Digital rural platform linking method and system based on browser plug-in
By identifying and blocking glue links through browser plugins, and combining unified identity authentication and intermediate page bridging services, cross-platform login-free redirection and business context transfer are achieved. This solves the problems of fragmented user experience and high system coupling in the digital village platform, improves convenience and stability, and reduces maintenance costs.
Patent Information
- Application Number
- CN202511270763.2
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2025-09-08
- Publication Date
- 2025-11-18
AI Technical Summary
Existing digital village platforms suffer from problems such as fragmented user experience, unstable deep links, high system coupling, and difficulties in upgrading and maintenance due to heterogeneity and inconsistent data standards.
By adopting a browser plugin-based approach, the system identifies and intercepts glued links, uses a unified identity authentication management module to check login status, converts intermediate page bridging service modules into HTTP links carrying authentication tokens, and a secure link parsing and routing scheduling module enables login-free redirection and the passing of business context parameters. Combined with a RESTful architecture design, the system achieves convenience, stability, and maintainability of cross-platform links.
It significantly improves the convenience of cross-platform linking and the consistency of user experience, reduces system dependence, enhances the scalability and maintainability of the overall architecture, solves the problems of "data silos" and "functional silos", establishes a secure and reliable cross-platform identity authentication and trust transfer system, and reduces system complexity and expansion difficulty.
Smart Images

Figure CN120980068A_ABST
Abstract
Description
Technical Field
[0001] This invention relates to the field of browser plugin technology, and in particular to a method and system for linking a digital rural platform based on a browser plugin. Background Technology
[0002] With the deepening of the digital village initiative, various digital village platforms have rapidly developed and been widely deployed in rural areas. These platforms comprehensively utilize modern information technologies such as cloud computing, big data, and the Internet of Things, covering multiple application scenarios including rural governance, industrial revitalization (such as e-commerce and rural tourism), cultural heritage preservation, and public services. They are often presented in the form of web applications, mobile applications, or WeChat mini-programs, and have become important digital hubs connecting public service institutions, enterprises, villagers, and external resources.
[0003] Currently, the service ecosystem of digital villages is not built by a single platform, but is supported by multiple heterogeneous and decentralized digital village platforms. Typical platform types include: (1) public affairs service platforms, mainly used for the disclosure of village affairs and finances and the handling of administrative services; (2) e-commerce platforms for helping farmers, providing online display, trading and logistics tracking functions for local agricultural products; (3) rural cultural tourism platforms, used for tourism resource display, homestay booking and ticket sales, etc.; (4) livelihood service platforms, integrating multiple service entrances such as social security inquiry, medical registration, and legal aid.
[0004] Because these digital village platforms are typically developed independently by different vendors at different stages, their inconsistent technical architectures and data standards have led to the formation of "data silos" and "functional silos." Existing integration methods generally suffer from the following problems:
[0005] 1. Fragmented entry points and disjointed user experience: Users need to switch frequently between different platforms, applications or web pages, repeatedly log in and verify, the operation process is cumbersome, and the learning and usage costs are high;
[0006] 2. Unstable deep links and loss of context information: Platforms often rely on traditional hyperlinks for navigation, which makes it difficult to maintain login status, easily leads to loss of business context, and results in a poor navigation experience;
[0007] 3. High system coupling, making upgrades and maintenance difficult: If deep integration is achieved through backend APIs, cross-vendor collaborative development and joint debugging are required, resulting in strong interface dependencies and significant system upgrade and subsequent maintenance costs.
[0008] Therefore, how to provide a digital rural platform linking method and system based on browser plugins to improve the convenience, stability and maintainability of cross-platform links has become an urgent technical problem to be solved. Summary of the Invention
[0009] The technical problem to be solved by this invention is to provide a method and system for linking digital rural platforms based on browser plugins, thereby improving the convenience, stability and maintainability of cross-platform links.
