CN107104922A

CN107104922A - A kind of rights management and the method and device of resources control

Info

Publication number: CN107104922A
Application number: CN201610096550.7A
Authority: CN
Inventors: 郭伟
Original assignee: Alibaba Group Holding Ltd
Current assignee: Advanced New Technologies Co Ltd; Advantageous New Technologies Co Ltd
Priority date: 2016-02-22
Filing date: 2016-02-22
Publication date: 2017-08-29
Anticipated expiration: 2036-02-22
Also published as: CN107104922B

Abstract

This application discloses a kind of rights management and resource control method and device, this method receives the authority generation request that user is sent by account, essential information is provided to the user, and gather the multimedia messages that the user inputs according to the essential information, authority information is generated according to the multimedia messages, the control authority of the account and the corresponding relation of the authority information are set up, and is stored.By the above method, user can be used directly the authority information and control its account, realize on the premise of its account information is not revealed, and not control its account by the terminal device and authorisation device of oneself, effectively reduce the security risk of control account.

Description

A kind of rights management and the method and device of resources control

Technical field

The application is related to field of computer technology, more particularly to a kind of rights management and resources control method and Device.

Background technology

With continuing to develop for society, the resource that server is provided the user is also more and more, e.g., e-book Resource.

At present, user is during using resource, by being required for registering corresponding account, and to account Interior resource is controlled, e.g., and resource transfers are carried out to the resource in account.

In the prior art, in order to ensure the safety of the resource in user account, money of the user in account When source is shifted, the account of oneself can be logged on the terminal device of oneself, and to the resource in account Shifted, still, if resource of the user in account is shifted, it is impossible to use the end of oneself End equipment (terminal device or network for e.g., not carrying oneself are dangerous), then now user can also By the equipment that is authorized through the corresponding third party of account (fingerprint recognition that e.g., third party authorizes encrypts equipment, Hereinafter referred to as authorisation device), the resource in account is shifted, e.g., user pre-establish fingerprint and The association of oneself account, subsequently, fingerprint is pressed on the fingerprint recognition encryption equipment that can be authorized in third party Resource in account is shifted.

But, in actual applications, if user needs to be controlled the resource in account (e.g., to money Shifted in source) when, user can not both use the terminal device of oneself (e.g., not carry the terminal of oneself Equipment or network are dangerous), authorisation device can not be also used, and the terminal of other users can only be used to set When standby, then the account information leakage of user is likely to result in, therefore, for an account, how Realize that user controls the account in the case where that can not use the terminal device and authorisation device of oneself, and The account information of oneself will not be revealed, as a urgent problem to be solved.

The content of the invention

The embodiment of the present application provides a kind of rights management and resource control method and device, to solve existing skill User is when that can not use terminal device and the authorisation device of oneself in art, it is impossible to which realization is not revealing oneself The problem of account being controlled on the premise of account information.

A kind of method for rights management that the embodiment of the present application is provided, methods described includes：

Receive the authority generation request that user is sent by account；

Essential information is provided to the user；

Gather the multimedia messages that the user inputs according to the essential information；

Authority information is generated according to the multimedia messages；

The control authority of the account and the corresponding relation of the authority information are set up, and is stored.

A kind of method for resources control that the embodiment of the present application is provided, methods described includes：

Authority that user sends is received using request, wherein, the authority is using carrying the use in request The multimedia messages of family input；

The multimedia messages are converted into essential information；

According to the essential information, in each authority information prestored, the essential information pair is determined The authority information answered；

According to the authority information, the authority is verified using request；

When being verified, according to the control authority of the corresponding account of the authority information, the account is entered Row resources control.

Receive the authority generation request that user is sent by account；

Essential information is provided to the user；

Authority information is generated according to the multimedia messages；

The obligation authority of the account and the corresponding relation of the authority information are set up, and is stored.

The payment request that user sends is received, wherein, described pay carries user's input in request Multimedia messages；

The multimedia messages are converted into essential information；

According to the authority information, described pay is asked to verify；

When being verified, according to the obligation authority of the corresponding account of the authority information, the account is used Paid.

A kind of device for rights management that the embodiment of the present application is provided, described device includes：

Receiving module, request is generated for receiving the authority that user is sent by account；

Module is provided, for providing essential information to the user；

Acquisition module, for gathering the multimedia messages that the user inputs according to the essential information；

Generation module, for generating authority information according to the multimedia messages；

Corresponding relation building module, the control authority for setting up the account is corresponding with the authority information Relation, and store.

A kind of device for resources control that the embodiment of the present application is provided, described device includes：

Receiving module, the authority for receiving user's transmission uses request, wherein, the authority uses request In carry the multimedia messages of user input；

Modular converter, for the multimedia messages to be converted into essential information；

Determining module, for according to the essential information, in each authority information prestored, determining The corresponding authority information of the essential information；

Authentication module, for according to the authority information, being verified to the authority using request；

Control module, for when being verified, according to the control authority of the corresponding account of the authority information, Resources control is carried out to the account.

Module is provided, for providing essential information to the user；

Corresponding relation building module, the obligation authority for setting up the account is corresponding with the authority information Relation, and store.

Receiving module, the payment request for receiving user's transmission, wherein, described pay in request carries The multimedia messages of user's input；

Authentication module, for according to the authority information, asking to verify to described pay；

Control module, for when being verified, according to the obligation authority of the corresponding account of the authority information, Paid using the account.

