Public authorization authentication method and system, storage medium and program product

Abstract

The invention provides a public authorization authentication method and system, a storage medium and a program product, and the method comprises the steps: receiving and processing the registration information of a plurality of authorization parties and a plurality of authorized parties which are imported in batches, obtaining an authorization party login protocol and an authorized party login protocol, and distributing a preset software development kit to the authorization parties and the authorized parties; an authorization application initiated by the authorized party is sent to the authorization party, and the authorization party audits the cooperation relationship between the authorization party and the authorization party, the identity of the authorized party and the security of the authorized party and then sends an auditing passing result to the authorized party; the authorization application packages application information through a first interface called by a preset software development kit, and the application information is obtained and transmitted to a public authorization authentication platform; consistency confirmation is carried out on the authorization party login protocol of the authorization party and the authorized party login protocol which are selected by the user and need to be used; and receiving and storing login state information and confirmation information sent by the authorization party, and sending the login state information and the confirmation information to the authorized party so that the user can successfully enter the user login success page.

Description

Technical Field

[0001] The present invention relates to the field of authorization and authentication technology, and in particular to a public authorization and authentication method, system, storage medium and program product. Background Art

[0002] Single sign-on (SSO) technology is an authentication mechanism that allows users to log in to multiple systems or applications using one set of credentials without having to re-enter credentials for each system. The core idea of ​​single sign-on is to enable users to seamlessly access multiple application systems after completing a single login through a unified authentication process. This mechanism simplifies user login operations and reduces security risks that may be caused by multiple logins. Existing single sign-on is usually implemented based on an open standard, the most common of which are Security Assertion Markup Language (SAML), Open Authorization (Oauth) and Central Authentication Service (CAS). The client of single sign-on usually refers to a browser, the authorizer provides authentication services, and the authorized party receives authentication services. If the authorized party accesses the authorizer and becomes a user of the authorizer, it can directly log in to the authorized party's service.

[0003] In the prior art, the authorizer implements an open standard for single sign-on, provides registration services, and develops the software development kit (SDK) required for single sign-on. The authorizer will issue a unique identifier and authentication key to the authorized party who has completed the registration, and provide the software development kit to the authorized party for use; after the authorized party performs corresponding secondary development work according to the authorizer's standards, the authorized party can use the authorizer's user information to log in; in the single sign-on process, the authorizer's provider and the authorized party's integrator are faced with a large number of development tasks. When an authorizer integrates with other authorized parties or an authorized party integrates with multiple authorizers, there is no ready-made and universal solution for direct reuse; the repeated development work by all parties from scratch increases the time cost of development and increases the complexity and potential error rate of the project; if there are differences in the login protocols adopted by the authorizer and the authorized party, the two parties will be unable to achieve login docking. Therefore, a major challenge in the current technical implementation is the lack of a standardized and reusable single sign-on solution to achieve an efficient and secure user authentication process. Summary of the invention

[0004] In view of this, the embodiments of the present invention provide a public authorization authentication method, system, storage medium and program product to eliminate or improve one or more defects existing in the prior art, and solve the problem of low efficiency and security of user authentication process in the prior art.

[0005] One aspect of the present invention provides a public authorization authentication method, which is performed on a public authorization authentication platform and comprises the following steps:

[0006] Receive and process batch-imported registration information of multiple authorizers and multiple authorized parties, obtain the authorizer login protocol and the authorized party login protocol, and distribute a preset software development kit to the authorizer and the authorized party; the software development kit encapsulates various transmission interfaces and protocol specifications specified by the public authorization authentication platform;

[0007] The authorization application initiated by the authorized party for requesting the authorization of the authorization party is sent to the authorization party through the internal information system of the platform, so that the authorization party can review and send the review result to the authorized party; the authorization application is obtained by encapsulating the application information through the first interface called by the preset software development toolkit and transmitted to the public authorization authentication platform; the content reviewed by the authorization party includes the cooperative relationship between the authorized party and the authorization party, the identity of the authorized party and the security of the authorized party;

[0008] Confirm the consistency between the login protocol of the authorizing party and the login protocol of the authorized party selected by the user;

[0009] Receive and store login status information sent by the authorizer to indicate that the user has logged into the authorizer and confirmation information to indicate that the user agrees to use the account of the authorizer to log in to the authorized party, and send the login status information and the confirmation information to the authorized party through a second interface called by the preset software development kit so that the user can successfully log in to the authorized party and jump to the user login success page.

