WO2012097728A1 - 一种开放平台代理访问方法及装置 - Google Patents

一种开放平台代理访问方法及装置 Download PDF

Info

Publication number
WO2012097728A1
WO2012097728A1 PCT/CN2012/070491 CN2012070491W WO2012097728A1 WO 2012097728 A1 WO2012097728 A1 WO 2012097728A1 CN 2012070491 W CN2012070491 W CN 2012070491W WO 2012097728 A1 WO2012097728 A1 WO 2012097728A1
Authority
WO
WIPO (PCT)
Prior art keywords
application
official
open platform
official application
protocol
Prior art date
Application number
PCT/CN2012/070491
Other languages
English (en)
French (fr)
Inventor
杨荣得
谭奇宇
Original Assignee
腾讯科技（深圳）有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Priority claimed from CN201110009303.6A external-priority patent/CN102591705B/zh
Application filed by 腾讯科技（深圳）有限公司 filed Critical 腾讯科技（深圳）有限公司
Publication of WO2012097728A1 publication Critical patent/WO2012097728A1/zh
Priority to US13/903,771 priority Critical patent/US9032489B2/en

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0884—Network architectures or network communication protocols for network security for authentication of entities by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/10—Protecting distributed programs or content, e.g. vending or licensing of copyrighted material ; Digital rights management [DRM]
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/10—Protecting distributed programs or content, e.g. vending or licensing of copyrighted material ; Digital rights management [DRM]
    • G06F21/12—Protecting executable software
    • G06F21/121—Restricting unauthorised execution of programs
    • G06F21/125—Restricting unauthorised execution of programs by manipulating the program code, e.g. source code, compiled code, interpreted code, machine code
    • G06F21/126—Interacting with the operating system
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/10—Protecting distributed programs or content, e.g. vending or licensing of copyrighted material ; Digital rights management [DRM]
    • G06F21/12—Protecting executable software
    • G06F21/121—Restricting unauthorised execution of programs
    • G06F21/128—Restricting unauthorised execution of programs involving web programs, i.e. using technology especially used in internet, generally interacting with a web browser, e.g. hypertext markup language [HTML], applets, java
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F8/00—Arrangements for software engineering
    • G06F8/30—Creation or generation of source code
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F8/00—Arrangements for software engineering
    • G06F8/60—Software deployment
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/50—Network services
    • H04L67/53—Network services using third party service providers
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F8/00—Arrangements for software engineering
    • G06F8/20—Software design
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/50—Network service management, e.g. ensuring proper service fulfilment according to agreements
    • H04L41/5041—Network service management, e.g. ensuring proper service fulfilment according to agreements characterised by the time relationship between creation and deployment of a service
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/01—Protocols
    • H04L67/10—Protocols in which an application is distributed across nodes in the network