The embodiment of the present application provides the method and device of a kind of rights management and resources control, and this method, which is received, to be used The authority that family is sent by account, which is generated, is asked, and essential information is provided to the user, and gather the user according to The multimedia messages of essential information input, generate authority information according to the multimedia messages, set up the account Control authority and the authority information corresponding relation, and store.By the above method, user can directly make Its account is controlled with the authority information, is realized on the premise of its account information is not revealed, not by oneself Terminal device and authorisation device control its account, effectively reduce control account security risk.

Brief description of the drawings

Accompanying drawing described herein is used for providing further understanding of the present application, constitutes the part of the application, The schematic description and description of the application is used to explain the application, does not constitute the improper limit to the application It is fixed.In the accompanying drawings：

The process for the first rights management that Fig. 1 provides for the embodiment of the present application；

The process for the first resources control that Fig. 2 provides for the embodiment of the present application；

The process for second of rights management that Fig. 3 provides for the embodiment of the present application；

The process for second of resources control that Fig. 4 provides for the embodiment of the present application；

The apparatus structure schematic diagram for the first rights management that Fig. 5 provides for the embodiment of the present application；

The apparatus structure schematic diagram for the first resources control that Fig. 6 provides for the embodiment of the present application；

The apparatus structure schematic diagram for second of rights management that Fig. 7 provides for the embodiment of the present application；

The apparatus structure schematic diagram for second of resources control that Fig. 8 provides for the embodiment of the present application.

Embodiment

It is specifically real below in conjunction with the application to make the purpose, technical scheme and advantage of the application clearer Apply example and technical scheme is clearly and completely described corresponding accompanying drawing.Obviously, it is described Embodiment is only some embodiments of the present application, rather than whole embodiments.Based on the implementation in the application Example, the every other implementation that those of ordinary skill in the art are obtained under the premise of creative work is not made Example, belongs to the scope of the application protection.

The process for the rights management that Fig. 1 provides for the embodiment of the present application, specifically includes following steps：

S101：Receive the authority generation request that user is sent by account.

In this application, when user can not use the terminal device of oneself, can not also use authorisation device, The terminal device of other users can be used, still, because user directly steps on the terminal device of other users The account of oneself is recorded, and during by account account progress resources control, it is likely that directly result in the account of user Number information leakage, therefore, in this application, can be solved the above problems by way of setting up authority.

During entirely authority is set up, the application receives the authority generation that user is sent by account first Request, and entirely receiving process can be completed by terminal, can also be completed by server, the account is to use Family needs to use the account of resource, and the authority generation request is mainly used in triggering terminal or server is performed and built The operation of vertical authority, wherein, the resource in account can be the resource or other electricity of e-book Child resource, is only illustrated by taking server as an example below.

S102：Essential information is provided to the user.

S103：Gather the multimedia messages that the user inputs according to the essential information.

In the embodiment of the present application, server is after the authority generation request that user sent by account is received, Can to the user provide essential information, wherein, the essential information include text information, video information and The information of the types such as voice messaging, subsequently, server can gather user and input multimedia according to the essential information Information, the multimedia messages can be video information or voice messaging.

In actual applications, for video information, voice messaging is more accurate in terms of follow-up identification With it is quick, and identification cost it is relatively low, therefore, in this application, can preferentially using voice messaging make For multimedia messages.

For example, server is after the authority generation request of user A transmissions is received, it is assumed that carried to user A The essential information of confession is that the information of literal type is：You I he, and it is defeated according to " you I he " to gather user A The voice messaging (that is, multimedia messages) entered.

S104：Authority information is generated according to the multimedia messages.

In the embodiment of the present application, terminal can give birth to after multimedia messages are collected according to the multimedia messages Into authority information, the authority information is mainly used in the resource of subsequent control user account.

In this application, due to subsequently when controlling the resource of user account using authority information, mainly testing Whether the multimedia messages for demonstrate,proving the user currently collected are consistent with the multimedia messages included in authority information, And in order to further improve the security of user account, in this application, can also be in collection multimedia messages Basis on, the interface for inputting password is shown to user, points out user to input password with this, terminal connecing After the password for receiving user's input, authority information is generated according to the multimedia messages and the password.

S105：The control authority of the account and the corresponding relation of the authority information are set up, and is stored.

In this application, due to being subsequently the resource that user account is controlled by authority information, therefore, Need to set up the corresponding relation of authority information and control authority, arrived due to also needing to know according to authority information Bottom will be controlled to which account, therefore, it is also desirable to the corresponding relation of authority information and account is set up, By in establish two corresponding relation storages to corresponding data storage areas (e.g., database).

By the above method, user can be used directly the authority information and control its account, realizes and is not revealing On the premise of its account information, its account is not controlled by the terminal device and authorisation device of oneself, effectively Reduce the security risk of control account.

In view of in practical application, in order to meet individual demand of the different users to authority information, also for The security being controlled using authority information to account can be further improved, therefore, in the application In, before the control authority and the corresponding relation of authority information for setting up account, terminal can receive user's pin The configuration information sent to authority information, and according to the configuration information, the authority information is configured, its In, the configuration information includes：(e.g., useful life is 2016 2 to the useful life of the authority information Before month 1 day), the use geographic range of the authority information (e.g., can only be believed in Beijing area using authority Breath), the authority information use the amount (e.g., amount be 50 yuan) of the resource of account, the authority information , certainly, in this application, can also using at least one of object (e.g., can only use good friend) Access times to limiting the authority information, so, also can be by even if situation about revealing occurs in authority information The damage control is within controlled range.

Herein it should be noted that authority information is divided into two kinds of situations, first using the amount of the resource of account Kind of situation is：As long as the currently used authority information of user is believed using the stock number of the resource of account less than the authority The amount of the resource of account is used in breath, it is possible to pass through the resource that the authority information uses account；Second Situation is：Believe as long as the currently used authority information of user is not equal to the authority using the stock number of the resource of account The amount of the resource of account is used in breath, cannot just pass through the resource that the authority information uses account.

