CN102904894A - Token managing method and system - Google Patents

Token managing method and system Download PDF

Info

Publication number
CN102904894A
CN102904894A CN2012104044902A CN201210404490A CN102904894A CN 102904894 A CN102904894 A CN 102904894A CN 2012104044902 A CN2012104044902 A CN 2012104044902A CN 201210404490 A CN201210404490 A CN 201210404490A CN 102904894 A CN102904894 A CN 102904894A
Authority
CN
China
Prior art keywords
token
interface
time
user
described token
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN2012104044902A
Other languages
Chinese (zh)
Other versions
CN102904894B (en
Inventor
胡聪
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Beijing Qihoo Technology Co Ltd
Original Assignee
Beijing Qihoo Technology Co Ltd
Qizhi Software Beijing Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Beijing Qihoo Technology Co Ltd, Qizhi Software Beijing Co Ltd filed Critical Beijing Qihoo Technology Co Ltd
Priority to CN201210404490.2A priority Critical patent/CN102904894B/en
Publication of CN102904894A publication Critical patent/CN102904894A/en
Application granted granted Critical
Publication of CN102904894B publication Critical patent/CN102904894B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Abstract

The invention discloses a token managing method and system, relating to the field of Internet. The token managing method comprises the steps that: a user interface receives an authorization command of a user and sends the authorization command to an application provider; the application provider calls a token obtaining interface in an open platform for obtaining a token according to the authorization command, then generates overtime of the token and stores the overtime; the application provider calls a third interface in the open platform by using the token for realizing the corresponding application; the application provider calls a token cancelling interface for cancelling the token when the token is not needed by the subsequent process of the application or the application is completed; and the user interface receives an exit command of the user and calls the token canceling interface for cancelling the token according to the exit command under the condition that the token is not cancelled. According to the method and the system, the potential safety hazards caused by cancelling the token according to the overtime with fixed duration in the prior art are overcome, the token is self-adaptively canceled, and the safety of user information is improved.