Definitions

  • the present invention relates to the field of open platform application development, and in particular, to an open platform proxy access method and apparatus. Background technique
  • the open platform provides application programming interfaces (APIs) for third-party applications, and usually provides API software development kit (SDK) downloads for quick and convenient third-party applications.
  • APIs application programming interfaces
  • SDK API software development kit
  • the third-party application developed by the developer exchanges data with the open platform by calling the SDK to provide users with rich terminal applications.
  • the user needs to enter a username and password. After the open platform is verified, the functional interface of the open platform can be called normally.
  • the microblogging system of some large websites provides an open platform that provides API interfaces and SDKs for third-party software developers, and provides massive microblog information, fan relationships, and hotspots anytime, anywhere through APIs. topic.
  • Mobile terminal application developers can read and write the content provided by the Weibo system directly through the API or using the SDK, and mine new applications of the Weibo system. Take the mobile microblog client application as an example. After the user enters the user name and password registered on Weibo, the user can share the pictorial content image to the microblog open platform at any time.
  • the drawback of this implementation scheme is that the third-party application needs to embed the SDK to process the login authentication logic.
  • the open platform also has a solution that does not require login authentication in a third-party application.
  • the solution does not need to embed an SDK in a third-party application, and the third-party application sends a specific format to the platform through the browser.
  • Uniform Resource Locator (URL) request the URL contains parameters for specific data. If the open platform requires authentication login, the user needs to enter the username and password obtained from the open platform to log in to complete the request in the web page returned by the open platform. Take the Tencent Weibo Open Platform (http://open.t.qq.com/) as an example.
  • a third-party application can send a Weibo by sending a URL request in the following specific format through a browser:
  • the second implementation of the above-mentioned second implementation solution is that, because the URL format interacts with the open platform, the local file cannot be uploaded due to the limitation of the URL carrying parameter format, and the file pointed to in the parameter can only originate from the Internet.
  • users need to enter a username and password in a third-party application, which may lead to security issues where the username and password are stolen.
  • the main purpose of the present invention is to provide an open platform proxy access method and device, which are used to solve the problem that the embedded SDK of the third-party application platform causes excessive resource occupation, the password security is not high, and the URL format interactive interface is subjected to parameters. Format restrictions are not able to upload technical issues such as local files.
  • An open platform proxy access method comprising:
  • An official application is created in the user terminal, and the third-party application accesses the open platform through an interactive interface provided by the official application, and the official application implements interaction with the open platform through a software development kit (SDK) provided by the open platform;
  • SDK software development kit
  • the interactive interface refers to a protocol interface with a uniform resource locator (URL) format provided by an official application to a third-party application.
  • the third-party application interacts with the open platform through the official application.
  • the process is specifically as follows:
  • the official application parses an access request sent by the third-party application, and obtains the requested content, and then forwards the request to the open platform through an API interface;
  • the open platform sends the response result of the request to the official application, and the official application forwards the response result to the third-party application that sends the request.
  • the official application provides a configuration interface, by which the official application can be instructed to apply for the URL format protocol to the operating system of the user terminal, and bind the protocol in the URL format to the official application, and the third-party application passes An access request with a protocol in the URL format is sent to wake up the official application.
  • the official application also provides the user's login authentication and authentication processing function. After the official application is successfully logged, the open platform is authenticated and authenticated by the open platform for the access request of the third-party application.
  • the official application parses the request sent by the third-party application, according to the The file address parameter reads the file content locally, and the file content is sent to the open platform along with the request through the API interface.
  • the present invention further provides a user terminal, where the user terminal includes: an official application, configured to implement interaction with an open platform through an SDK provided by an open platform; and is also used to apply for a URL format in a user terminal operating system. a protocol, and providing an interactive interface to one or more third party applications through the protocol in the URL format;
  • the third-party application is configured to initiate an interaction request with the open platform to the official application and obtain a response result.
  • the official application provides a configuration interface, by which the official application can be instructed
  • the operating system of the user terminal applies the protocol in the URL format, and binds the protocol in the URL format to the official application, and the third party application wakes up the official application by sending an access request with the protocol in the URL format.
  • the official application also provides the user's login authentication and authentication processing function. After the official application is successfully logged, the open platform is authenticated and authenticated by the open platform for the access request of the third-party application.
  • the third party application includes the file address parameter in the access request sent by the third-party application to the official application, after the official application parses the request sent by the third-party application, according to the file address parameter
  • the file content is read locally, and the file content is sent to the open platform along with the request through an API interface.
  • the invention creates an official application in the user terminal, and the official application is responsible for processing the data exchange and the user authentication login process with the open platform, and providing the application interface of the URL format to the third-party application located at the user terminal, thereby reducing the number
  • the three-party application occupies the system resources on the user terminal, reduces the development cost, and improves the security of the user account.
  • FIG. 2 is a process of information interaction between a third-party application, an official application, and an open platform of the present invention
  • FIG. 3 is a user terminal for implementing the method of the present invention. detailed description
  • the basic idea of the present invention is: creating an official application on the user terminal side, embedding the SDK in the official application, the official application exchanges data with the open platform through the API in the SDK, and is responsible for user authentication and login to the open platform; the official application to the user
  • the terminal side provides an easy-to-use URL format application interface.
  • the third-party application interacts with the official application based on the official application's public URL format application interface.
  • An official application can connect to multiple third-party applications.
  • Official application as open flat
  • the middle layer between the platform and the third-party application enables multiple third-party applications to share a set of SDKs, achieving single sign-on of user names and accounts, saving resource usage on the user terminal side, reducing development costs, and ensuring account security. .
  • FIG. 1 is a flow chart of steps of implementing an open platform proxy access method according to the present invention, and specific steps include:
  • Step 100 Create an official application in the user terminal, and the official application implements interaction with the open platform through an API provided by the open platform;
  • the open platform publicly publishes an application program interface (API) for external applications to invoke services provided by the open platform.
  • API application program interface
  • the open platform will package the API functions to form a software development kit (SDK) to be distributed to third parties, and the third-party applications directly and open platforms.
  • SDK software development kit
  • Server communication, interaction data, every third-party application needs to embed the SDK, and it needs to repeatedly handle the user's login verification and other permission control.