[0010] In some embodiments, receiving and processing batch-imported registration information of multiple authorizers and multiple authorized parties includes:

[0011] Receive registration information of multiple authorizers and multiple authorized parties, and review the format, integrity and security of the registration information; when there are format errors, information defects and danger warnings, the public authorization authentication platform returns error prompts to the authorizers and the authorized parties so that the authorizers and the authorized parties can modify and resubmit the registration information;

[0012] The information of the authorizing party and the authorized party that have passed the review is sorted and uploaded in batches through the preset standardized interface and batch import template.

[0013] In some embodiments, receiving and processing batch-imported registration information of multiple authorizers and multiple authorized parties further includes:

[0014] Encrypting the registration information using an advanced encryption standard or an asymmetric encryption algorithm;

[0015] The authorization party registration information and the authorization party registration information are respectively stored in different table spaces of the public authorization authentication platform.

[0016] In some embodiments, after receiving the authorization application initiated by the authorized party for requesting the authorization by the authorizer, and sending it to the authorizer through the internal information system of the platform for the authorizer to review, it also includes:

[0017] When the authorization party examines and finds that the authorization application is not passed, the authorization party receives the reason feedback information sent by the authorization party and transmits the reason feedback information to the authorized party so that the authorized party can adjust the authorization application and resend it.

[0018] In some embodiments, confirming the consistency between the authorization party login protocol and the authorization party login protocol includes:

[0019] The authorization party login protocol of the authorization party selected by the user after logging in to the authorized party is compared with the authorized party login protocol to see if they are consistent. If they are consistent, the agreement of both parties is used. If they are inconsistent, the protocol conversion is automatically performed through the protocol conversion function of the public authorization authentication platform.

[0020] In some embodiments, after receiving and storing the login status information sent by the authorizer to indicate that the user has logged into the authorizer and the confirmation information to indicate that the user agrees to use the account of the authorizer to log into the authorized party, and sending the login status information and the confirmation information to the authorized party through the second interface called by the preset software development kit for the user to successfully log into the authorized party and jump to the user login success page, it also includes:

[0021] The login status information and the confirmation information are stored in the local storage module of the public authorization authentication platform. When the user opens the user login address configured by the software development kit in the browser and enters the login page, the authorized party directly enters the user login success page according to the login status information and the confirmation information and maintains the user's login status.

[0022] On the other hand, the present invention also provides a public authorization authentication system, the system comprising:

[0023] An authorization module is used to send the authorization party registration information and the authorization party login agreement to the public authorization authentication platform, receive the preset software development kit allocated by the public authorization authentication platform, and review the authorization application;

[0024] The authorized module is used to send the authorized party registration information and the authorized login agreement to the public authorization authentication platform, receive the preset software development kit allocated by the public authorization authentication platform, initiate an authorization application for requesting the authorization party to authorize and receive the review result;

[0025] The client module is used for users to access and log in to the authorized party and confirm the authorizer who needs to initiate the authorization request;

[0026] A public authorization authentication platform is used to execute the public authorization authentication method as described in any of the above items, receive and process the registration information of multiple authorizers and multiple authorized parties imported in batches, obtain the authorizer login protocol and the authorized party login protocol and distribute the preset software development kit to the authorizer and the authorized party; send the authorization application initiated by the authorized party to request the authorization of the authorizer to the authorizer through the platform's internal information system, so that the authorizer can review it and send the review result to the authorized party; confirm the consistency between the authorizer login protocol and the authorized party login protocol of the authorizer selected by the user to be used; receive and store the login status information sent by the authorizer to indicate that the user has logged in to the authorizer and the confirmation information to indicate that the user agrees to use the authorizer's account to log in to the authorized party, and send the login status information and the confirmation information to the authorized party through the second interface called by the preset software development kit so that the user can successfully log in to the authorized party and jump to the user login success page.

[0027] In some embodiments, the system further comprises:

[0028] The cloud storage module is used to store the registration information, the authorizing party login protocol, the authorized party login protocol, the authorization application, the login status information and the confirmation information in the process of the public authorization authentication method executed on the public authorization authentication platform.

[0029] On the other hand, the present invention further provides a computer-readable storage medium having a computer program / instruction stored thereon, which implements the steps of any of the above methods when the program / instruction is executed by a processor.

[0030] On the other hand, the present invention further provides a computer program product, comprising a computer program / instruction, which implements the steps of any of the above methods when executed by a processor.