Terminal is by the corresponding relation and account and control authority of the authority information established and control authority After corresponding relation storage is arrived in data storage areas, for the ease of being carried out in application authority information to user account Resources control can accurately find authority information, therefore, in this application, it is necessary to set up authority information Mark, specifically can be using the essential information mentioned in step S102 as the mark of authority information, and storage should Authority information and its mark (that is, essential information), store the control of the authority information and its corresponding account Authority processed.

Above is illustrated by taking server as an example, in this application, perform step S101~step S105 It can also be completed by terminal, terminal receives the authority generation request that user is sent by account first, to the use Family provides essential information, and gathers the multimedia messages that the user inputs according to the essential information, further according to this Multimedia messages generate authority information, finally set up the control authority of account and the corresponding relation of the authority information, And the corresponding relation of the control authority of the account and authority information is sent to server stored.

Above is the embodiment of the present application provide rights management method, by the above method can set up with It is believed that breath, subsequently, can be by the authority information to user's account when user needs to use the resource in account Resource in number is controlled, and whole resource control processes are as shown in Figure 2.

The process for the resources control that Fig. 2 provides for the embodiment of the present application, specifically includes following steps：

S201：The authority for receiving user's transmission uses request.

In this application, when user needs to use the authority set up by step S101~step S106 When being controlled to the resource in account, the terminal device of other users can be used directly in user, and passes through end End equipment sends authority to server and pays request, and server uses request in the authority for receiving user's transmission Afterwards, corresponding response is made, wherein, the authority uses the multimedia that user input is carried in request Information, is used primarily for authority and account is controlled, in order to more clearly illustrate the reality in the application Scheme is applied, is described in detail below so that the multimedia messages are voice messaging as an example.

For example, server is receiving the authority use request that user is sent using the terminal device of other users Afterwards, due to it needs to be determined that user needs to be controlled account with which authority information on earth, that is to say, that Which the mark (that is, essential information) that server needs to know authority information is, therefore, in this application, Server, it is necessary to point out user memoriter to read aloud, is being built before authority that user sends is received using request The content of the essential information (e.g., essential information is text information) provided the user with during vertical authority information, and The voice messaging that collection user reads aloud.

S202：The multimedia messages are converted into essential information.

S203：According to the essential information, in each authority information prestored, determine described basic The corresponding authority information of information.

Due to being closed by the corresponding relation and authority information of authority information and control authority and the corresponding of account It is the mark using the essential information in step S102 as authority information, for standard when being stored to be Which authority information the true user that finds currently needs to use to be controlled account on earth, therefore, in this Shen Please in, server needs authority being converted into essential information using the voice messaging carried in request, in this Shen Please in, specifically the voice messaging can be converted into by essential information by voice recognition mode.

Subsequently, server is deposited according to the essential information (that is, the mark of authority information) being converted into advance In each authority information of storage, the corresponding authority information of essential information is determined.

S204：According to the authority information, the authority is verified using request.

In actual applications, it is more likely that exist other users remember in advance the user setting up authority letter The situation of the read aloud essential information of breath, that is to say, that the authority that server is currently received is used in request The voice messaging of carrying is likely to be what other users were read aloud, not the real user of the authority information, therefore, In order to ensure security that authority information is used, server after the corresponding authority information of essential information is determined, Need to verify the authority using request.

Because authority using what is carried in request is voice messaging, therefore, it is provided herein it is a kind of to According to the mode verified using request, specifically, server extracts many matchmakers of standard included in authority information Body information (that is, received pronunciation information), the multimedia messages that authority is carried using in request are as to be tested Multimedia messages are demonstrate,proved, the multimedia messages to be verified and the standard multimedia information is contrasted, determines that this is to be verified The similarity of multimedia messages and the standard multimedia information, when the similarity is more than given threshold, it is determined that The authority is passed through using requests verification, when the similarity is not more than given threshold, it is determined that making to the authority Do not passed through with requests verification, if the number of times that the user reads aloud is not above default threshold value, can pointed out User reads aloud again, and is verified again, wherein, the standard multimedia information is to set up authority information When, multimedia messages used in generation authority information.

S205：When being verified, according to the control authority of the corresponding account of the authority information, to described Account carries out resources control.

In this application, when server authentication by when, according to the control authority of the corresponding account of authority information, Resources control is carried out to account, e.g., the control authority of the corresponding account of authority information is resource transfers authority, Then the resource in account is carried out resource by server according to the resource transfers authority of the corresponding account of authority information Transfer, certainly, it is necessary to transferring resource stock number and transfer object can after User logs in terminal device, Terminal device is memoriter read aloud in prompting user, the essential information provided the user with when setting up authority information Before the content of (e.g., essential information is text information), user's stock number that transferring resource is set first is pointed out And transfer object.

It is obstructed out-of-date when verifying, it can directly refuse the control authority according to the corresponding account of authority information, reconciliation Number carry out resources control, it may be necessary to the authority information is freezed.

In actual applications, it is possible to there is user corresponding with authority information in the control authority for setting up account Before relation, the situation of information setting is carried out to authority information, therefore, server is according to authority information The control authority of corresponding account, before account progress resources control, in addition it is also necessary to the letter set to user Breath is verified.

