Information processing method, device and equipment, computer storage medium and computer program product

Abstract

The embodiment of the invention discloses an information processing method. The method comprises the steps that an operation request sent by user equipment and used for operating resources is received; the operation request carries an identifier of a user; after the identity verification of the user is passed, determining a target management group from management groups based on the identifier of the user; determining a target account group corresponding to the user based on the target management group, and sending an identifier of the target account group to a second server; receiving a target resource determined by the second server based on the identifier of the target account group; and the target resource is sent to the user equipment, so that the user equipment operates the target resource, and the efficiency of allocating accounts, permissions and resources is improved. The embodiment of the invention further discloses an information processing device and equipment, a computer storage medium and a computer program product.

Description

Technical Field

[0001] The present application relates to information processing technology in the field of communications, and in particular to an information processing method, apparatus, device, computer storage medium and computer program product. Background Art

[0002] Cloud computing refers to obtaining required resources through the network in an on-demand, easily scalable manner; cloud computing under deployment requirements and account management mode refers to obtaining required services through the network in an on-demand, easily scalable manner. This service can be IT and software, Internet-related, or other services. Cloud computing has become a popular way for various Internet technology (IT) concepts to be provided as services. In one implementation, users can request the services they need and trade the required services with cloud providers. Usually, the cloud service management nodes provided by the cloud computing platform are deployed in the management area. When the architecture evolves, it is necessary to sink the services through the management area, and use the inner circulation account to apply for and release resources to achieve unified scheduling of hardware resources. However, in the scheme of account authority management in the relevant technology, if account sharing is prohibited, it will take a long time to implement the requirement that multiple personnel apply for independent sub-accounts under multiple circulation accounts and assign multiple permissions and multiple resources to them, resulting in low efficiency in the allocation of accounts, permissions and resources. Summary of the invention

[0003] To solve the above technical problems, the embodiments of the present application provide an information processing method, apparatus, device, computer storage medium and computer program product, which solve the problem of long operation time of the entire operation process in the account authority management scheme in the related technology, and improve the efficiency of allocation of accounts, authorities and resources.

[0004] To achieve the above purpose, the technical solution of the embodiment of the present application is implemented as follows:

[0005] An information processing method, the method is applied to a first server, the method comprising:

[0006] Receiving an operation request for operating a resource sent by a user device; wherein the operation request carries a user identifier;

[0007] After the identity authentication of the user is passed, determining a target management group from the management groups based on the identification of the user;

[0008] determining a target account group corresponding to the user based on the target management group, and sending an identifier of the target account group to a second server;

[0009] receiving a target resource determined by the second server based on the identifier of the target account group;

[0010] The target resource is sent to the user equipment so that the user equipment operates the target resource; wherein the first server and the second server have passed communication authentication.

[0011] In the above solution, determining the target account group corresponding to the user based on the target management group includes:

[0012] Based on the operation request information for the target resource, detecting the user's operation authority for the target resource; wherein the operation request carries the operation request information;

[0013] If it is detected that the user has the operation authority for the target resource, a target account group corresponding to the user is determined based on the target management group.

[0014] In the above solution, the step of determining the target account group corresponding to the user based on the target management group includes:

[0015] Determine a first mapping relationship between the management group and the account group;

[0016] The target account group is determined based on the target management group and the first mapping relationship.

[0017] In the above scheme, the method further comprises:

[0018] Receiving user operation authority change information for the user;

[0019] The management group is updated based on the user operation authority change information.

[0020] An information processing method, the method is applied to a second server, the method comprising:

[0021] Receiving an identifier of a target account group sent by a first server; wherein the first server and the second server have passed communication authentication;

[0022] Based on the identifier of the target account group, determining a target resource corresponding to the user from a plurality of resource sets;

[0023] The target resource is sent to the first server, so that the user equipment operates the target resource received from the first server.

[0024] In the above solution, the step of determining the target resource corresponding to the user from multiple resource sets based on the identifier of the target account group includes:

[0025] Determine a second mapping relationship between the account group and the resource set;

[0026] The target resource is determined from the plurality of resource sets based on the identifier of the target account group and the second mapping relationship.