[0010] In a first aspect, the present invention provides a method for linking a digital rural platform based on a browser plugin, comprising the following steps:
[0011] Step S1: The client accesses the first platform page of the first digital rural platform through a browser. The browser identifies and blocks the adhesive links set on the first platform page through the installed browser plugin.
[0012] Step S2: Based on the click signal of the glue link, the browser plugin checks the login status through the unified identity authentication management module, and converts the glue link into an HTTP link carrying an authentication token through the intermediate page bridging service module; the authentication token is used for identity authentication on the second digital village platform and has an expiration period.
[0013] Step S3: The browser plugin, through the secure link parsing and routing scheduling module, redirects to the second platform page of the second digital rural platform without login based on the HTTP link, and loads related content on the second platform page based on the business context parameters carried by the adhesive link.
[0014] Furthermore, in step S1, the glue link carries at least metadata including the target platform identifier, target page address, business context parameters, and security ticket; the security ticket includes a timestamp and a random number to prevent replay attacks.
[0015] The adhesive link also carries a digital signature for each piece of metadata.
[0016] Furthermore, in step S2, the unified identity authentication management module obtains the Access Token of the digital village platform through the identity API or launchWebAuthFlow method, combined with the OAuth2.0 authorization code mode, to perform identity authentication and login status checks; when it detects that the current user is not logged in, it automatically pops up a login guidance window, obtains the authentication token generated during the login process, and encrypts and stores the authentication token through the storage API or platformKeys API.
[0017] Furthermore, in step S2, the intermediate page bridging service module adopts a RESTful architecture design and has a protocol conversion interface for converting glue links into HTTP links.
[0018] Furthermore, in step S3, the secure link parsing and routing scheduling module is used to parse the HTTP link to obtain metadata and authentication tokens carrying at least the target platform identifier, target page address, business context parameters, and security ticket. Based on the metadata and authentication tokens, request parameters are assembled, and the API interface of the intermediate page bridging service module is called based on the request parameters, thereby redirecting to the second digital village platform without logging in.
[0019] Secondly, the present invention provides a digital rural platform linking system based on a browser plugin, comprising the following modules:
[0020] The adhesive link identification and blocking module is used by the client to access the first platform page of the first digital rural platform through a browser. The browser identifies and blocks adhesive links set on the first platform page through an installed browser plugin.
[0021] The HTTP link generation module is used by the browser plugin to check the login status through the unified identity authentication management module based on the click signal of the glue link, and to convert the glue link into an HTTP link carrying an authentication token through the intermediate page bridging service module; the authentication token is used for identity authentication on the second digital village platform and has an expiration period.
[0022] The platform link module is used by the browser plugin to redirect to the second platform page of the second digital rural platform without login based on the HTTP link through the secure link parsing and routing scheduling module, and to load related content on the second platform page based on the business context parameters carried by the adhesive link.
[0023] Furthermore, in the glue link identification and interception module, the glue link carries at least metadata including the target platform identifier, target page address, business context parameters, and security ticket; the security ticket includes a timestamp and a random number to prevent replay attacks.
[0024] The adhesive link also carries a digital signature for each piece of metadata.
[0025] Furthermore, in the HTTP link generation module, the unified identity authentication management module obtains the AccessToken of the digital village platform through the identityAPI or launchWebAuthFlow method, combined with the OAuth2.0 authorization code mode, to perform identity authentication and login status checks; when it detects that the current user is not logged in, it automatically pops up a login guidance window, obtains the authentication token generated during the login process, and encrypts and stores the authentication token through the storage API or platformKeys API.
[0026] Furthermore, in the HTTP link generation module, the intermediate page bridging service module adopts a RESTful architecture design and has a protocol conversion interface for converting glue links into HTTP links.
