Authorization information verification method, device and system, electronic equipment and storage medium

Abstract

The embodiment of the invention provides an authorization information verification method, and the method comprises the steps: receiving the key information of at least one protection assembly when to-be-executed authorization information is obtained, encrypting the to-be-executed authorization information based on the key information transmitted by the protection assembly and a preset encryption method, and obtaining the encrypted information of the to-be-executed authorization information; the encrypted information of the authorization information to be executed is returned to the protection component, so that the protection component performs legality verification on the encrypted information; and when a legality verification result returned by the at least one protection component is received, the legality verification result is sent to the authorization center service, so that the authorization center service returns an execution command according to the legality verification result, and the at least one protection component executes the authorization information to be executed according to the execution command. The authorization information is verified through the method, so that the authorization information has flexibility and randomness in the verification process, and the safety of the authorization process is improved.

Description

Technical Field

[0001] The present invention relates to the field of network security, and in particular to an authorization information verification method, device, system, electronic device, and storage medium. Background Art

[0002] In a network environment and a system environment, the verification of authorization information is a key issue in network security. In the existing authorization information verification technology, a communication connection is established between a dynamic library and an authorization service, so that authorization verification is performed end-to-end. However, in the verification process, there may be a problem of exposure of dynamic library function symbols, and thus there is a risk of being decompiled. Therefore, the existing authorization information verification method has the problems that the authorization information verification process is insecure and the verification process is simple. Summary of the Invention

[0003] An embodiment of the present invention provides an authorization information verification method, aiming to solve the problems that the existing authorization information verification method has an insecure authorization information verification process and a simple verification process. Receive key information of at least one protection component, and encrypt the authorization information to be executed based on the key information and a preset encryption method to obtain encrypted information, and return the encrypted information to the protection component so that the protection component can perform a legality verification on the encrypted information. When receiving the legality verification results returned by at least one protection component, send the results to the authorization center service so that the authorization center service can return an execution command according to the legality verification results, and at least one protection component executes the authorization information to be executed according to the execution command. By encrypting the authorization information in the authorization dynamic library component and decrypting it in the protection component, and also needing to confirm according to the execution instruction sent by the authorization center service, that is, through the collaborative verification, encryption, and distributed processing of the protection component, authorization dynamic library component, and authorization center service in the system to perform authorization processing on the authorization information, so that the authorization information has flexibility and randomness in the verification process, thereby improving the security of the authorization process.

[0004] In a first aspect, an embodiment of the present invention provides an authorization information verification method for an authorization dynamic library component, where the authorization dynamic library component is communicatively connected to at least one protection component, and the method includes the following steps:

[0005] When obtaining the authorization information to be executed, receive key information of at least one protection component, and encrypt the authorization information to be executed based on the key information sent by at least one of the protection components and a preset encryption method to obtain encrypted information of the authorization information to be executed;

[0006] Return the encrypted information of the authorization information to be executed to the protection component that sent the key information, so that the protection component performs a legality verification on the encrypted information;

[0007] When receiving the legality verification result returned by at least one of the protection components, send the legality verification result to the authorization center service so that the authorization center service returns an execution command according to the legality verification result;

[0008] Send the execution command to at least one of the protection components so that at least one of the protection components decrypts the encrypted information to obtain the to-be-executed authorization information, and the execution command is used to indicate that the legality verification result passes the verification of the authorization center service.

[0009] Optionally, encrypting the to-be-executed authorization information based on the key information sent by at least one of the protection components and a preset encryption method to obtain the encrypted information of the to-be-executed authorization information includes:

[0010] Based on the bytes of the to-be-executed authorization information, divide the to-be-executed authorization information into multiple authorization sub-information bodies;

[0011] Perform modulo calculations of taking the remainder on the key information and the multiple authorization sub-information bodies respectively to obtain multiple key offset values and the authorization sub-information bodies at the positions corresponding to the respective key offset values;

[0012] Encrypt the corresponding authorization sub-information body through each of the key offset values to obtain the encrypted information of the to-be-executed authorization information.

[0013] In a second aspect, an embodiment of the present invention further provides an authorization information verification method for authorizing a dynamic library component, where the authorization dynamic library component is communicatively connected to at least one protection component, and the method includes the following steps:

[0014] Optionally, for a protection component, at least one of the protection components is communicatively connected to an authorization dynamic library component, and the method includes the following steps:

[0015] When it is detected that the authorization dynamic library component obtains the to-be-executed authorization information, send the key information to the authorization dynamic library component so that the authorization dynamic library component encrypts the to-be-executed authorization information according to the key information and a preset encryption method to obtain the encrypted information of the to-be-executed authorization information;

[0016] When receiving the encrypted information sent by the authorization dynamic library component, decrypt the encrypted information of the to-be-executed authorization information according to the key information and a preset decryption method to obtain the decrypted information of the to-be-executed authorization information;

[0017] Perform a legality verification on the decrypted information to obtain a legality verification result of the decrypted information;

[0018] Send the legality verification result of the decrypted information to the authorized dynamic library component, so that the authorized dynamic library component sends the legality verification result of the decrypted information to the authorization center service;

[0019] When receiving the received instruction or rejection instruction returned by the authorized dynamic library component, decrypt the encrypted information to obtain the to-be-executed authorization information, where the received instruction and the rejection instruction are used to indicate that the legality verification result passes the verification of the authorization center service.

[0020] Optionally, when receiving the encrypted information sent by the authorized dynamic library component, decrypt the encrypted information of the to-be-executed authorization information according to the key information and a preset decryption method to obtain the decrypted information of the to-be-executed authorization information, including:

[0021] Based on the bytes of the encrypted information, divide the encrypted information into multiple encrypted sub-information bodies in the encrypted information;

[0022] Circularly decrypt the multiple encrypted sub-information bodies through the key information and the key offset value to obtain the decrypted information of the to-be-executed authorization information.

[0023] Optionally, verifying the legality of the decrypted information to obtain the legality verification result of the decrypted information includes:

[0024] Determine whether the flag bit of the decrypted information coincides with the flag bit of the encrypted information in the byte position;

[0025] If the flag bit of the decrypted information coincides with the preset flag bit in the encrypted information in the byte position, determine that the legality verification result of the decrypted information passes;

[0026] If the flag bit of the decrypted information does not coincide with the preset flag bit in the encrypted information in the byte position, determine that the legality verification result of the decrypted information fails.

