Auxiliary Authorization Component for Cross-Platform Session Key Exchange

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current cross-platform developer applications face challenges in achieving secure and unified user authorization across different platforms, as each platform has its own account management system, hindering seamless operation.

Innovation Solution

An authorization method and system that integrates an auxiliary authorization component within an open-source host application, which obtains user login authorization information, sends a login request to an account manager, receives an authorization code, and forwards it to a management server to obtain a session key, enabling secure cross-platform authorization and user information sharing.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If different platforms use different account management systems, then each platform can maintain its own security and control, but cross-platform authorization becomes difficult and user information cannot be shared seamlessly

Engineering Contradiction:
Improvecross-platform authorization capabilityVSAvoidauthorization system complexity
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent introduces an auxiliary authorization component as an intermediary between different platform account management systems. This component obtains authorization codes from users, exchanges them for session keys with the management server, and facilitates cross-platform authorization without requiring direct integration between different account systems, thus resolving the contradiction between adaptability and complexity

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The auxiliary authorization component is designed with multi-functionality to handle multiple authorization scenarios across different platforms. It can obtain authorization codes from various sources, exchange them with different account managers, and provide unified session key management, enabling a single component to serve multiple authorization needs across diverse platforms

Inventive Principle:
Principle #6Universality (Multi-functionality)

2Adaptability or versatility

If user information is shared across platforms, then cross-platform operation is enabled, but security risks increase

Engineering Contradiction:
Improveuser information sharing capabilityVSAvoidauthorization security
Core Design Contradiction:
Adaptability or versatilityVSReliability

Solution Approach 1:

The patent extracts the authorization code exchange process from the user information sharing process. The auxiliary authorization component obtains authorization codes separately and exchanges them for session keys before accessing user information. This separation ensures that user information is only shared after proper authorization verification, maintaining security while enabling cross-platform operation

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The system performs preliminary authorization verification by obtaining and validating authorization codes before enabling user information sharing. The auxiliary authorization component exchanges authorization codes for session keys in advance, establishing secure access rights before actual data sharing occurs, thus preventing unauthorized access while enabling legitimate cross-platform information access

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentEP3851983B1Authorization method, auxiliary authorization component, management server and computer readable medium
Publication Date: 2023.03.29 BEIJING BAIDU NETCOM SCI & TECH CO LTD
  • EP3851983B1 patent drawingFigure 1~2
  • EP3851983B1 patent drawingFigure 3~4
  • EP3851983B1 patent drawingFigure 5

AI summary

Provided by the present disclosure is an authorization method, which belongs to the field of computer technology and can be applied to the field of cloud platform technology. The method is applied to an auxiliary authorization component, and the auxiliary authorization component is integrated in an open-source host application. The method includes: obtaining user's login authorization information, in response to a login request sent by a developer application; sending a login authorization request to an account manager of the open-source host application, the login authorization request including the login authorization information; receiving authorization success information fed back by the account manager, after the login authorization information is verified successfully, the authorization success information including an authorization code; and sending the authorization code to the developer application, to enable the developer application to obtain a session key corresponding to the authorization code from a management server. The present disclosure also provides an auxiliary authorization component, a management server, an authorization system and a computer-readable medium.