[0027] Furthermore, in the platform link module, the secure link parsing and routing scheduling module is used to parse the HTTP link to obtain metadata and authentication tokens carrying at least the target platform identifier, target page address, business context parameters, and security ticket. Based on the metadata and authentication tokens, request parameters are assembled, and the API interface of the intermediate page bridging service module is called based on the request parameters, thereby redirecting to the second digital rural platform without logging in.
[0028] The advantages of this invention are:
[0029] 1. The client accesses the first platform page of the first digital village platform through a browser. The browser uses an installed browser plugin to identify and block the glue links set on the first platform page. Based on the click signal of the glue link, the browser plugin checks the login status through the unified identity authentication management module and converts the glue link into an HTTP link carrying an authentication token through the intermediate page bridging service module. The authentication token is used for identity authentication on the second digital village platform and has an expiration period. The browser plugin uses the secure link parsing and routing scheduling module to redirect to the second platform page of the second digital village platform without login based on the HTTP link, and loads related content on the second platform page based on the business context parameters carried by the glue link. In other words, the browser plugin intelligently identifies and blocks the platform. The system uses a unified identity authentication module to automatically check user login status and manage authentication tokens. Then, a middle page bridging service converts the original glued link into an HTTP link carrying the authentication token. Finally, a secure link resolution and routing module enables cross-platform login-free redirection and lossless transmission of business context parameters, significantly improving the convenience of cross-platform links and the consistency of user experience. Simultaneously, authentication token verification, digital signatures, and anti-replay mechanisms ensure the security and stability of link transmission. A RESTful middle page bridging service module enables protocol conversion and business decoupling, reducing system dependencies and enhancing the scalability and maintainability of the overall architecture. Ultimately, this greatly improves the convenience, stability, and maintainability of cross-platform links.
[0030] 2. Break through "data silos" and achieve service integration: fundamentally solve the problems of "data silos" and "functional silos" caused by platform heterogeneity and inconsistent data standards. Without performing the highly difficult operation of underlying data interconnection, it achieves deep integration and seamless flow of services at the user experience layer.
[0031] 3. Enhanced System Architecture Elasticity and Scalability: The "front-end glued, loosely coupled" architecture enables the entire digital rural service ecosystem to possess extremely high elasticity. When adding a new business platform, it only needs to be connected to the "glue" system of this invention, without having to re-interface with all existing platforms one-to-one, greatly reducing system complexity and the difficulty of future expansion.
[0032] 4. Establish a secure and reliable identity trust system: Through encrypted tickets and secure relay mechanisms, a standardized and secure cross-platform identity authentication and trust transfer system has been established, providing a technical foundation for the secure interoperability of various applications in digital villages, which is superior to simple single sign-on (SSO) solutions.
[0033] 5. Traditionally, solving system integration problems usually relies on in-depth development of backend APIs and joint debugging of data interfaces. This is a tightly coupled, high-cost, and long-cycle "heavyweight" integration model. This invention creatively proposes a lightweight "frontend glue" architecture. Through a browser plugin as a client-side carrier, it directly solves the cross-platform navigation experience problem on the user side with little or no modification to the backends of various platforms. This is a loosely coupled, low-cost, and easily deployable "agile" integration paradigm, fundamentally changing the technical approach to multi-platform integration in digital villages.
[0034] 6. Traditionally, hyperlinks (URLs) are merely simple address navigation instructions, unable to carry identity, state, and context information. This invention designs a novel "glue link protocol," which elevates the URL from an address carrier to a secure, structured, intelligent business instruction carrier. It encapsulates the target platform identifier, target page address, business context parameters, and most importantly, an encrypted security ticket, enabling a single click to trigger a complex, secure, stateful cross-platform business flow.