  • the official application uses the SDK provided by the open platform to implement data interaction with the open platform, and the official application embeds the SDK to implement the interface proxy of the open platform, thereby avoiding the embedded SDK in each third-party application, thereby saving Resource usage on the user terminal side.
  • an interface for the user to log in to the open platform is provided, and an official application provides an input function of an account and a password, and when the third-party application accesses the open platform through the official application, the user's login is completed automatically or according to the authorization of the user.
  • the authentication process After the login is successful, the login account and password are encrypted and stored, and multiple third-party applications can share the official application login open platform. Single sign-on can be implemented through the official application to ensure the security of the account as much as possible.
  • Step 102 The official application applies a protocol with a URL format to the user terminal operating system to bind the official application, and provides an interactive interface to the third-party application by using the URL format protocol;
  • the standard Internet access protocol adopts a uniform resource locator (URL) to access Internet resources such as Hypertext Transfer Protocol (HTTP), Secure Hypertext Transfer Protocol (HTTPS), Micro Soft media server protocol (mms), etc., their URL prefixes are http://, https://, mms://, etc.
  • the official application of the present invention can bind an official application by applying a specific URL format protocol.
  • an official application can apply to the system for a URL format protocol with a txwb:// form to bind an official application, and any third-party application can send a txwb. :// format URL access to evoke official applications, simplifying the development of third-party applications
  • Step 104 One or more third-party applications initiate a request for accessing the open platform by binding a URL format protocol of the official application, and the official application parses the request sent by the third-party application, and obtains the requested content, and then re-sends the request to the open platform through the API interface. ;
  • the third party application can invoke the official application, for example, by posting the following URL address:
  • the official application parses the URL access request sent by the third-party application to obtain the parameter value in the URL.
  • "txwb://" is the protocol address header of the URL format bound to the official application;
  • "share” is the identifier assigned to the Weibo application, and the "content” parameter is used to indicate the text content of the Weibo, " The pic” parameter is used to indicate the image of Weibo.
  • the URL access request can be extended according to the specific application, for example, adding corresponding parameters, and each parameter is separated by a parameter separator "&,.”
  • Step 106 The open platform sends the response result of the request to the official application, and the official application forwards the response result to the third-party application that sends the request.
  • the microblog server system exposes an application program interface (API) to a third-party application as an open platform, and distributes the API function forming software development kit (SDK) to a third-party application.
  • API application program interface
  • SDK software development kit
  • the microblog is constructed.
  • the official application acts as an access agent for third-party applications to the Weibo server, and implements interaction between one or more third-party applications and the Weibo service system.
  • the official application provides a configuration interface, which can be used to inform the official application to apply for a specific URL format protocol to the operating system, and bind the protocol of the specific URL format to the official application, for example, by configuring the interface, the application can be applied.
  • Txwb://" is the protocol format for accessing the address header URL as an application interaction interface between the third-party application and the official application, when the third-party application accesses the format through the URL address starting with "txwb://" to the development platform
  • the official application is automatically woken up.
  • the interaction process between the third-party application and the open platform includes the following steps:
  • Step 201 The third-party application initiates a request for adding a microblog to the official application by using a specific URL format protocol.
  • " ⁇ var ⁇ local ⁇ pic.png” is the image corresponding to Weibo.
  • the image is a locally stored image.
  • the third-party application does not need to send the actual content to the official application. Since the image is local, the official application can be based on The path is read directly.
  • Step 202 After receiving the request, the official application parses the access request in the URL format to obtain the content of the request;
  • the official application obtains the content of the request in the request. If the requested content contains a media file (such as a picture, an animation, a video, an audio, etc.), the official application reads the content of the media file according to the media file address indicated in the URL.
  • a media file such as a picture, an animation, a video, an audio, etc.
  • Step 203 The official application forwards the request sent by the third-party application through the protocol of the specific URL format into an API-type access request and forwards the request to the open platform.
  • the official application will add a microblog request through the API interface of the open platform. Forwarded to the open platform, the content of the microblog and the content of the read media file can be uploaded to the open platform through the API interface.
  • Step 204 After receiving the request in the form of an API sent by the official application, the open platform performs corresponding processing and feeds back the processing result to the official application.
  • Step 205 The official application feeds back the processing result to the third-party application, and the step is an optional step.
  • the official application may also provide a user login authentication and authentication processing function. If the function is not provided, each third-party application needs to process the user login authentication and After the authentication process is provided, the user only needs to input the account password through the account password input interface provided by the official application, and then interact with the open platform to implement login authentication and authentication processing of the user, and after the official application is successfully registered,
  • the agent open platform can perform login authentication and authentication processing on third-party applications. The method reduces the number of login authentications between the user terminal and the server, implements single sign-on, improves the security of the account password, and facilitates the management of the account password.
  • 3 is a user terminal 300 for implementing the method according to the present invention, which includes an official application 301 and one or more third-party applications 302;
  • the official application 301 is configured to implement interaction with the open platform through an SDK provided by the open platform; and is further configured to apply to the user terminal operating system for a protocol having a URL format, and apply the protocol to the one or more third parties through the URL format protocol.
  • the official application 301 provides a configuration interface, by which the official application 301 can be instructed to apply for the URL format protocol to the operating system of the user terminal, and bind the protocol of the URL format to the official application 301.
  • the third party application 302 wakes up the official application 301 by sending an access request with the protocol in the URL format.
  • the official application 301 further provides a login authentication and authentication processing function of the user, and after the official application 301 successfully logs in, the proxy is accessed by the open platform to the third-party application 302. Request local authentication and authentication.
  • the third-party application 302 is configured to initiate an interaction request with the open platform to the official application 301 and obtain a response result.
  • the official application 301 parses the request sent by the third-party application 302, according to the The file address parameter reads the file content locally, and sends the file content along with the request to the open platform of the server through the API interface.
  • the functional modules included therein are all designed to implement the step flow in the method of the present invention, so as to save space, The same as in the embodiment of the device and which can be deliberately derived in the embodiment of the device are omitted here, but this should not be construed as limiting the embodiment of the device of the invention. Any system, device and module that implement the method of the present invention are intended to be included within the scope of the present invention.
  • the invention creates an official application in the user terminal, and the official application is responsible for processing the data exchange and the user authentication login process with the open platform, and providing the application interface of the URL format to the third-party application located at the user terminal, thereby reducing the number
  • the three-party application occupies the system resources on the user terminal, which reduces the development cost and improves the account security.