[0031] The beneficial effects of the present invention are at least:

[0032] In the public authorization authentication method, system, storage medium and program product described in the present invention, work efficiency and operation convenience are improved by batch access, so that the interconnection and interoperability of the entire public authorization authentication system becomes more efficient and smooth; the preset software development tool kits that encapsulate various transmission interfaces and protocol specifications stipulated by the public authorization authentication platform are distributed to the authorizer and the authorized party to achieve seamless connection and data interaction between the authorizer and the authorized party. The software development tool kit is public content, and developers can freely obtain and use these tool kits to integrate and develop related authentication functions to more conveniently implement single sign-on and permission management functions in applications or systems; when the login protocol of the authorizer is inconsistent with the login protocol of the authorized party, the protocol conversion function of the public authorization authentication platform is used to automatically perform protocol conversion to smoothly complete the entire login docking. A process to achieve data exchange and information sharing, ensuring that the entire access process is efficient and convenient; the authorizer and the authorized party can achieve high efficiency and high security through the public authorization and authentication platform. Users only need to log in once to access all authorized resources without repeatedly entering credentials; further, this single sign-on solution eliminates the need for users to reuse the same password on multiple platforms, reducing potential security risks; access to the public authorization and authentication platform enables the authorizer and the authorized party to enjoy a convenient, efficient and secure single sign-on experience. The public authorization and authentication platform has the ability to expand multiple single sign-on protocols, support a variety of different authentication protocols, and achieve seamless docking between different systems and unified verification of user identities, and adapt to a variety of different application scenarios and needs, ensuring that users can smoothly perform identity authentication and access control between multiple systems.

[0033] Additional advantages, purposes, and features of the present invention will be described in part in the following description, and will become apparent to those skilled in the art after studying the following, or may be learned from the practice of the present invention. The purposes and other advantages of the present invention may be achieved and obtained by the structures specifically indicated in the specification and the accompanying drawings.

[0034] Those skilled in the art will appreciate that the objectives and advantages that can be achieved with the present invention are not limited to the above specific description, and the above and other objectives that can be achieved by the present invention will be more clearly understood from the following detailed description. BRIEF DESCRIPTION OF THE DRAWINGS

[0035] The drawings described herein are used to provide a further understanding of the present invention, constitute a part of the present application, and do not constitute a limitation of the present invention. In the drawings:

[0036] Figure 1 The figure is a flowchart of a public authorization authentication method according to an embodiment of the present invention.

[0037] Figure 2It is a schematic diagram of the structure of a public authorization authentication system according to an embodiment of the present invention. DETAILED DESCRIPTION

[0038] In order to make the purpose, technical solution and advantages of the present invention more clearly understood, the present invention is further described in detail below in conjunction with the embodiments and the accompanying drawings. Here, the illustrative embodiments of the present invention and their descriptions are used to explain the present invention, but are not intended to limit the present invention.

[0039] It should also be noted that, in order to avoid obscuring the present invention due to unnecessary details, only structures and / or processing steps closely related to the solutions according to the present invention are shown in the accompanying drawings, while other details that are not closely related to the present invention are omitted.

[0040] It should be emphasized that the term “include / comprises” when used herein refers to the presence of features, elements, steps or components, but does not exclude the presence or addition of one or more other features, elements, steps or components.

[0041] It should also be noted that, unless otherwise specified, the term “connection” herein may refer not only to a direct connection but also to an indirect connection with an intermediate.

[0042] Hereinafter, embodiments of the present invention will be described with reference to the accompanying drawings. In the accompanying drawings, the same reference numerals represent the same or similar components, or the same or similar steps.

[0043] In the prior art, the authorizer implements an open standard for single sign-on, provides registration services and develops a software development kit required for single sign-on. The authorizer will issue a unique identifier and authentication key to the authorized party who has completed the registration, and provide the software development kit to the authorized party for use; after the authorized party performs corresponding secondary development work according to the authorizer's standards, the authorized party can use the authorizer's user information to log in; the present invention proposes a public authorization authentication method, system, storage medium and program product. The public authorization authentication method is performed on a public authorization authentication platform, receives and processes registration information of multiple authorizers and multiple authorized parties imported in batches, obtains the authorizer login protocol and the authorized party login protocol, and distributes preset software development kits that encapsulate various transmission interfaces and protocol specifications specified by the public authorization authentication platform to the authorizer and the authorized party; the authorized party initiates a request for The authorization application authorized by the authorizing party is sent to the authorizing party through the platform's internal information system for review by the authorizing party, and the review result is sent to the authorized party after the authorizing party reviews it; the authorization application is encapsulated through the first interface called by the preset software development toolkit to obtain the application information and transmit it to the public authorization certification platform; the content reviewed by the authorizing party includes the cooperative relationship between the authorized party and the authorizing party, the identity of the authorized party and the security of the authorized party; the consistency between the authorizing party login protocol and the authorized party login protocol of the authorizing party selected by the user is confirmed; the login status information sent by the authorizing party to indicate the user's login to the authorizing party and the confirmation information used to indicate that the user agrees to use the authorizing party's account to log in to the authorized party are received and stored, and the login status information and confirmation information are sent to the authorized party through the second interface called by the preset software development toolkit for the user to successfully log in to the authorized party and jump to the user login success page.