[0035] 7. Traditionally, attempting to transmit user identity information in URLs or cookies is highly susceptible to security risks. This invention introduces a "secure relay trust mechanism" based on encrypted tickets. Through a trusted relay called the "intermediate page bridging service module," it completes authentication and conversion between different security domains. Sensitive identity information is not transmitted in plaintext on the front end of the network, but is securely exchanged through one-time, encrypted, and time-limited security tickets. This achieves convenient login-free redirection while completely eliminating the risk of identity information leakage and tampering, perfectly balancing the seemingly contradictory relationship between user experience and security. Attached Figure Description
[0036] The present invention will be further described below with reference to the accompanying drawings and embodiments.
[0037] Figure 1This is a flowchart of a digital rural platform linking method based on a browser plugin according to the present invention.
[0038] Figure 2 This is a schematic diagram of the structure of a digital rural platform linking system based on a browser plugin according to the present invention. Detailed Implementation
[0039] The overall approach of the technical solution in this application is as follows: Browser plugins intelligently identify and intercept inter-platform glue links; a unified identity authentication module automatically checks user login status and manages authentication tokens; an intermediate page bridging service converts the original glue links into HTTP links carrying authentication tokens; and a secure link parsing and routing module enables cross-platform login-free redirection and lossless transmission of business context parameters, significantly improving the convenience of cross-platform links and the consistency of user experience. Simultaneously, authentication token verification, digital signatures, and anti-replay mechanisms ensure the security and stability of link transmission. A RESTful intermediate page bridging service module enables protocol conversion and business decoupling, reducing system dependency and enhancing the scalability and maintainability of the overall architecture.
[0040] Please refer to Figures 1 to 2 As shown, a preferred embodiment of the digital rural platform linking method based on browser plugins of the present invention includes the following steps:
[0041] Step S1: The client accesses the first platform page of the first digital rural platform through a browser. The browser identifies and blocks the adhesive links set on the first platform page through the installed browser plugin.
[0042] The browser plugin is installed in the client's browser and serves as the front-end execution carrier of this invention. It is responsible for identifying and intercepting specific format adhesive links on the platform page and includes a unified identity authentication management module, an intermediate page bridging service module, and a secure link parsing and routing scheduling module.
[0043] Step S2: Based on the click signal of the glue link, the browser plugin checks the login status through the unified identity authentication management module, and converts the glue link into an HTTP link carrying an authentication token through the intermediate page bridging service module; the authentication token is used for identity authentication on the second digital village platform and has an expiration period; the mapping relationship between the user's unified identifier and the authentication tokens of each platform is stored in a database (such as MySQL / Redis);
[0044] Step S3: The browser plugin, through the secure link parsing and routing scheduling module, redirects to the second platform page of the second digital rural platform without requiring login based on the HTTP link, and loads related content (loads the content expected by the user) on the second platform page based on the business context parameters carried by the adhesive link.
[0045] This invention uses a dedicated browser plugin as middleware to parse and execute glue links on the client side, thereby intelligently and securely "glue" together multiple independent digital village platforms.
[0046] In practice, each step is equipped with comprehensive exception handling (such as network errors, token expiration, and resolution failure), and provides users with user-friendly error messages to guide them to perform manual operations or retry.
[0047] In step S1, the glue link carries at least metadata including the target platform identifier, target page address, business context parameters, and security ticket; the security ticket has a timestamp and a random number to prevent replay attacks; the security ticket is encrypted using a symmetric encryption algorithm such as AES and a key, which is securely stored by the relay service.
[0048] The adhesive link also carries a digital signature (such as HMAC) for each piece of metadata.
[0049] The glue link protocol is a custom, structured URI scheme (e.g., digital-village: / / platform_id / target_page?params=value&ticket=encryp ted_data...).
[0050] The structure of adhesive links follows the format below:
[0051] digital-village: / / [target_platform] / [path]? [params]&ticket=[encrypted_data]
[0052] digital-village: / / : Fixed protocol header used for plugin identification.
[0053] target_platform: Target platform identifier (e.g., gov (government affairs), mall (e-commerce)).
[0054] path: The specific path within the target platform (e.g., product / detail, service / apply).