Landscapes

  • Engineering & Computer Science (AREA)
  • Software Systems (AREA)
  • Theoretical Computer Science (AREA)
  • General Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Hardware Design (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Technology Law (AREA)
  • Multimedia (AREA)
  • Computing Systems (AREA)
  • Information Transfer Between Computers (AREA)
  • Telephonic Communication Services (AREA)

Abstract

本发明公开了一种开放平台代理访问方法及装置，用于解决第三方应用平台内嵌SDK造成资源占用过大，密码安全性不高，及URL格式交互接口受参数格式限制无法上传本地文件等技术问题。本发明在用户终端中创建官方应用，官方应用通过开放平台提供的SDK实现与开放平台的交互；官方应用向用户终端操作系统申请具有URL格式的协议来绑定官方应用，并通过URL格式的协议向第三方应用提供交互接口。本发明降低了第三方应用对用户终端上的系统资源的占用，降低了第三方应用的开发成本，保护用户帐号安全。

Description

一种开放平台代理访问方法及装置 技术领域
本发明涉及开放平台应用开发领域， 尤其涉及一种开放平台代理访问 方法及装置。 背景技术
为了支持第三方开发满足不同应用需求的第三方应用程序， 开放平台 都会为第三方应用提供应用程序接口 （API ), 通常还会提供 API的软件开 发包 （SDK ) 下载， 供第三方应用快速方便的开发。 开发者开发出的第三 方应用通过调用 SDK与开放平台交换数据， 为用户提供丰富的终端应用。 在使用需要鉴权的开放平台的第三方应用时， 用户需要输入用户名和密码， 经开放平台验证后， 方能正常调用开放平台的功能接口。
例如， 某些大型网站的微博系统都提供有一个开放平台， 该开放平台 为第三方软件开发商提供 API接口及 SDK,通过 API提供海量的微博信息、 粉丝关系、 以及随时随地发生的热门话题。 移动终端应用开发者可以直接 通过 API或者使用 SDK对微博系统提供的内容进行读写，挖掘微博系统的 新应用。 以手机微博客户端应用为例， 用户在客户端输入自己在微博注册 的用户名和密码登录后， 可以随时把画报内容图片分享到微博开放平台上。 但该实现方案的缺陷在于， 第三方应用需要内嵌 SDK, 处理登录鉴权逻辑， 对于只需要使用开放平台的很小部分功能的第三方应用来说， 占用资源过 大、 开发成本过高。 此外， 用户需要在第三方应用中输入用户名和密码， 可能导致用户名和密码被盗取的安全问题
开放平台还有一种无需在第三方应用中登录鉴权的方案， 该方案不需 要在第三方应用中内嵌 SDK, 第三方应用通过浏览器给平台发送特定格式 的统一资源定位符（URL )请求， URL中包含具体数据的参数。 如果开放 平台需要鉴权登录， 用户需要在开放平台返回的网页中输入从开放平台获 取的用户名和密码登录来完成请求。 以腾讯微博开放平台 (http://open.t.qq.com/)为例， 第三方应用可以通过浏览器发送以下特定格式 的 URL请求来发布微博：
http://v^.qq om/share/share.php?title=mytitle&url=myurl&pic=mypic 其中 mytitle为要发布的微博内容， myurl为内容要加的链接， mypic为 需要附带的图片， 第三方应用会根据实际情况填写发布内容、 链接和图片。 如果处于未登录状态， 用户需要在平台返回的页面中输入用户名和密码， 然后才能确认发布。
上述第二种实现方案的缺陷在于， 由于 URL格式与开放平台交互， 受 URL携带参数格式的限制， 无法上传本地文件， 参数中指向的文件只能来 源于互联网。 此外， 用户需要在第三方应用中输入用户名和密码， 可能导 致用户名和密码被盗取的安全问题。 发明内容
有鉴于此， 本发明的主要目的在于提供一种开放平台代理访问方法及 装置， 用于解决第三方应用平台内嵌 SDK造成资源占用过大， 密码安全性 不高，及 URL格式交互接口受参数格式限制无法上传本地文件等技术问题。
为达到上述目的， 本发明的技术方案是这样实现的：
一种开放平台代理访问方法， 该方法包括：
在用户终端中创建官方应用， 第三方应用通过官方应用提供的交互接 口访问开放平台， 所述官方应用通过开放平台提供的软件开发包 （SDK ) 实现与开放平台的交互； 所述官方应用提供的交互接口指官方应用向第三 方应用提供的具有统一资源定位符（URL )格式的协议接口。
进一步地， 所述第三方应用通过所述官方应用与开放平台进行交互的 过程具体为：
所述第三方应用通过所述 URL格式的协议发送访问所述开放平台的请 求给所述官方应用；
所述官方应用解析所述第三方应用发送的访问请求， 获取请求内容后 通过 API接口将请求转发给所述开放平台；
所述开放平台将请求的响应结果发送给官方应用， 官方应用再将响应 结果转发给发送请求的第三方应用。
所述官方应用提供配置接口， 通过该配置接口可指示所述官方应用向 用户终端的操作系统申请所述 URL格式的协议， 并将所述 URL格式的协 议与官方应用绑定， 第三方应用通过发送具有所述 URL格式的协议的访问 请求来唤醒所述官方应用。