[0027] In the above scheme, the method further comprises:

[0028] Determine the information of resources to be executed;

[0029] Based on the information of the resources to be executed, the resources to be executed are divided to obtain the multiple resource sets.

[0030] In the above solution, the information of determining the resources to be executed includes:

[0031] Determining the state of the resource to be executed and the attribute information of the resource to be executed;

[0032] Correspondingly, the dividing the resources to be executed based on the information of the resources to be executed to obtain the multiple resource sets includes:

[0033] Dividing the to-be-executed resources based on the status to obtain a first resource set;

[0034] Dividing the resources to be executed based on the attribute information to obtain a second resource set;

[0035] The plurality of resource sets are determined based on the first resource set and the second resource set.

[0036] A first information processing device, comprising:

[0037] A first receiving unit, configured to receive an operation request for operating a resource sent by a user device; wherein the operation request carries a user identifier;

[0038] A first processing unit, configured to determine a target management group from management groups based on an identifier of the user after the identity authentication of the user is passed;

[0039] The first processing unit is further configured to determine a target account group corresponding to the user based on the target management group, and send an identifier of the target account group to the second server;

[0040] The first receiving unit is further configured to receive a target resource determined by the second server based on the identifier of the target account group;

[0041] The first sending unit is used to send the target resource to the user equipment so that the user equipment operates the target resource; wherein the second server and the first server have passed communication authentication.

[0042] A second information processing device, comprising:

[0043] A second receiving unit is used to receive an identifier of a target account group sent by the first server; wherein the first server and the second server have passed communication authentication;

[0044] a second processing unit, configured to determine a target resource corresponding to the user from a plurality of resource sets based on the identifier of the target account group;

[0045] The second sending unit is used to send the target resource to the first server, so that the user equipment operates the target resource received from the first server.

[0046] A first server, comprising: a first processor, a first memory and a first communication bus;

[0047] The first communication bus is used to realize the communication connection between the first processor and the first memory;

[0048] The first processor is used to execute the information processing program in the first memory to implement the steps of the above-mentioned information processing method.

[0049] A second server, the second server comprising: a second processor, a second memory, and a second communication bus;

[0050] The second communication bus is used to realize the communication connection between the second processor and the second memory;

[0051] The second processor is used to execute the information processing program in the second memory to implement the steps of the above-mentioned information processing method.

[0052] A computer-readable storage medium stores one or more programs, and the one or more programs can be executed by one or more processors to implement the steps of the above-mentioned information processing method.

[0053] A computer program product comprises a computer program, wherein the computer program implements the above method when executed by a processor.

[0054] The information processing method, apparatus, device, computer storage medium and computer program product provided by the embodiments of the present application can receive an operation request for operating resources that carries a user's identification and is sent by a user device, determine a target management group from a management group based on the user's identification after the user's identity authentication is passed, determine a target account group corresponding to the user based on the target management group, and send the identification of the target account group to the second server, receive the target resource determined by the second server based on the identification of the target account group, and send the target resource to the user device so that the user device operates the target resource. The first server and the second server have passed the communication authentication. In this way, the user can directly access the corresponding account group in the second server through the management group of the first server, and obtain the resources that the user needs to operate, and then can directly operate the resources through the management group of the first server, which solves the problem of too long operation time of the entire operation process in the account authority management scheme in the related technology, and improves the allocation efficiency of accounts, authorities and resources. BRIEF DESCRIPTION OF THE DRAWINGS

[0055] Figure 1 A flowchart of an information processing method provided in an embodiment of the present application;

[0056] Figure 2 A schematic diagram of the mapping relationship between a bastion host group, an inner loop account group, and an inner loop account resource corresponding to an information processing method provided in an embodiment of the present application;

[0057] Figure 3 A flowchart of another information processing method provided in an embodiment of the present application;

[0058] Figure 4 A schematic diagram of the structure of a first information processing device provided in an embodiment of the present application;

[0059] Figure 5 A schematic diagram of the structure of a second information processing device provided in an embodiment of the present application;

[0060] Figure 6 A schematic diagram of the structure of a first server provided in an embodiment of the present application;

[0061] Figure 7 A schematic diagram of the structure of a second server provided in an embodiment of the present application. DETAILED DESCRIPTION

[0062] The technical solutions in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application.