[0055] params: Standard query string, used to pass business parameters (e.g., id=123&type=2).
[0056] Ticket: A security ticket is an encrypted string containing core sensitive information to prevent it from being exposed in plaintext.
[0057] In step S2, the unified identity authentication management module obtains the Access Token of the digital village platform through the identity API or launchWebAuthFlow method, combined with the OAuth2.0 authorization code mode, to perform identity authentication and login status checks; when it detects that the current user is not logged in, it automatically pops up a login guidance window, obtains the authentication token generated during the login process, and encrypts and stores the authentication token through the storage API (such as storage.sync or storage.local) or platformKeys API.
[0058] In step S2, the intermediate page bridging service module adopts a RESTful architecture design and has a protocol conversion interface ( / api / convert) for converting glue links into HTTP links (URLs).
[0059] The intermediate page bridging service module is a lightweight web service that acts as a "relay station" in the redirection process. It is responsible for verifying, decrypting, and reissuing security tickets, converting glue links into HTTP links that can be recognized by the target platform and carry authentication tokens, thus enabling login-free redirection.
[0060] The protocol conversion interface is used to receive requests sent by browser plugins and complete security verification and link conversion processing logic, including:
[0061] Verify Ticket: Decrypt the ticket and verify its validity and timeliness (to prevent replay attacks).
[0062] Identity Mapping: Based on the unified user identifier, query the database to obtain the Access Token corresponding to the user on the Second Digital Village Platform.
[0063] Generate target URL: Assemble the actual page address of the second digital village platform, and attach the necessary parameters and Access Token, for example:
[0064] https: / / b-platform.com / product / 123?access_token=target_platform_token.
[0065] All communication between clients and the inter-page bridging service module must use the HTTPS protocol.
[0066] In step S3, the secure link parsing and routing scheduling module is used to parse the HTTP link to obtain metadata and authentication tokens carrying at least the target platform identifier, target page address, business context parameters, and security ticket. Based on the metadata and authentication tokens, request parameters are assembled, and the API interface of the intermediate page bridging service module is called based on the request parameters, thereby redirecting to the second digital rural platform without logging in.
[0067] A preferred embodiment of the digital rural platform linking system based on a browser plugin of the present invention includes the following modules:
[0068] The adhesive link identification and blocking module is used by the client to access the first platform page of the first digital rural platform through a browser. The browser identifies and blocks adhesive links set on the first platform page through an installed browser plugin.
[0069] The browser plugin is installed in the client's browser and serves as the front-end execution carrier of this invention. It is responsible for identifying and intercepting specific format adhesive links on the platform page and includes a unified identity authentication management module, an intermediate page bridging service module, and a secure link parsing and routing scheduling module.
[0070] The HTTP link generation module is used by the browser plugin to check the login status through the unified identity authentication management module based on the click signal of the glue link, and convert the glue link into an HTTP link carrying an authentication token through the intermediate page bridging service module; the authentication token is used for identity authentication on the second digital village platform and has an expiration period; the mapping relationship between the user's unified identifier and the authentication tokens of each platform is stored in a database (such as MySQL / Redis);
[0071] The platform link module is used by the browser plugin to redirect to the second platform page of the second digital rural platform without login based on the HTTP link through the secure link parsing and routing scheduling module, and to load related content (load the content expected by the user) on the second platform page based on the business context parameters carried by the adhesive link.
[0072] This invention uses a dedicated browser plugin as middleware to parse and execute glue links on the client side, thereby intelligently and securely "glue" together multiple independent digital village platforms.
[0073] In practice, each step is equipped with comprehensive exception handling (such as network errors, token expiration, and resolution failure), and provides users with user-friendly error messages to guide them to perform manual operations or retry.
[0074] In the glue link identification and interception module, the glue link carries at least the target platform identifier, target page address, business context parameters, and metadata of the security ticket; the security ticket has a timestamp and a random number to prevent replay attacks; the security ticket is encrypted using a symmetric encryption algorithm such as AES and a key, which is securely stored by the relay service;
[0075] The adhesive link also carries a digital signature (such as HMAC) for each piece of metadata.