所述官方应用还提供用户的登录认证和鉴权处理功能， 在官方应用登 录成功后， 代理所述开放平台对第三方应用的访问请求进行本地的认证和 鉴权。
进一步地， 若所述第三方应用通过所述 URL格式的协议向所述官方应 用发送的访问请求中包含文件地址参数， 则所述官方应用解析所述第三方 应用发送的请求后，根据所述文件地址参数从本地读取文件内容，通过 API 接口将文件内容随请求一同发送给所述开放平台。
基于上述方法， 本发明还提出一种用户终端， 该用户终端中包含： 官方应用， 用于通过开放平台提供的 SDK实现与开放平台的交互； 还 用于向用户终端操作系统申请具有 URL格式的协议， 并通过所述 URL格 式的协议向一个或多个第三方应用提供交互接口；
第三方应用， 用于向所述官方应用发起与开放平台的交互请求并获取 响应结果。
所述官方应用提供配置接口， 通过该配置接口可指示所述官方应用向 用户终端的操作系统申请所述 URL格式的协议， 并将所述 URL格式的协 议与官方应用绑定， 第三方应用通过发送具有所述 URL格式的协议的访问 请求来唤醒所述官方应用。
所述官方应用还提供用户的登录认证和鉴权处理功能， 在官方应用登 录成功后， 代理所述开放平台对第三方应用的访问请求进行本地的认证和 鉴权。
若所述第三方应用通过所述 URL格式的协议向所述官方应用发送的访 问请求中包含文件地址参数， 则所述官方应用解析所述第三方应用发送的 请求后， 根据所述文件地址参数从本地读取文件内容， 通过 API接口将文 件内容随请求一同发送给所述开放平台。
本发明在用户终端中创建官方应用， 由官方应用来负责处理与开放平 台的数据交换和用户鉴权登录过程， 并向位于用户终端的第三方应用提供 URL格式的应用程序接口， 从而降低了第三方应用对用户终端上的系统资 源的占用， 降低了开发成本， 提高了用户帐号安全性。 附图说明
图 1为本发明开放平台代理访问方法的步驟流程图；
图 2为本发明第三方应用、 官方应用及开放平台之间的信息交互过程； 图 3为本发明提出的一种实现本发明所述方法的用户终端。 具体实施方式
本发明的基本思想是： 在用户终端侧创建官方应用， 官方应用中嵌入 SDK, 官方应用通过 SDK中的 API与开放平台交换数据， 并负责到开放平 台的用户鉴权和登录； 官方应用向用户终端侧提供简单易用的 URL格式应 用程序接口， 第三方应用基于官方应用公开的 URL格式应用程序接口与官 方应用交互， 一个官方应用可连接多个第三方应用。 官方应用作为开放平 台与第三方应用之间的中间层， 可使多个第三方应用共用一套 SDK, 实现 用户名和账号的单点登录， 节省了用户终端侧的资源占用， 降低了开发成 本， 保障了帐号安全。
为使本发明的目的、 技术方案和优点更加清楚明白， 以下举实施例并 参照附图， 对本发明进一步详细说明。
图 1 为本发明实现开放平台代理访问方法的步驟流程图， 具体步驟包 括：
步驟 100、在用户终端中创建官方应用， 官方应用通过开放平台提供的 API实现与开放平台的交互；
开放平台对外公开发布应用程序接口 （API ), 用于外部应用调用开放 平台提供的服务， 通常开放平台会将 API函数打包形成软件开发包（SDK ) 发布给第三方， 第三方应用直接与开放平台服务器沟通， 交互数据， 每一 个第三方应用都需要内嵌 SDK, 都需要重复处理用户的登录验证等权限控 制。 而本发明中， 官方应用使用开放平台提供的 SDK编程实现与开放平台 的数据交互， 官方应用内嵌 SDK, 实现开放平台的接口代理， 从而避免了 每一个第三方应用都内嵌 SDK, 节省了用户终端侧的资源占用。
优选地， 在官方应用中提供用户登录开放平台的接口， 由官方应用提 供账号和密码的输入功能， 并在第三方应用通过官方应用访问开放平台时， 自动或根据用户的授权完成用户的登录与鉴权过程。 在登录成功后， 登录 账号和密码加密存储， 多个第三方应用可共用官方应用登录开放平台。 通 过所述官方应用能够实现单点登录， 从而尽可能地保障账号的安全。
步驟 102、 官方应用向用户终端操作系统申请具有 URL格式的协议来 绑定官方应用， 并通过所述 URL格式的协议向第三方应用提供交互接口； 标准的互联网访问协议都采用统一资源定位符 （ URL ) 来访问互联网 资源， 例如超文本传输协议（HTTP )、 安全超文本传输协议（ HTTPS )、 微 软媒体服务器协议（ mms )等，他们的 URL前缀分别为 http://, https://, mms:// 等。 本发明官方应用可通过申请特定的 URL格式协议来绑定官方应用， 例 如， 官方应用可向系统申请具有 txwb://形式的 URL格式协议来绑定官方应 用， 任何第三方应用可通过发送 txwb://格式的 URL访问来唤起官方应用， 从而简化了第三方应用的开发
步驟 104、 一个或多个第三方应用通过绑定官方应用的 URL格式协议 发起访问开放平台的请求， 官方应用解析第三方应用发送的请求， 获取请 求内容后通过 API接口将请求重新发送给开放平台；
待官方应用向用户终端上的操作系统申请好 URL格式的协议后， 第三 方应用就可以调用官方应用了， 例如通过如下 URL地址来发布^博：
txwb://share?content=mycontent&pic=\var\local\pic.png
官方应用接收到第三方应用的请求后， 解析第三方应用发送的 URL访 问请求，获取 URL中的参数值。 URL中， "txwb://"为绑定官方应用的 URL 格式的协议地址头部； "share" 为分配给微博应用的标识符， "content" 参 数用于指示微博的文字内容， "pic" 参数用于指示微博的图片。 当然， 该 URL访问请求可根据具体的应用进行扩展， 例如增加相应的参数， 各参数 以参数分隔符 "&，， 分隔。
