System access method, device, storage medium, and program product

Abstract

The present disclosure relates to a system access method, device, storage medium and program product. The system access method comprises: in response to obtaining a request for accessing a second business system in a process of accessing a first business system, an electronic device sends a cookie used for identity recognition in the process of accessing the first business system to a proxy device; the electronic device obtains a cookie used for identity recognition in the process of accessing the second business system, wherein the cookie used for identity recognition in the process of accessing the second business system is determined by the proxy device based on the cookie used for identity recognition in the process of accessing the first business system and is sent to the electronic device; and the electronic device accesses the second business system based on the cookie used for identity recognition in the process of accessing the second business system. Through the method of the present disclosure, the system access efficiency can be improved.

Description

Technical Field

[0001] This disclosure relates to the field of computer technology, and in particular to system access methods, devices, storage media, and program products. Background Technology

[0002] A business system is an information system that supports the daily operations, management, and decision-making of an enterprise or organization.

[0003] In related technologies, the process of users accessing business systems is relatively complex and inefficient. Summary of the Invention

[0004] To overcome the problems existing in related technologies, this disclosure provides a system access method, device, storage medium, and program product.

[0005] According to a first aspect of some embodiments of this disclosure, a system access method is provided, comprising: in response to obtaining a request to access a second business system during access to a first business system, an electronic device sending a cookie for identity verification during access to the first business system to a proxy device; the electronic device obtaining the cookie for identity verification during access to the second business system, wherein the cookie for identity verification during access to the second business system is determined by the proxy device based on the cookie for identity verification during access to the first business system and sent to the electronic device; and the electronic device accessing the second business system based on the cookie for identity verification during access to the second business system.

[0006] In some implementations, the electronic device obtains a cookie for identity verification during access to the second business system, including: in response to the proxy device verifying the identity of the electronic device based on the cookie for identity verification during access to the first business system, receiving a cookie for identity verification during access to the second business system sent by the proxy device, wherein the cookie for identity verification during access to the second business system is obtained by the proxy device based on the server port corresponding to the second business system.

[0007] In some implementations, the electronic device accesses the second business system based on the cookie used for identification during access to the second business system, including: sending the cookie used for identification during access to the second business system to the proxy device; and in response to the proxy device verifying the identity of the electronic device based on the cookie used for identification during access to the second business system, the electronic device accesses the second business system.

[0008] In some implementations, in response to the electronic device accessing the first business system for the first time, the method further includes: sending a request to the proxy device for initial access to the first business system, and obtaining a cookie for identity verification during access to the first business system, wherein the cookie for identity verification during access to the first business system is sent by the proxy device based on the request; and accessing the first business system based on the cookie for identity verification during access to the first business system.

[0009] In some implementations, the initial request to access the first business system is associated with identification information of an electronic device. The identification information is used to identify the identity of the electronic device sending the request. Obtaining the identity recognition cookie used during access to the first business system includes: in response to the proxy device successfully identifying the electronic device based on the identification information, receiving verification information sent by the proxy device and sending the verification information to the proxy device; in response to the verification information received by the proxy device being consistent with the verification information sent by the electronic device, receiving the identity recognition cookie sent by the proxy device during access to the first business system.

[0010] According to a second aspect of some embodiments of this disclosure, an electronic device is provided, comprising: a sending unit configured to, during the process of accessing a first business system, obtain a request to access a second business system and send a cookie for identity verification during the access to the first business system to a proxy device; a receiving unit configured to obtain the cookie for identity verification during the access to the second business system, wherein the cookie for identity verification during the access to the second business system is determined by the proxy device based on the cookie for identity verification during the access to the first business system and sent to the electronic device; and a processing unit configured to access the second business system based on the cookie for identity verification during the access to the second business system.

[0011] In some implementations, the receiving unit obtains the cookie used for identity verification during access to the second business system in the following manner: when the proxy device successfully verifies the identity of the electronic device based on the cookie used for identity verification during access to the first business system, the receiving unit receives the cookie used for identity verification during access to the second business system sent by the proxy device, wherein the cookie used for identity verification during access to the second business system is obtained by the proxy device based on the server port corresponding to the second business system.

[0012] In some implementations, the processing unit accesses the second business system based on the cookie used for identity verification during access to the second business system in the following manner: controlling the sending unit to send the cookie used for identity verification during access to the second business system to the proxy device; and if the proxy device successfully verifies the identity of the electronic device based on the cookie used for identity verification during access to the second business system, the electronic device accesses the second business system.

[0013] In some embodiments, when the electronic device accesses the first business system for the first time, the sending unit is further configured to: send a request to the proxy device for the first access to the first business system; the receiving unit is further configured to: obtain a cookie for identity verification during the access to the first business system; the processing unit is further configured to: access the first business system based on the cookie for identity verification during the access to the first business system, wherein the cookie for identity verification during the access to the first business system is sent by the proxy device based on the request.

[0014] In some implementations, the receiving unit obtains the identity recognition cookie used during access to the first business system in the following manner: if the proxy device successfully identifies the electronic device based on the identification information, it receives verification information sent by the proxy device and sends the verification information to the proxy device; if the verification information received by the proxy device is consistent with the verification information sent by the electronic device, it receives the identity recognition cookie sent by the proxy device during access to the first business system, wherein the first request to access the first business system is associated with the identification information of the electronic device, and the identification information is used to identify the identity of the electronic device that sent the request.

[0015] According to a third aspect of some embodiments of this disclosure, a proxy device is provided, comprising: a receiving unit for receiving a cookie sent by an electronic device for identity verification during access to a first business system; a processing unit for determining a cookie for identity verification during access to a second business system based on the cookie for identity verification during access to the first business system; and a sending unit for sending the cookie for identity verification during access to the second business system.

[0016] In some implementations, the sending unit sends the cookie used by the electronic device for identity verification during access to the second business system in the following manner: when the receiving unit obtains the first cookie information sent by the electronic device, the processing unit performs identity verification on the electronic device based on the cookie used by the electronic device for identity verification during access to the first business system; if the identity verification is successful, the processing unit sends the cookie used for identity verification during access to the second business system to the electronic device.

[0017] In some embodiments, the receiving unit is further configured to acquire a cookie sent by the electronic device for identity verification during access to the second business system; the processing unit is further configured to verify the identity of the electronic device based on the cookie for identity verification during access to the second business system, and, if the identity verification of the electronic device is successful, authorize the electronic device to access the second business system.

[0018] In some implementations, when the electronic device accesses the first business system for the first time, the receiving unit is further configured to receive a request from the electronic device for the first access to the first business system; the processing unit is further configured to determine a cookie for the electronic device to use for identity verification during the access to the first business system based on the request; and the sending unit is configured to send the cookie for identity verification during the access to the first business system to the electronic device, so that the electronic device accesses the first business system based on the cookie for identity verification during the access to the first business system.

[0019] In some implementations, the initial request to access the first business system is associated with the identification information of an electronic device, which identifies the electronic device sending the request. The sending unit sends an identification cookie for accessing the first business system in the following manner: if the processing unit successfully identifies the electronic device based on the identification information, the sending unit controls the sending unit to send verification information to the electronic device; if the receiving unit receives the verification information sent by the electronic device and the verification information sent by the electronic device is consistent with the verification information sent by the sending unit, the receiving unit sends an identification cookie for accessing the first business system to the electronic device.