[0027] In a third aspect, an embodiment of the present invention further provides an authorized dynamic library component, which is communicatively connected to at least one protection component, and the authorized dynamic library component includes:

[0028] A first acquisition module, configured to, when acquiring the to-be-executed authorization information, receive the key information of at least one protection component, and encrypt the to-be-executed authorization information based on the key information sent by at least one of the protection components and a preset encryption method to obtain the encrypted information of the to-be-executed authorization information;

[0029] The first encryption module is used to return the encrypted information of the to-be-executed authorization information to the protection component that sends the key information, so that the protection component performs a legality verification on the encrypted information;

[0030] The second acquisition module is used to, when receiving the legality verification results returned from at least one of the protection components, send the legality verification results to the authorization center service, so that the authorization center service returns an execution command according to the legality verification results;

[0031] The first sending module is used to send the execution command to at least one of the protection components, so that at least one of the protection components decrypts the encrypted information to obtain the to-be-executed authorization information, and the execution command is used to indicate that the legality verification result passes the verification of the authorization center service.

[0032] Fourthly, an embodiment of the present invention further provides a protection component. At least one of the protection components is communicatively connected to an authorization dynamic library component. The protection component includes:

[0033] The third acquisition module is used to, when detecting that the authorization dynamic library component acquires the to-be-executed authorization information, send key information to the authorization dynamic library component, so that the authorization dynamic library component encrypts the to-be-executed authorization information according to the key information and a preset encryption method to obtain the encrypted information of the to-be-executed authorization information;

[0034] The first decryption module is used to, when receiving the encrypted information sent by the authorization dynamic library component, decrypt the encrypted information of the to-be-executed authorization information according to the key information and a preset decryption method to obtain the decrypted information of the to-be-executed authorization information;

[0035] The first verification module is used to perform a legality verification on the decrypted information to obtain the legality verification result of the decrypted information;

[0036] The fourth acquisition module is used to send the legality verification result of the decrypted information to the authorization dynamic library component, so that the authorization dynamic library component sends the legality verification result of the decrypted information to the authorization center service;

[0037] The execution module is used to, when receiving a reception instruction or a rejection instruction returned by the authorization dynamic library component, decrypt the encrypted information to obtain the to-be-executed authorization information, and the reception instruction and the rejection instruction are used to indicate that the legality verification result passes the verification of the authorization center service.

[0038] Fifth aspect, an embodiment of the present invention provides an authorization information verification system, where the authorization information verification system includes: an authorization dynamic library component, a protection component, and an authorization center service, and the authorization dynamic library component, the protection component, and the authorization center service are communicatively connected;

[0039] The authorization dynamic library component is configured to, when obtaining the authorization information to be executed, receive the key information of at least one protection component, and encrypt the authorization information to be executed based on the key information sent by at least one of the protection components and a preset encryption method to obtain the encrypted information of the authorization information to be executed;

[0040] The authorization dynamic library component is further configured to return the encrypted information of the authorization information to be executed to the protection component that sends the key information, so that the protection component performs a legality verification on the encrypted information;

[0041] The authorization dynamic library component is further configured to, when receiving the legality verification result returned by at least one of the protection components, send the legality verification result to the authorization center service, so that the authorization center service returns an execution command according to the legality verification result;

[0042] The authorization dynamic library component is further configured to send the execution command to at least one of the protection components, so that at least one of the protection components decrypts the encrypted information to obtain the authorization information to be executed, and the execution command is used to indicate that the legality verification result passes the verification of the authorization center service;

[0043] The protection component is configured to, when detecting that the authorization dynamic library component obtains the authorization information to be executed, send the key information to the authorization dynamic library component, so that the authorization dynamic library component encrypts the authorization information to be executed according to the key information and a preset encryption method to obtain the encrypted information of the authorization information to be executed;

[0044] The protection component is further configured to, when receiving the encrypted information sent by the authorization dynamic library component, decrypt the encrypted information of the authorization information to be executed according to the key information and a preset decryption method to obtain the decrypted information of the authorization information to be executed;

[0045] The protection component is further configured to perform a legality verification on the decrypted information to obtain the legality verification result of the decrypted information;

[0046] The protection component is further configured to send the legality verification result of the decrypted information to the authorization dynamic library component, so that the authorization dynamic library component sends the legality verification result of the decrypted information to the authorization center service;

[0047] The protection component is further configured to decrypt the encrypted information to obtain the to-be-executed authorization information when receiving a reception instruction or a rejection instruction returned by the authorization dynamic library component, where the reception instruction and the rejection instruction are used to indicate that the legality verification result passes the verification of the authorization center service;

[0048] The authorization center service is configured to send the to-be-executed authorization information to the authorization dynamic library component;

[0049] The authorization center service is further configured to receive the legality verification result of the authorization dynamic library component;

[0050] The authorization center service is further configured to return an execution command to the authorization dynamic library component according to the legality verification result.

[0051] In a sixth aspect, an embodiment of the present invention provides an electronic device, including: a memory, a processor, and a computer program stored on the memory and executable on the processor, where when the processor executes the computer program, the steps in the authorization information verification method provided by the embodiment of the present invention are implemented.

[0052] In a seventh aspect, an embodiment of the present invention provides a computer-readable storage medium, on which a computer program is stored, and when the computer program is executed by a processor, the steps in the authorization information verification method provided by the embodiment of the invention are implemented.

[0053] In the embodiment of the present invention, when obtaining the to-be-executed authorization information, key information of at least one protection component is received, and the to-be-executed authorization information is encrypted based on the key information sent by at least one of the protection components and a preset encryption method to obtain encrypted information of the to-be-executed authorization information; the encrypted information of the to-be-executed authorization information is returned to the protection component so that the protection component performs a legality verification on the encrypted information; when receiving a legality verification result returned by at least one of the protection components, the legality verification result is sent to the authorization center service so that the authorization center service executes the to-be-executed authorization information according to the legality verification result. By encrypting the authorization information in the authorization dynamic library component, decrypting it in the protection component, and also needing to confirm according to the execution instruction sent by the authorization center service, that is, through the collaborative verification, encryption, and distributed processing of the protection component, the authorization dynamic library component, and the authorization center service in the system, the authorization information is authorized, making the authorization information flexible and random during the verification process, thereby improving the security of the authorization process. BRIEF DESCRIPTION OF THE DRAWINGS

[0054] To more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the following will briefly introduce the accompanying drawings required for the description of the embodiments or the prior art. Obviously, the accompanying drawings in the following description are only some embodiments of the present invention. For those of ordinary skill in the art, without creative efforts, other accompanying drawings can be obtained based on these drawings.