[0044] Figure 1 The following is a flow chart of a public authorization authentication method according to an embodiment of the present invention. Specifically, the present application provides a public authorization authentication method, which is performed on a public authorization authentication platform and includes the following steps S101 to S104:

[0045] Step S101: Receive and process batch-imported registration information of multiple authorizers and multiple authorized parties, obtain the authorizer login protocol and the authorized party login protocol, and distribute the preset software development kit to the authorizer and the authorized party; the software development kit encapsulates various transmission interfaces and protocol specifications specified by the public authorization and authentication platform.

[0046] Step S102: The authorization application initiated by the authorized party for requesting authorization from the authorizing party is sent to the authorizing party through the platform's internal information system, so that the authorizing party can review it and send the review result to the authorized party; the authorization application is encapsulated through the first interface called by the preset software development tool kit to obtain the application information and transmit it to the public authorization authentication platform; the content reviewed by the authorizing party includes the cooperative relationship between the authorized party and the authorizing party, the identity of the authorized party and the security of the authorized party.

[0047] Step S103: Confirm the consistency between the login protocol of the authorizing party and the login protocol of the authorized party selected by the user.

[0048] Step S104: Receive and store the login status information sent by the authorizer to indicate that the user has logged in to the authorizer and the confirmation information to indicate that the user agrees to use the authorizer's account to log in to the authorized party, and send the login status information and confirmation information to the authorized party through the second interface called by the preset software development kit so that the user can successfully log in to the authorized party and jump to the user login success page.

[0049] In step S101, various authorizing parties and authorized parties are batch-connected to the public authorization authentication platform at one time to improve work efficiency and operational convenience; the format, integrity and security of the registration information are reviewed to ensure the security of the connection process of the authorizing parties and authorized parties accessing the public authorization authentication platform; the public authorization authentication platform reviews the registration information and generates detailed error prompt information and indicates the problem based on format errors, information defects and danger warnings, and sends it to the authorizing party and the authorized party through the notification system of the public authorization authentication platform. The notification system includes but is not limited to emails, in-station letters and pop-up windows; the authorizing party and the authorized party organize and transmit the information of the authorizing party and the authorized party in a structured manner according to the data format and transmission requirements of the preset standardized interface, and the data format is not limited to JSON and XML; the batch import template includes but is not limited to file templates in Excel and CSV formats, and batch upload is performed according to the format that matches the public authorization authentication platform database to reduce operational errors and workload. In some embodiments, receiving and processing the registration information of multiple authorizing parties and multiple authorized parties imported in batches includes steps S1011 to S1012:

[0050] Step S1011: Receive registration information of multiple authorizing parties and multiple authorized parties, and review the format, integrity and security of the registration information; when there are format errors, information defects and danger warnings, the public authorization authentication platform returns error prompts to the authorizing party and the authorized party so that the authorizing party and the authorized party can modify and resubmit the registration information.

[0051] Step S1012: Organize and batch upload the information of the authorized parties and authorized parties that have passed the review through the preset standardized interface and batch import template.

[0052] In some embodiments, receiving and processing batch-imported registration information of multiple authorizers and multiple authorized parties further includes steps S1 to S2:

[0053] Step S1: Encrypt the registration information using the Advanced Encryption Standard or an asymmetric encryption algorithm.

[0054] Step S2: The registration information of the authorizing party and the registration information of the authorized party are stored in different table spaces of the public authorization authentication platform respectively.

[0055] Specifically, the Advanced Encryption Standard (AES) converts registration information into ciphertext form. The asymmetric encryption algorithm uses a pairing mechanism of public keys and private keys. The public key is publicly used to encrypt data and the corresponding private key is used for decryption to ensure the confidentiality of data during storage and transmission. Both the authorizer tablespace and the authorized party tablespace contain multiple data tables. The multiple data tables of the authorizer tablespace are used to store the authorizer's basic information, authorized resource information and authorization history information respectively. The multiple data tables of the authorized party tablespace are used to store the authorized party's identity information, authorized purpose description and usage records respectively. Through clear tablespace division, data is isolated from each other in physical storage and mutual interference between data is reduced. Indexes are established in each data table to quickly locate the data storage location in subsequent queries and improve response speed.

