WO2014201931A1

WO2014201931A1 - Resource processing method and site server

Info

Publication number: WO2014201931A1
Application number: PCT/CN2014/077963
Authority: WO
Inventors: 陆多俊
Original assignee: 华为技术有限公司
Priority date: 2013-06-21
Filing date: 2014-05-21
Publication date: 2014-12-24
Also published as: CN103327100A; CN103327100B

Abstract

A resource processing method and a site server. The method comprises the following steps: a first site server receiving a resource processing request sent by a requesting user of the first site server, the resource processing request carrying an address of a second site server and an account number of a requested user of the second site server; generating a resource grant request according to the resource processing request, and sending the resource grant request to the second site server; and when the requested user allows a grant, receiving a resource grant response sent by the second site server, and performing resource processing according to the resource grant response. Therefore, the present invention implements resource processing between different site servers, and can be widely applied to sharing of resources such as a cross-site network disk, micro blog, a social networking site (SNS) contact, a conference, and an agenda.

Description

Resource processing method and site server

The present invention relates to the field of communications and Internet technologies, and in particular, to a resource processing method and a site server. Background technique

Resource sharing and sharing are two basic needs of Internet users. The sharing is that the resource owner pushes its own resources to other users. For example, if user A is authorized by B, the content of the network disk can be pushed to the network disk of user B. A share is a user requesting authorization from another user to request the user to access the private resources of the requested user. For example, if user A is authorized by B, he can browse the content of the network disk of B. Among them, the core of these two requirements is how to realize resource authorization between users and the process of resource exchange between users. In general, the requesting user and the requested user can be located at different service site servers, and the exchanged resources are located on the two service site servers. For sharing, the resources are located on the requesting user's service site server. For sharing, the resources are located in the requested user. On the service site server. In particular, the requesting user and the requested user can also be located on the same service site server.

Currently, the existing development authorization (OAuth) technology can be used to solve the resource requester's access to the resource owner's resources on the resource server after authorization. The process is generally:

(1) The resource requester initiates an authorization request to the resource owner;

(2) The resource owner agrees to the authorization request and returns the authorization result to the resource requester;

(3) The resource requester initiates a resource access authorization request to the authorization server, and submits an authorization result obtained from the resource owner, and the authorization result is generally an authorization code;

(4) authorizing the server to verify the authorization result, and if it is legal, returning the resource access token to the resource requester;

(5) The resource requester carries the access token to access the resource server. The resource server determines whether the resource requester has access to the restricted resource according to whether the access token is legal. In practice, the authorization server and the resource server may be a server;

However, the existing OAuth 2.0 specification does not support resource owner offline authorization. In addition, Oauth 2.0 only defines cross-site resource access authorization between users, and no resource sharing mechanism is defined. Summary of the invention

The present invention provides a resource processing method and a site server to solve the existing OAuth 2.0 specification in the prior art, does not support resource owner or manager offline authorization, and Oauth 2.0 only defines a cross between users. Station resource access authorization, there is no problem defining the resource sharing mechanism.

In a first aspect, the present invention provides a resource processing method, where the method includes: receiving, by a first site server, a resource processing request sent by a requesting user of the first site server, where the resource processing request carries a second An address of the site server and an account of the requested user of the second site server; generating the resource authorization request according to the resource processing request, and sending the resource authorization request to the second site server; After the requested user allows the authorization, the resource authorization response sent by the second site server is received, and resource processing is performed according to the resource authorization response.

In a first possible implementation manner, the resource processing request is a resource sharing request, where the resource authorization request carries an initial serial number, shared resource information, an account of the requested user, a callback uniform resource locator URL, and The identity password of the first site server.

With reference to the first possible implementation manner of the first aspect, in a second possible implementation manner, the resource authorization response includes an authorization token, a resource sharing URL, an initial serial number, and the receiving the second site server The resource authorization response is sent, and the resource processing is performed according to the resource authorization response. The first site server receives the resource authorization response sent by the second site server by using the callback URL, and responds by using the resource authorization. The resource sharing URL in the requesting, the sharing resource of the requesting user is sent to the second site server, so that the requested user obtains the shared resource from the second site server and shares the shared resource.

In a third possible implementation manner, the resource processing request is a resource sharing request, where the resource sharing request further carries a shared resource name of the requested user, where the resource authorization request carries an initial serial number, The shared resource information, the account number of the requested user, the callback URL, and the identity password of the first site server.

With reference to the third possible implementation of the first aspect, in a fourth possible implementation, the resource authorization response includes an authorization token, a resource sharing URL, an initial serial number, and the receiving the second site server And sending the resource authorization response according to the resource authorization response, where the first site server receives the resource authorization response sent by the second site server by using the callback URL, and receives the request. When the user's resource gets the request, it passes The resource sharing URL in the resource authorization response sends a resource acquisition request carrying the authorization token to the second site server; receiving the shared resource of the requested user sent by the second site server, And sending the shared resource to the requesting user, so that the requesting user acquires the shared resource.