[0055] Figure 1 It is the system architecture diagram of an authorization information verification system provided by an embodiment of the present invention;

[0056] Figure 2 It is the flowchart of an authorization information verification method provided by an embodiment of the present invention;

[0057] Figure 3 It is the flowchart of an authorization information encryption provided by an embodiment of the present invention;

[0058] Figure 4 It is the flowchart of another authorization information verification method provided by an embodiment of the present invention;

[0059] Figure 5 It is the flowchart of an authorization information decryption provided by an embodiment of the present invention;

[0060] Figure 6 It is the flowchart of a dynamic authorization information verification provided by an embodiment of the present invention;

[0061] Figure 7 It is the structural schematic diagram of an authorization dynamic library component provided in an embodiment of the present invention;

[0062] Figure 8 It is the structural schematic diagram of a protection component provided in an embodiment of the present invention;

[0063] Figure 9 It is the structural schematic diagram of an electronic device provided by an embodiment of the present invention. Detailed implementation manners

[0064] The following will clearly and completely describe the technical solutions in the embodiments of the present invention in conjunction with the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only some embodiments of the present invention, rather than all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts belong to the scope of protection of the present invention.

[0065] As Figure 1 shown, Figure 1 It is the system architecture diagram of an authorization information verification system provided by an embodiment of the present invention. The system includes: an authorization dynamic library component 101, a protection component 102, and an authorization center service 103.

[0066] Among them, the above-mentioned authorized dynamic library component 101 can obtain the to-be-executed authorization information sent by the above-mentioned authorization center service 103, and encrypt the to-be-executed authorization information through a preset encryption method and the random key provided by the above-mentioned protection component 102 to obtain encrypted information, and return it to the above-mentioned protection component 102. The above-mentioned protection component 102 then decrypts the encrypted information through the random key and a preset decryption method to obtain decrypted information, and performs a legality verification on the decrypted information to obtain a legality verification result, and sends it to the above-mentioned authorized dynamic library component. Finally, the above-mentioned authorized dynamic library component sends the above-mentioned legality verification result to the above-mentioned authorization center service, and the above-mentioned authorization center service returns an execution command according to the above-mentioned legality verification result. The above-mentioned authorized dynamic library component sends the execution command to the above-mentioned protection component, and the above-mentioned protection component executes the above-mentioned to-be-executed authorization information according to the above-mentioned execution command. The above-mentioned execution command may be a receive instruction or a reject instruction sent by the above-mentioned authorization center service to the above-mentioned authorized dynamic library component according to the above-mentioned legality verification result. The above-mentioned protection component may confirm whether to perform an execution operation or a reject execution operation on the above-mentioned to-be-executed authorization information according to the above-mentioned receive instruction or reject instruction.

[0067] In an embodiment of the present invention, the above-mentioned authorized dynamic library component, protection component, and authorization center service are communicatively connected. The above-mentioned authorization information verification system can be used in any device that needs to perform authorization information verification. The above-mentioned authorized dynamic library component can be connected to the above-mentioned authorization center service through a private channel, obtain the to-be-executed authorization information of the authorization center service, and be communicatively connected to at least one protection component. The above-mentioned authorized dynamic library component may include an authorized static library and an authorized dynamic library, that is, the above-mentioned authorized dynamic library is an integration of the authorized static library and the authorized dynamic library. The above-mentioned authorized dynamic library can also encrypt the to-be-executed authorization information through a preset encryption method and the key sent by the above-mentioned protection component, and then return it to the above-mentioned protection component. Finally, the legality verification result of the above-mentioned protection component for the above-mentioned to-be-executed authorization information is sent to the above-mentioned authorization center service. The above-mentioned execution command may be the result of the above-mentioned authorization center service confirming the legality verification result of the above-mentioned protection component.

[0068] The above-mentioned protection component may be composed of multiple computing units that can call an encrypted static library to obtain a random key, and can decrypt the encrypted information obtained by the above-mentioned authorized dynamic library component through a preset decryption method and a key to obtain decrypted information, and perform a legality verification on the decrypted information to obtain the legality verification result of the above-mentioned decrypted information.

[0069] The above authorization center service can send the above to-be-executed authorization information to the authorization dynamic library component, receive the legality verification result of the authorization dynamic library component, and return an execution command according to the above legality verification result.

[0070] As Figure 2 shown, Figure 2 is a flowchart of an authorization information verification method provided by an embodiment of the present invention. The authorization information verification method includes the steps:

[0071] 201. When obtaining the to-be-executed authorization information, receive the key information of at least one protection component, and encrypt the to-be-executed authorization information based on the key information sent by at least one protection component and a preset encryption method to obtain the encrypted information of the to-be-executed authorization information.

[0072] In an embodiment of the present invention, the above authorization information verification method can be applied to the authorization dynamic library in the above authorization information verification system. The above authorization information verification system has functions such as data processing, data sending and receiving, and data storage, and can be built based on a server or a server cluster. The above server or server cluster can be an electronic device with functions such as data processing, data sending and receiving, and data storage.

[0073] The above to-be-executed authorization information can be information containing authorization content obtained through the authorization center service in the above authorization information verification system. Generally speaking, the content of the above to-be-executed authorization information includes what steps or permissions are authorized.

[0074] The above protection component can be multiple computing units in the above authorization information verification system that can call an encrypted static library to obtain a random key. The above key information can refer to the random key obtained by the above protection component calling the encrypted static library. The random key can be a random integer array K = Func(rand(x)), where the random key can increase randomness in two parts. One is the randomness of the key length within a certain range, and the other is the randomness of the value generated each time within a certain range. And the generated random key is cached by the above protection component.

[0075] The above preset encryption method can be encryption methods such as "shuffle" encryption, AES, RSA, or Twofish. The authorization dynamic library component in the above authorization information verification system can encrypt the above to-be-executed authorization information through the above preset encryption method and the above random key, and then return it to the above protection component.

[0076] The above encrypted information can be information such as ciphertext obtained through the encryption operation of the above authorization dynamic library component.

[0077] In a possible embodiment, after the above authorization information verification system obtains the to-be-executed authorization information, it sends the to-be-executed authorization information to the above authorization dynamic library component, and obtains a random key from the above protection component, so that the authorization dynamic library can encrypt the to-be-executed authorization information through the random key and a preset encryption method to obtain encrypted information.

[0078] 202. Return the encrypted information of the to-be-executed authorization information to the protection component that sent the key information, so that the protection component can perform a legality verification on the encrypted information.

[0079] In an embodiment of the present invention, the encrypted information of the to-be-executed authorization information can be transmitted through the communication connection between the authorization dynamic library and the protection component.

[0080] The above legality verification can be a process of verifying the information content or data of the to-be-executed authorization information. In a possible embodiment, legality analysis can be performed on the decrypted information obtained by decrypting the multiple encrypted information by multiple above protection components to obtain multiple legality verification results, and the multiple legality verification results can be screened to obtain the final legality verification result.