[0063] It should be understood that the "embodiments of the present application" or "the aforementioned embodiments" mentioned throughout the specification mean that specific features, structures or characteristics related to the embodiments are included in at least one embodiment of the present application. Therefore, "in the embodiments of the present application" or "in the aforementioned embodiments" appearing throughout the specification may not necessarily refer to the same embodiment. In addition, these specific features, structures or characteristics may be combined in one or more embodiments in any suitable manner. In the various embodiments of the present application, the size of the sequence numbers of the above-mentioned processes does not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present application. The above-mentioned sequence numbers of the embodiments of the present application are for description only and do not represent the advantages and disadvantages of the embodiments.

[0064] Unless otherwise specified, the electronic device performs any step in the embodiments of the present application, and the processor of the electronic device may perform the step. It is also worth noting that the embodiments of the present application do not limit the order in which the electronic device performs the following steps. In addition, the methods used to process data in different embodiments may be the same method or different methods. It should also be noted that any step in the embodiments of the present application can be independently executed by the electronic device, that is, when the electronic device executes any step in the following embodiments, it may not rely on the execution of other steps.

[0065] It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0066] The present application embodiment provides an information processing method, which can be applied to a first server, referring to Figure 1 As shown, the method may include the following steps:

[0067] Step 101: Receive an operation request for operating a resource sent by a user equipment.

[0068] The operation request carries the user's identifier.

[0069] In the embodiment of the present application, the operation request may be generated by triggering on the user device when the user needs to operate the resources in the cloud platform identity authentication system. It should be noted that the user's identity is used to uniquely identify the user.

[0070] Specifically, the first server may refer to a bastion host device, and the second server may refer to a cloud platform identity authentication system.

[0071] Step 102: After the user's identity authentication is passed, a target management group is determined from the management groups based on the user's identification.

[0072] After receiving the operation request from the user, the bastion host device may first verify the identity of the user to determine whether the user is a legitimate user. It should be noted that any technology in the related art that can realize the identity verification of the user is applicable.

[0073] In the embodiment of the present application, the management group may be used to manage the account, and different management groups may be pre-configured according to the user's responsibilities. In a feasible implementation, the management group may refer to the bastion host group; Figure 2 The configurations corresponding to users with different responsibilities are different bastion host groups, and the permissions of the inner loop account groups under the bastion host group can be updated. Specifically, the bastion host device can determine the user's responsibilities based on the user's identification, and then determine the target bastion host group that matches the user from multiple bastion host groups, and apply for the bastion host group corresponding to the user as the target bastion host group.

[0074] Step 103: Determine a target account group corresponding to the user based on the target management group, and send an identifier of the target account group to the second server.

[0075] In the embodiment of the present application, the bastion host device can determine the target account group corresponding to the user according to the target bastion host group and the association between the bastion host group and the account group, and determine the identifier of the target account group and send it to the cloud platform identity authentication system.

[0076] It should be noted that the account group may refer to the account group of the inner circulation account, and the target account group may refer to the target inner circulation account group.

[0077] Step 104: Receive the target resource determined by the second server based on the identifier of the target account group.

[0078] Among them, after receiving the identifier of the target account group, the cloud platform identity authentication system can determine the target resource corresponding to the user from multiple resource sets according to the identifier of the target account group, and send the determined target resource to the bastion host device.

[0079] Step 105: Send the target resource to the user equipment so that the user equipment operates the target resource.

[0080] The first server and the second server have passed communication authentication.

[0081] Specifically, the bastion host device may send the received target resource to the user device, so that the user may perform corresponding operations on the target resource in the user device.

[0082] It should be noted that federated authentication can be established in advance between the bastion host device and the cloud platform identity authentication system; the cloud platform identity authentication system, as a service provider, needs to provide federated authentication capabilities, and the bastion host device, as an identity provider, needs to be responsible for the collection and storage of account passwords. By establishing a trust relationship between the bastion host device and the cloud platform identity authentication system and configuring identity conversion rules, users of the bastion host device can log in to the cloud platform identity authentication system without password after authorization.

[0083] In other embodiments of the present application, the “determining the target account group corresponding to the user based on the target management group” in the above step 103 can be implemented in the following manner:

[0084] A1. Based on the operation request information for the target resource, detect the user's operation authority for the target resource.