Description

The token management method and system
Technical field
The present invention relates to Internet technical field, particularly a kind of token (Token) management method and system.
Background technology
The Internet era, some platform can be interface with the service encapsulates of self, for third party developer.We claim that generally these platforms are open platform.The interface that third party developer provides by calling open platform can import very easily user profile, provide the service such as supplement with money, for third party developer has saved a large amount of exploitations and operation cost.
Concerning open platform, because user profile will be offered third party developer, this just relates to user's Authentication and authorization.Thus, OAuth Certificate Authority agreement is arisen at the historic moment.Up to the present, the OAuth agreement has two versions to be widely used by everybody, is respectively OAuth1.0a and OAuth2.0.In OAuth1.0a, application side needs RequestToken of pre-first to file, behind subscriber authorisation, application side can obtain a Request Token who authorized, in the rear end this Request Token is replaced by Access Token(token), after this all use this Access Token to call the service interface of open platform; In OAuth2.0, application side directly requires subscriber authorisation, and behind subscriber authorisation, application side can obtain an Auth Code who authorized, in the rear end this Auth Code is replaced by Access Token, after this all uses this Access Token to call the service interface of open platform.As seen, in two kinds of authorization flow of OAuth, all relate to the application of Access Token.
Expires_in by calling one of return parameters that the corresponding interface obtains Access Token, the time-out time that its expression arranges, if the expired Token of re-using of time-out time removes to call other interfaces, Token is expired in the explanation that can report an error.Token can correspond to one and use one, also can correspond to one and use one of next user.The plan of establishment of existing Token time-out time is fixing duration, this kind set-up mode often is difficult to be applicable under all applied environments, to frequently use Token such as some application, wish that time-out time is long, but time-out time is longer, and fail safe is lower, because after Token loses, user's account is in this Token term of validity, and appropriator can use the illegal calling interface of this Token to use stolen user's information.But some application just use Token to obtain user profile one time when logging in, and do not need the time-out time of growing especially.Use the own time-out time of selecting if allow, use and be difficult to select a suitable time-out time, often be tending towards long with the time-out time setting, and the long safety problem that just exists.
Summary of the invention
The technical problem to be solved in the present invention is: how a kind of token management method and system is provided, and cancelling adaptively token, thus the fail safe that improves user profile.
A kind of token management system comprises: open platform, use provider and user interface;
Comprise in the described open platform: token obtains interface, token cancellation interface and the 3rd interface;
Described application provider is suitable for authorized order according to the user and calls described token and obtain interface to obtain token, use described token to call described the 3rd Interface realization and use accordingly, and when described application follow-up no longer needs described token or described application call described token cancellation interface to cancel described token after finishing;
Described user interface is suitable for receiving user's authorized order, and the exit instruction that receives the user, and still calls described token cancellation interface to cancel described token according to described exit instruction in the undissolved situation at described token;
Wherein, described application provider comprises the timeouts unit, and described timeouts unit is suitable for generating and storing the time-out time of described token when described token acquiring unit obtains described token.
Wherein, described application provider comprises: the token acquiring unit;
Described token acquiring unit is suitable for authorized order according to described user and calls described token and obtain interface to obtain token.
Wherein, described application provider also comprises: overtime monitoring unit;
Described overtime monitoring unit is suitable for judging whether the current time surpassed the time-out time of described token, if so, then notifies described token acquiring unit to obtain new token.
Wherein, described token cancellation interface comprises: overtime judge module and overtime modified module;
Described overtime judge module, be suitable for from described timeouts unit, extracting the time-out time of described token, and judge whether the current time has surpassed the time-out time of described token, if, think that then described token is cancelled, otherwise, notify described overtime modified module to revise the time-out time of described token;
Described overtime modified module is suitable for the time-out time of described token is revised as the time before current time.
Wherein, described application provider also comprises: application logical unit;
Described application logical unit is suitable for when described token is not cancelled, and uses described token to call described the 3rd Interface realization and uses accordingly.
Wherein, described user interface comprises: command reception unit and instruction process unit;
Described command reception unit is suitable for receiving user's authorized order and exit instruction;
Described instruction process unit is suitable for described authorized order is sent to described application provider, and still calls described token cancellation interface to cancel described token according to described exit instruction in the undissolved situation at described token.
The present invention also provides a kind of token management method, comprises step:
User interface receives user's authorized order, and described authorized order is sent to the application provider;
Described application provider calls token in the open platform according to described authorized order and obtains interface and obtain token, and then described application provider generates the time-out time of described token, and stores described time-out time;
The 3rd Interface realization that described application provider uses described token to call in the described open platform is used accordingly;
Described application provider when described application follow-up no longer needs described token or described application call token cancellation interface after finishing and cancel described token;
Described user interface receives user's exit instruction, and still calls described token cancellation interface according to described exit instruction in the undissolved situation at described token and cancel described token.
Wherein, the 3rd Interface realization that described application provider uses described token to call in the described open platform is used accordingly, specifically comprises step:
Described application provider judges whether the current time surpass the time-out time of described token, and if so, then return described step: user interface receives user's authorized order, and described authorized order sent to uses the provider; Otherwise the 3rd Interface realization that described application provider uses described token to call in the described open platform is used accordingly.
Wherein, described token cancellation interface is cancelled described token, specifically comprises step:
Described token cancellation interface obtains the time-out time of described token, and judge that whether the current time surpass the time-out time of described token, if so, think that then described token is cancelled, otherwise, the time-out time of described token is revised as the time before current time.
Wherein, described user interface receives user's exit instruction, and still calls described token cancellation interface according to described exit instruction in the undissolved situation at described token and cancel described token, specifically comprises step:
Obtain the time-out time of described token behind described user interface reception user's the exit instruction;
Described user interface judges that whether the current time surpass the time-out time of described token, if so, thinks that then described token is cancelled, otherwise, call described token cancellation interface and cancel described token.
Described open platform is for providing the platform device of opening API interface, such as Platform Server, access server etc.
Described application provider is generally the computing equipment that third party's applied business is provided, and for example third-party server, business provide equipment, the side's of application business device.
Described user interface generally is client device, such as PC equipment, portable terminal etc.
Token management method and system of the present invention, set up token cancellation interface, use the provider and call token cancellation interface cancellation token in good time, in time do not cancel token in the situation that use the provider simultaneously, user interface also can be called according to user's exit instruction token cancellation interface cancellation token, thereby overcome in the prior art according to the fixing time-out time of duration and cancelled the existing potential safety hazard of token, realized the adaptively cancellation to token, the fail safe that has improved user profile.
Description of drawings
Fig. 1 is the modular structure schematic diagram that the described token of the embodiment of the invention is taken over the reason system;
Fig. 2 is the described application of embodiment of the invention provider's internal module structural representation;
Fig. 3 is the internal module structural representation of the described token cancellation of embodiment of the invention interface;
Fig. 4 is the internal module structural representation of the described user interface of the embodiment of the invention;
Fig. 5 is the flow chart of the described token management method of the embodiment of the invention;
Fig. 6 is the careful flow chart of the described token management method of the embodiment of the invention;
Fig. 7 is the flow chart that the cancellation of token described in embodiment of the invention interface is cancelled described token.
Embodiment
Below in conjunction with drawings and Examples, the specific embodiment of the present invention is described in further detail.Following examples are used for explanation the present invention, but are not used for limiting the scope of the invention.
According to the analysis to prior art, overcome in the prior art after the key of problem is that token generates, when can be cancelled, original mechanism is to surpass i.e. cancellation the set time, namely judges whether overtimely when using token, again obtains token after overtime.Key point of the present invention is to increase the token cancellation interface that is used for the cancellation token in original interface basis.
After token cancellation interface was set, it is also very important when the application provider calls token cancellation interface, might select to call inappropriate opportunity token cancellation interface because use the provider for oversimplifying to develop.For this reason, the application's token cancellation interface is called in following two kinds of situations:
A, ACTIVE CONTROL: call by using provider oneself, when determining not use token in a period of time, cancel this token, to guarantee the minimum active period of token, so can improve fail safe;
B, Collaborative Control: triggered by the end user, user interface goes to call.Initiatively remove to call this cancellation interface because open platform can not determine to use the principle that the provider whether can the strict implement better safe than sorry, therefore Collaborative Control replenishing as ACTIVE CONTROL be set.
By above-mentioned two kinds of control modes are set, can be in the situation that adaptation major applications environment guarantees that the user normally uses, the dangerous time of farthest having limited token simultaneously.Next will be elaborated to the application's system and method as follows:
Fig. 1 is the modular structure schematic diagram of the described token management of embodiment of the invention system, and as shown in Figure 1, described system comprises: open platform 100, application provider 200 and user interface 300.
Comprise in the described open platform 100: token obtains interface 110, token cancellation interface 120 and the 3rd interface 130.
Described application provider 200 is suitable for authorized order according to the user and calls described token and obtain interface 110 to obtain token, use described token to call described the 3rd interface 130 and realize corresponding the application, and when described application follow-up no longer needs described token or described application call described token cancellation interface 120 to cancel described token after finishing.Described application follow-up no longer needs described token, and namely the described application provider 200 that need not of described application uses described token to call described the 3rd interface within the foreseeable scheduled time.
Described user interface 300 is suitable for receiving user's authorized order, and the exit instruction that receives the user, and still calls described token cancellation interface 120 to cancel described token according to described exit instruction in the undissolved situation at described token.Cancel described token according to user's exit instruction, i.e. Collaborative Control mode is initiatively cancelled a kind of auxiliary control mode of described token as described application provider 200, and it is used the situation that provider 200 fails in time to cancel described token and be used described.
Fig. 2 is described application provider's 200 internal module structural representation, and as shown in Figure 2, described application provider 200 further comprises: token acquiring unit 210, timeouts unit 220, overtime monitoring unit 230 and application logical unit 240.