步驟 106、开放平台将请求的响应结果发送给官方应用， 官方应用再将 响应结果转发给发送请求的第三方应用。
以下以微博系统为例说明本发明的技术方案：
传统模式下， 微博服务端系统作为一个开放平台向第三方应用公开应 用程序接口 （API ), 并将 API函数形成软件开发包（SDK )分发给第三方 应用， 而本发明中， 构建微博系统的厂商， 即官方发布一个官方应用， 该 官方应用基于该官方发布的 SDK编程实现， 该微博系统构建商将该官方应 用发布给移动终端的生产厂商， 由移动终端的生产商将其嵌入到移动终端 的操作系统中， 或发布到网络上后， 由移动终端用户自己下载安装到移动 终端中。
该官方应用作为第三方应用到微博服务端的访问代理， 实现一个或多 个第三方应用与微博服务系统的交互。 官方应用提供配置接口， 可通过该 配置接口告知官方应用向操作系统申请特定的 URL格式的协议， 并将该特 定的 URL格式的协议与官方应用绑定， 例如， 通过配置接口， 可申请以 "txwb://" 为访问地址头部的 URL格式的协议作为第三方应用与官方应用 之间的应用程序交互接口， 当第三方应用通过 "txwb://" 开头的 URL地址 访问格式向开发平台发起交互请求时， 官方应用自动被唤醒。
如图 2所示， 以微博应用为例， 第三方应用与开放平台之间的交互过 程包括以下几个步驟：
步驟 201、 第三方应用以特定 URL格式协议发起新增微博的请求给官 方应用；
例如以 " txwb://share?content=mycontent&pic=\var\local\pic.png " URL 地址向官方应用发起请求， 请求在微博系统发布一篇微博， 其中 mycontent 为发布的微博内容， "\var\local\pic.png" 为微博对应的图片， 该图片为本地 存储的图片， 第三方应用并不需要向官方应用发送图片实际内容， 由于图 片就在本地， 因此官方应用可根据路径直接读取。
步驟 202、 官方应用接收到请求后， 解析 URL格式的访问请求， 获取 请求内容；
官方应用获取请求中的请求内容， 若请求内容中如包含媒体文件（例 如图片、 动画、 视频、 音频等类型的文件）， 则官方应用根据 URL 中所指 示的媒体文件地址读取媒体文件内容。
步驟 203、 官方应用将第三方应用通过特定 URL格式的协议发送的请 求转换为 API形式的访问请求转发给开放平台。
以新增微博为例， 官方应用通过开放平台的 API接口将新增微博请求 转发给开放平台， 通过 API接口形式可将微博内容及读取的媒体文件内容 一同上传到开放平台。
步驟 204、开放平台接收到官方应用发送的 API形式的请求后执行相应 的处理并向官方应用反馈处理结果；
步驟 205、 官方应用在将处理结果反馈给第三方应用， 该步驟为可选步 驟。
优选地， 为了提高用户账号及密码信息的安全性， 官方应用还可提供 用户登录认证和鉴权的处理功能， 在不提供该功能的情况下， 需要每个第 三方应用自己处理用户登录认证和鉴权过程， 而提供该功能后， 用户只需 要通过官方应用提供的账号密码输入接口输入账号密码后， 与开放平台进 行交互实现用户的登录认证和鉴权处理， 而在官方应用登录成功后， 即可 代理开放平台对第三方应用进行登录认证和鉴权处理。 通过该方法减少了 用户终端与服务端之间的登录认证次数， 实现了单点登录， 提高了账号密 码的安全性， 方便了账号密码的管理。
图 3 为本发明基于上述方法提出的一种实现本发明所述方法的用户终 端 300, 该终端中包含官方应用 301及一个或多个第三方应用 302;
官方应用 301 ,用于通过开放平台提供的 SDK实现与开放平台的交互； 还用于向用户终端操作系统申请具有 URL格式的协议， 并通过所述 URL 格式的协议向一个或多个第三方应用提供交互接口；
优选地， 所述官方应用 301 提供配置接口， 通过该配置接口可指示所 述官方应用 301向用户终端的操作系统申请所述 URL格式的协议， 并将所 述 URL格式的协议与官方应用 301绑定， 第三方应用 302通过发送具有所 述 URL格式的协议的访问请求来唤醒所述官方应用 301。
优选地， 所述官方应用 301 还提供用户的登录认证和鉴权处理功能， 在官方应用 301登录成功后， 代理所述开放平台对第三方应用 302的访问 请求进行本地的认证和鉴权。
第三方应用 302,用于向所述官方应用 301发起与开放平台的交互请求 并获取响应结果。
若所述第三方应用 302通过所述 URL格式的协议向所述官方应用 301 发送的访问请求中包含文件地址参数， 则所述官方应用 301 解析所述第三 方应用 302发送的请求后， 根据所述文件地址参数从本地读取文件内容， 通过 API接口将文件内容随请求一同发送给所述服务端的开放平台。
由于本发明所提供的用户终端 300是用于实现本发明提出的开放平台 代理访问方法， 因此其包含的功能模块都是为了实现本发明所述方法中的 步驟流程而设， 为节省篇幅， 该装置实施例中与方法实施例中相同及可毫 无疑义地推导出的内容此处省略， 但这不应理解为对本发明装置实施例的 限制。 任何实现本发明所述方法的系统、 装置和模块都应包含在本发明的 保护范围之内。
以上所述， 仅为本发明的较佳实施例而已， 并非用于限定本发明的保 护范围。 工业实用性
本发明在用户终端中创建官方应用， 由官方应用来负责处理与开放平 台的数据交换和用户鉴权登录过程， 并向位于用户终端的第三方应用提供 URL格式的应用程序接口， 从而降低了第三方应用对用户终端上的系统资 源的占用， 降低了开发成本， 提高了帐号安全性。