[0056] Furthermore, the preset software development kit is public content provided by the public authorization and authentication platform for use by the licensor and the authorized party. The software development kit is used to integrate and develop relevant authentication functions. The licensor and the authorized party embed the preset software development kit into their respective projects. The project uses the service deployed on the server of the public authorization and authentication platform to achieve seamless connection and data interaction between the licensor and the authorized party through various transmission interfaces in the preset software development kit; the user opens the login address preset by the licensor in the browser and goes to the login page. When the user has logged in in the licensor, the login is automatically successful and the user is redirected back to the authorized party to enter the login success page and keep the user logged in.

[0057] In step S102 and step S103, the application information includes but is not limited to the basic information of the authorized party, the business scope and the purpose of the intervention; the internal information system of the platform includes but is not limited to emails and internal messages. After the authorization party initiates the application, the authorized party shall review it. The key to the review is to ensure that each partner meets the security and business requirements. After the review is passed, the connection relationship between the two parties is confirmed on the public authorization authentication platform; in some embodiments, after receiving the authorization application initiated by the authorized party to request the authorization of the authorization party, sending it to the authorization party through the internal information system of the platform for the authorization party to review, it also includes: when the authorization party reviews the authorization application and fails, receiving the reason feedback information sent by the authorization party and transmitting the reason feedback information to the authorized party for the authorized party to adjust the authorization application and resend it. Furthermore, both the authorized party and the authorization party can initiate authorization applications as applicants to the target party of the public authorization authentication platform and be reviewed by the target party.

[0058] Furthermore, the user selects the account of the authorizing party to be used to log in to the authorized party, and compares the login protocol of the authorizing party with the login protocol of the authorized party. In some embodiments, the consistency confirmation of the login protocol of the authorizing party and the login protocol of the authorized party includes: comparing the login protocol of the authorizing party selected by the user after the authorized party logs in with the login protocol of the authorized party to see if they are consistent. If they are consistent, the agreement of both parties is used. If they are inconsistent, the protocol conversion is automatically performed through the protocol conversion function of the public authorization authentication platform. The security and privacy of the user during the login process are ensured by the protocol conversion function, thereby effectively preventing unauthorized access and data leakage. The public authorization authentication platform has the ability to expand multiple single sign-on protocols and support multiple different authentication protocols, using seamless docking between different authorizing parties and authorized parties and unified verification of user identities.

[0059] In step S104, after the user logs in to the authorizing party and agrees to use the authorizing party account to log in to the authorized party, the confirmation information and login status information are sent to the public authorization authentication platform. The confirmation information indicates that the user agrees to use the authorizing party account to log in to the authorized party, and the login status information indicates the user-related information when the user logs in to the authorizing party. The user logs in to the authorized party based on the confirmation information and login status information and directly jumps to the user login success page; the confirmation information and login status information are stored in the public authorization authentication platform, and the user does not need to log in to the authorizing party again and can directly jump to the user login success page of the authorized party.

[0060] In some embodiments, after receiving and storing the login status information sent by the authorizer to indicate that the user has logged in to the authorizer and the confirmation information to indicate that the user agrees to use the account of the authorizer to log in to the authorized party, and sending the login status information and the confirmation information to the authorized party through the second interface called by the preset software development kit for the user to successfully log in to the authorized party and jump to the user login success page, it also includes:

[0061] The login status information and confirmation information are stored in the local storage module of the public authorization authentication platform. When the user opens the user login address configured by the software development kit in the browser and enters the login page, the authorized party directly enters the user login success page based on the login status information and confirmation information and maintains the user's login status.

[0062] On the other hand, the present invention also provides a public authorization authentication system, the system comprising:

[0063] The authorization module is used to send the authorization party registration information and the authorization party login agreement to the public authorization authentication platform, receive the preset software development kit allocated by the public authorization authentication platform, and review the authorization application.

[0064] The authorized module is used to send the authorized party registration information and authorized login agreement to the public authorization authentication platform, receive the preset software development kit allocated by the public authorization authentication platform, initiate the authorization application for requesting authorization from the authorizing party and receive the review result.

[0065] The client module is used for users to access and log in to the authorized party and confirm the authorizer who needs to initiate the authorization request.