Described token acquiring unit 210 is suitable for authorized order according to described user and calls described token and obtain interface 110 to obtain token.
Described timeouts unit 220 is suitable for generating and storing the time-out time of described token when described token acquiring unit 110 obtains described token.
Described overtime monitoring unit 230 is suitable for judging whether the current time surpassed the time-out time of described token, if so, then notifies described token acquiring unit 110 to obtain new token.When obtaining new token, described token acquiring unit 210 need to regain user's authorized order, and this moment, original token was in fact cancelled automatically.
Described application logical unit 240 is suitable for when described token is not cancelled, and uses described token to call described the 3rd interface 130 and realizes corresponding the application.
Fig. 3 is the internal module structural representation of described token cancellation interface, and as shown in Figure 3, described token cancellation interface 120 comprises: overtime judge module 121 and overtime modified module 122.
Described overtime judge module 121, be suitable for from described timeouts unit 220, extracting the time-out time of described token, and judge whether the current time has surpassed the time-out time of described token, if, think that then described token is cancelled, otherwise, notify described overtime modified module 122 to revise the time-out time of described token.
Described overtime modified module 122 is suitable for the time-out time of described token is revised as the time before current time, such as the last second of being revised as the current time.
Below table 1 be a kind of example code that the employing PHP language of described token cancellation interface is realized, table 2 is that relevant parameter implication is wherein explained.Those skilled in the art easily replace with other language according to foregoing and realize described token cancellation interface.
Table 1 token cancellation Interface realization example
Figure BDA00002289392500081
The explanation of table 2 token cancellation interface relevant parameter
Parameter name Essential Introduce
access_token True The token of authorizing
app_key True Use key, each uses one
Fig. 4 is the internal module structural representation of described user interface 300, and as shown in Figure 4, described user interface comprises: command reception unit 310 and instruction process unit 320.Described user interface generally is positioned on the terminal in the face of the end user, such as being positioned on the PC.
Described command reception unit 310 is suitable for receiving user's authorized order and exit instruction.Corresponding instruction can be inputted by the mode prompting user that ejects dialog box in command reception unit 310, inputs authorized order such as the confirming button that the user clicks in the dialog box, and the user clicks exit button input exit instruction.
Described instruction process unit 320 is suitable for described authorized order is sent to described application provider 200, and still calls described token cancellation interface 120 to cancel described token according to described exit instruction in the undissolved situation at described token.
Fig. 5 is the flow chart of the described token management method of the embodiment of the invention, and as shown in Figure 5, described method comprises step:
S100: user interface receives user's authorized order, and described authorized order is sent to the application provider.
S200: described application provider calls token in the open platform according to described authorized order and obtains interface and obtain token.
S400: the 3rd Interface realization that described application provider uses described token to call in the described open platform is used accordingly.
S500: described application provider when described application follow-up no longer needs described token or described application call token cancellation interface after finishing and cancel described token.
S600: described user interface receives user's exit instruction, and still calls described token cancellation interface according to described exit instruction in the undissolved situation at described token and cancel described token.
Fig. 6 is the careful flow chart of the described token management method of the embodiment of the invention, and as shown in Figure 6, also comprise step S300 after the described step S200: described application provider generates the time-out time of described token, and stores described time-out time.
Correspondingly, described step S400 specifically comprises step:
S410: described application provider judges that whether the current time surpass the time-out time of described token, if so, then returns described step S100; Otherwise, execution in step S420.
S420: the 3rd Interface realization that described application provider uses described token to call in the described open platform is used accordingly.
Described step S600 specifically comprises step:
S610: the time-out time that obtains described token behind described user interface reception user's the exit instruction.
S620: described user interface judges that whether the current time surpass the time-out time of described token, if so, thinks that then described token is cancelled, otherwise, call described token cancellation interface and cancel described token.
Wherein, Fig. 7 is the flow chart that the cancellation of token described in embodiment of the invention interface is cancelled described token, as shown in Figure 7, the process that described step S500 and token described in step S600 cancellation interface is cancelled described token (is to use the provider among the step S500 except calling main body different, user interface among the step S600), concrete steps are all as follows:
P1: described token cancellation interface obtains the time-out time of described token;
P2: described token cancellation interface judges whether the current time surpass the time-out time of described token, if so, thinks that then described token is cancelled, otherwise, the time-out time of described token is revised as the time before current time.
The described token management method and system of the embodiment of the invention, set up token cancellation interface, use the provider and call token cancellation interface cancellation token in good time, in time do not cancel token in the situation that use the provider simultaneously, user interface also can be called according to user's exit instruction token cancellation interface cancellation token, thereby overcome in the prior art according to the fixing time-out time of duration and cancelled the existing potential safety hazard of token, realized the adaptively cancellation to token, the fail safe that has improved user profile.
Above execution mode only is used for explanation the present invention; and be not limitation of the present invention; the those of ordinary skill in relevant technologies field; in the situation that do not break away from the spirit and scope of the present invention; can also make a variety of changes and modification; therefore all technical schemes that are equal to also belong to category of the present invention, and scope of patent protection of the present invention should be defined by the claims.