[0085] The operation request carries operation request information.

[0086] It should be noted that the bastion host device can detect whether the user has the operation authority to operate the target resource based on the operation request information. Specifically, the operation request information may refer to the information related to the operation of the target resource input by the user. In a feasible implementation, the operation request information may refer to information related to the operation, such as the operation reason.

[0087] A2. If it is detected that the user has the operation authority for the target resource, the target account group corresponding to the user is determined based on the target management group.

[0088] Specifically, after determining that the user has the operation authority for the target resource, the bastion host device can determine the target account group corresponding to the user according to the target management group.

[0089] In other embodiments of the present application, the above “determining the target account group corresponding to the user based on the target management group” can be implemented in the following ways:

[0090] Determine a first mapping relationship between the management group and the account group;

[0091] Based on the target management group and the first mapping relationship, a target account group is determined.

[0092] The first mapping relationship may be a correspondence between a pre-configured bastion host group and an account group of an inner loop account; specifically, Figure 2 The account group of the inner loop account shown can have a corresponding bastion host group; the inner loop account group can include multiple inner loop accounts, and the inner loop account is used for sinking resource deployment of cloud platform services. It should be noted that the bastion host device can manage the life cycle and password of the inner loop account.

[0093] In an embodiment of the present application, the bastion host device may determine the target inner loop account group according to the target bastion host group and a first mapping relationship between the bastion host group and the account group of the inner loop account.

[0094] In other embodiments of the present application, the method may further include:

[0095] Receive user operation permission change information for the user;

[0096] Update management groups based on user operation permission change information.

[0097] It should be noted that if the user's responsibilities change, the responsibility change information (i.e., operation permission change information) can be sent to the bastion host device, and then the bastion host device can remove or replace the corresponding bastion host group according to the responsibility change information to complete the user's permission change.

[0098] The information processing method provided in the embodiment of the present application enables the user to directly access the corresponding account group in the second server through the management group of the first server, and obtain the resources that the user needs to operate, and then directly operate the resources through the management group of the first server, thereby solving the problem of too long operation time for the entire operation process in the account authority management scheme in the related technology, and improving the efficiency of allocating accounts, authorities and resources.

[0099] Based on the above embodiments, the present application provides an information processing method, which can be applied to the second server. Figure 3 As shown, the method may include the following steps:

[0100] Step 201: Receive an identifier of a target account group sent by a first server.

[0101] The first server and the second server have passed communication authentication.

[0102] Step 202: Based on the identifier of the target account group, determine the target resource corresponding to the user from multiple resource sets.

[0103] Among them, the cloud platform identity authentication system can determine the target resource corresponding to the user according to the identifier of the target inner-loop account group and the association between the inner-loop account group and the inner-loop account resource set.

[0104] Step 203: Send the target resource to the first server, so that the user equipment operates the target resource received from the first server.

[0105] Specifically, after the cloud platform identity authentication system determines the target resource that the user needs to operate, it can send the target resource to the bastion host device, and then the bastion host can send the target resource to the user device; then, the user can perform corresponding operations on the target resource in the user device, which means that the user can operate the resources of the cloud platform identity authentication system through the bastion host device.

[0106] In other embodiments of the present application, the above step 202 may be implemented in the following manner:

[0107] B1. Determine a second mapping relationship between the account group and the resource set.

[0108] B2. Determine the target resource from multiple resource sets based on the identifier of the target account group and the second mapping relationship.

[0109] The second mapping relationship may be a correspondence between a pre-configured account group of an inner-circulation account and an inner-circulation account resource set; specifically, Figure 2 The account group of the inner-loop account shown may have a corresponding inner-loop account resource set.

[0110] In an embodiment of the present application, the cloud platform identity authentication system can determine the target inner-loop account resource set based on the identifier of the target inner-loop account group and the second mapping relationship between the account group of the inner-loop account and the inner-loop account resource set, and then determine the target resource from the target inner-loop account resource set.

[0111] In other embodiments of the present application, the method may further include:

[0112] Determine the information of resources to be executed;

[0113] Based on the information of the resources to be executed, the resources to be executed are divided into multiple resource sets.