[0076] The glue link protocol is a custom, structured URI scheme (e.g., digital-village: / / platform_id / target_page?params=value&ticket=encryp ted_data...).
[0077] The structure of adhesive links follows the format below:
[0078] digital-village: / / [target_platform] / [path]? [params]&ticket=[encrypted_data]
[0079] digital-village: / / : Fixed protocol header used for plugin identification.
[0080] target_platform: Target platform identifier (e.g., gov (government affairs), mall (e-commerce)).
[0081] path: The specific path within the target platform (e.g., product / detail, service / apply).
[0082] params: Standard query string, used to pass business parameters (e.g., id=123&type=2).
[0083] Ticket: A security ticket is an encrypted string containing core sensitive information to prevent it from being exposed in plaintext.
[0084] In the HTTP link generation module, the unified identity authentication management module obtains the Access Token of the digital village platform through the identity API or the launchWebAuthFlow method, combined with the OAuth2.0 authorization code mode, to perform identity authentication and login status checks. When it detects that the current user is not logged in, a login guidance window is automatically popped up, the authentication token generated during the login process is obtained, and the authentication token is encrypted and stored through the storage API (such as storage.sync or storage.local) or the platformKeys API.
[0085] In the HTTP link generation module, the intermediate page bridging service module adopts a RESTful architecture design and has a protocol conversion interface ( / api / convert) for converting glue links into HTTP links (URLs).
[0086] The intermediate page bridging service module is a lightweight web service that acts as a "relay station" in the redirection process. It is responsible for verifying, decrypting, and reissuing security tickets, converting glue links into HTTP links that can be recognized by the target platform and carry authentication tokens, thus enabling login-free redirection.
[0087] The protocol conversion interface is used to receive requests sent by browser plugins and complete security verification and link conversion processing logic, including:
[0088] Verify Ticket: Decrypt the ticket and verify its validity and timeliness (to prevent replay attacks).
[0089] Identity Mapping: Based on the unified user identifier, query the database to obtain the Access Token corresponding to the user on the Second Digital Village Platform.
[0090] Generate target URL: Assemble the actual page address of the second digital village platform, and attach the necessary parameters and Access Token, for example:
[0091] https: / / b-platform.com / product / 123?access_token=target_platform_token.
[0092] All communication between clients and the inter-page bridging service module must use the HTTPS protocol.
[0093] In the platform link module, the secure link parsing and routing scheduling module is used to parse the HTTP link to obtain metadata and authentication tokens that carry at least the target platform identifier, target page address, business context parameters, and security ticket. Based on the metadata and authentication tokens, request parameters are assembled, and the API interface of the intermediate page bridging service module is called based on the request parameters, thereby redirecting to the second digital rural platform without logging in.
[0094] In summary, the advantages of this invention are as follows:
[0095] 1. The client accesses the first platform page of the first digital village platform through a browser. The browser uses an installed browser plugin to identify and block the glue links set on the first platform page. Based on the click signal of the glue link, the browser plugin checks the login status through the unified identity authentication management module and converts the glue link into an HTTP link carrying an authentication token through the intermediate page bridging service module. The authentication token is used for identity authentication on the second digital village platform and has an expiration period. The browser plugin uses the secure link parsing and routing scheduling module to redirect to the second platform page of the second digital village platform without login based on the HTTP link, and loads related content on the second platform page based on the business context parameters carried by the glue link. In other words, the browser plugin intelligently identifies and blocks the platform. The system uses a unified identity authentication module to automatically check user login status and manage authentication tokens. Then, a middle page bridging service converts the original glued link into an HTTP link carrying the authentication token. Finally, a secure link resolution and routing module enables cross-platform login-free redirection and lossless transmission of business context parameters, significantly improving the convenience of cross-platform links and the consistency of user experience. Simultaneously, authentication token verification, digital signatures, and anti-replay mechanisms ensure the security and stability of link transmission. A RESTful middle page bridging service module enables protocol conversion and business decoupling, reducing system dependencies and enhancing the scalability and maintainability of the overall architecture. Ultimately, this greatly improves the convenience, stability, and maintainability of cross-platform links.