Claims (10)

1. a token management system comprises: open platform, application provider and user interface;
Comprise in the described open platform: token obtains interface, token cancellation interface and the 3rd interface;
Described application provider is suitable for authorized order according to the user and calls described token and obtain interface to obtain token, use described token to call described the 3rd Interface realization and use accordingly, and when described application follow-up no longer needs described token or described application call described token cancellation interface to cancel described token after finishing;
Described user interface is suitable for receiving user's authorized order, and the exit instruction that receives the user, and still calls described token cancellation interface to cancel described token according to described exit instruction in the undissolved situation at described token;
Wherein, described application provider comprises the timeouts unit, and described timeouts unit is suitable for generating and storing the time-out time of described token when described token acquiring unit obtains described token.
2. the system as claimed in claim 1 is characterized in that, described application provider comprises: the token acquiring unit;
Described token acquiring unit is suitable for authorized order according to described user and calls described token and obtain interface to obtain token.
3. system as claimed in claim 1 or 2 is characterized in that, described application provider also comprises: overtime monitoring unit;
Described overtime monitoring unit is suitable for judging whether the current time surpassed the time-out time of described token, if so, then notifies described token acquiring unit to obtain new token.
4. such as each described system of claims 1 to 3, it is characterized in that, described token cancellation interface comprises: overtime judge module and overtime modified module;
Described overtime judge module, be suitable for from described timeouts unit, extracting the time-out time of described token, and judge whether the current time has surpassed the time-out time of described token, if, think that then described token is cancelled, otherwise, notify described overtime modified module to revise the time-out time of described token;
Described overtime modified module is suitable for the time-out time of described token is revised as the time before current time.
5. such as each described system of claim 1 to 4, it is characterized in that, described application provider also comprises: application logical unit;
Described application logical unit is suitable for when described token is not cancelled, and uses described token to call described the 3rd Interface realization and uses accordingly.
6. such as each described system of claim 1 to 5, it is characterized in that, described user interface comprises: command reception unit and instruction process unit;
Described command reception unit is suitable for receiving user's authorized order and exit instruction;
Described instruction process unit is suitable for described authorized order is sent to described application provider, and still calls described token cancellation interface to cancel described token according to described exit instruction in the undissolved situation at described token.
7. token management method comprises step:
User interface receives user's authorized order, and described authorized order is sent to the application provider;
Described application provider calls token in the open platform according to described authorized order and obtains interface and obtain token, and then described application provider generates the time-out time of described token, and stores described time-out time;
The 3rd Interface realization that described application provider uses described token to call in the described open platform is used accordingly;
Described application provider when described application follow-up no longer needs described token or described application call token cancellation interface after finishing and cancel described token;
Described user interface receives user's exit instruction, and still calls described token cancellation interface according to described exit instruction in the undissolved situation at described token and cancel described token.
8. method as claimed in claim 7 is characterized in that, the 3rd Interface realization that described application provider uses described token to call in the described open platform is used accordingly, specifically comprises step:
Described application provider judges whether the current time surpass the time-out time of described token, and if so, then return described step: user interface receives user's authorized order, and described authorized order sent to uses the provider; Otherwise the 3rd Interface realization that described application provider uses described token to call in the described open platform is used accordingly.
9. such as each described method of claim 7 to 8, it is characterized in that, described token cancellation interface is cancelled described token, specifically comprises step:
Described token cancellation interface obtains the time-out time of described token, and judge that whether the current time surpass the time-out time of described token, if so, think that then described token is cancelled, otherwise, the time-out time of described token is revised as the time before current time.
10. such as each described method of claim 7 to 9, it is characterized in that, described user interface receives user's exit instruction, and still calls described token cancellation interface according to described exit instruction in the undissolved situation at described token and cancel described token, specifically comprises step:
Obtain the time-out time of described token behind described user interface reception user's the exit instruction;
Described user interface judges that whether the current time surpass the time-out time of described token, if so, thinks that then described token is cancelled, otherwise, call described token cancellation interface and cancel described token.
CN201210404490.2A 2012-10-22 2012-10-22 Token management method and system Active CN102904894B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201210404490.2A CN102904894B (en) 2012-10-22 2012-10-22 Token management method and system

