the user demand information according to the user identity authority, extracting and integrating the screened demand information that meets the user identity authority into the user's formal demand;

[0098] The authorization requirement information of the application to be authorized is adjusted according to the user's formal requirement to obtain the authorization request information.

[0099] The application authorization module 202 is used to encrypt the authorization ticket obtained by matching, obtain and feed back the encrypted data to the substation to be authorized, so that the substation to be authorized can query the corresponding authorization information according to the authorization ticket and perform authorization according to the authorization information.

[0100] Furthermore, the application authorization module 202 enables the to-be-authorized substation to query corresponding authorization information according to the authorization ticket and perform authorization according to the authorization information, including:

[0101] The substation to be authorized decrypts the encrypted data to obtain the authorization ticket, and integrates the authorization ticket with corresponding permission request information into an authorization information query request and sends it to the application authorization unit;

[0102] The authorization information query request is verified and retrieved by the application authorization unit to obtain the corresponding authorization information, and the application permission of the application to be authorized is updated according to the authorization information.

[0103] Furthermore, the application authorization module 202 verifies and retrieves the authorization information query request through the application authorization unit to obtain the corresponding authorization information, including:

[0104] Verifying the validity of the permission request information in the authorization information query request through the application authorization unit, and inputting the authorization ticket in the authorization information query request that has passed the verification into a preset authorization information database for retrieval and matching;

[0105] All detailed authorization information obtained through matching the authorization ticket is integrated, and the authorization information is output to the substation to be authorized, so that the substation to be authorized updates the application permission of the application to be authorized according to the authorization information.

[0106] In summary, the embodiment of the present invention provides a method and device for application authorization management based on License-ticket, which obtains authorization request information by parsing the application authorization request transmitted by the substation to be authorized, matches the authorization request information through the authorization information database, and outputs the authorization ticket; encrypts the authorization ticket and sends the encrypted data to the substation to be authorized, so that the substation queries the corresponding authorization information according to the authorization ticket and authorizes according to the authorization information. Controlling the use rights of sub-applications in the form of authorization tickets reduces the probability of authorization failure due to permission leakage or hardware device replacement, simplifies the application authorization management process, reduces the complexity of the system's authorization operation and operation and maintenance costs, and improves the security and stability of system authorization; the above-mentioned application authorization management method is also applicable to more complex and extensive system architectures, improving the applicability and market competitiveness of the system.

[0107] The specific embodiments described above further illustrate the purpose, technical solutions and beneficial effects of the present invention. It should be understood that the above description is only a specific embodiment of the present invention and is not intended to limit the scope of protection of the present invention. It is particularly pointed out that for those skilled in the art, any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention should be included in the scope of protection of the present invention.

Claims

1. A License-ticket-based application authorization management method, characterized in that: The following steps are involved: In response to an application authorization request transmitted by the to-be-authorized substation, the application authorization request is parsed to obtain corresponding authorization request information, the authorization request information is input into a preset authorization information database for matching, and a corresponding authorization ticket is obtained; The authorization ticket obtained by matching is encrypted, and the encrypted data is obtained and fed back to the substation to be authorized, so that the substation to be authorized can query the corresponding authorization information according to the authorization ticket and perform authorization according to the authorization information.

2. The method for application authorization management based on License-ticket according to claim 1, characterized in that: The parsing the application authorization request to obtain corresponding authorization request information includes: Parse the application authorization request, obtain the application to be authorized, user requirement information and user identity information, input the user identity information into a preset identity information database for retrieval, and obtain the corresponding user identity authority; The application to be authorized is adjusted according to the user identity authority and the user requirement information to obtain the authorization request information.

3. The method for application authorization management based on License-ticket according to claim 2, characterized in that: The adjusting the application to be authorized according to the user identity authority and the user requirement information to obtain the authorization request information specifically includes: Screening and matching the user demand information according to the user identity authority, extracting and integrating the screened demand information that meets the user identity authority into the user's formal demand; The authorization requirement information of the application to be authorized is adjusted according to the user's formal requirement to obtain the authorization request information.

4. The method for application authorization management based on License-ticket according to claim 1, characterized in that: The step of enabling the to-be-authorized substation to query corresponding authorization information according to the authorization ticket and perform authorization according to the authorization information includes: The substation to be authorized decrypts the encrypted data to obtain the authorization ticket, and integrates the authorization ticket with corresponding permission request information into an authorization information query request and sends it to the application authorization unit; The authorization information query request is verified and retrieved by the application authorization unit to obtain the corresponding authorization information, and the application permission of the application to be authorized is updated according to the authorization information.

5. The License-ticket-based application authorization management method according to claim 4, characterized in that: The verification and retrieval processing of the authorization information query request by the application authorization unit to obtain the corresponding authorization information includes: Verifying the validity of the permission request information in the authorization information query request through the application authorization unit, and inputting the authorization ticket in the authorization information query request that has passed the verification into a preset authorization information database for retrieval and matching; All detailed authorization information obtained through matching the authorization ticket is integrated, and the authorization information is output to the substation to be authorized, so that the substation to be authorized updates the application permission of the application to be authorized according to the authorization information.

6. A License-ticket-based application authorization management and control device, characterized in that: The application authorization management and control device includes a request response module and an application authorization module; wherein: The request response module is used to respond to the application authorization request of the to-be-authorized substation, parse the application authorization request, obtain corresponding authorization request information, input the authorization request information into a preset authorization information database for matching, and obtain a corresponding authorization ticket; The application authorization module is used to encrypt the authorization ticket obtained by matching, obtain and feed back the encrypted data to the substation to be authorized, so that the substation to be authorized can query the corresponding authorization information according to the authorization ticket and perform authorization according to the authorization information.

7. The application authorization control device based on License-ticket according to claim 6, characterized in that: The request response module parses the application authorization request and obtains corresponding authorization request information, including: Parse the application authorization request, obtain the application to be authorized, user requirement information and user identity information, input the user identity information into a preset identity information database for retrieval, and obtain the corresponding user identity authority; The application to be authorized is adjusted according to the user identity authority and the user requirement information to obtain the authorization request information.

8. The application authorization control device based on License-ticket according to claim 7, characterized in that: The request response module adjusts the application to be authorized according to the user identity authority and the user requirement information to obtain the authorization request information, specifically including: Screening and matching the user demand information according to the user identity authority, extracting and integrating the screened demand information that meets the user identity authority into the user's formal demand; The authorization requirement information of the application to be authorized is adjusted according to the user's formal requirement to obtain the authorization request information.

9. The application authorization control device based on License-ticket according to claim 6, characterized in that: The application authorization module enables the to-be-authorized substation to query corresponding authorization information according to the authorization ticket and perform authorization according to the authorization information, including: The substation to be authorized decrypts the encrypted data to obtain the authorization ticket, and integrates the authorization ticket with corresponding permission request information into an authorization information query request and sends it to the application authorization unit; The authorization information query request is verified and retrieved by the application authorization unit to obtain the corresponding authorization information, and the application permission of the application to be authorized is updated according to the authorization information.

10. The application authorization management and control device based on License-ticket according to claim 9, characterized in that: The application authorization module verifies and retrieves the authorization information query request through the application authorization unit to obtain the corresponding authorization information, including: Verifying the validity of the permission request information in the authorization information query request through the application authorization unit, and inputting the authorization ticket in the authorization information query request that has passed the verification into a preset authorization information database for retrieval and matching; All detailed authorization information obtained through matching the authorization ticket is integrated, and the authorization information is output to the substation to be authorized, so that the substation to be authorized updates the application permission of the application to be authorized according to the authorization information.

Images