In this application, relatively common information in the information that user given below is set：Authority information makes Amount, authority letter with time limit, the use geographic range of authority information, authority information using the resource of account The use object of breath, subsequently, server is in the control authority according to the corresponding account of authority information, to the account Number carry out resources control before, it is thus necessary to determine that current time is fallen into the corresponding useful life of authority information, And, determine that the current geographical position of the user is fallen into the corresponding use geographic range of the authority information, and, Determine that the stock number of the currently used resource of the user is no more than the corresponding amount of authority information, and, it is determined that should The use object use object corresponding with the authority information of the currently used authority information of user is consistent, certainly, The access times of authority information can also be set during authority information is set up, and so, server is true After the information of fixed above-mentioned setting, in addition it is also necessary to determine whether the number of times of the currently used authority information of user does not surpass Cross the corresponding access times of authority information.

In addition, for only verifying authority using the voice messaging carried in request, security be possible to or compared with Low, in order to further improve the security of authority information, therefore, present invention also provides a kind of authentication Formula, specifically, the speech message that server is carried in checking authority is using request in authority information with including Received pronunciation information similarity whether be no more than default threshold value after, in addition it is also necessary to receive user transmission it is close Code, and determine whether the password password corresponding with the authority information received is consistent, if password is consistent, Then it is verified, and according to the control authority of the corresponding account of authority information, resources control is carried out to account； If it is inconsistent, user can be pointed out to re-enter password, when the number of times of input password exceedes default number of times, Then refuse the control authority of the corresponding account of authority information, and freeze the authority information.

In actual applications, it is possible to there is user and input on the terminal device after password, unauthorized person is direct The request for carrying the password is intercepted, and sent the request of the carrying password by another terminal device To the situation of server, therefore, server, can be close according to carrying after the password of user's transmission is received Between the medium access control (Media Access Control, MAC) carried in the request of code and network The agreement (Internet Protocol, IP) of interconnection, confirms that user sends equipment used in password and sent out with user Send authority whether consistent using equipment used in request, if unanimously, continuing the password progress to user Checking, believes if it is inconsistent, directly sending authority to user and using equipment used in request to send prompting Breath, points out the currently used authority information of user to have environmental risk to account control, it is proposed that cancelling this authority makes With request, directly the authority information is freezed if necessary.

Herein it should be noted that interacting each time for being carried out between above terminal device and server is all logical The mode for crossing signature and checking signature ensures that information is not tampered with transmitting procedure, and further increasing makes The security of resources control is carried out to account with authority information.

Above is illustrated so that multimedia messages are voice messaging as an example, in this application, multimedia letter Breath can also be image information, and during rights management, (e.g., server is providing a user essential information The information of literal type) when, user can be pointed out clearly to write essential information on blank sheet of paper, subsequently, service Device directly can be taken on blank sheet of paper when gathering the multimedia messages that user inputs according to essential information by terminal Essential information, generate image information, and according to the image information generate authority information.

Subsequently in resource control processes, server, using before asking, is needed in the authority for receiving user's transmission User is pointed out memoriter clearly to be write on blank sheet of paper, what is provided the user with when setting up authority information is basic The content of information (e.g., essential information is text information), and take by terminal the essential information on blank sheet of paper, Image information is generated with this, and image information is carried in authority use request, subsequently, server is being incited somebody to action When multimedia messages are converted into essential information, authority can be used in request by image recognition mode and carried Image information in essential information identify, subsequently can be according to the essential information identified, advance In each authority information of storage, the corresponding authority information of the essential information is determined, and according to the authority information, Authority is verified using request, when being verified, according to the control of the corresponding account of authority information Authority, resources control is carried out to the account.

Above is the method for the resources control that the application is provided, in order to become apparent from detailed elaboration rights management With the method for resources control, the application will be using control authority as obligation authority, and authority is asked using request to pay It is described in detail under the payment scene asked.

The process for the rights management that Fig. 3 provides for the embodiment of the present application, specifically includes following steps：

S301：Receive the authority generation request that user is sent by account.

The application provide set up payment voucher during, server receives user and sent out by account first The authority generation request sent, and perform step S302.

For example, user A needs to set up payment voucher, and therefore, mobile phone (that is, ends of the user A at oneself End equipment) on log in payment accounts after, click on authority set up button, that is, server receive user lead to The authority generation request of payment accounts transmission is crossed, and performs step S302.

S302：Essential information is provided to the user.

Continuation of the previous cases, server after the authority generation request that user A sent by payment accounts is received, Essential information is provided to user A, it is assumed that the type of essential information is text information, the content of essential information is： I you he.

S303：Gather the multimedia messages that the user inputs according to the essential information.

S304：Authority information is generated according to the multimedia messages.

In this application, the multimedia messages that server is inputted except user to be gathered according to essential information, also Need to point out and receive the password that user's input authority is used.

Continue to use the example above, it is assumed that server only gathers voice messaging, therefore, user A reads aloud server and carried The text information of confession：I you he (that is, essential information), the voice messaging that collection of server user A is read aloud, After the completion of collection, user A input passwords are pointed out, user is entered a password into password box according to prompting, Server is directly according to the user A collected speech message and the password received generation authority information.

S305：The obligation authority of the account and the corresponding relation of the authority information are set up, and is stored.

In the embodiment of the present application, terminal is in the multimedia messages according to the user collected and user's input Password generation authority information after, the information in the authority information of generation can accordingly be set, specifically , server can receive the configuration information that user sends for the authority information of generation, according to the configuration information, Authority information to generation is configured, wherein, the configuration information includes：The use of the authority information Time limit, the use geographic range of the authority information, the authority information use the payment amount of the account, are somebody's turn to do At least one of payment object of authority information.