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201210404490.2A CN102904894B (en) 2012-10-22 2012-10-22 Token management method and system

Publications (2)

Publication Number Publication Date
CN102904894A true CN102904894A (en) 2013-01-30
CN102904894B CN102904894B (en) 2016-12-21

Family

ID=47576930

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201210404490.2A Active CN102904894B (en) 2012-10-22 2012-10-22 Token management method and system

Country Status (1)

Country Link
CN (1) CN102904894B (en)

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN106411825A (en) * 2015-08-03 2017-02-15 天脉聚源(北京)科技有限公司 WeChat access token acquisition method and system thereof
CN110121873A (en) * 2017-10-23 2019-08-13 华为技术有限公司 A kind of access token management method, terminal and server
CN111859350A (en) * 2020-07-31 2020-10-30 厦门海为科技有限公司 Safety processing method and system for remotely operating HMI equipment

Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20030018707A1 (en) * 2001-07-20 2003-01-23 Flocken Philip Andrew Server-side filter for corrupt web-browser cookies
US20090150551A1 (en) * 2007-12-11 2009-06-11 International Business Machines Corporation Method and system for cookie expiration based on user idle and presence detection
CN102394887A (en) * 2011-11-10 2012-03-28 杭州东信北邮信息技术有限公司 OAuth protocol-based safety certificate method of open platform and system thereof
CN102573112A (en) * 2010-12-07 2012-07-11 中国电信股份有限公司 Telecommunication network capability opening method, system and alliance support platform
CN102624739A (en) * 2012-03-30 2012-08-01 奇智软件(北京)有限公司 Authentication and authorization method and system applied to client platform
CN102891859A (en) * 2012-10-22 2013-01-23 北京奇虎科技有限公司 System and method for expiration processing of token interface

Patent Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20030018707A1 (en) * 2001-07-20 2003-01-23 Flocken Philip Andrew Server-side filter for corrupt web-browser cookies
US20090150551A1 (en) * 2007-12-11 2009-06-11 International Business Machines Corporation Method and system for cookie expiration based on user idle and presence detection
CN102573112A (en) * 2010-12-07 2012-07-11 中国电信股份有限公司 Telecommunication network capability opening method, system and alliance support platform
CN102394887A (en) * 2011-11-10 2012-03-28 杭州东信北邮信息技术有限公司 OAuth protocol-based safety certificate method of open platform and system thereof
CN102624739A (en) * 2012-03-30 2012-08-01 奇智软件(北京)有限公司 Authentication and authorization method and system applied to client platform
CN102891859A (en) * 2012-10-22 2013-01-23 北京奇虎科技有限公司 System and method for expiration processing of token interface

Non-Patent Citations (5)