[0081] In a possible embodiment, after the above authorization information verification system performs a legality verification on the encrypted information of the to-be-executed authorization information through multiple above protection components, multiple legality verification results are obtained, and according to these multiple legality verification results and a preset rule, the final legality verification result is screened out. The above preset rule can be determined according to specific implementation schemes.

[0082] 203. When receiving the legality verification result returned by at least one protection component, send the legality verification result to the authorization center service, so that the authorization center service returns an execution command according to the legality verification result.

[0083] In an embodiment of the present invention, the above execution command can be a receive instruction or a reject instruction sent by the above authorization center service to the above authorization dynamic library component according to the above legality verification result, and the above protection component can confirm whether to perform an execution operation or a reject execution operation on the to-be-executed authorization information according to the above receive instruction or reject instruction.

[0084] The above authorization dynamic library component packs the legality verification results from multiple protection components and sends them to the authorization center service through a private connection channel. The above private connection channel can be a channel for internal service communication, and the outside world cannot obtain information from this connection channel.

[0085] 204. Send an execution command to at least one protection component so that the at least one protection component decrypts the encrypted information to obtain the to-be-executed authorization information. The execution command is used to indicate that the legality verification result passes the verification of the authorization center service.

[0086] In an embodiment of the present invention, the above receiving process can be performed according to the communication connection between the above authorization dynamic library component and the above protection component. The above authorization center service can send the above to-be-executed authorization information to the authorization dynamic library component, receive the legality verification result of the authorization dynamic library component, and return an execution command according to the above legality verification result.

[0087] In a possible embodiment, after the above authorization dynamic library component obtains the above to-be-authorized execution instruction from the above authorization center service through the above private connection channel, the above execution instruction is sent to the above protection component so that the protection component can perform an execution operation on the above to-be-executed authorization information according to the content of the above execution instruction.

[0088] In a possible embodiment, after the above authorization information verification system filters the above multiple legality verification results, the legality verification results that pass the filtering are scheduled to the above authorization center service so that the authorization center service can return an execution command according to the legality verification results that pass the filtering.

[0089] In an embodiment of the present invention, when obtaining the to-be-executed authorization information, the key information of at least one protection component is received, and the to-be-executed authorization information is encrypted based on the key information sent by the at least one protection component and a preset encryption method to obtain the encrypted information of the to-be-executed authorization information; the encrypted information of the to-be-executed authorization information is returned to the protection component so that the protection component performs a legality verification on the encrypted information; when the legality verification result returned from at least one of the protection components is received, the legality verification result is sent to the authorization center service so that the authorization center service executes the to-be-executed authorization information according to the legality verification result. By encrypting the authorization information in the authorization dynamic library component and decrypting it in the protection component, and also needing to confirm according to the execution instruction sent by the authorization center service, that is, the authorization information is authorized through the collaborative verification, encryption, and distributed processing of the protection component, the authorization dynamic library component, and the authorization center service in the system, making the authorization information flexible and random during the verification process, thereby improving the security of the authorization process.

[0090] Optionally, in the step of encrypting the to-be-executed authorization information based on the key information sent by at least one protection component and a preset encryption method to obtain the encrypted information of the to-be-executed authorization information, multiple authorization sub-information bodies can also be divided in the to-be-executed authorization information based on the bytes of the to-be-executed authorization information. Then, modulo calculations of taking the remainder are respectively performed on the key information and the multiple authorization sub-information bodies to obtain multiple key offset values and the authorization sub-information bodies at the positions corresponding to the respective key offset values. Finally, each authorization sub-information body is encrypted with its corresponding key offset value to obtain the encrypted information of the to-be-executed authorization information.

[0091] In the embodiment of the present invention, the sub-information bodies of the above to-be-executed authorization information can be multiple to-be-executed authorization information bodies obtained by equally spaced splitting according to the bytes of the above to-be-executed authorization information.

[0092] The above key offset value can refer to a parameter that changes the key position during the encryption process. Generally speaking, using different key offset values for encryption will cause the obtained encrypted information to change.

[0093] Specifically, the above cyclic encryption method can be combined with Figure 3 to illustrate. First, taking the byte of the above to-be-executed authorization information as the unit length, the above to-be-executed authorization information is equally spaced split to obtain multiple sub-information bodies of the to-be-executed authorization information. Using the modulo method of taking the remainder, the key subscript in the above key information is calculated: y = Mod(i, Size(K)), to obtain the key offset value K[y]. Similarly, using the modulo method of taking the remainder, the subscript of the to-be-executed authorization information is calculated: ix = Mod(K[y], Size(M)), to obtain the subscript of the to-be-executed authorization information. The positions are swapped through swap(M[i], M[ix]), and through the traversal algorithm, the subscript variable i is traversed, incremented sequentially from [0, Size(M)-1], and the above process of using the modulo method of taking the remainder and performing position swapping is looped, so as to achieve cyclic encryption and obtain the encrypted information of the to-be-executed authorization information.

[0094] As Figure 4 shown, Figure 4 is a flowchart of another authorization information verification method provided by an embodiment of the present invention. This authorization information verification method is used for a protection component, and at least one protection component is communicatively connected to an authorization dynamic library component. The method includes the following steps:

[0095] 401. When it is detected that the authorization dynamic library component obtains the to-be-executed authorization information, send the key information to the authorization dynamic library component, so that the authorization dynamic library component encrypts the to-be-executed authorization information according to the key information and a preset encryption method to obtain the encrypted information of the to-be-executed authorization information.

[0096] In an embodiment of the present invention, the above authorization information verification method can be applied to the protection component in the above authorization information verification system. The above authorization information verification system has functions such as data processing, data transceiver, and data storage, and can be constructed based on a server or a server cluster. The above server or server cluster can be an electronic device with functions such as data processing, data transceiver, and data storage.

[0097] The above authorization dynamic library component can refer to an integrated library carrier that can connect to the above authorization center service through a private channel, obtain the authorization information to be executed by the authorization center service, and communicate with at least one protection component. The above authorization dynamic library component can include an authorization static library and an authorization dynamic library, that is, the above authorization dynamic library is an integration of the authorization static library and the authorization dynamic library. The above authorization dynamic library can also encrypt the authorization information to be executed with the key sent by the above protection component through a preset encryption method, and then return it to the above protection component. Finally, the legality verification result of the protection component for the above authorization information to be executed is sent to the above authorization center service.

[0098] In a possible embodiment, when the above authorization information verification system detects that the above authorization dynamic library component obtains the authorization information to be executed, it sends a command to the above protection component so that the above protection component can send key information to the above authorization dynamic library component.

[0099] 402. When receiving the encrypted information sent by the authorization dynamic library component, decrypt the encrypted information of the authorization information to be executed according to the key information and the preset decryption method to obtain the decrypted information of the authorization information to be executed.