[0066] A public authorization authentication platform is used to execute a public authorization authentication method such as any of the above, receive and process batch-imported registration information of multiple authorizers and multiple authorized parties, obtain the authorizer login protocol and the authorized party login protocol and distribute the preset software development kit to the authorizer and the authorized party; send the authorization application initiated by the authorized party to request the authorization of the authorizer to the authorizer through the platform's internal information system, so that the authorizer can review it and send the review result to the authorized party; confirm the consistency between the authorizer login protocol and the authorized party login protocol of the authorizer selected by the user to be used; receive and store the login status information sent by the authorizer to indicate the user's login to the authorizer and the confirmation information to indicate the user agrees to use the authorizer's account to log in to the authorized party, and send the login status information and confirmation information to the authorized party through the second interface called by the preset software development kit so that the user can successfully log in to the authorized party and jump to the user login success page.

[0067] In some embodiments, the system further comprises:

[0068] The cloud storage module is used to store registration information, authorization party login protocol, authorization party login protocol, authorization application, login status information and confirmation information in the process of the public authorization authentication method executed on the public authorization authentication platform.

[0069] Specifically, storing registration information, authorization party login agreement, authorization party login agreement, authorization application, login status information and confirmation information in the cloud storage module can achieve efficient centralized data management and provide users with a more convenient and secure login experience.

[0070] On the other hand, the present invention further provides a computer-readable storage medium having a computer program / instruction stored thereon, which implements the steps of any of the above methods when the program / instruction is executed by a processor.

[0071] On the other hand, the present invention further provides a computer program product, comprising a computer program / instruction, which implements the steps of any of the above methods when executed by a processor.

[0072] The present invention is described below in conjunction with a specific embodiment:

[0073] The present invention provides a public authorization authentication method, system, storage medium and program product. The public authorization authentication method is performed on a public authorization authentication platform. The public authorization authentication platform constructs an efficient login authorization application system for users. Both the authorizer and the authorized party can easily access all user information that has been connected to the platform. When one party needs to connect with the other party, it can submit an application through the platform, and the other party is responsible for review. After the review process is completed and passed, both parties can rely on the platform to achieve authorized login, thereby achieving a more efficient and secure user authentication process. Users can batch access various different authorizers and authorized parties at one time without manually adding partners one by one, thereby greatly improving work efficiency and convenience of operation; both the authorizer and the authorized party can join the public authorization authentication platform through this batch access method, making the interconnection and interoperability of the entire public authorization authentication system more efficient and smooth. The public authorization and authentication platform provides a common software development kit (SDK) that can be used by both the authorizer and the authorized party. The authorizer and the authorized party need to embed the SDK into their respective projects. Their respective projects use the services deployed on the server of the public authorization and authentication platform to achieve seamless connection and data interaction between the two systems. Specifically, the authorizer needs to configure the user's login address and the authorized party's jump address according to the established rules. When the user of the authorizer opens this configured login address in the browser, the user will enter a login page. If the user has already logged in in the authorizer, then they do not need to log in again. After the user successfully logs in, the system will automatically redirect them to the authorized party, and the authorized party will keep the user logged in. The authorized party obtains the relevant information of the user in the authorizer and uses this information to perform further business operations.

[0074] Figure 2The structure diagram of the public authorization authentication system described in one embodiment of the present invention. The specific process of the public authorization authentication system includes: the authorizer of the authorization module and the authorized party of the authorized module register on the public authorization authentication platform and confirm the login protocol of the authorizer and the login protocol of the authorized party used; when the authorized party wants to log in using the user account of the authorizer, the authorized party applies for authorization from the authorizer on the public authorization authentication platform and the platform notifies the authorizer through a message, and the authorizer provides the public authorization authentication platform to notify the authorized party of the audit result after the audit list is passed; the user logs in on the client module of the authorized party, and the user selects the authorizer to be used; the authorized party confirms the protocol used by the authorizer on the public authorization authentication platform; the public authorization authentication platform determines whether both parties use the same protocol, if not, the protocol conversion is automatically performed; after jumping to the authorizer, the user is authorized and the user agrees to use the authorizer account to log in to the authorized party; after the authorized party successfully logs in, the user jumps to the login success page of the authorized party.

[0075] The authorizer and the authorized party only need to access the public authorization and authentication platform to easily implement the single sign-on function. Both parties can perform seamless identity authentication and access control, simplifying the operation process and improving efficiency. In this way, users only need to log in once to access all authorized resources without having to repeatedly enter credentials, thereby improving the user experience. In addition, this single sign-on solution also enhances the security of the system because users do not need to reuse the same password on multiple platforms, reducing potential security risks.