* Cited by examiner, † Cited by third party
Title
E. HAMMER,等: "The OAuth 2.0 Authorization Protocol,draft-ietf-oauth-v2-23", 《IETF》, 24 July 2012 (2012-07-24) *
E. HAMMER-LAHAV,等: "The OAuth 1.0 Protocol,RFC5849", 《INTERNET ENGINEERING TASK FORCE (IETF)》, 30 April 2010 (2010-04-30) *
付韬,等: "基于开放平台的OAuth认证授权技术研究", 《保密科学技术》, no. 9, 10 September 2012 (2012-09-10) *
刘大红,等: "第三方应用与开放平台OAuth认证互连技术研究", 《电脑知识与技术》, vol. 8, no. 22, 5 August 2012 (2012-08-05) *
时子庆,等: "基于OAuth2.0 的认证授权技术", 《计算机系统应用》, vol. 21, no. 3, 15 March 2012 (2012-03-15) *

Cited By (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN106411825A (en) * 2015-08-03 2017-02-15 天脉聚源(北京)科技有限公司 WeChat access token acquisition method and system thereof
CN110121873A (en) * 2017-10-23 2019-08-13 华为技术有限公司 A kind of access token management method, terminal and server
CN110121873B (en) * 2017-10-23 2021-06-01 华为技术有限公司 Access token management method, terminal and server
US11736292B2 (en) 2017-10-23 2023-08-22 Huawei Technologies Co., Ltd. Access token management method, terminal, and server
CN111859350A (en) * 2020-07-31 2020-10-30 厦门海为科技有限公司 Safety processing method and system for remotely operating HMI equipment
CN111859350B (en) * 2020-07-31 2023-10-27 厦门海为科技有限公司 Safety processing method and system for remote operation HMI (human machine interface) equipment

Also Published As

Publication number Publication date
CN102904894B (en) 2016-12-21

Similar Documents

Publication Publication Date Title
US20070294376A1 (en) Method, apparatus and program product for software provisioning
US8032920B2 (en) Policies as workflows
US20100218237A1 (en) Systems and methods for managing third-party application programming interface in a collaboration space
US20130013767A1 (en) System and method for managing software provided as cloud service
US8726349B2 (en) Optimizing interactions between co-located processes
KR20140072164A (en) Privacy management for subscriber data
US11334837B2 (en) Modeling internet of things devices in processes
US8719894B2 (en) Federated role provisioning
US11743295B2 (en) Methods and apparatus to provide resource security
US20130144633A1 (en) Enforcement and assignment of usage rights
CN103258159A (en) Extensible and/or distributed authorization system and/or methods of providing the same
CN102891859A (en) System and method for expiration processing of token interface
CN105099986A (en) Network game data sharing method and server
US9703934B1 (en) Usage license
FI3704834T3 (en) Integrating cloud applications into a cloud service broker platform using an automated, universal connector package
CN105553920A (en) Data interaction method, apparatus, and system
CN102904894A (en) Token managing method and system
CN111782261A (en) Software configuration method and device, electronic equipment and storage medium
CN109067809B (en) Authority configuration method, device, equipment and storage medium of security component
CN110351719B (en) Wireless network management method, system, electronic equipment and storage medium
CN104283894A (en) Method and device for managing service usage right
Bakhtina et al. Information Security Analysis in the Passenger-Autonomous Vehicle Interaction
CN114268487A (en) Authority control method and device based on industrial identification node
CN111858089B (en) Method and device for calling Ethernet nodes
KR20120125517A (en) Method and device for obtaining real name register status, and terminal thereof

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C14 Grant of patent or utility model
GR01 Patent grant
TR01 Transfer of patent right
TR01 Transfer of patent right

Effective date of registration: 20220727

Address after: Room 801, 8th floor, No. 104, floors 1-19, building 2, yard 6, Jiuxianqiao Road, Chaoyang District, Beijing 100015

Patentee after: BEIJING QIHOO TECHNOLOGY Co.,Ltd.

Address before: 100088 room 112, block D, 28 new street, new street, Xicheng District, Beijing (Desheng Park)

Patentee before: BEIJING QIHOO TECHNOLOGY Co.,Ltd.

Patentee before: Qizhi software (Beijing) Co.,Ltd.