Herein it should be noted that authority information is divided into two kinds of situations using the amount of the payment of account, The first situation is：As long as the currently used authority information of user is less than using the amount of value of the payment of account The amount of the payment of account is used in the authority information, it is possible to which account is used by the authority information Payment；Second of situation be：As long as the currently used authority information of user uses the payment of account Amount of value is not equal to the amount of the payment using account in the authority information, cannot just pass through the authority Information uses the payment of account.

Subsequently, server sets up the corresponding relation of the authority information after obligation authority is provided with information, with This is stored it is also desirable to the authority information and the corresponding relation of account set up after information is provided with.

Continue to use the example above, server is after generation authority information, it is assumed that authority information of the user A to generation In information be configured it is specific as follows：

It is on January 20th, 2016 by 2 15th, 2016 to set the useful life of the authority information, if The use geographic range for putting the authority information is Beijing, sets the authority information to use the payment of account Amount is 500 yuan, any object of use object of the authority information.

With A families after being provided with to information, server set up after obligation authority and information are provided with It is believed that the corresponding relation of breath, at the same time, in addition it is also necessary to authority information and the account set up after information is provided with Corresponding relation, and store.

By the above method, user directly can be paid by the authority information using account, be realized On the premise of not revealing its account information, do not carried out by the terminal device and authorisation device of oneself using account Pay, effectively reduce the security risk paid using account.

In addition, in this application, it is necessary to set up the mark of authority information, specifically can be by step S102 In the essential information mentioned as the mark of authority information, store the authority information and its identify (that is, base This information), the obligation authority of the authority information and its corresponding account is stored, terminal can be believed by authority The mark of breath finds authority information to be used.

Above is the embodiment of the present application provide rights management method, by the above method can set up with It is believed that breath, subsequently, when user needs to use the account to be paid, can use user by the authority information Payment in account is paid, and whole resource control processes are as shown in Figure 4.

The process for the resources control that Fig. 4 the embodiment of the present application is provided, specifically includes following steps：

S401：Receive the payment request that user sends.

In actual applications, user during actually shopping, it is necessary to branch by being installed on terminal device Pay application to be paid, still, if now user is currently without carrying terminal device (e.g., the hand of oneself Machine), and businessman's also with no authorized equipment, in face of above such case, user can use the end of businessman End equipment (e.g., mobile phone) is paid by authority information using the payment in account.

In payment process is entirely carried out using authority information, user is first in the terminal device using businessman The amount of money of payment can be first pre-set, and the object of payment is set, of course, it is possible to first by the terminal device The payment object by default of listed account is shown to user, and user can freely change.

Subsequently, user is directly memoriter read aloud in advance during authority information is set up, authority information correspondence Essential information, the multimedia messages read aloud for collecting user carry and are sent in request is paid by terminal Server, the embodiment for the ease of illustrating the application, the multimedia messages inputted below using user is languages Illustrated exemplified by message breath.

For example, user A is in actually shopping, because user A is currently without the carrying mobile phone of oneself, and And businessman's also with no authorized equipment, therefore, user A be ready to pass through businessman mobile phone use by step S301~ The authority information that step S305 is set up is paid.

Payment applications of the user A in the mobile phone of businessman above sets 50 yuan of the amount of money of payment, by the businessman It is set to pay object, terminal notifying user A memoriter reads aloud the example to step S305 in step S301 The corresponding essential information of authority information (that is, you I he) is set up in son, and gathers the voice that user A is read aloud Information, server is sent to by the payment request for carrying voice messaging.

S402：The multimedia messages are converted into essential information；

Continue to use the example above, server passes through speech recognition after the payment request of user's transmission is received Mode, is converted into essential information, i.e. convert speech information into by the voice messaging carried in payment request Text information：You I he.

S403：According to the essential information, in each authority information prestored, determine described basic The corresponding authority information of information；

Continue to use the example above, server according to essential information " you I he " (that is, the mark of authority information), In each authority information prestored, the corresponding authority information of essential information is determined.

S404：According to the authority information, described pay is asked to verify；

S405：When being verified, according to the obligation authority of the corresponding account of the authority information, institute is used Account is stated to be paid.

Continue to use the example above, server extracts the mark in authority information after authority information is determined, directly Quasi- voice messaging, will pay the voice messaging carried in request as voice messaging to be verified, contrasts this to be tested Voice messaging and the received pronunciation information are demonstrate,proved, the phase of the voice messaging to be verified and the received pronunciation information is determined Like spending, if similarity is less than default threshold value, and reads aloud number of times and be not above default threshold value, then may be used To point out user A to read aloud again, and verified again

Assuming that similarity is more than default threshold value, and start to verify the information set in authority information, i.e. set The useful life for putting the authority information is on January 20th, 2016 on 2 15th, 2016, and setting should be with It is believed that the use geographic range of breath is Beijing, the authority information is set to be using the amount of the payment of account 500 yuan (assuming that at this by taking the first situation mentioned in step S305 as an example), the use of the authority information Any object of object, it is assumed that be all verified, then point out the user A passwords that input is paid.

Subsequently, server confirms that user A sends password institute after the password of user A transmissions is received, first Whether the equipment used sends authority with user A and uses equipment used in request consistent, if inconsistent, Authority directly then is sent using asking used equipment to send prompt message to user A, points out user A Currently used authority information has environmental risk to account control, it is proposed that cancels this authority and uses request.

Assuming that equipment is consistent, then continue to verify the password that user A is inputted, if user A is inputted Password it is inconsistent with the password that is included in authority information, then user A can be pointed out to re-enter password, if The number of times for inputting password exceedes default number of times, then refuses the obligation authority of the corresponding account of authority information, And freezing the authority information, it is assumed that the password of user A inputs is consistent with the password included in authority information, then The payment of this time shopping is completed using user A account, and points out user to pay successfully.