[0076] When there is inconsistency between the authorizer and the authorized party in the login protocol, the protocol conversion function is used to smoothly complete the entire login docking process; the two parties conduct seamless data exchange and information sharing to ensure that the entire access process is both efficient and convenient.

[0077] In summary, the present invention provides a public authorization authentication method, system, storage medium and program product, which receive and process the registration information of multiple authorizers and multiple authorized parties imported in batches, obtain the authorizer login protocol and the authorized party login protocol and distribute the preset software development kit to the authorizer and the authorized party; the software development kit encapsulates various transmission interfaces and protocol specifications specified by the public authorization authentication platform; the authorization application initiated by the authorized party to request the authorization of the authorizer is sent to the authorizer through the platform's internal information system, so that the authorizer can review it and send the review result to the authorized party; the authorization application is obtained by encapsulating the application information through the first interface called by the preset software development kit And transmit it to the public authorization authentication platform; the content reviewed by the authorizer includes the cooperative relationship between the authorized party and the authorizer, the identity of the authorized party and the security of the authorized party; the consistency between the authorizer login protocol of the authorizer selected by the user and the authorized party login protocol is confirmed; the login status information sent by the authorizer to indicate that the user has logged in to the authorizer and the confirmation information used to indicate that the user agrees to use the authorizer's account to log in to the authorized party are received and stored, and the login status information and the confirmation information are sent to the authorized party through the second interface called by the preset software development kit so that the user can successfully log in to the authorized party and jump to the user login success page.

[0078] The embodiment of the present invention also provides a computer-readable storage medium on which a computer program is stored, and when the computer program is executed by a processor, the steps of the aforementioned edge computing server deployment method are implemented. The computer-readable storage medium can be a tangible storage medium, such as a random access memory (RAM), a memory, a read-only memory (ROM), an electrically programmable ROM, an electrically erasable programmable ROM, a register, a floppy disk, a hard disk, a removable storage disk, a CD-ROM, or any other form of storage medium known in the technical field.

[0079] It should be understood by those skilled in the art that the exemplary components, systems and methods described in conjunction with the embodiments disclosed herein can be implemented in hardware, software or a combination of the two. Whether it is performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of the present invention. When implemented in hardware, it can be, for example, an electronic circuit, an application specific integrated circuit (ASIC), appropriate firmware, a plug-in, a function card, etc. When implemented in software, the elements of the present invention are programs or code segments used to perform the required tasks. The program or code segment can be stored in a machine-readable medium, or transmitted on a transmission medium or a communication link via a data signal carried in a carrier.

[0080] It should be clear that the present invention is not limited to the specific configuration and processing described above and shown in the figures. For the sake of simplicity, a detailed description of the known method is omitted here. In the above embodiments, several specific steps are described and shown as examples. However, the method process of the present invention is not limited to the specific steps described and shown, and those skilled in the art can make various changes, modifications and additions, or change the order between the steps after understanding the spirit of the present invention.

[0081] In the present invention, features described and / or illustrated for one embodiment may be used in the same or similar manner in one or more other embodiments, and / or combined with features of other embodiments or replace features of other embodiments.

[0082] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. For those skilled in the art, the embodiments of the present invention may have various modifications and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.

Claims

1. A public authorization authentication method, characterized in that: The method is performed on a public authorization authentication platform, and comprises: Receive and process batch-imported registration information of multiple authorizers and multiple authorized parties, obtain the authorizer login protocol and the authorized party login protocol, and distribute a preset software development kit to the authorizer and the authorized party; the software development kit encapsulates various transmission interfaces and protocol specifications specified by the public authorization authentication platform; The authorization application initiated by the authorized party for requesting the authorization of the authorization party is sent to the authorization party through the internal information system of the platform, so that the authorization party can review and send the review result to the authorized party; the authorization application is obtained by encapsulating the application information through the first interface called by the preset software development toolkit and transmitted to the public authorization authentication platform; the content reviewed by the authorization party includes the cooperative relationship between the authorized party and the authorization party, the identity of the authorized party and the security of the authorized party; Confirm the consistency between the login protocol of the authorizing party and the login protocol of the authorized party selected by the user; Receive and store login status information sent by the authorizer to indicate that the user has logged into the authorizer and confirmation information to indicate that the user agrees to use the account of the authorizer to log in to the authorized party, and send the login status information and the confirmation information to the authorized party through a second interface called by the preset software development kit so that the user can successfully log in to the authorized party and jump to the user login success page.