[0114] The information of the resources to be executed may refer to basic information related to the resources to be executed; and all resources may be divided into different resource sets according to the information of the resources to be executed.

[0115] In other embodiments of the present application, the above-mentioned “information of determining resources to be executed” includes:

[0116] Determine the status of the resource to be executed and the attribute information of the resource to be executed;

[0117] The status of the resource to be executed may include: delivery status, acceptance status, online status, etc. The attribute information of the resource to be executed may refer to the name of the resource to be executed and the corresponding product and other information.

[0118] In other embodiments of the present application, the above “based on the information of the resources to be executed, dividing the resources to be executed to obtain multiple resource sets” includes:

[0119] Dividing the resources to be executed based on the status to obtain a first resource set;

[0120] Among them, resources can be divided into resource sets such as delivery state resource set, acceptance state resource set and online state resource set according to resource status.

[0121] Dividing the resources to be executed based on the attribute information to obtain a second resource set;

[0122] Among them, the resources can be divided into resource sets such as product A resource set, product B resource set, product C resource set, etc. according to the attribute information of the resources.

[0123] Based on the first resource set and the second resource set, a plurality of resource sets are determined.

[0124] In the embodiment of the present application, multiple resource sets are obtained by combining the first resource set and the second resource set. Specifically, the multiple resource sets may include: A product delivery state resource set read-only group, B product acceptance state resource set management group, C product online state resource set operation group, etc.

[0125] It should be noted that, for the description of the same steps and the same contents in this embodiment as those in other embodiments, reference can be made to the description in other embodiments and will not be repeated here.

[0126] The information processing method provided in the embodiment of the present application enables the user to directly access the corresponding account group in the second server through the management group of the first server, and obtain the resources that the user needs to operate, and then directly operate the resources through the management group of the first server, thereby solving the problem of too long operation time for the entire operation process in the account authority management scheme in the related technology, and improving the efficiency of allocating accounts, authorities and resources.

[0127] Based on the above embodiments, the embodiments of the present application provide a first information processing device, which can be applied to Figure 1 In the information processing method provided in the corresponding embodiment, refer to Figure 4 As shown, the first information processing device 3 may include: a first receiving unit 31, a first processing unit 32 and a first sending unit 33, wherein:

[0128] The first receiving unit 31 is used to receive an operation request for operating a resource sent by a user device; wherein the operation request carries a user identifier;

[0129] The first processing unit 32 is used to determine a target management group from the management groups based on the user's identification after the user's identity authentication is passed;

[0130] The first processing unit 32 is further configured to determine a target account group corresponding to the user based on the target management group, and send an identifier of the target account group to the second server;

[0131] The first receiving unit 31 is further configured to receive a target resource determined by the second server based on an identifier of the target account group;

[0132] The first sending unit 33 is used to send the target resource to the user equipment so that the user equipment operates the target resource; wherein the first server and the second server have passed the communication authentication.

[0133] In other embodiments of the present application, the first processing unit 32 is further configured to perform the following steps:

[0134] Based on the operation request information for the target resource, detecting the user's operation authority for the target resource; wherein the operation request carries the operation request information;

[0135] If it is detected that the user has the operation authority for the target resource, a target account group corresponding to the user is determined based on the target management group.

[0136] In other embodiments of the present application, the first processing unit 32 is further configured to perform the following steps:

[0137] Determine a first mapping relationship between the management group and the account group;

[0138] Based on the target management group and the first mapping relationship, a target account group is determined.

[0139] In other embodiments of the present application, the first processing unit 32 is further configured to perform the following steps:

[0140] Receive user operation permission change information for the user;

[0141] Update management groups based on user operation permission change information.

[0142] It should be noted that the specific implementation process of the steps performed by each unit in the embodiment of the present application can be referred to Figure 1 The implementation process of the information processing method provided in the corresponding embodiment will not be repeated here.

[0143] The first information processing device provided in the embodiment of the present application allows the user to directly access the corresponding account group in the second server through the management group of the first server, and obtain the resources that the user needs to operate, and then directly operate the resources through the management group of the first server, which solves the problem of too long operation time for the entire operation process in the account authority management scheme in the related technology, and improves the efficiency of allocating accounts, authorities and resources.