[0100] In an embodiment of the present invention, the above decryption method can refer to various algorithms corresponding to the above encryption method, such as "shuffle" encryption, AES, RSA, or Twofish, etc. The protection component in the above authorization information verification system can decrypt the above encrypted information through the above preset decryption method and the above random key to obtain the decrypted information.

[0101] In a possible embodiment, after the above authorization information verification system detects the encrypted information sent by the above authorization dynamic library, it sends a decryption instruction to the above protection component so that the above protection component decrypts the encrypted information returned by the above authorization dynamic library through the preset decryption method and the key information to obtain the decrypted information.

[0102] 403. Verify the legality of the decrypted information to obtain the legality verification result of the decrypted information.

[0103] In an embodiment of the present invention, the above-mentioned legality verification may refer to the process of verifying the legality of the decryption information through a preset rule in the above-mentioned protection component. Specifically, the data or information of the decryption information can be compared against the preset rule, and the decryption information that does not conform to the preset rule can be eliminated to obtain a legality verification result in a legal state. More specifically, it can be obtained by calculating the legality verification result of the decryption information through a legality verification algorithm, such as a hash algorithm, a symmetric encryption algorithm, or a checksum algorithm, etc.

[0104] In a possible embodiment, the above-mentioned authorization information verification system needs to obtain a preset rule, derive a legal standard according to the preset rule, analyze the decryption information through the legal standard, judge whether the decryption information is legal based on the legal standard, and perform data screening on the decryption information to obtain a legal legality verification result.

[0105] 404. Send the legality verification result of the decryption information to the authorization dynamic library component, so that the authorization dynamic library component sends the legality verification result of the decryption information to the authorization center service.

[0106] In an embodiment of the present invention, the above-mentioned authorization information verification system screens the legality verification result of the decryption information to obtain a final legality verification result, and sends it to the above-mentioned authorization dynamic library component, and the authorization dynamic library component transmits it to the authorization center service through a private channel with the above-mentioned authorization center service.

[0107] 405. When receiving a receive instruction or a reject instruction returned by the authorization dynamic library component, decrypt the encrypted information to obtain the authorization information to be executed.

[0108] In an embodiment of the present invention, when the above-mentioned protection component receives an execution command returned by the above-mentioned authorization dynamic library component, it determines whether to execute the above-mentioned authorization information to be executed according to the instruction in the execution command. When the instruction in the execution command is a confirmation execution instruction, the above-mentioned protection component will execute the above-mentioned authorization information to be executed. When the instruction in the execution command is to judge that the legality verification result fails, the above-mentioned authorization information to be executed will not be executed. The above-mentioned receive instruction and the above-mentioned reject instruction are used to indicate that the legality verification result passes the verification of the authorization center service.

[0109] Optionally, when receiving the encrypted information sent by the authorized dynamic library component, in the step of decrypting the encrypted information of the to-be-executed authorization information according to the key information and the preset decryption method to obtain the decrypted information of the to-be-executed authorization information, multiple encrypted sub-information bodies can also be divided in the encrypted information based on the bytes of the encrypted information, and then the multiple encrypted sub-information bodies are cyclically decrypted through the key information and the key offset value to obtain the decrypted information of the to-be-executed authorization information.

[0110] In an embodiment of the present invention, the above-mentioned multiple sub-information bodies of the encrypted information can be obtained by acquiring the bytes of the encrypted information and dividing the encrypted information in units of the bytes of the encrypted information to obtain multiple sub-information bodies of the encrypted information.

[0111] In a possible embodiment, the cyclic decryption of the encrypted sub-information body through the key information and the key offset value, the specific process can be combined with Figure 3 and Figure 5 for illustration. The above cyclic decryption process can decrypt the encrypted information obtained by the cyclic encryption method shown by Figure 3 . Specifically, taking the starting position of the information body to be decrypted (i.e., the above encrypted information), its subscript is determined as Size(M)-1, and the variable i is used to represent the subscript. Then, according to the modulo operation method of taking the remainder, calculate the subscript y of the above key key as y = Mod(i, Size(K)), so as to obtain the key offset value K[y]. Then, according to the modulo operation method of taking the remainder, calculate the subscript of the above encrypted information sub-information body: ix = Mod(K[y], Size(M)), to obtain the subscript of the information body to be exchanged. Then, swap the positions of the above encrypted information sub-information bodies through swap(M[i], M[ix]). Finally, according to the traversal subscript variable i, execute sequentially from [Size(M)-1, 0] in decreasing order, and loop the above modulo method to obtain the subscript variable and perform the step of exchanging the information body positions, so as to achieve the purpose of decrypting the encrypted information. It should be noted that the above corresponding method of cyclic decryption can be confirmed according to the above corresponding method of cyclic encryption, that is, one cyclic decryption method corresponds to one cyclic encryption method.

[0112] In a possible embodiment, after receiving the above encrypted information, the above permission information verification system decrypts the above encrypted information through the above decryption method and the key information to obtain the decrypted information.

[0113] Optionally, in the step of performing a legality verification on the decrypted information to obtain a legality verification result of the decrypted information, it is also possible to determine whether the flag bit of the decrypted information coincides with the flag bit of the encrypted information in the byte position. If the flag bit of the decrypted information coincides with the preset flag bit in the encrypted information in the byte position, it is determined that the legality verification result of the decrypted information passes. If the flag bit of the decrypted information does not coincide with the preset flag bit in the encrypted information in the byte position, it is determined that the legality verification result of the decrypted information fails.

[0114] In an embodiment of the present invention, the above decryption process can determine the legality of the above decrypted information according to a preset flag. Specifically, it is possible to perform a position comparison between the flag bit preset in the decrypted information and the flag bit of the decrypted information obtained after decryption to determine whether the legality verification result of the corresponding decrypted information meets the legality. The above flag bit can be data such as a character identifier in the above decrypted information. The flag bit of the above decrypted information can be obtained after decrypting the encrypted information by the protection component, and the flag bit of the above encrypted information can be obtained after encrypting the above to-be-executed authorization information by the above authorization dynamic library component.

[0115] In a possible embodiment, if the flag bit of the above decrypted information coincides with the flag bit of the encrypted information in the byte position, the protection component confirms that the legality verification of the above decrypted information passes. If the flag bit of the above decrypted information does not coincide with the flag bit of the encrypted information in the byte position and there is a deviation in the preset byte position, the protection component confirms that the legality verification of the above decrypted information fails. The deviation of the above preset byte position can be determined according to the specific implementation scheme.

[0116] In a possible embodiment, the process of the above legality verification result can be combined with Figure 6 for description. Among them, 601. The above authorization center service sends the to-be-executed authorization information to the above authorization dynamic library component.