Claims

权利要求书
1、 一种开放平台代理访问方法， 该方法包括：
在用户终端中创建官方应用， 第三方应用通过官方应用提供的交互接 口访问开放平台。
2、 根据权利要求 1所述的方法， 其中， 所述官方应用通过开放平台提 供的软件开发包 SDK实现与开放平台的交互； 所述官方应用提供的交互接 口指官方应用向第三方应用提供的具有统一资源定位符 URL格式的协议接 口。
3、 根据权利要求 2所述的方法， 其中， 所述第三方应用通过所述官方 应用与开放平台进行交互的过程具体为：
所述第三方应用通过所述 URL格式的协议发送访问所述开放平台的请 求给所述官方应用；
所述官方应用解析所述第三方应用发送的访问请求， 获取请求内容后 通过 API接口将请求转发给所述开放平台；
所述开放平台将请求的响应结果发送给官方应用， 官方应用再将响应 结果转发给发送请求的第三方应用。
4、 根据权利要求 2所述的方法， 其中， 所述官方应用提供配置接口， 通过该配置接口指示所述官方应用向用户终端的操作系统申请所述 URL格 式的协议， 并将所述 URL格式的协议与官方应用绑定， 第三方应用通过发 送具有所述 URL格式的协议的访问请求来唤醒所述官方应用。
5、 根据权利要求 1所述的方法， 其中， 所述官方应用还提供用户的登 录认证和鉴权处理功能， 在官方应用登录成功后， 代理所述开放平台对第 三方应用的访问请求进行本地的认证和鉴权。
6、 根据权利要求 3 所述的方法， 其中， 若所述第三方应用通过所述 URL格式的协议向所述官方应用发送的访问请求中包含文件地址参数， 则 所述官方应用解析所述第三方应用发送的请求后， 根据所述文件地址参数 从本地读取文件内容， 通过 API接口将文件内容随请求一同发送给所述开 放平台。
7、 一种用户终端， 该用户终端中包含：
官方应用， 用于通过开放平台提供的 SDK实现与开放平台的交互； 还 用于向用户终端操作系统申请具有 URL格式的协议， 并通过所述 URL格 式的协议向一个或多个第三方应用提供交互接口；
第三方应用， 用于向所述官方应用发起与开放平台的交互请求并获取 响应结果。
8、 根据权利要求 7所述的用户终端， 其中， 所述官方应用提供配置接 口， 通过该配置接口指示所述官方应用向用户终端的操作系统申请所述 URL格式的协议， 并将所述 URL格式的协议与官方应用绑定， 第三方应用 通过发送具有所述 URL格式的协议的访问请求来唤醒所述官方应用。
9、 根据权利要求 7所述的用户终端， 其中， 所述官方应用还提供用户 的登录认证和鉴权处理功能， 在官方应用登录成功后， 代理所述开放平台 对第三方应用的访问请求进行本地的认证和鉴权。
10、 根据权利要求 7所述的用户终端， 其中， 若所述第三方应用通过 所述 URL格式的协议向所述官方应用发送的访问请求中包含文件地址参 数， 则所述官方应用解析所述第三方应用发送的请求后， 根据所述文件地 址参数从本地读取文件内容， 通过 API接口将文件内容随请求一同发送给 所述开放平台。
PCT/CN2012/070491 2011-01-17 2012-01-17 一种开放平台代理访问方法及装置 WO2012097728A1 (zh)

Priority Applications (1)

Application Number Priority Date Filing Date Title
US13/903,771 US9032489B2 (en) 2011-01-17 2013-05-28 Method and device for proxy access of open platform

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201110009303.6A CN102591705B (zh) 2011-01-17 一种开放平台代理访问方法及装置
CN201110009303.6 2011-01-17

Related Child Applications (1)

Application Number Title Priority Date Filing Date
US13/903,771 Continuation US9032489B2 (en) 2011-01-17 2013-05-28 Method and device for proxy access of open platform

Publications (1)

Publication Number Publication Date
WO2012097728A1 true WO2012097728A1 (zh) 2012-07-26

Family

ID=46480415

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2012/070491 WO2012097728A1 (zh) 2011-01-17 2012-01-17 一种开放平台代理访问方法及装置

Country Status (2)

Country Link
US (1) US9032489B2 (zh)
WO (1) WO2012097728A1 (zh)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2014206303A1 (en) * 2013-06-26 2014-12-31 Tencent Technology (Shenzhen) Company Limited Method, apparatus and system for implementing third party application in micro-blogging service