The method of the first rights management provided above for the embodiment of the present application, the side of the first resources control The method of method, the method for second of rights management and second of resources control, based on same thinking, sheet Apply for that embodiment provides four kinds of devices, i.e. the device of the first rights management, as shown in figure 5, the first The device of resources control, as shown in fig. 6, the device of second of rights management, as shown in fig. 7, second The device of resources control, as shown in Figure 8.

The apparatus structure schematic diagram for the first rights management that Fig. 5 provides for the embodiment of the present application, described device Including：

Receiving module 501, request is generated for receiving the authority that user is sent by account；

Module 502 is provided, for providing essential information to the user；

Acquisition module 503, for gathering the multimedia messages that the user inputs according to the essential information；

Generation module 504, for generating authority information according to the multimedia messages；

Corresponding relation building module 505, control authority and the authority information for setting up the account Corresponding relation, and store.

Described device also includes：

Secret generation module 506, for the generation module 504 according to the multimedia messages generate with It is believed that before breath, receiving the password of user's input, the generation module 504 is specifically for according to institute Multimedia messages and the password are stated, authority information is generated.

Described device also includes：

Information setup module 507, the control for setting up the account in the corresponding relation building module 505 Authority processed is with before the corresponding relation of the authority information, receiving the user and being sent for the authority information Configuration information, according to the configuration information, the authority information is configured, wherein, it is described set Information includes：It is the useful life of the authority information, the use geographic range of the authority information, described Authority information uses at least one of the amount of the resource of the account, use object of the authority information.

The corresponding relation building module 505 is specifically for regarding the essential information as the authority information Mark, store the authority information and its mark, store the control of the authority information and its corresponding account Authority processed.

The multimedia messages include voice messaging.

The apparatus structure schematic diagram for the first resources control that Fig. 6 provides for the embodiment of the present application, described device Including：

Receiving module 601, the authority for receiving user's transmission uses request, wherein, the authority is used The multimedia messages of user's input are carried in request；

Modular converter 602, for the multimedia messages to be converted into essential information；

Determining module 603, for according to the essential information, in each authority information prestored, really Make the corresponding authority information of the essential information；

Authentication module 604, for according to the authority information, being verified to the authority using request；

Control module 605, for when being verified, according to the control of the corresponding account of the authority information Authority, resources control is carried out to the account.

The multimedia messages are voice messaging；

The modular converter 602 is specifically for by voice recognition mode, the multimedia messages are changed Into essential information.

The authentication module 604 specifically for, extract the standard multimedia information included in the authority information, The multimedia messages that the authority is carried using in request are treated described in contrast as multimedia messages to be verified Multimedia messages and the standard multimedia information are verified, the multimedia messages to be verified and the mark is determined The similarity of quasi- multimedia messages, when the similarity is more than given threshold, it is determined that using the authority Requests verification passes through, when the similarity is not more than given threshold, it is determined that being tested using request the authority Card does not pass through.

Described device also includes：

Configuration information authentication module 606, for corresponding according to the authority information in the control module 605 Account control authority, before carrying out resources control to the account, determine current time fall into it is described with It is believed that cease in corresponding useful life, and, determine that the current geographical position of the user falls into the authority letter Cease in corresponding use geographic range, and, determine that the stock number of the currently used resource of the user is no more than institute The corresponding amount of authority information is stated, and, determine the use object of the currently used authority information of the user Use object corresponding with the authority information is consistent.

Described device also includes：

Password authentication module 607, in the control module 605 according to the corresponding account of the authority information Number control authority, the account is carried out before resources control, receives the password that the user sends, really Surely the password received password corresponding with the authority information is consistent.

Described device also includes：

Device authentication module 608, in the control module 605 according to the corresponding account of the authority information Number control authority, the account is carried out before resources control, determines that the user sends password and used Equipment and the user to send the authority consistent using equipment used in request.

The apparatus structure schematic diagram for second of rights management that Fig. 7 provides for the embodiment of the present application, described device Including：

Receiving module 701, request is generated for receiving the authority that user is sent by account；

Module 702 is provided, for providing essential information to the user；

Acquisition module 703, for gathering the multimedia messages that the user inputs according to the essential information；

Generation module 704, for generating authority information according to the multimedia messages；

Corresponding relation building module 705, obligation authority and the authority information for setting up the account Corresponding relation, and store.

Described device also includes：

Information setup module 706, the branch for setting up the account in the corresponding relation building module 705 Authority is paid with before the corresponding relation of the authority information, receiving the user and being sent for the authority information Configuration information, according to the configuration information, the authority information is configured, wherein, it is described set Information includes：It is the useful life of the authority information, the use geographic range of the authority information, described Authority information uses at least one of the payment amount of the account, payment object of the authority information.

The corresponding relation building module 705 is specifically for regarding the essential information as the authority information Mark, store the authority information and its mark, store the branch of the authority information and its corresponding account Pay authority.

The apparatus structure schematic diagram for second of resources control that Fig. 8 provides for the embodiment of the present application, described device Including：

Receiving module 801, the payment request for receiving user's transmission, wherein, described pay in request is taken The multimedia messages inputted with the user；

Modular converter 802, for the multimedia messages to be converted into essential information；

Determining module 803, for according to the essential information, in each authority information prestored, really Make the corresponding authority information of the essential information；

Authentication module 804, for according to the authority information, asking to verify to described pay；

Control module 805, for when being verified, according to the payment of the corresponding account of the authority information Authority, is paid using the account.

