Cloud App Access to Local Third-Party Services Via Proxy SDK
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current cloud game login methods require users to enter account information on the cloud server, exposing security risks, especially when the terminal disconnects from the network.
Innovation Solution
A service access method that allows a cloud server application to invoke a local terminal application through a communication channel, bypassing the need to upload account information to the cloud server, using a third-party service proxy SDK for secure access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If users enter account information on the cloud server for login, then login convenience is improved, but information security deteriorates
Solution Approach 1:
The patent introduces a terminal device as an intermediary between the user and the cloud server. The terminal runs a local service that mediates the authentication process, allowing the cloud server to verify user credentials without directly handling sensitive account information. This intermediary layer protects user information while maintaining login convenience.
Solution Approach 2:
The patent extracts the sensitive account information handling from the cloud server and places it on the terminal device. By taking out the credential storage and processing functions from the cloud environment, the system eliminates the security vulnerability of transmitting and storing sensitive data on remote servers while preserving the ability to authenticate users.
2Adaptability or versatility
If cloud server directly accesses third-party service application, then service integration is improved, but information security deteriorates
Solution Approach 1:
The terminal device acts as an intermediary that enables the cloud server to access third-party services without direct exposure to sensitive information. The terminal's local service receives authentication requests from the cloud server, verifies credentials locally, and returns authorization tokens, thereby mediating the access while protecting account information.
Solution Approach 2:
The patent segments the service access architecture into three distinct components: the cloud server for service delivery, the terminal for local authentication and information management, and the third-party service applications. This segmentation allows each component to perform its function while maintaining security boundaries, enabling service integration without information exposure.
3Loss of time
If account information is stored on cloud server, then login speed is improved, but security risk increases
Solution Approach 1:
The patent extracts the account information storage function from the cloud server and relocates it to the terminal device. This extraction eliminates the security risk of storing sensitive data on remote servers while maintaining fast login performance through local credential verification. The terminal stores encrypted credentials locally, enabling rapid authentication without network dependency.
Solution Approach 2:
The system performs preliminary authentication actions on the terminal device before cloud server interaction. User credentials are verified locally in advance, and authorization tokens are generated beforehand. This preliminary action on the terminal enables fast subsequent access operations without repeatedly transmitting sensitive information to the cloud server.
Data Source
Figure 1
Figure 2
Figure 3(1)
AI summary
This application discloses a service access method, a terminal, and a system. The method includes: The terminal displays a third interface in response to receiving a first operation performed by a user on an icon of a first app. A second operation performed by the user on a first control on the third interface is responded to. The second operation indicates the first app running on a cloud server to send a first request to a third-party proxy service app by using a third-party service SDK embedded in the first app. The terminal receives, by using a third-party proxy service SDK embedded in a first client, the first request sent by the third-party proxy service app. The terminal invokes, based on the first request, the third-party service app to implement a function corresponding to the first control. In this way, an application APP on the cloud server accesses the third-party service application on a local terminal of the user, and account information of the third-party service application does not need to be uploaded to the cloud server. This ensures information security.