[0144] Based on the above embodiments, the embodiments of the present application provide a second information processing device, which can be applied to Figure 3 In the information processing method provided in the corresponding embodiment, refer to Figure 5 As shown, the second information processing device 4 may include: a second receiving unit 41, a second processing unit 42, and a second sending unit 43, wherein:

[0145] The second receiving unit 41 is used to receive the identifier of the target account group sent by the first server; wherein the first server and the second server have passed the communication authentication;

[0146] A second processing unit 42 is configured to determine a target resource corresponding to the user from a plurality of resource sets based on an identifier of the target account group;

[0147] The second sending unit 43 is configured to send the target resource to the first server, so that the user equipment operates the target resource received from the first server.

[0148] In other embodiments of the present application, the second processing unit 42 is further configured to perform the following steps:

[0149] Determine a second mapping relationship between the account group and the resource set;

[0150] Based on the identifier of the target account group and the second mapping relationship, a target resource is determined from a plurality of resource sets.

[0151] In other embodiments of the present application, the second processing unit 42 is further configured to perform the following steps:

[0152] Determine the information of resources to be executed;

[0153] Based on the information of the resources to be executed, the resources to be executed are divided into multiple resource sets.

[0154] In other embodiments of the present application, the second processing unit 42 is further configured to determine the status of the resource to be executed and the attribute information of the resource to be executed.

[0155] In other embodiments of the present application, the second processing unit 42 is further configured to perform the following steps:

[0156] Dividing the resources to be executed based on the status to obtain a first resource set;

[0157] Dividing the resources to be executed based on the attribute information to obtain a second resource set;

[0158] Based on the first resource set and the second resource set, a plurality of resource sets are determined.

[0159] It should be noted that the specific implementation process of the steps performed by each unit in the embodiment of the present application can be referred to Figure 3 The implementation process of the information processing method provided in the corresponding embodiment will not be repeated here.

[0160] The second information processing device provided in the embodiment of the present application allows the user to directly access the corresponding account group in the second server through the management group of the first server, and obtain the resources that the user needs to operate, and then directly operate the resources through the management group of the first server, which solves the problem of too long operation time for the entire operation process in the account authority management scheme in the related technology, and improves the efficiency of allocating accounts, authorities and resources.

[0161] Based on the above embodiments, the embodiments of the present application provide a first server, which can be applied to Figure 1 In the information processing method provided in the corresponding embodiment, refer to Figure 6 As shown, the first server 5 may include: a first processor 51, a first memory 52 and a first communication bus 53, wherein:

[0162] The first communication bus 53 is used to realize the communication connection between the first processor 51 and the first memory 52;

[0163] The first processor 51 is used to execute the information processing program in the first memory 52 to implement the following steps:

[0164] Receiving an operation request for operating a resource sent by a user device; wherein the operation request carries a user identifier;

[0165] After the user's identity authentication is passed, a target management group is determined from the management groups based on the user's identity;

[0166] Determine a target account group corresponding to the user based on the target management group, and send an identifier of the target account group to the second server;

[0167] receiving a target resource determined by the second server based on an identifier of the target account group;

[0168] The target resource is sent to the user device so that the user device operates the target resource; wherein the first server and the second server have passed the communication authentication.

[0169] In other embodiments of the present application, the first processor 51 is used to execute the information processing program in the first memory 52 to determine the target account group corresponding to the user based on the target management group, so as to implement the following steps:

[0170] Based on the operation request information for the target resource, detecting the user's operation authority for the target resource; wherein the operation request carries the operation request information;

[0171] If it is detected that the user has the operation authority for the target resource, a target account group corresponding to the user is determined based on the target management group.

[0172] In other embodiments of the present application, the first processor 51 is used to execute the information processing program in the first memory 52 to determine the target account group corresponding to the user based on the target management group, so as to implement the following steps:

[0173] Determine a first mapping relationship between the management group and the account group;

[0174] Based on the target management group and the first mapping relationship, a target account group is determined.

[0175] In other embodiments of the present application, the first processor 51 is used to execute the information processing program in the first memory 52, and may further perform the following steps:

[0176] Receive user operation permission change information for the user;

[0177] Update management groups based on user operation permission change information.