Described device also includes：

Configuration information authentication module 806, for corresponding according to the authority information in the control module 805 Account obligation authority, before being paid using the account, determine that current time falls into the authority In the corresponding useful life of information, and, determine that the current geographical position of the user falls into the authority information In corresponding use geographic range, and, determine the amount of value for the payment that the user is currently paid Payment amount corresponding no more than the authority information, and, determine the currently used authority letter of the user The payment object of breath payment object corresponding with the authority information is consistent.

In a typical configuration, computing device includes one or more processors (CPU), input/defeated Outgoing interface, network interface and internal memory.

Internal memory potentially includes the volatile memory in computer-readable medium, random access memory And/or the form, such as read-only storage (ROM) or flash memory (flash RAM) such as Nonvolatile memory (RAM). Internal memory is the example of computer-readable medium.

Computer-readable medium includes permanent and non-permanent, removable and non-removable media can be by appointing What method or technique realizes that information is stored.Information can be computer-readable instruction, data structure, program Module or other data.The example of the storage medium of computer include, but are not limited to phase transition internal memory (PRAM), Static RAM (SRAM), dynamic random access memory (DRAM), it is other kinds of with Machine access memory (RAM), read-only storage (ROM), Electrically Erasable Read Only Memory (EEPROM), fast flash memory bank or other memory techniques, read-only optical disc read-only storage (CD-ROM), Digital versatile disc (DVD) or other optical storages, magnetic cassette tape, tape magnetic rigid disk are stored or it His magnetic storage apparatus or any other non-transmission medium, the letter that can be accessed by a computing device available for storage Breath.Defined according to herein, computer-readable medium does not include temporary computer readable media (transitory Media), such as the data-signal and carrier wave of modulation.

It should also be noted that, term " comprising ", "comprising" or its any other variant are intended to non-row His property is included, so that process, method, commodity or equipment including a series of key elements not only include Those key elements, but also other key elements including being not expressly set out, or also include for this process, Method, commodity or the intrinsic key element of equipment.In the absence of more restrictions, by sentence " including One ... " key element that limits, it is not excluded that in the process including the key element, method, commodity or set Also there is other identical element in standby.

It will be understood by those skilled in the art that embodiments herein can be provided as method, system or computer journey Sequence product.Therefore, the application can using complete hardware embodiment, complete software embodiment or combine software and The form of the embodiment of hardware aspect.Moreover, the application can be used wherein includes calculating one or more Machine usable program code computer-usable storage medium (include but is not limited to magnetic disk storage, CD-ROM, Optical memory etc.) on the form of computer program product implemented.

Embodiments herein is the foregoing is only, the application is not limited to.For this area skill For art personnel, the application can have various modifications and variations.All institutes within spirit herein and principle Any modification, equivalent substitution and improvements of work etc., should be included within the scope of claims hereof.

Claims

1. a kind of method of rights management, it is characterised in that methods described includes：

Receive the authority generation request that user is sent by account；

Essential information is provided to the user；

Authority information is generated according to the multimedia messages；

2. the method as described in claim 1, it is characterised in that according to multimedia messages generation with It is believed that before breath, methods described also includes：

Receive the password of user's input；

Authority information is generated according to the multimedia messages, is specifically included：

According to the multimedia messages and the password, authority information is generated.

3. the method as described in claim 1, it is characterised in that set up the control authority of the account with Before the corresponding relation of the authority information, methods described also includes：

Receive the user and be directed to the configuration information that the authority information is sent；

According to the configuration information, the authority information is configured；

Wherein, the configuration information includes：The useful life of the authority information, the authority information Made using geographic range, the authority information using the amount of the resource of the account, the authority information With at least one of object.

4. the method as described in claim 1, it is characterised in that the control authority of the storage account with The corresponding relation of the authority information, is specifically included：

Using the essential information as the authority information mark；

The authority information and its mark are stored, the control of the authority information and its corresponding account is stored Limit.

5. the method as described in Claims 1 to 4 is any, it is characterised in that the multimedia messages include Voice messaging.

6. a kind of method of resources control, it is characterised in that methods described includes：

The multimedia messages are converted into essential information；

7. method as claimed in claim 6, it is characterised in that the multimedia messages are voice messaging；

The multimedia messages are converted into essential information, specifically included：

By voice recognition mode, the multimedia messages are converted into essential information.

8. method as claimed in claim 6, it is characterised in that according to the authority information, to described Authority is verified using request, is specifically included：

Extract the standard multimedia information included in the authority information；

The multimedia messages that the authority is carried using in request are used as multimedia messages to be verified；

The multimedia messages to be verified and the standard multimedia information are contrasted, many matchmakers to be verified are determined The similarity of body information and the standard multimedia information；

When the similarity is more than given threshold, it is determined that being passed through to the authority using requests verification；

When the similarity is not more than given threshold, it is determined that not passed through using requests verification to the authority.

9. method as claimed in claim 6, it is characterised in that according to the corresponding account of the authority information Number control authority, to the account carry out resources control before, methods described also includes：

Determine that current time is fallen into the corresponding useful life of the authority information, and, determine that the user works as Preceding geographical position is fallen into the corresponding use geographic range of the authority information, and, determine that the user works as The stock number of preceding use resource is no more than the corresponding amount of the authority information, and, determine that the user is current It is consistent using the use object of authority information use object corresponding with the authority information.

10. method as claimed in claim 6, it is characterised in that according to the corresponding account of the authority information Number control authority, to the account carry out resources control before, methods described also includes：

Receive the password that the user sends；

It is determined that the password received password corresponding with the authority information is consistent.

11. method as claimed in claim 10, it is characterised in that corresponding according to the authority information The control authority of account, is carried out before resources control, methods described also includes to the account：

Determine that the user sends equipment used in password and uses request with the user transmission authority Used equipment is consistent.