[0096] 2. Break through "data silos" and achieve service integration: fundamentally solve the problems of "data silos" and "functional silos" caused by platform heterogeneity and inconsistent data standards. Without performing the highly difficult operation of underlying data interconnection, it achieves deep integration and seamless flow of services at the user experience layer.
[0097] 3. Enhanced System Architecture Elasticity and Scalability: The "front-end glued, loosely coupled" architecture enables the entire digital rural service ecosystem to possess extremely high elasticity. When adding a new business platform, it only needs to be connected to the "glue" system of this invention, without having to re-interface with all existing platforms one-to-one, greatly reducing system complexity and the difficulty of future expansion.
[0098] 4. Establish a secure and reliable identity trust system: Through encrypted tickets and secure relay mechanisms, a standardized and secure cross-platform identity authentication and trust transfer system has been established, providing a technical foundation for the secure interoperability of various applications in digital villages, which is superior to simple single sign-on (SSO) solutions.
[0099] 5. Traditionally, solving system integration problems usually relies on in-depth development of backend APIs and joint debugging of data interfaces. This is a tightly coupled, high-cost, and long-cycle "heavyweight" integration model. This invention creatively proposes a lightweight "frontend glue" architecture. Through a browser plugin as a client-side carrier, it directly solves the cross-platform navigation experience problem on the user side with little or no modification to the backends of various platforms. This is a loosely coupled, low-cost, and easily deployable "agile" integration paradigm, fundamentally changing the technical approach to multi-platform integration in digital villages.
[0100] 6. Traditionally, hyperlinks (URLs) are merely simple address navigation instructions, unable to carry identity, state, and context information. This invention designs a novel "glue link protocol," which elevates the URL from an address carrier to a secure, structured, intelligent business instruction carrier. It encapsulates the target platform identifier, target page address, business context parameters, and most importantly, an encrypted security ticket, enabling a single click to trigger a complex, secure, stateful cross-platform business flow.
[0101] 7. Traditionally, attempting to transmit user identity information in URLs or cookies is highly susceptible to security risks. This invention introduces a "secure relay trust mechanism" based on encrypted tickets. Through a trusted relay called the "intermediate page bridging service module," it completes authentication and conversion between different security domains. Sensitive identity information is not transmitted in plaintext on the front end of the network, but is securely exchanged through one-time, encrypted, and time-limited security tickets. This achieves convenient login-free redirection while completely eliminating the risk of identity information leakage and tampering, perfectly balancing the seemingly contradictory relationship between user experience and security.
[0102] While specific embodiments of the present invention have been described above, those skilled in the art should understand that the specific embodiments described are merely illustrative and not intended to limit the scope of the present invention. Equivalent modifications and variations made by those skilled in the art in accordance with the spirit of the present invention should be covered within the scope of protection of the claims of the present invention.
Claims
1. A method for linking a digital rural platform based on a browser plugin, characterized in that: Includes the following steps: Step S1: The client accesses the first platform page of the first digital rural platform through a browser. The browser identifies and blocks the adhesive links set on the first platform page through the installed browser plugin. Step S2: Based on the click signal of the glue link, the browser plugin checks the login status through the unified identity authentication management module, and converts the glue link into an HTTP link carrying an authentication token through the intermediate page bridging service module. The authentication token is used for identity authentication on the second digital village platform and has an expiration period. Step S3: The browser plugin, through the secure link parsing and routing scheduling module, redirects to the second platform page of the second digital rural platform without login based on the HTTP link, and loads related content on the second platform page based on the business context parameters carried by the adhesive link.