[0020] According to a fourth aspect of the present disclosure, an electronic device is provided, comprising: a processor; a memory for storing processor-executable instructions; wherein the processor is configured to: execute the system access method described in the first aspect or any embodiment of the first aspect.

[0021] According to a fifth aspect of the present disclosure, a storage medium is provided, the storage medium storing instructions that, when executed by a processor, enable the processor to perform the system access method described in the first aspect or any embodiment of the first aspect.

[0022] According to a sixth aspect of the present disclosure, a computer program product is provided, the computer program product including a computer program, which, when executed by a processor, implements the system access method described in the first aspect or any embodiment of the first aspect.

[0023] The technical solutions provided by the embodiments of this disclosure can include the following beneficial effects: Electronic devices can exchange information by sending cookies used for identification during access to the first business system to a proxy device, in exchange for cookies used for identification during access to the second business system sent by the proxy device. Therefore, electronic devices can access the second business system based on the obtained cookies used for identification during access to the second business system. Since the information exchange process is handled by the proxy device, the interaction process between the electronic device and the second business system can be reduced, thereby simplifying the process of system access in multi-business system scenarios and improving system access efficiency.

[0024] It should be understood that the above general description and the following detailed description are exemplary and explanatory only, and are not intended to limit this disclosure. Attached Figure Description

[0025] The accompanying drawings, which are incorporated in and form a part of this specification, illustrate embodiments consistent with this disclosure and, together with the description, serve to explain the principles of this disclosure.

[0026] Figure 1A This is a schematic diagram illustrating a scenario of business system access according to some embodiments of this disclosure.

[0027] Figure 1B This is a flowchart illustrating a system access method according to some embodiments of the present disclosure.

[0028] Figure 2 This is a flowchart illustrating a method for first access to a first business system according to some embodiments of the present disclosure.

[0029] Figure 3 This is a flowchart illustrating a method for obtaining cookies for identity verification during the acquisition process, according to some embodiments of this disclosure.

[0030] Figure 4 This is a flowchart illustrating a method for accessing a second business system according to some embodiments of the present disclosure.

[0031] Figure 5A This is an interactive schematic diagram illustrating a system access method according to some embodiments of the present disclosure.

[0032] Figure 5B This is a schematic diagram illustrating a scenario interaction of a business system access method according to some embodiments of this disclosure.

[0033] Figure 5C This is a scenario interaction diagram illustrating a business system access method according to some embodiments of this disclosure. Figure 2 .

[0034] Figure 5D This is a scenario interaction diagram illustrating a business system access method according to some embodiments of this disclosure. Figure 3 .

[0035] Figure 6A This is a block diagram of a system access device according to some embodiments of the present disclosure.

[0036] Figure 6B This is a system access device frame shown according to some embodiments of the present disclosure. Figure 2 .

[0037] Figure 7 This is a block diagram of an apparatus for system access, illustrated according to some embodiments of the present disclosure.

[0038] Figure 8This is a block diagram of an apparatus for system access illustrated according to some embodiments of the present disclosure. Figure 2 . Detailed Implementation

[0039] Some embodiments of this disclosure will now be described in detail, examples of which are illustrated in the accompanying drawings. When the following description refers to the drawings, unless otherwise indicated, the same numbers in different drawings denote the same or similar elements. Various changes, modifications, and equivalents of the methods, apparatus, and / or systems described herein will become apparent upon understanding this disclosure. For example, the order of operations described herein is merely illustrative and is not limited to those orders set forth herein, but can be changed as will become apparent upon understanding this disclosure, except for operations that must be performed in a particular order. Furthermore, for clarity and brevity, descriptions of features known in the art may be omitted.

[0040] A business system is an information system that supports the daily operations, management, and decision-making of an enterprise or organization.

[0041] In related technologies, scenarios where users access business systems can typically be categorized as follows: Figure 1A As shown. Figure 1A This is a schematic diagram illustrating a scenario of business system access based on some embodiments of this disclosure. For example... Figure 1A As shown, a user accesses business system A (hereinafter referred to as System A) (for example, the user initiates an access request to System A through a browser). System A will authenticate the user's identity based on the access request, for example, authenticating the user's identity based on a Single Sign-On (SSO) mechanism. During the authentication process, the authentication system (for example, it can be an authentication system integrated into System A or an authentication system independent of System A) will issue temporary information for authentication to the user, such as a temporary token. The user sends the obtained temporary token to System A, enabling System A to authenticate the user based on the obtained temporary token. If the authentication is successful, the user will receive information from System A for subsequent access to the system (e.g., cookie information), which will be stored. This allows System A to recognize this information and authenticate the user during subsequent accesses, eliminating the need for the user to log in again.

[0042] However, once a user's authentication is successful, the information obtained for subsequent system access (e.g., cookie information) is typically only valid for accessing the corresponding system. For example, in the system described above, the cookie information issued by system A only allows the user to access system A. However, if the user needs to access other business systems, such as business system B (hereinafter referred to as system B), they also need to obtain the information for accessing system B (e.g., cookie information issued by system B) through the aforementioned SSO mechanism. Therefore, if a user has access needs to multiple business systems, they need to authenticate their identity for each business system separately using the single sign-on authentication mechanism to obtain the information (e.g., cookie information) issued by each business system for accessing the corresponding business system. Only then can they achieve subsequent "login-free" access based on the obtained information, which causes inconvenience for users accessing business systems.

[0043] In view of this, embodiments of this disclosure propose a system access method. During the process of a user accessing a first business system, based on the information obtained for accessing the current business system, information corresponding to the business system to be accessed is obtained, so that the user can access the system based on the information corresponding to the business system to be accessed. This reduces the process of the user interacting separately with the business system to be accessed to obtain the information for accessing the business system, making the system access process simpler, improving system access efficiency, and thus improving the user's experience in the system access process.

[0044] It should be noted that the system access method provided in this disclosure can be applied to electronic devices. Electronic devices may include, for example, terminals or servers. Terminals include, for example, mobile phones, wearable devices, IoT devices, automobiles with communication capabilities, smart cars, tablets, computers with wireless transceiver capabilities, virtual reality (VR) terminal devices, augmented reality (AR) terminal devices, wireless terminal devices in industrial control, wireless terminal devices in self-driving, wireless terminal devices in remote medical surgery, wireless terminal devices in smart grids, wireless terminal devices in transportation safety, wireless terminal devices in smart cities, and wireless terminal devices in smart homes, but are not limited thereto. Servers may include, but are not limited to, independent physical servers, server clusters or distributed systems composed of multiple physical servers, or cloud servers that provide basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communication, middleware services, domain name services, security services, content delivery networks (CDN), and big data and artificial intelligence platforms.

[0045] The embodiments disclosed herein can be applied to various scenarios, including but not limited to cloud technology, artificial intelligence, smart transportation, and assisted driving.

[0046] It should be noted that all actions involving the acquisition of signals, information, or data in this disclosure are carried out in compliance with the relevant data protection laws and policies of the country where the location is situated, and with authorization from the owner of the relevant device.

[0047] In the embodiments of this disclosure, terms such as “in response to…”, “in response to determining…”, “in the case of…”, “when…”, “if…”, “if…”, etc., can be used interchangeably.