[0117] 602. N of the above protection components send a verification request to the above authorization dynamic library component to verify whether the above authorization dynamic library component has received the to-be-executed authorization information sent by the above authorization center service.

[0118] 603. The above authorization dynamic library component returns data indicating that it has obtained the to-be-executed authorization information to N of the above protection components.

[0119] 604. After receiving the data returned by the above authorization dynamic library component, N of the above protection components generate a random key and cache the random key locally.

[0120] 605. N of the above protection components send incoming parameters carrying a random key to the above authorization dynamic library component. It should be noted that the above random key can be generated by a random key generator.

[0121] 606. After receiving the incoming parameters sent by the above protection component, the above authorization dynamic library component encrypts the authorization information to be executed according to the random key in the incoming parameters to obtain encrypted information.

[0122] 607. The above authorization dynamic library component returns the encrypted information to the above protection component.

[0123] 608. N of the above protection components decrypt the encrypted information with the random key to obtain decrypted information.

[0124] 609. N of the above protection components perform a legality verification on the decrypted information to determine whether the decrypted information is legal, and obtain the legality verification result of the decrypted information.

[0125] 610. N of the above protection components send the legality verification result of the decrypted information to the above authorization dynamic library component.

[0126] 611. The above authorization dynamic library component uniformly sends the legality verification result of the decrypted information to the above authorization center service.

[0127] 612. The above authorization center service confirms the received legality verification result and generates an execution command corresponding to the legality verification result being confirmed passed or the legality verification result being confirmed not passed.

[0128] 613. Return the above execution command to the above authorization dynamic library component.

[0129] 614. The above authorization dynamic library component sends the execution command returned by the above authorization center service to N of the above protection components.

[0130] 615. The above N protection components process the authorization information to be executed according to the execution command sent by the above authorization dynamic library component.

[0131] In a possible embodiment, the protection component in the above authorization information verification system performs a legality verification on the above decrypted information through the above preset convention flag bit method, and determines whether the legality verification result passes according to the flag bit preset in the decrypted information.

[0132] In another possible embodiment, among the multiple obtained legality verification results, the quantities of the multiple legality verification results are compared. If the quantity of illegal legality verification results exceeds the quantity of legal legality verification results, it indicates that the decryption information is illegal decryption, that is, the above authorization center service does not return the to-be-executed authorization information corresponding to the decryption information.

[0133] As Figure 7 shown, an embodiment of the present invention further provides an authorization dynamic library component. The authorization dynamic library component is communicatively connected to at least one protection component. The authorization dynamic library component includes:

[0134] A first obtaining module 701, configured to, when obtaining to-be-executed authorization information, receive key information of at least one protection component, and encrypt the to-be-executed authorization information based on the key information sent by at least one of the protection components and a preset encryption method to obtain encrypted information of the to-be-executed authorization information;

[0135] A first encryption module 702, configured to return the encrypted information of the to-be-executed authorization information to the protection component that sends the key information, so that the protection component performs a legality verification on the encrypted information;

[0136] A second obtaining module 703, configured to, when receiving legality verification results returned from at least one of the protection components, send the legality verification results to an authorization center service, so that the authorization center service returns an execution command according to the legality verification results;

[0137] A first sending module, configured to send the execution command to at least one of the protection components, so that at least one of the protection components decrypts the encrypted information to obtain the to-be-executed authorization information, where the execution command is used to indicate that the legality verification result passes the verification of the authorization center service.

[0138] Optionally, the above first obtaining module 701 includes:

[0139] A first determining sub-module, configured to divide the to-be-executed authorization information into multiple authorization sub-information bodies based on the bytes of the to-be-executed authorization information;

[0140] A first obtaining sub-module, configured to perform modulo calculations of taking remainders on the key information and the multiple authorization sub-information bodies respectively to obtain multiple key offset values and the authorization sub-information bodies at positions corresponding to the respective key offset values;

[0141] A second obtaining sub-module, configured to encrypt the corresponding authorization sub-information body through each of the key offset values to obtain the encrypted information of the to-be-executed authorization information.

[0142] AsFigure 8 As shown, an embodiment of the present invention further provides a protection component. At least one of the protection components is communicatively connected to an authorized dynamic library component. The protection component includes:

[0143] A third acquisition module 801, configured to send key information to the authorized dynamic library component when it is detected that the authorized dynamic library component acquires the authorization information to be executed, so that the authorized dynamic library component encrypts the authorization information to be executed according to the key information and a preset encryption method to obtain the encrypted information of the authorization information to be executed;

[0144] A first decryption module 802, configured to decrypt the encrypted information of the authorization information to be executed according to the key information and a preset decryption method to obtain the decrypted information of the authorization information to be executed when receiving the encrypted information sent by the authorized dynamic library component;

[0145] A first verification module 803, configured to perform a legality verification on the decrypted information to obtain a legality verification result of the decrypted information;

[0146] A fourth acquisition module 804, configured to send the legality verification result of the decrypted information to the authorized dynamic library component, so that the authorized dynamic library component sends the legality verification result of the decrypted information to an authorization center service;

[0147] An execution module, configured to decrypt the encrypted information to obtain the authorization information to be executed when receiving a reception instruction or a rejection instruction returned by the authorized dynamic library component. The reception instruction and the rejection instruction are used to indicate that the legality verification result passes the verification of the authorization center service.

[0148] Optionally, the above-mentioned third acquisition module 801 further includes:

[0149] A second determination sub-module, configured to divide a plurality of encrypted sub-information bodies in the encrypted information based on the bytes of the encrypted information;

[0150] A third acquisition sub-module, configured to perform cyclic decryption on the plurality of encrypted sub-information bodies through the key information and a key offset value to obtain the decrypted information of the authorization information to be executed.

[0151] Optionally, the above-mentioned first verification module 803 further includes:

[0152] A third determination sub-module, configured to determine whether the flag bit of the decrypted information coincides with the flag bit of the encrypted information in the byte position;

[0153] A fourth determination sub-module, configured to determine that the legitimacy verification result of the decryption information passes if the flag bit of the decryption information coincides with a preset flag bit in the encryption information in terms of byte position;

[0154] A fifth determination sub-module, configured to determine that the legitimacy verification result of the decryption information fails if the flag bit of the decryption information does not coincide with a preset flag bit in the encryption information in terms of byte position.

[0155] As Figure 9 shown, an embodiment of the present invention further provides an electronic device, including a processor, and the above-mentioned processor can execute any one of the above-mentioned authorization information verification methods.