[0178] It should be noted that the specific description of the steps performed by the first processor can be referred to Figure 1 The information processing method provided in the corresponding embodiment will not be described in detail here.

[0179] With the first server provided in the embodiment of the present application, the user can directly access the corresponding account group in the second server through the management group of the first server, and obtain the resources that the user needs to operate, and then directly operate the resources through the management group of the first server, thereby solving the problem of too long operation time of the entire operation process in the account authority management scheme in the related technology, and improving the efficiency of allocation of accounts, authorities and resources.

[0180] Based on the above embodiments, the embodiments of the present application provide a second server, which can be applied to Figure 3 In the information processing method provided in the corresponding embodiment, refer to Figure 7As shown, the second server 6 may include: a second processor 61, a second memory 62, and a second communication bus 63, wherein:

[0181] The second communication bus 63 is used to realize the communication connection between the second processor 61 and the second memory 62;

[0182] The second processor 61 is used to execute the information processing program in the second memory 62 to implement the following steps:

[0183] Receiving an identifier of a target account group sent by the first server; wherein the first server and the second server have passed communication authentication;

[0184] Based on the identifier of the target account group, determine the target resource corresponding to the user from the plurality of resource sets;

[0185] The target resource is sent to the first server, so that the user equipment operates the target resource received from the first server.

[0186] In other embodiments of the present application, the second processor 61 is used to execute the information processing program in the second memory 62 based on the identification of the target account group, determine the target resource corresponding to the user from the multiple resource sets, and perform the following steps:

[0187] Determine a second mapping relationship between the account group and the resource set;

[0188] Based on the identifier of the target account group and the second mapping relationship, a target resource is determined from a plurality of resource sets.

[0189] In other embodiments of the present application, the second processor 61 is used to execute the information processing program in the second memory 62, and may further perform the following steps:

[0190] Determine the information of resources to be executed;

[0191] Based on the information of the resources to be executed, the resources to be executed are divided into multiple resource sets.

[0192] In other embodiments of the present application, the second processor 61 is used to execute the information of the information processing program in the second memory 62 to determine the information of the resource to be executed, so as to perform the following steps:

[0193] Determine the status of the resource to be executed and the attribute information of the resource to be executed.

[0194] In other embodiments of the present application, the second processor 61 is used to execute the information of the information processing program in the second memory 62 based on the resources to be executed, and divide the resources to be executed into multiple resource sets to perform the following steps:

[0195] Dividing the resources to be executed based on the status to obtain a first resource set;

[0196] Dividing the resources to be executed based on the attribute information to obtain a second resource set;

[0197] Based on the first resource set and the second resource set, a plurality of resource sets are determined.

[0198] It should be noted that the specific description of the steps performed by the second processor can be referred to Figure 3 The information processing method provided in the corresponding embodiment will not be described in detail here.

[0199] With the second server provided in the embodiment of the present application, the user can directly access the corresponding account group in the second server through the management group of the first server, and obtain the resources that the user needs to operate, and then directly operate the resources through the management group of the first server, thereby solving the problem of too long operation time for the entire operation process in the account authority management scheme in the related technology, and improving the efficiency of allocation of accounts, authorities and resources.

[0200] Based on the foregoing embodiments, the embodiments of the present application provide a computer-readable storage medium, which stores one or more programs, and the one or more programs can be executed by one or more processors to implement Figure 1 and Figure 3 The corresponding embodiments provide steps of the information processing method.

[0201] Based on the foregoing embodiments, the embodiments of the present application provide a computer program product, including a computer program, which can be executed by the first processor 51 and the second processor 61 to complete Figure 1 and Figure 3 The corresponding embodiments provide steps of the information processing method.

[0202] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems, or computer program products. Therefore, the present application may adopt the form of hardware embodiments, software embodiments, or embodiments in combination with software and hardware. Moreover, the present application may adopt the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage and optical storage, etc.) that contain computer-usable program code.