[0048] In the embodiments disclosed herein, terms such as “greater than”, “greater than or equal to”, “not less than”, “more than”, “more than or equal to”, “not less than”, “higher than”, “higher than or equal to”, “not lower than”, and “above” can be substituted for each other, and terms such as “less than”, “less than or equal to”, “not greater than”, “less than”, “less than or equal to”, “not more than”, “lower than”, “lower than or equal to”, “not higher than”, and “below” can be substituted for each other.

[0049] For ease of understanding, some technical terms involved in the embodiments of this disclosure will be explained by way of example below:

[0050] Business systems typically refer to information systems within an organization or enterprise used to handle daily business operations, manage and support business processes. It is a complex system comprised of hardware, software, data, people, and business processes, designed to improve work efficiency, optimize management processes, support decision-making, and ultimately help the organization achieve its business objectives. Common business systems may include, for example, the following A1-1) to F1-1):

[0051] A1-1) Management Information System (MIS): A system used to provide management with daily operational information.

[0052] B1-1) Enterprise Resource Planning (ERP) System: Used to integrate the processes and data of all business departments, such as finance, human resources, supply chain management, etc.

[0053] C1-1) Customer Relationship Management (CRM): Used to help businesses manage their interactions with customers and improve customer service and support.

[0054] D1-1) Supply Chain Management (SCM): Used to optimize supply chain operations, including procurement, inventory, and logistics.

[0055] E1-1) Content Management System (CMS): Used to manage and control the creation, storage, modification, and publication of content.

[0056] F1-1) Database Management System (DBMS): Used to store, retrieve, manage, and analyze data.

[0057] It should be noted that the above-described business systems are merely exemplary examples provided in this disclosure. The system access methods mentioned in the embodiments of this disclosure can also be applied to other related business systems, which will not be elaborated upon here. It should also be noted that the business systems mentioned in the embodiments of this disclosure can be any one or more systems in the above examples. For example, the first business system can be A1-1), and the second business system can be other systems besides A1-1 (e.g., B1-1 or C1-1, etc.). Furthermore, the business systems in the embodiments of this disclosure can also be services or functions corresponding to any one or more systems in the above examples. For example, the first business system can refer to the A1-1) management information system, and the second business system can refer to some services corresponding to other systems besides A1-1), such as the financial services in the B1) system.

[0058] Cookie: Cookie information refers to data sent by a web server to a user's web browser and stored on the user's device. This information is typically used to record user activities, preferences, and for various tracking purposes. In this embodiment of the disclosure, the electronic device can obtain cookie information issued by the business system (e.g., the first business system) upon its first access to the business system (e.g., the first business system), and in subsequent accesses to the business system (e.g., the first business system), it can directly access the corresponding business system (e.g., the first business system) through the relevant content recorded in the cookie information without needing to log in and authenticate again.

[0059] A proxy device is a network entity that acts as an intermediary between a client and a server, handling network requests on behalf of either the client or the server. Proxy devices are typically used to perform the functions described in A1-2) to F1-2) below:

[0060] (A1-2) Network Request Forwarding: The proxy device receives network requests from clients (e.g., electronic devices mentioned in embodiments of this disclosure) and forwards them to the target server. Similarly, it also forwards responses returned from the server back to the client.

[0061] B1-2) Anonymity and privacy protection: Proxy devices can hide the client's real IP address, making the client's network activities invisible to the target server, thereby providing a certain degree of anonymity and privacy protection.

[0062] C1-2) Content Caching: Some proxy devices can cache frequently requested content, such as web pages. This way, when the same request occurs again, the proxy can directly serve the cached content, thereby reducing network latency and improving response speed.

[0063] D1-2) Security Features: The agent device can provide security features such as data encryption, firewall, intrusion detection and prevention of malware spread.

[0064] E1-2) Content filtering and review: In enterprise and educational networks, proxy devices are often used to filter inappropriate content and ensure that network use complies with organizational policies.

[0065] F1-2) Protocol Conversion: The proxy device can convert between different network protocols, enabling clients and servers using different protocols to communicate.

[0066] For ease of understanding, the proxy device mentioned in the embodiments of this disclosure can be understood as, for example, a gateway or other relay device.

[0067] The embodiments described in the following examples of this disclosure are not representative of all embodiments consistent with this disclosure. Rather, they are merely examples of apparatuses and methods consistent with some aspects of this disclosure as detailed in the appended claims.

[0068] The system access methods provided in some embodiments of this disclosure are applied to scenarios where multiple service systems coexist, such as the scenarios described in A2) to C2) below:

[0069] A2) The second business system is embedded in the first business system (e.g., the complete second business system, or a part of the service module in the second business system, or all the service modules in the second business system, etc.).

[0070] B2) The second business system is embedded in the first business system (e.g., the complete first business system, or a part of the service module of the first business system, or all the service modules of the first business system, etc.).

[0071] C2) The first business system (e.g., the complete first business system, or a part of the service modules in the first business system, or all of the service modules in the first business system, etc.) and the second business system (e.g., the complete second business system, or a part of the service modules in the second business system, or all of the service modules in the second business system, etc.) are embedded into the third business system, etc.

[0072] For ease of understanding, scenario A2) will be used as an example to illustrate the embodiments of this disclosure. It is understood that corresponding implementation methods in other scenarios can also be implemented with reference to the system access methods mentioned in the embodiments of this disclosure, and will not be described in detail here.

[0073] Figure 1B This is a flowchart illustrating a system access method according to some embodiments of the present disclosure, such as... Figure 1BAs shown, the system access method for electronic devices or agent devices includes the following steps.

[0074] In step S11, in response to a request to access the second business system obtained during the access to the first business system, the electronic device sends a cookie to the proxy device for identity verification during the access to the first business system.

[0075] In step S12, a cookie is obtained for identity verification during access to the second business system.

[0076] In step S13, the electronic device accesses the second business system based on a cookie used for identity verification during the access process.

[0077] The cookie used for identity verification during access to the second business system is determined by the proxy device based on the cookie used for identity verification during access to the first business system and sent to the electronic device.

[0078] In this embodiment, the electronic device can exchange information by sending a cookie used for identification during access to the first business system to a proxy device, in exchange for a cookie used for identification during access to the second business system sent by the proxy device. Therefore, the electronic device can access the second business system based on the obtained cookie used for identification during access. Since the information exchange process is handled by the proxy device, the interaction process between the electronic device and the second business system can be reduced, thereby simplifying the process of system access in multi-business system scenarios and improving the user experience.

[0079] In some embodiments, a request to access the second business system can be understood as a relevant business request (e.g., a request to access the second business system) sent by an electronic device to a proxy device. For example, the request to access the second business system may be carried in corresponding request information and sent by the electronic device to the proxy device.

[0080] In some embodiments, cookies used for identification during access to the first business system may be stored in an electronic device to facilitate identification by the first business system.

[0081] In some embodiments, cookies used for identification during access to a second business system may, for example, be stored in an electronic device to facilitate identification by the second business system.

[0082] It is understandable that the process of an electronic device accessing the primary business system can be understood as, for example, as either A3) or B3) in the following two cases:

[0083] A3) The process of an electronic device accessing the first business system for the first time.

[0084] B3) The process of an electronic device accessing the first business system for the first time.

[0085] In case A3), it can be understood that the electronic device has not previously accessed the first business system, and therefore has not obtained the cookie used for identification during the access process to the first business system. Therefore, in this situation, the electronic device needs to access the first business system to obtain the cookie used for identification during the access process, and then send the cookie used for identification during the access process to the proxy device, thereby obtaining the cookie used for identification during the access process to the second business system.