[0156] Specifically, it includes a processor 901, a memory 902, and a computer program for executing the authorization information verification method stored on the memory 902 and capable of running on the processor 901, where:

[0157] The processor 901 runs the calculator program of the authorization information verification method stored in the memory 902 and executes the following steps:

[0158] When obtaining the authorization information to be executed, receive the key information of at least one protection component, and encrypt the authorization information to be executed based on the key information sent by at least one of the protection components and a preset encryption method to obtain the encrypted information of the authorization information to be executed;

[0159] Return the encrypted information of the authorization information to be executed to the protection component that sends the key information, so that the protection component performs a legitimacy verification on the encrypted information;

[0160] When receiving the legitimacy verification result returned by at least one of the protection components, send the legitimacy verification result to the authorization center service, so that the authorization center service returns an execution command according to the legitimacy verification result;

[0161] Send the execution command to at least one of the protection components, so that at least one of the protection components decrypts the encrypted information to obtain the authorization information to be executed, and the execution command is used to indicate that the legitimacy verification result passes the verification of the authorization center service.

[0162] Optionally, the processor 901 executes encrypting the authorization information to be executed based on the key information sent by at least one of the protection components and a preset encryption method to obtain the encrypted information of the authorization information to be executed, including:

[0163] Based on the bytes of the authorization information to be executed, divide a plurality of authorization sub-information bodies in the authorization information to be executed;

[0164] Perform modulo calculations of taking the remainder of the key information and the multiple authorized sub-information bodies respectively, to obtain multiple key offset values and the authorized sub-information bodies at the corresponding positions of each key offset value;

[0165] Encrypt the corresponding authorized sub-information body through each key offset value to obtain the encrypted information of the to-be-executed authorization information.

[0166] The processor 901 runs the calculator program of another authorization information verification method stored in the memory 902, and executes the following steps:

[0167] When it is detected that the authorization dynamic library component obtains the to-be-executed authorization information, send the key information to the authorization dynamic library component, so that the authorization dynamic library component encrypts the to-be-executed authorization information according to the key information and a preset encryption method to obtain the encrypted information of the to-be-executed authorization information;

[0168] When receiving the encrypted information sent by the authorization dynamic library component, decrypt the encrypted information of the to-be-executed authorization information according to the key information and a preset decryption method to obtain the decrypted information of the to-be-executed authorization information;

[0169] Perform a legality verification on the decrypted information to obtain the legality verification result of the decrypted information;

[0170] Send the legality verification result of the decrypted information to the authorization dynamic library component, so that the authorization dynamic library component sends the legality verification result of the decrypted information to the authorization center service;

[0171] When receiving the received instruction or the rejected instruction returned by the authorization dynamic library component, decrypt the encrypted information to obtain the to-be-executed authorization information, where the received instruction and the rejected instruction are used to indicate that the legality verification result passes the verification of the authorization center service.

[0172] Optionally, when the processor 901 executes when receiving the encrypted information sent by the authorization dynamic library component, decrypt the encrypted information of the to-be-executed authorization information according to the key information and a preset decryption method to obtain the decrypted information of the to-be-executed authorization information, including:

[0173] Based on the bytes of the encrypted information, divide multiple encrypted sub-information bodies in the encrypted information;

[0174] Perform cyclic decryption on the multiple encrypted sub-information bodies through the key information and the key offset value to obtain the decrypted information of the to-be-executed authorization information.

[0175] Optionally, the processor 901 performs a legality verification on the decrypted information to obtain a legality verification result of the decrypted information, including:

[0176] Determining whether the flag bit of the decrypted information coincides with the flag bit of the encrypted information in the byte position;

[0177] If the flag bit of the decrypted information coincides with a preset flag bit in the encrypted information in the byte position, it is determined that the legality verification result of the decrypted information passes;

[0178] If the flag bit of the decrypted information does not coincide with a preset flag bit in the encrypted information in the byte position, it is determined that the legality verification result of the decrypted information fails.

[0179] The embodiment of the present invention also provides a computer-readable storage medium. A computer program is stored on the computer-readable storage medium. When the computer program is executed by a processor, each process of the authorization information verification method or the application-side authorization information verification method provided by the embodiment of the present invention is implemented, and the same technical effects can be achieved. To avoid repetition, it will not be elaborated here.

[0180] Those of ordinary skill in the art can understand that all or part of the processes of implementing the methods in the above embodiments can be completed by instructing relevant hardware through a computer program. The program can be stored in a computer-readable storage medium. When the program is executed, it can include the processes of the embodiments of the above methods. Among them, the storage medium can be a magnetic disk, an optical disk, a read-only memory (ROM), or a random access memory (RAM), etc.

[0181] The above-disclosed are only the preferred embodiments of the present invention. Of course, the scope of the rights of the present invention cannot be limited by this. Therefore, equivalent changes made according to the claims of the present invention still fall within the scope covered by the present invention.

Claims

1. An authorization information verification method, characterized in that, For authorizing a dynamic library component, the authorized dynamic library component is communicatively connected to at least one protection component, and the method includes the following steps: When obtaining the authorization information to be executed, receive the key information of at least one protection component, and encrypt the authorization information to be executed based on the key information sent by at least one of the protection components and a preset encryption method to obtain the encrypted information of the authorization information to be executed; Return the encrypted information of the authorization information to be executed to the protection component that sent the key information, so that the protection component verifies the legality of the encrypted information; When receiving the legality verification result returned from at least one of the protection components, send the legality verification result to the authorization center service, so that the authorization center service returns an execution command according to the legality verification result; Send the execution command to at least one of the protection components, so that at least one of the protection components decrypts the encrypted information to obtain the authorization information to be executed, and the execution command is used to indicate that the legality verification result passes the verification of the authorization center service.

2. The authorization information verification method according to claim 1, wherein The encrypting the authorization information to be executed based on the key information sent by at least one of the protection components and a preset encryption method to obtain the encrypted information of the authorization information to be executed includes: Based on the bytes of the authorization information to be executed, divide the authorization information to be executed into multiple authorization sub-information bodies; Perform modulo calculations of taking the remainder on the key information and the multiple authorization sub-information bodies respectively to obtain multiple key offset values and the authorization sub-information bodies at the positions corresponding to the respective key offset values; Encrypt the corresponding authorization sub-information body through each of the key offset values to obtain the encrypted information of the authorization information to be executed.

3. A method for verifying authorization information, characterized in that, For a protection component, at least one of the protection components is communicatively connected to an authorized dynamic library component, and the method includes the following steps: When detecting that the authorized dynamic library component obtains the authorization information to be executed, send the key information to the authorized dynamic library component, so that the authorized dynamic library component encrypts the authorization information to be executed according to the key information and a preset encryption method to obtain the encrypted information of the authorization information to be executed; When receiving the encrypted information sent by the authorized dynamic library component, decrypt the encrypted information of the authorization information to be executed according to the key information and a preset decryption method to obtain the decrypted information of the authorization information to be executed; Verify the legality of the decrypted information to obtain the legality verification result of the decrypted information; Send the legality verification result of the decrypted information to the authorized dynamic library component, so that the authorized dynamic library component sends the legality verification result of the decrypted information to the authorization center service; When receiving the received instruction or the rejected instruction returned by the authorized dynamic library component, decrypt the encrypted information to obtain the authorization information to be executed, and the received instruction and the rejected instruction are used to indicate that the legality verification result passes the verification of the authorization center service.