2. The method for linking a digital rural platform based on a browser plugin as described in claim 1, characterized in that: In step S1, the glue link carries metadata including at least the target platform identifier, the target page address, business context parameters, and the security ticket; the security ticket includes a timestamp and a random number to prevent replay attacks. The adhesive link also carries a digital signature for each piece of metadata.
3. The method for linking a digital rural platform based on a browser plugin as described in claim 1, characterized in that: In step S2, the unified identity authentication management module obtains the Access Token of the digital village platform through the identity API or launchWebAuthFlow method, combined with the OAuth2.0 authorization code mode, to perform identity authentication and login status checks; when it detects that the current user is not logged in, it automatically pops up a login guidance window, obtains the authentication token generated during the login process, and encrypts and stores the authentication token through the storage API or platformKeys API.
4. The method for linking a digital rural platform based on a browser plugin as described in claim 1, characterized in that: In step S2, the intermediate page bridging service module adopts a RESTful architecture design and has a protocol conversion interface for converting glue links into HTTP links.
5. The method for linking a digital rural platform based on a browser plugin as described in claim 1, characterized in that: In step S3, the secure link parsing and routing scheduling module is used to parse the HTTP link to obtain metadata and authentication tokens carrying at least the target platform identifier, target page address, business context parameters, and security ticket. Based on the metadata and authentication tokens, request parameters are assembled, and the API interface of the intermediate page bridging service module is called based on the request parameters, thereby redirecting to the second digital rural platform without logging in.
6. A digital rural platform linking system based on a browser plugin, characterized in that: Includes the following modules: The adhesive link identification and blocking module is used by the client to access the first platform page of the first digital rural platform through a browser. The browser identifies and blocks adhesive links set on the first platform page through an installed browser plugin. The HTTP link generation module is used by the browser plugin to check the login status through the unified identity authentication management module based on the click signal of the glue link, and to convert the glue link into an HTTP link carrying an authentication token through the intermediate page bridging service module. The authentication token is used for identity authentication on the second digital village platform and has an expiration period. The platform link module is used by the browser plugin to redirect to the second platform page of the second digital rural platform without login based on the HTTP link through the secure link parsing and routing scheduling module, and to load related content on the second platform page based on the business context parameters carried by the adhesive link.
7. The digital rural platform linking system based on a browser plugin as described in claim 6, characterized in that: In the glue link identification and interception module, the glue link carries metadata including at least the target platform identifier, the target page address, business context parameters, and security ticket; the security ticket includes a timestamp and a random number to prevent replay attacks. The adhesive link also carries a digital signature for each piece of metadata.
8. The digital rural platform linking system based on a browser plugin as described in claim 6, characterized in that: In the HTTP link generation module, the unified identity authentication management module obtains the Access Token of the digital village platform through the identity API or launchWebAuthFlow method, combined with the OAuth2.0 authorization code mode, to perform identity authentication and login status checks; when it detects that the current user is not logged in, it automatically pops up a login guidance window, obtains the authentication token generated during the login process, and encrypts and stores the authentication token through the storage API or platformKeys API.
9. A digital rural platform linking system based on a browser plugin as described in claim 6, characterized in that: In the HTTP link generation module, the intermediate page bridging service module adopts a RESTful architecture design and has a protocol conversion interface for converting glue links into HTTP links.
10. A digital rural platform linking system based on a browser plugin as described in claim 6, characterized in that: In the platform link module, the secure link parsing and routing scheduling module is used to parse the HTTP link to obtain metadata and authentication tokens that carry at least the target platform identifier, target page address, business context parameters, and security ticket. Based on the metadata and authentication tokens, request parameters are assembled, and the API interface of the intermediate page bridging service module is called based on the request parameters, thereby redirecting to the second digital rural platform without logging in.