[0086] For example, A3) can be achieved through the following: Figure 2 The implementation method shown is adopted. Figure 2 This is a flowchart illustrating a method for initial access to a first business system according to some embodiments of this disclosure, such as... Figure 2 As shown, the steps include the following.

[0087] In step S21, a request for initial access to the first business system is sent to the proxy device, and a cookie for identity verification is obtained during the access to the first business system.

[0088] In step S22, the first business system is accessed based on the cookie used for identity verification during the access process.

[0089] The cookie used for identity verification during access to the first business system is sent by the proxy device based on the request.

[0090] In this embodiment of the disclosure, the electronic device sends a request to the proxy device for initial access to the first business system. The proxy device performs corresponding identity verification based on the obtained initial request to the first business system. If the identity verification is successful, the proxy device sends a cookie for identity verification during the access to the first business system to the electronic device. This enables the electronic device to exchange the cookie for identity verification during the access to the first business system with the proxy device for a cookie for identity verification during the access to the second business system, thereby enabling the electronic device to access the second business system during the access to the first business system.

[0091] Understandably, in some scenarios, to ensure the security of system access, electronic devices need to be identified by the first business system during their first access to the first business system, and only after successful identification can they obtain the cookie used for identification during access to the first business system.

[0092] In the above scenario, for example, it can be done as follows: Figure 3 The implementation method shown is adopted. Figure 3 This is a flowchart illustrating a method for obtaining cookies for identity verification during the acquisition process, according to some embodiments of this disclosure. Figure 3 As shown, the steps include the following.

[0093] In step S31, in response to the agent device successfully identifying the electronic device based on the identification information, the system receives the verification information sent by the agent device and sends the verification information to the agent device.

[0094] In step S32, in response to the fact that the verification information received by the proxy device is consistent with the verification information sent by the electronic device, the identity recognition cookie sent by the proxy device for accessing the first business system is received.

[0095] In this process, the request to access the first business system is associated with the identification information of the electronic device, which is used to identify the identity of the electronic device that sent the request.

[0096] In this embodiment of the disclosure, since the identification information can identify the identity of the electronic device, the electronic device can be identified based on the identification information to enable the electronic device to access the first business system. Furthermore, if the agent device successfully verifies the identity of the electronic device based on the identification information, corresponding identity verification based on the verification information is performed to improve the security of information interaction, thereby making the system access process more secure and reliable.

[0097] In some embodiments, the identification information may include, for example, a username that identifies the electronic device and the password corresponding to that username. For instance, the electronic device may send the username and password corresponding to the user requesting access to the first business system to a proxy device, which then forwards the request to the first business system. The first business system then identifies the electronic device based on the username and password.

[0098] It is understood that, in the above embodiments, a successful identity verification of the electronic device based on the identification information can be understood as, for example, that the username and the corresponding password match. A failed identity verification of the electronic device based on the identification information can be understood as, for example, that the username and the corresponding password do not match. It is also understood that, in response to a failed identity verification of the electronic device based on the identification information, the electronic device does not obtain the verification information sent by the proxy device (e.g., the electronic device cannot actively obtain it, or the proxy device does not send it).

[0099] Therefore, electronic devices can be identified based on identification information in the above manner. If the identification of electronic devices based on identification information is successful, verification information can be obtained. Further identification can then be performed using the verification information to obtain the first information.

[0100] In some embodiments, verification information can be understood as temporary information used to verify the identity of an electronic device. Examples include temporary verification tokens and / or assertions.

[0101] In some scenarios, the verification information sent by an electronic device is determined based on the verification information obtained by the electronic device (e.g., obtaining verification information sent by a proxy device). For example, the electronic device may determine the response information corresponding to the verification information obtained by the electronic device and use the response information as the verification information sent by the electronic device.

[0102] For example, the verification information obtained by the electronic device could be identified as the verification information sent by the electronic device. That is, the electronic device resends the obtained verification information to the proxy device. The proxy device determines whether to send an identity cookie for accessing the first business system to the electronic device by confirming whether the received verification information matches the sent verification information. For example, if the verification information received by the proxy device matches the verification information sent by the electronic device, the proxy device receives the identity cookie for accessing the first business system. If the verification information received by the proxy device does not match the verification information sent by the electronic device, the proxy device does not send the identity cookie for accessing the first business system and / or resends new verification information for authentication.

[0103] In summary, the above-described embodiments enable the process of an electronic device accessing the first business system for the first time.

[0104] Regarding the above B3), it is understood that since the electronic device obtains the cookie used for identification during the access to the first business system on the first visit, the electronic device can store the obtained cookie used for identification during the access to the first business system locally, and access the first business system based on the cookie used for identification during the access to the first business system on subsequent visits.

[0105] It is understandable that electronic devices can access the first business system through the aforementioned scenarios A3) or B3). During the process of an electronic device accessing the first business system, the acquisition of a cookie used for authentication during access to the second business system can, for example, involve a proxy device authenticating the electronic device based on the cookie used for authentication during access to the first business system, and receiving the cookie sent by the proxy device for authentication during access to the second business system. This cookie for authentication during access to the second business system is obtained by the proxy device based on the server port corresponding to the second business system.

[0106] In this embodiment, the cookie used for identity verification during access to the second business system is issued to the proxy device by the server port corresponding to the second business system, and this cookie can be used by the electronic device for identity verification. Therefore, the electronic device can interact with the proxy device after successful identity verification to obtain the cookie used for identity verification during access to the second business system. This improves the security of system access. Furthermore, since the cookie used for identity verification during access to the second business system is sent by the proxy device based on the request to access the second business system, the possibility of abnormal cookie sending (e.g., multiple or incorrect sending) can be reduced, making the process of the electronic device accessing the second business system more stable.

[0107] In some embodiments, the cookie used for identification during access to the second business system may, for example, be issued to the proxy device by the server port corresponding to the second business system before the electronic device sends the first cookie. Alternatively, in response to the proxy device obtaining the cookie used for identification during access to the first business system, the proxy device requests the server port corresponding to the second business system to issue the cookie used for identification during access to the second business system, and the second business system, in response to the request of the proxy device, issues the cookie used for identification during access to the proxy device.

[0108] Therefore, the above implementation method enables the electronic device to obtain cookies used for identity verification during access to the second business system. When the electronic device obtains the cookie used for identity verification during access to the second business system, it can do so, for example, as follows: Figure 4 The implementation shown accesses the second business system.

[0109] Figure 4 This is a flowchart illustrating a method for accessing a second business system according to some embodiments of this disclosure. For example... Figure 4 As shown, the steps include the following.

[0110] In step S41, a cookie for identity verification during access to the second business system is sent to the proxy device.

[0111] In step S42, in response to the proxy device verifying the identity of the electronic device based on the cookie used for identity verification during access to the second business system, the electronic device accesses the second business system.

[0112] In this embodiment of the disclosure, a proxy device identifies the electronic device based on a cookie used for identity verification during access to the second business system. If the identity verification is successful, the proxy device authorizes the electronic device to access the second business system, thereby improving the security of the electronic device accessing the second business system.

[0113] Understandably, if identity verification based on cookies used for accessing the second business system fails, the electronic device will not be authorized to access the second business system.