4. The authorization information verification method according to claim 3, wherein When receiving the encrypted information sent by the authorized dynamic library component, decrypting the encrypted information of the to-be-executed authorization information according to the key information and a preset decryption method to obtain the decrypted information of the to-be-executed authorization information, including: Based on the bytes of the encrypted information, dividing the encrypted information into a plurality of encrypted sub-information bodies in the encrypted information; Circularly decrypting the plurality of encrypted sub-information bodies through the key information and a key offset value to obtain the decrypted information of the to-be-executed authorization information.

5. The authorization information verification method according to claim 3, wherein verifying the legality of the decrypted information to obtain the legality verification result of the decrypted information includes: Determining whether the flag bit of the decrypted information coincides with the flag bit of the encrypted information in the byte position; If the flag bit of the decrypted information coincides with a preset flag bit in the encrypted information in the byte position, determining that the legality verification result of the decrypted information passes; If the flag bit of the decrypted information does not coincide with a preset flag bit in the encrypted information in the byte position, determining that the legality verification result of the decrypted information fails.

6. An authorized dynamic library component, characterized in that, The authorized dynamic library component is communicatively connected to at least one protection component, and the authorized dynamic library component includes: A first acquisition module, configured to, when acquiring the to-be-executed authorization information, receive the key information of at least one protection component, and encrypt the to-be-executed authorization information based on the key information sent by at least one protection component and a preset encryption method to obtain the encrypted information of the to-be-executed authorization information; A first encryption module, configured to return the encrypted information of the to-be-executed authorization information to the protection component that sends the key information, so that the protection component verifies the legality of the encrypted information; A second acquisition module, configured to, when receiving the legality verification result returned by at least one protection component, send the legality verification result to the authorization center service, so that the authorization center service returns an execution command according to the legality verification result; A first sending module, configured to send the execution command to at least one protection component, so that at least one protection component decrypts the encrypted information to obtain the to-be-executed authorization information, and the execution command is used to indicate that the legality verification result passes the verification of the authorization center service.

7. A protection component, characterized in that, At least one protection component is communicatively connected to the authorized dynamic library component, and the protection component includes: A third acquisition module, configured to, when detecting that the authorized dynamic library component acquires the to-be-executed authorization information, send the key information to the authorized dynamic library component, so that the authorized dynamic library component encrypts the to-be-executed authorization information according to the key information and a preset encryption method to obtain the encrypted information of the to-be-executed authorization information; A first decryption module, configured to, when receiving the encrypted information sent by the authorized dynamic library component, decrypt the encrypted information of the to-be-executed authorization information according to the key information and a preset decryption method to obtain the decrypted information of the to-be-executed authorization information; The first verification module is used to verify the legality of the decrypted information and obtain the legality verification result of the decrypted information; The fourth acquisition module is used to send the legality verification result of the decrypted information to the authorization dynamic library component, so that the authorization dynamic library component sends the legality verification result of the decrypted information to the authorization center service; The execution module is used to decrypt the encrypted information to obtain the to-be-executed authorization information when receiving the received instruction or the rejection instruction returned by the authorization dynamic library component, and the received instruction and the rejection instruction are used to indicate that the legality verification result passes the verification of the authorization center service.

8. An authorization information verification system, characterized in that, The authorization information verification system includes: an authorization dynamic library component, a protection component, and an authorization center service, and the authorization dynamic library component, the protection component, and the authorization center service are communicatively connected; The authorization dynamic library component is used to receive the key information of at least one protection component when obtaining the to-be-executed authorization information, and encrypt the to-be-executed authorization information based on the key information sent by at least one of the protection components and a preset encryption method to obtain the encrypted information of the to-be-executed authorization information; The authorization dynamic library component is further used to return the encrypted information of the to-be-executed authorization information to the protection component that sends the key information, so that the protection component verifies the legality of the encrypted information; The authorization dynamic library component is further used to send the legality verification result to the authorization center service when receiving the legality verification result returned by at least one of the protection components, so that the authorization center service returns an execution command according to the legality verification result; The authorization dynamic library component is further used to send the execution command to at least one of the protection components, so that at least one of the protection components decrypts the encrypted information to obtain the to-be-executed authorization information, and the execution command is used to indicate that the legality verification result passes the verification of the authorization center service; The protection component is used to send the key information to the authorization dynamic library component when detecting that the authorization dynamic library component obtains the to-be-executed authorization information, so that the authorization dynamic library component encrypts the to-be-executed authorization information according to the key information and a preset encryption method to obtain the encrypted information of the to-be-executed authorization information; The protection component is further used to decrypt the encrypted information of the to-be-executed authorization information according to the key information and a preset decryption method when receiving the encrypted information sent by the authorization dynamic library component to obtain the decrypted information of the to-be-executed authorization information; The protection component is further used to verify the legality of the decrypted information and obtain the legality verification result of the decrypted information; The protection component is further used to send the legality verification result of the decrypted information to the authorization dynamic library component, so that the authorization dynamic library component sends the legality verification result of the decrypted information to the authorization center service; The protection component is further configured to decrypt the encrypted information to obtain the to-be-executed authorization information when receiving a reception instruction or a rejection instruction returned by the authorization dynamic library component, where the reception instruction and the rejection instruction are used to indicate that the legality verification result passes the verification of the authorization center service; The authorization center service is configured to send the to-be-executed authorization information to the authorization dynamic library component; The authorization center service is further configured to receive the legality verification result of the authorization dynamic library component; The authorization center service is further configured to return an execution command to the authorization dynamic library component according to the legality verification result.

9. An electronic device, characterized in that, Comprising: A memory, a processor, and a computer program stored on the memory and executable on the processor, where when the processor executes the computer program, the steps in the authorization information verification method according to claim 1 or 2 are implemented, or when the processor executes the computer program, the steps in the authorization information verification method according to any one of claims 3 to 5 are implemented.

10. A computer-readable storage medium, characterized in that, A computer program is stored on the computer-readable storage medium, and when the computer program is executed by a processor, the steps in the authorization information verification method according to claim 1 or 2 are implemented, or when the processor executes the computer program, the steps in the authorization information verification method according to any one of claims 3 to 5 are implemented.

Images