[0203] The present application is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0204] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0205] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0206] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art who is familiar with the present technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

Claims

1. An information processing method, characterized in that: The method is applied to a first server, and the method includes: Receiving an operation request for operating a resource sent by a user device; wherein the operation request carries a user identifier; After the identity authentication of the user is passed, determining a target management group from the management groups based on the identification of the user; determining a target account group corresponding to the user based on the target management group, and sending an identifier of the target account group to a second server; receiving a target resource determined by the second server based on the identifier of the target account group; The target resource is sent to the user equipment so that the user equipment operates the target resource; wherein the first server and the second server have passed communication authentication.

2. The method according to claim 1, characterized in that The determining a target account group corresponding to the user based on the target management group includes: Based on the operation request information for the target resource, detecting the user's operation authority for the target resource; wherein the operation request carries the operation request information; If it is detected that the user has the operation authority for the target resource, a target account group corresponding to the user is determined based on the target management group.

3. The method according to claim 1 or 2, characterized in that: The determining a target account group corresponding to the user based on the target management group includes: Determine a first mapping relationship between the management group and the account group; The target account group is determined based on the target management group and the first mapping relationship.

4. The method according to claim 1, characterized in that: The method further comprises: Receiving user operation authority change information for the user; The management group is updated based on the user operation authority change information.

5. An information processing method, characterized in that: The method is applied to the second server, and the method includes: Receiving an identifier of a target account group sent by a first server; wherein the first server and the second server have passed communication authentication; Based on the identifier of the target account group, determining a target resource corresponding to the user from a plurality of resource sets; The target resource is sent to the first server, so that the user equipment operates the target resource received from the first server.

6. The method according to claim 5, characterized in that The determining, based on the identifier of the target account group, a target resource corresponding to the user from a plurality of resource sets includes: Determine a second mapping relationship between the account group and the resource set; The target resource is determined from the plurality of resource sets based on the identifier of the target account group and the second mapping relationship.

7. The method according to claim 5, characterized in that The method further comprises: Determine the information of resources to be executed; Based on the information of the resources to be executed, the resources to be executed are divided to obtain the multiple resource sets.

8. The method according to claim 7, characterized in that The information of determining the resources to be executed includes: Determining the state of the resource to be executed and the attribute information of the resource to be executed; Correspondingly, the dividing the resources to be executed based on the information of the resources to be executed to obtain the multiple resource sets includes: Dividing the to-be-executed resources based on the status to obtain a first resource set; Dividing the resources to be executed based on the attribute information to obtain a second resource set; The plurality of resource sets are determined based on the first resource set and the second resource set.

9. A first information processing device, characterized in that: include: A first receiving unit, configured to receive an operation request for operating a resource sent by a user device; wherein the operation request carries a user identifier; A first processing unit, configured to determine a target management group from management groups based on an identifier of the user after the identity authentication of the user is passed; The first processing unit is further configured to determine a target account group corresponding to the user based on the target management group, and send an identifier of the target account group to the second server; The first receiving unit is further configured to receive a target resource determined by the second server based on the identifier of the target account group; The first sending unit is used to send the target resource to the user equipment so that the user equipment operates the target resource; wherein the second server and the first server have passed communication authentication.

10. A second information processing device, characterized in that: include: A second receiving unit is used to receive an identifier of a target account group sent by the first server; wherein the first server and the second server have passed communication authentication; a second processing unit, configured to determine a target resource corresponding to the user from a plurality of resource sets based on the identifier of the target account group; The second sending unit is used to send the target resource to the first server, so that the user equipment operates the target resource received from the first server.

11. A first server, characterized in that: include: a first processor, a first memory, and a first communication bus; The first communication bus is used to realize the communication connection between the first processor and the first memory; The first processor is used to execute the information processing program in the first memory to implement the steps of the information processing method according to any one of claims 1 to 4.

12. A second server, characterized in that: include: a second processor, a second memory, and a second communication bus; The communication bus is used to realize the communication connection between the second processor and the second memory; The second processor is used to execute the information processing program in the second memory to implement the steps of the information processing method according to any one of claims 5 to 8.

13. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores one or more programs, and the one or more programs can be executed by one or more processors to implement the steps of the information processing method according to any one of claims 1 to 4 or 5 to 8.

14. A computer program product, comprising a computer program, characterized in that: When the computer program is executed by a processor, the computer program implements the method according to any one of claims 1 to 4 or 5 to 8.

Images