[0114] Therefore, through the above implementation method, electronic devices can access the second business system without logging into it during the process of accessing the first business system, thereby improving the efficiency of user system access.

[0115] Based on the same concept, this disclosure also proposes a system access method for use in network interaction systems. For example... Figure 5A As shown, Figure 5A This is an interactive schematic diagram illustrating a system access method according to some embodiments of the present disclosure. The method is applied to a network interaction system, which includes, for example, electronic devices and proxy devices, and includes the following steps.

[0116] In step S101, in response to the electronic device receiving a first request during its access to the first business system, the electronic device sends first information to the agent device.

[0117] In step S102, the agent device receives the first information and determines the second information based on the first information.

[0118] In step S103, the agent device sends the second information to the electronic device.

[0119] In step S104, the electronic device accesses the second business system based on the second information.

[0120] The first information is a cookie used for identity verification during the electronic device's access to the first business system, and the second information is a cookie used for identity verification during the electronic device's access to the second business system. The first request can be understood as the electronic device obtaining a request to access the second business system during the process of accessing the first business system.

[0121] In this embodiment of the disclosure, since the second information is information used for identity recognition during the process of the electronic device accessing the second business system, the electronic device can access the second business system based on the second information by obtaining the second information determined by the proxy device based on the first information during the process of accessing the first business system, thereby reducing the number of interactions with the second business system before access and improving access efficiency.

[0122] It should be noted that for the first information, second information and other related features in the above embodiments, please refer to the descriptions in the above embodiments, and they will not be repeated here.

[0123] It should also be noted that for the first information, second information, and other related features mentioned in the following embodiments of this disclosure, please refer to [link / reference needed]. Figure 5A The relevant embodiments and descriptions will not be repeated hereafter.

[0124] To facilitate understanding, the following will be explained through... Figure 5B The application scenarios of the access methods for business systems are illustrated with examples. Figure 5BThis is a schematic diagram illustrating a scenario interaction of a business system access method according to some embodiments of this disclosure. For example... Figure 5B As shown, the business front-end can be understood as the front-end interface of an electronic device. Users can perform business system access operations at the business front-end (e.g., accessing the first business system, accessing the second business system, or accessing the second business system while accessing the first business system). For ease of understanding, the following description uses scenario A2 mentioned above as an example. Assume that a user can perform business system access operations through the business front-end interface (e.g., logging in with an account and password to access the first business system). If the user is accessing the first business system for the first time, the business front-end will receive a temporary token sent by a proxy device (e.g., a gateway) and verify it to obtain first information for accessing the first business system (e.g., cookie information for accessing the first business system). If the user needs to access the second business system (e.g., accessing the second business system while accessing the first business system), they can interact with the gateway based on the first information to obtain second information for accessing the second business system (e.g., cookie information for accessing the second business system). For the second information, the proxy device can interact with the server port of the second business system (i.e., the embedded system backend) to obtain the second information issued by the server port. When electronic devices acquire the second information, they can access the second business system from the business front end.

[0125] Understandably, in the example above, the user only performs one access operation through the business front-end (i.e., the first login to the first business system using an account and password). Accessing the second business system does not require a separate access operation to obtain the second information. Therefore, the aforementioned business system access method reduces the number of login operations required by the user, enables seamless switching between different embedded systems, and improves the user experience.

[0126] It is understandable that the above Figure 5B The implementation process of business system access methods is explained from the perspective of interaction between electronic devices and user applications. For ease of understanding, the following will be explained through... Figure 5C This document provides an illustrative example of the interaction scenarios among various entities in the network interaction system during the access to the business system. Figure 5C This is a scenario interaction diagram illustrating a business system access method according to some embodiments of this disclosure. Figure 2 .

[0127] like Figure 5C As shown, taking the first business scenario 2) as an example, the scenario can be divided into: A4) the process of the user accessing the first business system and B4) the process of the user accessing B.

[0128] For A4), the steps include:

[0129] S1-1, Electronic devices access the first business system for the first time.

[0130] S1-2, The user enters a username and / or password using an electronic device.

[0131] S1-3 performs identity verification based on a single sign-on login mechanism and returns a temporary token if the verification is successful.

[0132] S1-4, The electronic device sends a temporary token to the agent device.

[0133] S1-5, the first business system performs identity verification based on temporary tokens.

[0134] S1-6, verify the temporary token and issue the first message.

[0135] S1-7, return the first information corresponding to the first business system.

[0136] S1-8, confirm that the first business system authentication is complete.

[0137] S1-9, confirming successful authentication of the first business system.

[0138] For example, steps S1-7 can be understood as the first business system returning the corresponding first information to the electronic device (for example, it can be returned directly to the electronic device, or the first information can be sent to the agent device first, and then the agent device sends it to the electronic device).

[0139] The execution path of a user accessing the first business system can be as follows: the user accesses the first business system through a browser on an electronic device. If this is the user's first time accessing the first business system, the electronic device authenticates the user using a single sign-on (SSO) mechanism (e.g., the SSO mechanism corresponding to the first business system itself) by using the username and password entered by the user (e.g., identity recognition based on identifier information in the aforementioned embodiments). If the SSO authentication passes, the first business system issues a temporary token (e.g., the verification information obtained by the electronic device in the aforementioned embodiments) to the electronic device for corresponding identity verification (e.g., identity recognition based on verification information in the aforementioned embodiments). Upon receiving the temporary token, the electronic device initiates corresponding identity verification, for example, by sending a temporary token for identity verification (e.g., the verification information sent by the electronic device in the aforementioned embodiments) to a proxy device, and then verifying it via the SSO mechanism. If the verification is successful, the first business system issues first information for accessing the first business system, which is then sent to the proxy device and subsequently to the electronic device. When an electronic device obtains the first information, it can store the first information in a browser and access the first business system based on the first information and the proxy device during subsequent visits to the first business system.

[0140] For A4), the steps include:

[0141] S1-10, Electronic devices access the second business system.

[0142] S1-11, the agent device exchanges the first information for the second information.

[0143] S1-12, the agent device successfully obtained the second information.

[0144] S1-13, Second business system authentication successful.

[0145] The execution path for a user accessing the second business system could be as follows: While accessing the first business system, the electronic device initiates an access request to a proxy device and sends first information to the proxy device. This allows the proxy device to send second information to the electronic device based on the first information. The second information can be obtained through a single sign-on mechanism between the proxy device and the second business system. Once the electronic device obtains the second information, it gains the ability to access the second business system. Therefore, the electronic device can access the second business system while simultaneously accessing the first business system.

[0146] To facilitate understanding, the following will be explained through... Figure 5D Regarding the above Figures 5A to 5C The interactive scenarios of each embodiment are described. Figure 5D This is a scenario interaction diagram illustrating a business system access method according to some embodiments of this disclosure. Figure 3 .like Figure 5D As shown, the interaction process includes the following steps.

[0147] In step S2-1, the electronic device sends a request to the agent device to access the first business system.

[0148] In step S2-2, the agent device responds to the request and triggers the single sign-on authentication mechanism.

[0149] In steps S2-3, the electronic device responds to the single sign-on authentication mechanism by sending the username and corresponding password to the proxy device.

[0150] In steps S2-4, the agent device authenticates the electronic device based on the username and corresponding password, and sends the first information to the electronic device if the authentication is successful.

[0151] In steps S2-5, the electronic device requests access to the second business system during the process of accessing the first business system.