2. The public authorization authentication method according to claim 1, characterized in that: Receiving and processing batch-imported registration information of multiple authorizers and multiple licensees includes: Receive registration information of multiple authorizers and multiple authorized parties, and review the format, integrity and security of the registration information; when there are format errors, information defects and danger warnings, the public authorization authentication platform returns error prompts to the authorizers and the authorized parties so that the authorizers and the authorized parties can modify and resubmit the registration information; The information of the authorizing party and the authorized party that have passed the review is sorted and uploaded in batches through the preset standardized interface and batch import template.

3. The public authorization authentication method according to claim 2, characterized in that: Receiving and processing batch-imported registration information of multiple authorizers and multiple licensees also includes: Encrypting the registration information using an advanced encryption standard or an asymmetric encryption algorithm; The authorization party registration information and the authorization party registration information are respectively stored in different table spaces of the public authorization authentication platform.

4. The public authorization authentication method according to claim 1, characterized in that: After receiving the authorization application initiated by the authorized party for requesting the authorization of the authorizer, and sending it to the authorizer through the internal information system of the platform for the authorizer to review, it also includes: When the authorization party examines and finds that the authorization application is not passed, the authorization party receives the reason feedback information sent by the authorization party and transmits the reason feedback information to the authorized party so that the authorized party can adjust the authorization application and resend it.

5. The public authorization authentication method according to claim 1, characterized in that: Confirming the consistency between the login protocol of the authorizing party and the login protocol of the authorized party includes: The authorization party login protocol of the authorization party selected by the user after logging in to the authorized party is compared with the authorized party login protocol to see if they are consistent. If they are consistent, the agreement of both parties is used. If they are inconsistent, the protocol conversion is automatically performed through the protocol conversion function of the public authorization authentication platform.

6. The public authorization authentication method according to claim 1, characterized in that: After receiving and storing the login status information sent by the authorizer to indicate that the user has logged into the authorizer and the confirmation information to indicate that the user agrees to use the account of the authorizer to log into the authorized party, and sending the login status information and the confirmation information to the authorized party through the second interface called by the preset software development kit for the user to successfully log into the authorized party and jump to the user login success page, it also includes: The login status information and the confirmation information are stored in the local storage module of the public authorization authentication platform. When the user opens the user login address configured by the software development kit in the browser and enters the login page, the authorized party directly enters the user login success page according to the login status information and the confirmation information and maintains the user's login status.

7. A public authorization authentication system, characterized in that: The system comprises: An authorization module is used to send the authorization party registration information and the authorization party login agreement to the public authorization authentication platform, receive the preset software development kit allocated by the public authorization authentication platform, and review the authorization application; The authorized module is used to send the authorized party registration information and the authorized login agreement to the public authorization authentication platform, receive the preset software development kit allocated by the public authorization authentication platform, initiate an authorization application for requesting the authorization party to authorize and receive the review result; The client module is used for users to access and log in to the authorized party and confirm the authorizer who needs to initiate the authorization request; A public authorization authentication platform, used to execute the public authorization authentication method as described in any one of claims 1 to 6, receive and process the registration information of multiple authorizers and multiple authorized parties imported in batches, obtain the authorizer login protocol and the authorized party login protocol and distribute the preset software development kit to the authorizer and the authorized party; send the authorization application initiated by the authorized party to request the authorization of the authorizer to the authorizer through the platform's internal information system, so that the authorizer can review it and send the review result to the authorized party; confirm the consistency between the authorizer login protocol and the authorized party login protocol of the authorizer selected by the user to be used; receive and store the login status information sent by the authorizer to indicate that the user has logged in to the authorizer and the confirmation information to indicate that the user agrees to use the authorizer's account to log in to the authorized party, and send the login status information and the confirmation information to the authorized party through the second interface called by the preset software development kit so that the user can successfully log in to the authorized party and jump to the user login success page.

8. A public authorization authentication system according to claim 7, characterized in that: The system further comprises: The cloud storage module is used to store the registration information, the authorizing party login protocol, the authorized party login protocol, the authorization application, the login status information and the confirmation information in the process of the public authorization authentication method executed on the public authorization authentication platform.

9. A computer-readable storage medium having a computer program / instruction stored thereon, characterized in that: When the computer program / instructions are executed by a processor, the steps of the method according to any one of claims 1 to 8 are implemented.

10. A computer program product comprising a computer program / instructions, characterized in that When the computer program / instructions are executed by a processor, the steps of the method according to any one of claims 1 to 8 are implemented.

Images