12. a kind of method of rights management, it is characterised in that methods described includes：

Receive the authority generation request that user is sent by account；

Essential information is provided to the user；

Authority information is generated according to the multimedia messages；

13. method as claimed in claim 12, it is characterised in that set up the obligation authority of the account Before the corresponding relation of the authority information, methods described also includes：

Wherein, the configuration information includes：The useful life of the authority information, the authority information The payment of the payment amount, the authority information of the account is used using geographic range, the authority information At least one of object.

14. method as claimed in claim 12, it is characterised in that the obligation authority of the storage account With the corresponding relation of the authority information, specifically include：

Using the essential information as the authority information mark；

The authority information and its mark are stored, the Authority TO Pay of the authority information and its corresponding account is stored Limit.

15. a kind of method of resources control, it is characterised in that methods described includes：

The multimedia messages are converted into essential information；

According to the authority information, described pay is asked to verify；

16. method as claimed in claim 15, it is characterised in that according to authority information correspondence Account obligation authority, before being paid using the account, methods described also includes：

Determine that current time is fallen into the corresponding useful life of the authority information, and, determine that the user works as Preceding geographical position is fallen into the corresponding use geographic range of the authority information, and, determine that the user works as The amount of value of the preceding payment paid is no more than the corresponding payment amount of the authority information, and, really The payment object payment pair corresponding with the authority information of the fixed currently used authority information of user As consistent.

17. a kind of device of rights management, it is characterised in that described device includes：

Module is provided, for providing essential information to the user；

18. device as claimed in claim 17, it is characterised in that described device also includes：

Secret generation module, for the generation module according to the multimedia messages generate authority information it Before, the password of user's input is received, the generation module is specifically for according to the multimedia messages With the password, authority information is generated.

19. device as claimed in claim 17, it is characterised in that described device also includes：

Information setup module, for set up in the corresponding relation building module control authority of the account with Before the corresponding relation of the authority information, the setting letter that the user sends for the authority information is received Breath, according to the configuration information, is configured to the authority information, wherein, wrapped in the configuration information Include：The useful life of the authority information, the use geographic range of the authority information, the authority information Use at least one of the amount of the resource of the account, the use object of the authority information.

20. device as claimed in claim 17, it is characterised in that the corresponding relation building module tool Body is used for, and using the essential information as the mark of the authority information, stores the authority information and its mark Know, store the control authority of the authority information and its corresponding account.

21. the device as described in claim 17~20 is any, it is characterised in that the multimedia messages bag Include voice messaging.

22. a kind of device of resources control, it is characterised in that described device includes：

23. device as claimed in claim 22, it is characterised in that the multimedia messages are believed for voice Breath；

The modular converter is specifically for by voice recognition mode, base is converted into by the multimedia messages This information.

24. device as claimed in claim 22, it is characterised in that the authentication module specifically for, The standard multimedia information included in the authority information is extracted, the authority is more using what is carried in request Media information contrasts the multimedia messages to be verified and many matchmakers of the standard as multimedia messages to be verified Body information, determines the similarity of the multimedia messages to be verified and the standard multimedia information, when described When similarity is more than given threshold, it is determined that passed through to the authority using requests verification, when the similarity not During more than given threshold, it is determined that not passed through using requests verification to the authority.

25. device as claimed in claim 22, it is characterised in that described device also includes：

Configuration information authentication module, in the control module according to the corresponding account of the authority information Control authority, carries out before resources control to the account, determines that current time falls into the authority information pair In the useful life answered, and, determine that the current geographical position of the user falls into the authority information corresponding Using in geographic range, and, determine that the stock number of the currently used resource of the user is believed no more than the authority Cease corresponding amount, and, determine the use object of the currently used authority information of the user with it is described with It is believed that it is consistent to cease corresponding use object.

26. device as claimed in claim 22, it is characterised in that described device also includes：

Password authentication module, in control of the control module according to the corresponding account of the authority information Authority, carries out before resources control to the account, the password that the user sends is received, it is determined that receiving Password password corresponding with the authority information it is consistent.

27. device as claimed in claim 26, it is characterised in that described device also includes：

Device authentication module, in control of the control module according to the corresponding account of the authority information Authority, before carrying out resources control to the account, determine the user send equipment used in password with It is consistent using equipment used in request that the user sends the authority.

28. a kind of device of rights management, it is characterised in that described device includes：

Module is provided, for providing essential information to the user；

29. device as claimed in claim 28, it is characterised in that described device also includes：

Information setup module, for set up in the corresponding relation building module obligation authority of the account with Before the corresponding relation of the authority information, the setting letter that the user sends for the authority information is received Breath, according to the configuration information, is configured to the authority information, wherein, wrapped in the configuration information Include：The useful life of the authority information, the use geographic range of the authority information, the authority information Use at least one of the payment amount of the account, the payment object of the authority information.

30. device as claimed in claim 28, it is characterised in that the corresponding relation building module tool Body is used for, and using the essential information as the mark of the authority information, stores the authority information and its mark Know, store the obligation authority of the authority information and its corresponding account.

31. a kind of device of resources control, it is characterised in that described device includes：

32. device as claimed in claim 31, it is characterised in that described device also includes：

Configuration information authentication module, in the control module according to the corresponding account of the authority information Obligation authority, before being paid using the account, determines that current time falls into the authority information correspondence Useful life in, and, determine that the current geographical position of the user falls into that the authority information is corresponding to be made With in geographical scope, and, determine that the amount of value for the payment that the user is currently paid is no more than institute The corresponding payment amount of authority information is stated, and, determine the payment of the currently used authority information of the user Object payment object corresponding with the authority information is consistent.