[0152] In steps S2-6, the first business system responds to the request.

[0153] In steps S2-7, the electronic device sends a request to the agent device to access the second business system and the first information.

[0154] In steps S2-8, the agent device performs authentication based on the first information.

[0155] In steps S2-9, the agent device passes the verification and sends the second information to the electronic device.

[0156] In step S2-10, the electronic device sends the second information to the agent device.

[0157] In step S2-11, the agent device verifies the second information.

[0158] In step S2-12, in response to the successful verification of the second information, the electronic device is authorized to access the second business system.

[0159] In step S2-13, the second business system performs the corresponding logical verification.

[0160] In step S2-14, in response to the successful logical verification of the second business system, the resources of the second business system are returned to the electronic device.

[0161] It is understood that steps S2-1 to S2-14 have been described in detail in the above-mentioned embodiments. Implementation details for each step can be found in the corresponding embodiments described above. For example, steps S2-1 to S2-6 can be understood as the process of the electronic device accessing the first business system for the first time, as described in the corresponding embodiments described above. Similarly, steps S2-7 to S2-12 can be understood as the process of the electronic device accessing the second business system, as described in the corresponding embodiments described above.

[0162] Therefore, through the above-described embodiments, security in cross-business system access scenarios can be improved, the number of repeated logins can be reduced, and thus the user experience can be improved. Furthermore, the proxy device can be configured to support multiple programming languages, further enhancing the versatility between various business systems.

[0163] Based on the same concept, embodiments of this disclosure also provide an electronic device for system access.

[0164] It is understood that the electronic device for system access provided in this disclosure includes hardware structures and / or software modules corresponding to the execution of each function in order to achieve the above-mentioned functions. In conjunction with the units and algorithm steps of the various examples disclosed in this disclosure, this disclosure can be implemented in hardware or a combination of hardware and computer software. Whether a function is executed by hardware or by computer software driving hardware depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of the technical solutions of this disclosure.

[0165] Figure 6A This is a block diagram illustrating an electronic device for system access according to some embodiments of the present disclosure. (Refer to...) Figure 6A The electronic device 110 includes a transmitting unit 111, a receiving unit 112, and a processing unit 113.

[0166] The sending unit 111 is used to obtain a request to access the second business system during the process of accessing the first business system, and send a cookie for identity verification during the process of accessing the first business system to the proxy device.

[0167] The receiving unit 112 is used to obtain a cookie for identity verification during access to the second business system, wherein the cookie for identity verification during access to the second business system is determined by the proxy device based on the cookie for identity verification during access to the first business system and sent to the electronic device.

[0168] Processing unit 113 is used to access the second business system based on a cookie used for identity verification during the access process.

[0169] In some embodiments, the receiving unit 112 obtains the cookie used for identity verification during access to the second business system in the following manner: when the proxy device successfully verifies the identity of the electronic device based on the cookie used for identity verification during access to the first business system, the receiving unit 112 receives the cookie used for identity verification during access to the second business system sent by the proxy device, wherein the cookie used for identity verification during access to the second business system is obtained by the proxy device based on the server port corresponding to the second business system.

[0170] In some embodiments, the processing unit 113 accesses the second business system based on a cookie used for identification during access to the second business system in the following manner: the control sending unit sends a cookie used for identification during access to the second business system to a proxy device; if the proxy device successfully identifies the electronic device based on the cookie used for identification during access to the second business system, the electronic device accesses the second business system.

[0171] In some embodiments, when an electronic device accesses the first business system for the first time, the sending unit 111 is further configured to: send a request to the proxy device for the first access to the first business system; the receiving unit 112 is further configured to: obtain a cookie for identification during the access to the first business system; and the processing unit 113 is further configured to: access the first business system based on the cookie for identification during the access to the first business system, wherein the cookie for identification during the access to the first business system is sent by the proxy device based on the request.

[0172] In some embodiments, the receiving unit 112 obtains the identity recognition cookie used during access to the first business system in the following manner: when the proxy device successfully identifies the electronic device based on the identification information, it receives the verification information sent by the proxy device and sends the verification information to the proxy device; when the verification information received by the proxy device is consistent with the verification information sent by the electronic device, it receives the identity recognition cookie sent by the proxy device during access to the first business system, wherein the first request to access the first business system is associated with the identification information of the electronic device, and the identification information is used to identify the identity of the electronic device that sent the request.

[0173] Based on the same concept, embodiments of this disclosure also provide a proxy device for system access.

[0174] It is understood that the proxy device for system access provided in this disclosure includes hardware structures and / or software modules corresponding to the execution of each function in order to achieve the above-mentioned functions. In conjunction with the units and algorithm steps of the various examples disclosed in this disclosure, this disclosure can be implemented in hardware or a combination of hardware and computer software. Whether a function is executed by hardware or by computer software driving hardware depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of the technical solutions of this disclosure.

[0175] Figure 6B This is a block diagram illustrating a proxy device for system access according to some embodiments of this disclosure. (Refer to...) Figure 6B The agent device 120 includes a receiving unit 121, a processing unit 122, and a sending unit 123.

[0176] The receiving unit 121 is used to receive cookies sent by electronic devices for identity verification during access to the first business system.

[0177] The processing unit 122 is used to determine the cookie used by the electronic device to access the second business system based on the cookie used for identity verification during the access of the electronic device to the first business system.

[0178] The sending unit 123 is used to send cookies for electronic devices to perform identity verification during access to the second business system.

[0179] In some embodiments, the sending unit 123 sends a cookie for identification by the electronic device during access to the second business system in the following manner: when the receiving unit 121 obtains the first cookie information sent by the electronic device, the processing unit identifies the electronic device based on the cookie for identification by the electronic device during access to the first business system; if the identification is successful, the processing unit sends a cookie for identification by the electronic device during access to the second business system to the electronic device.

[0180] In some embodiments, the receiving unit 121 is further configured to obtain a cookie sent by the electronic device for identity verification during access to the second business system; the processing unit 122 is further configured to identify the electronic device based on the cookie for identity verification during access to the second business system, and authorize the electronic device to access the second business system if the identity verification of the electronic device is successful.

[0181] In some embodiments, when an electronic device accesses the first business system for the first time, the receiving unit 121 is further configured to receive a request from the electronic device to access the first business system for the first time; the processing unit 122 is further configured to determine a cookie for the electronic device to identify itself during the process of accessing the first business system based on the request; and the sending unit 123 is configured to send a cookie for the electronic device to identify itself during the process of accessing the first business system to the electronic device, so that the electronic device accesses the first business system based on the cookie for the electronic device to identify itself during the process of accessing the first business system.

[0182] In some embodiments, the initial request to access the first business system is associated with the identification information of an electronic device, which is used to identify the identity of the electronic device sending the request. The sending unit 123 sends an identification cookie for accessing the first business system in the following manner: if the processing unit 122 successfully identifies the electronic device based on the identification information, the sending unit 123 is controlled to send verification information to the electronic device; if the receiving unit 121 receives the verification information sent by the electronic device and the verification information sent by the electronic device is consistent with the verification information sent by the sending unit, the receiving unit 121 sends an identification cookie for accessing the first business system to the electronic device.

[0183] Regarding the apparatus in the above embodiments, the specific manner in which each module performs its operation has been described in detail in the embodiments related to the method, and will not be elaborated upon here.