Families Citing this family (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP2583174A1 (en) 2010-06-18 2013-04-24 Sweetlabs, Inc. Systems and methods for integration of an application runtime environment into a user computing environment
US8775925B2 (en) 2012-08-28 2014-07-08 Sweetlabs, Inc. Systems and methods for hosted applications
CN103685193B (zh) * 2012-09-20 2018-01-30 腾讯科技（深圳）有限公司 一种第三方应用接入开放平台的方法及开放平台接入系统
CN115002394A (zh) * 2022-05-27 2022-09-02 中移互联网有限公司 基于5g消息的多方会议方法、装置及电子设备

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1555178A (zh) * 2003-12-26 2004-12-15 北京纵横移通信息技术有限公司 一种为基于移动设备的增值业务开发提供统一电子通讯簿功能及其扩展功能的中间件设备
CN1649324A (zh) * 2004-01-26 2005-08-03 朗迅科技公司 操作带有代理的开放api网络的方法和装置
CN101742007A (zh) * 2009-12-16 2010-06-16 中国电信股份有限公司 利用Widget技术开放语音会议的方法和系统

Family Cites Families (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US8090699B2 (en) * 2006-03-08 2012-01-03 Sms.Ac, Inc. Automatic generation of application pod
CN101296243B (zh) * 2008-06-26 2013-02-20 阿里巴巴集团控股有限公司 一种服务集成平台系统及提供互联网服务的方法
US8707276B2 (en) * 2011-01-07 2014-04-22 Mastercard International Incorporated Method and system for managing programmed applications in an open API environment

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1555178A (zh) * 2003-12-26 2004-12-15 北京纵横移通信息技术有限公司 一种为基于移动设备的增值业务开发提供统一电子通讯簿功能及其扩展功能的中间件设备
CN1649324A (zh) * 2004-01-26 2005-08-03 朗迅科技公司 操作带有代理的开放api网络的方法和装置
CN101742007A (zh) * 2009-12-16 2010-06-16 中国电信股份有限公司 利用Widget技术开放语音会议的方法和系统

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
GAO, KANGDI: "Method for rapid shopping-sharing system by open API integration", FUJIAN COMPUTER, no. 11, 30 November 2010 (2010-11-30), pages 180 - 181 *

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2014206303A1 (en) * 2013-06-26 2014-12-31 Tencent Technology (Shenzhen) Company Limited Method, apparatus and system for implementing third party application in micro-blogging service
US9736138B2 (en) 2013-06-26 2017-08-15 Tencent Technology (Shenzhen) Company Limited Method, apparatus and system for implementing third party application in micro-blogging service
US9900304B2 (en) 2013-06-26 2018-02-20 Tencent Technology (Shenzhen) Company Limited Method, apparatus and system for implementing third party application in micro-blogging service

Also Published As

Publication number Publication date
US20130263232A1 (en) 2013-10-03
US9032489B2 (en) 2015-05-12
CN102591705A (zh) 2012-07-18

Similar Documents

Publication Publication Date Title
CN108901022B (zh) 一种微服务统一鉴权方法及网关
US9762643B2 (en) Providing hosted virtual desktop infrastructure services
JP5021215B2 (ja) Ｗｅｂサービス用の信頼できる第三者認証
US8832782B2 (en) Single sign-on system and method
US9648006B2 (en) System and method for communicating with a client application
CN101299753B (zh) 具有web服务安全控制机制的代理服务器
CN105144111A (zh) 用于不同web服务架构的中继服务
WO2014201931A1 (zh) 资源处理方法和站点服务器
US20150026236A1 (en) Common Interface Communicating with Multiple Back-End Services via Gateway Application
TW200810460A (en) Authentication of a principal in a federation
US20210176234A1 (en) Cooperative communication validation
EP2518972A1 (en) System and method for device addressing
US20090122968A1 (en) Authentication system and method
CN105991518B (zh) 网络接入认证方法及装置
WO2012097728A1 (zh) 一种开放平台代理访问方法及装置
JP2005501354A (ja) 単一ｉｐアドレスを介して複数のウェブ・ドメインによりウェブ・サービスを提供する方法およびシステム
CN113411324B (zh) 基于cas与第三方服务器实现登录认证的方法和系统
WO2017036235A1 (zh) 一种信息传输的方法和装置
US11095460B2 (en) Certificate application operations
US9979722B2 (en) Method and apparatus for processing a RTCWEB authentication
KR20110118000A (ko) 모바일 단말에서 웹브라우저와 로컬 리소스의 연동 장치 및 그 방법
JP2010165306A (ja) サービス提供方法、サービス提供システム、代理装置、そのプログラム
WO2014089968A1 (zh) 虚拟机系统数据加密方法及设备
TW201030637A (en) A method providing internet service and service integration platform system
CN104604188A (zh) 直接电子邮件

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 12736735

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

WWE Wipo information: entry into national phase

Ref document number: 1301003752

Country of ref document: TH

32PN Ep: public notification in the ep bulletin as address of the adressee cannot be established

Free format text: NOTING OF LOSS OF RIGHTS PURSUANT TO RULE 112(1) EPC (EPO FORM 1205N DATED 13.01.2014)

122 Ep: pct application non-entry in european phase

Ref document number: 12736735

Country of ref document: EP

Kind code of ref document: A1