[0184] Figure 7 This is a block diagram of an apparatus for system access according to some embodiments of the present disclosure. For example, apparatus 200 may be a mobile phone, computer, digital broadcast terminal, messaging device, game console, tablet device, medical device, fitness equipment, personal digital assistant, etc.

[0185] Reference Figure 7 The device 200 may include one or more of the following components: processing component 202, memory 204, power component 206, multimedia component 208, audio component 210, input / output (I / O) interface 212, sensor component 214, and communication component 216.

[0186] Processing component 202 typically controls the overall operation of device 200, such as operations associated with display, telephone calls, data communication, camera operation, and recording. Processing component 202 may include one or more processors 220 to execute instructions to perform all or part of the steps of the methods described above. Furthermore, processing component 202 may include one or more modules to facilitate interaction between processing component 202 and other components. For example, processing component 202 may include a multimedia module to facilitate interaction between multimedia component 208 and processing component 202.

[0187] Memory 204 is configured to store various types of data to support the operation of device 200. Examples of such data include instructions for any application or method operating on device 200, contact data, phonebook data, messages, pictures, videos, etc. Memory 204 can be implemented by any type of volatile or non-volatile storage device or a combination thereof, such as static random access memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic storage, flash memory, magnetic disk, or optical disk.

[0188] The power supply component 206 provides power to the various components of the device 200. The power supply component 206 may include a power management system, one or more power sources, and other components associated with generating, managing, and distributing power to the device 200.

[0189] Multimedia component 208 includes a screen that provides an output interface between the device 200 and the user. In some embodiments, the screen may include a liquid crystal display (LCD) and a touch panel (TP). If the screen includes a touch panel, the screen may be implemented as a touchscreen to receive input signals from the user. The touch panel includes one or more touch sensors to sense touches, swipes, and gestures on the touch panel. The touch sensors may sense not only the boundaries of the touch or swipe action but also the duration and pressure associated with the touch or swipe operation. In some embodiments, multimedia component 208 includes a front-facing camera and / or a rear-facing camera. When the device 200 is in an operating mode, such as a shooting mode or a video mode, the front-facing camera and / or the rear-facing camera may receive external multimedia data. Each front-facing camera and rear-facing camera may be a fixed optical lens system or have focal length and optical zoom capabilities.

[0190] Audio component 210 is configured to output and / or input audio signals. For example, audio component 210 includes a microphone (MIC) configured to receive external audio signals when device 200 is in an operating mode, such as call mode, recording mode, and voice recognition mode. The received audio signals may be further stored in memory 204 or transmitted via communication component 216. In some embodiments, audio component 210 also includes a speaker for outputting audio signals.

[0191] I / O interface 212 provides an interface between processing component 202 and peripheral interface modules, such as keyboards, click wheels, buttons, etc. These buttons may include, but are not limited to, home buttons, volume buttons, power buttons, and lock buttons.

[0192] Sensor assembly 214 includes one or more sensors for providing status assessments of various aspects of device 200. For example, sensor assembly 214 may detect the on / off state of device 200, the relative positioning of components such as the display and keypad of device 200, changes in the position of device 200 or a component of device 200, the presence or absence of user contact with device 200, the orientation or acceleration / deceleration of device 200, and temperature changes of device 200. Sensor assembly 214 may include a proximity sensor configured to detect the presence of nearby objects without any physical contact. Sensor assembly 214 may also include a light sensor, such as a CMOS or CCD image sensor, for use in imaging applications. In some embodiments, sensor assembly 214 may also include an accelerometer, a gyroscope, a magnetometer, a pressure sensor, or a temperature sensor.

[0193] Communication component 216 is configured to facilitate wired or wireless communication between device 200 and other devices. Device 200 can access wireless networks based on communication standards, such as WiFi, 3G, 4G, 5G, other communication standards, or combinations thereof. In some embodiments of this disclosure, communication component 216 receives broadcast signals or broadcast-related information from an external broadcast management system via a broadcast channel. In some embodiments of this disclosure, communication component 216 further includes a near-field communication (NFC) module to facilitate short-range communication. For example, the NFC module may be implemented based on radio frequency identification (RFID) technology, Infrared Data Association (IrDA) technology, ultra-wideband (UWB) technology, Bluetooth (BT) technology, and other technologies.

[0194] In some embodiments of this disclosure, the apparatus 200 may be implemented by one or more application-specific integrated circuits (ASICs), digital signal processors (DSPs), digital signal processing devices (DSPDs), programmable logic devices (PLDs), field-programmable gate arrays (FPGAs), controllers, microcontrollers, microprocessors, or other electronic components to perform the methods described above.

[0195] In some embodiments of this disclosure, a storage medium including instructions is also provided, such as a memory 204 including instructions, which can be executed by the processor 220 of the device 200 to perform the above-described method. For example, the storage medium may be a ROM, random access memory (RAM), CD-ROM, magnetic tape, floppy disk, and optical data storage device, etc.

[0196] In some embodiments of this disclosure, a storage medium is provided, which may be a non-transitory computer-readable storage medium.

[0197] In some embodiments of this disclosure, when instructions in the storage medium are executed by a processor of a device for system access, the device for system access is enabled to perform the methods described above.

[0198] Figure 8 This is a block diagram of an apparatus for system access illustrated according to some embodiments of the present disclosure. Figure 2 For example, device 300 can be provided as a server. (See reference...) Figure 8 The device 300 includes a processing component 322, which further includes one or more processors, and memory resources represented by memory 332 for storing instructions, such as application programs, that can be executed by the processing component 322. The application programs stored in memory 332 may include one or more modules, each corresponding to a set of instructions. Furthermore, the processing component 322 is configured to execute instructions to perform the methods described above.

[0199] Device 300 may also include a power supply component 326 configured to perform power management of device 300, a wired or wireless network interface 350 configured to connect device 300 to a network, and an input / output (I / O) interface 358. Device 300 may operate on an operating system stored in memory 332, such as Windows Server™, Mac OS X™, Unix™, Linux™, FreeBSD™, or similar.

[0200] In some embodiments of this disclosure, a storage medium including instructions is also provided, such as a memory 332 including instructions, which can be executed by the processing component 322 of the device 300 to perform the above-described method. For example, the storage medium may be a ROM, random access memory (RAM), CD-ROM, magnetic tape, floppy disk, and optical data storage device, etc.

[0201] In some embodiments of this disclosure, a storage medium is provided, which may be a non-transitory computer-readable storage medium.

[0202] In some embodiments of this disclosure, when instructions in the storage medium are executed by the processor of a system-accessed device, the system-accessed device is able to perform the methods described above.

[0203] Those skilled in the art will also understand that the various illustrative logical blocks and steps listed in the embodiments of this application can be implemented by electronic hardware, computer software, or a combination of both. Whether such functionality is implemented through hardware or software depends on the specific application and the overall system design requirements. Those skilled in the art can implement the described functionality using various methods for each specific application, but such implementation should not be construed as exceeding the scope of protection of the embodiments of this application.

[0204] Although terms such as “first,” “second,” and “third” may be used herein to describe various components, parts, regions, layers, or sections, these components, parts, regions, layers, or sections are not limited to these terms. Rather, these terms are used only to distinguish one component, part, region, layer, or section from another. Therefore, without departing from the teachings of the examples described herein, a first component, part, region, layer, or section mentioned in the examples may also be referred to as a second component, part, region, layer, or section. Furthermore, the terms “first” and “second” are used for descriptive purposes only and should not be construed as indicating or implying relative importance or implicitly specifying the number of indicated technical features. Thus, a feature defined as “first” or “second” may explicitly or implicitly include at least one of that feature.

[0205] It is further understood that the terms "first," "second," etc., are used to describe various types of information, but this information should not be limited to these terms. These terms are only used to distinguish information of the same type from one another, and do not indicate a specific order or degree of importance. In fact, the expressions "first," "second," etc., are completely interchangeable. For example, without departing from the scope of this disclosure, first information can also be referred to as second information, and similarly, second information can also be referred to as first information.

[0206] In this description, "multiple" means at least two, referring to two or more, such as two, three, etc., unless otherwise explicitly specified. Other quantifiers are similar. The singular forms "a," "the," and "the" are also intended to include the plural forms unless the context clearly indicates otherwise. Furthermore, unless otherwise specified or clearly indicated from the context, the articles "a" and "an" as used in this application and the appended claims are generally understood to mean "one or more."

[0207] It should be understood that, unless otherwise specifically indicated, features of various embodiments of this disclosure described herein can be combined with each other. As used herein, the term "and / or" includes any one of the related listed items and any combination of two or more; "and / or" describes the association relationship between related objects, indicating that three relationships may exist, for example, A and / or B can represent: A alone, A and B simultaneously, and B alone. The character " / " generally indicates that the preceding and following related objects are in an "or" relationship. Similarly, "at least one of..." includes any one of the related listed items and any combination of two or more.

[0208] It is further understood that the terms "first," "second," etc., are used to describe various types of information, but this information should not be limited to these terms. These terms are only used to distinguish information of the same type from one another, and do not indicate a specific order or degree of importance. In fact, the expressions "first," "second," etc., are completely interchangeable. For example, without departing from the scope of this disclosure, first information can also be referred to as second information, and similarly, second information can also be referred to as first information.

[0209] Furthermore, the term "exemplary" is used herein to indicate that it serves as an example, instance, or illustration. Any aspect or design described herein as "exemplary" is not necessarily to be construed as advantageous compared to other aspects or designs. Rather, the use of the term "exemplary" is intended to present concepts in a concrete manner. As used herein, the term "or" is intended to indicate an inclusive "or" rather than an exclusive "or." That is, unless otherwise specified or clear from the context, "X applies A or B" is intended to indicate any of the natural inclusive permutations. That is, if X applies A; X applies B; or X applies both A and B, then applying A or B satisfies the condition under any of the foregoing instances.

[0210] Similarly, although this disclosure has been shown and described with respect to one or more implementations, equivalent variations and modifications will occur to those skilled in the art upon reading and understanding the specification and drawings. This disclosure includes all such modifications and variations and is limited only by the scope of the claims. In particular, with respect to the various functions performed by the components described above (e.g., elements, resources, etc.), unless otherwise indicated, the terminology used to describe such components is intended to correspond to any component (functionally equivalent) that performs the specific function of the described component, even if it is not structurally equivalent to the disclosed structure. Furthermore, although specific features of this disclosure may have been disclosed with respect to only one of several implementations, such features may be combined with one or more other features of other implementations, as may be desired and advantageous to any given or particular application. Moreover, with regard to the terms “comprising,” “owning,” “having,” “having,” or variations thereof as used in this disclosure, such terms are intended to be inclusive in a manner similar to the term “including.”

[0211] Other embodiments of this disclosure will readily occur to those skilled in the art upon consideration of the specification and practice of the invention disclosed herein. This application is intended to cover any variations, uses, or adaptations of this disclosure that follow the general principles of this disclosure and include common knowledge or customary techniques in the art not disclosed herein.

[0212] It should be understood that this disclosure is not limited to the precise structures described above and shown in the accompanying drawings, and various modifications and changes can be made without departing from its scope. The scope of this disclosure is limited only by the appended claims.

Claims

1. A system access method, characterized in that, include: In response to a request to access the second business system obtained during the access to the first business system, the electronic device sends a cookie to the proxy device for identity verification during the access to the first business system. The electronic device acquires a cookie for identity verification during access to the second business system, wherein the cookie for identity verification during access to the second business system is determined by the proxy device based on the cookie for identity verification during access to the first business system and sent to the electronic device. The electronic device accesses the second business system based on the cookie used for identity verification during the access process.

2. The method according to claim 1, characterized in that, The electronic device acquires cookies used for identity verification during access to the second business system, including: In response to the proxy device verifying the identity of the electronic device based on the cookie used for identity verification during access to the first business system, the electronic device receives the cookie sent by the proxy device for identity verification during access to the second business system, wherein the cookie used for identity verification during access to the second business system is obtained by the proxy device based on the server port corresponding to the second business system.

3. The method according to claim 1 or 2, characterized in that, The electronic device accesses the second business system based on the cookie used for identity verification during access to the second business system, including: Send the cookie used for identity verification during access to the second business system to the proxy device; In response to the proxy device successfully identifying the electronic device based on a cookie used for identity verification during access to the second business system, the electronic device accesses the second business system.

4. The method according to claim 1, characterized in that, In response to the electronic device's first access to the first service system, the method further includes: Send a request to the proxy device for the first access to the first business system and obtain a cookie for identity verification during the access to the first business system, wherein the cookie for identity verification during the access to the first business system is sent by the proxy device based on the request; Access the first business system based on the cookie used for identity verification during the access process.

5. The method according to claim 4, characterized in that, The initial request to access the first business system is associated with the identification information of an electronic device, which identifies the electronic device sending the request. The acquisition of the identity recognition cookie used during access to the first business system includes: In response to the proxy device successfully identifying the electronic device based on the identification information, the system receives verification information sent by the proxy device and sends the verification information to the proxy device. In response to the fact that the verification information received by the proxy device is consistent with the verification information sent by the electronic device, the proxy device sends an identity recognition cookie for accessing the first business system.

6. An electronic device, characterized in that, include: The sending unit is used to obtain a request to access the second business system during the process of accessing the first business system, and send a cookie for identity verification during the process of accessing the first business system to the proxy device. A receiving unit is configured to acquire a cookie used for identity verification during access to the second business system, wherein the cookie used for identity verification during access to the second business system is determined by the proxy device based on the cookie used for identity verification during access to the first business system and sent to the electronic device. The processing unit is used to access the second business system based on the cookie used for identity verification during the access to the second business system.

7. An agent device, characterized in that, include: The receiving unit is used to receive cookies sent by electronic devices for identity verification during access to the first business system; The processing unit is configured to determine, based on the cookie used by the electronic device for identity verification during access to the second business system, the cookie used by the electronic device for identity verification during access to the first business system. The sending unit is used to send cookies used by the electronic device for identity verification during access to the second business system.

8. An electronic device, characterized in that, include: processor; Memory used to store computer programs or instructions that can be executed by a processor; The processor is configured to execute the computer program or instructions to implement the steps of the system access method according to any one of claims 1 to 5.

9. A storage medium, characterized in that, When the instructions in the storage medium are executed by the processor of the electronic device, the electronic device is able to perform the system access method according to any one of claims 1 to 5.

10. A computer program product, comprising a computer program, characterized in that, When the computer program is executed by the processor, it implements the system access method as described in any one of claims 1 to 5.

Images