In a second aspect, the present invention provides a resource processing method, where the method includes: receiving, by a second site server, a resource authorization request sent by a first site server, where the resource authorization request is received by the first site server according to After the resource processing request sent by the requesting user by the first site server, the authorization request of the requested user for the second site server generated according to the resource processing request; when the second site server pairs the After the server is authenticated, the resource authorization request is sent to the requested user; the authorization confirmation information sent by the requesting user is received, and the resource authorization for the first site server is generated according to the authorization confirmation information. Responding to, and sending the resource authorization response to the first site server, where the first site server performs resource processing according to the resource authorization response.

In a first possible implementation manner, the resource processing request is a resource sharing request, where the resource authorization request carries a unique transaction ID, shared resource information, an account of the requested user, a callback uniform resource locator URL, and The identity password of the first site server.

With reference to the first possible implementation manner of the second aspect, in a second possible implementation manner, the authorization confirmation information is that the requesting user allows authorization, and the generating, according to the authorization confirmation information, the first The resource authorization of the site server is generated, and the resource authorization response is sent to the first site server, specifically: after the requested user allows authorization, the second site server generates a checkpoint according to the authorization confirmation information. Determining, by the first site server, a resource authorization response, where the resource authorization response includes an authorization token, a resource sharing URL, an initial serial number, and sending a resource authorization response to the first site server by using the callback URL; The shared resource of the requesting user sent by the site server through the resource sharing URL in the resource authorization response, so that the requested user acquires the shared resource and shares the shared resource.

In a third possible implementation manner, the resource processing request is a resource sharing request, where the resource sharing request further carries a shared resource name of the requested user, where the resource authorization request carries an initial serial number, The shared resource information, the account number of the requested user, the callback URL, and the identity password of the first site server. With reference to the third possible implementation manner of the second aspect, in a fourth possible implementation manner, the authorization confirmation information is an authorization permission for the requesting user, and the generating, by the authorization confirmation information, the first The resource authorization of the site server is generated, and the resource authorization response is sent to the first site server, which is specifically: after the requested user allows authorization, the second site server generates a pair according to the authorization confirmation information. a resource authorization response of the first site server, the resource authorization response includes an authorization token, a resource sharing URL, an initial serial number, and sending a resource authorization response to the first site server by using the callback URL; Transmitting, by the first site server, a resource acquisition request that carries the authorization token, and after verifying the authorization token, sending the shared resource of the requested user to the first site server, so as to enable the The first site server sends the shared resource to the requesting user.

In a third aspect, the present invention provides a site server, where the site server includes: a receiving unit, configured to receive a resource processing request sent by a requesting user of a first site server, where the resource processing request carries a second site And the first processing unit is configured to receive the resource processing request from the receiving unit, And generating, by the resource processing request, the resource authorization request, and sending the resource authorization request to the second site server; and the second processing unit is configured to: after the requested user allows authorization, receive the The resource authorization response sent by the second site server, and the resource processing is performed according to the resource authorization response.

With reference to the first possible implementation manner of the third aspect, in a second possible implementation manner, the resource authorization response includes an authorization token, a resource sharing URL, and an initial serial number, where the second processing unit is further configured to: Receiving, by the second site server, a resource authorization response sent by the callback URL, and sending the shared resource of the requesting user to the second site server by using the resource sharing URL in the resource authorization response, to And causing the requested user to acquire the shared resource from the second site server and share the shared resource.

In a third possible implementation, the resource processing request is a resource sharing request, where the resource sharing request further carries a shared resource name of the requested user, and the resource authorization request Carrying an initial serial number, the shared resource information, an account of the requested user, a callback URL, and an identity password of the first site server.

With the third possible implementation of the third aspect, in a fourth possible implementation, the resource authorization response includes an authorization token, a resource sharing URL, an initial serial number, and the receiving the second site server Sending a resource authorization response, the second processing unit is further configured to receive a resource authorization response sent by the second site server by using the callback URL, and when receiving the resource acquisition request of the requesting user, Sending, by the resource sharing URL in the resource authorization response, a resource acquisition request carrying the authorization token to the second site server, and receiving a resource acquisition response sent by the second site server, and acquiring the resource A response is sent to the requesting user to cause the requesting user to acquire the shared resource of the requested user.

In a fourth aspect, the present invention provides a site server, where the site server includes: a receiving unit, configured to receive a resource authorization request sent by a first site server, where the resource authorization request is received by the first site server according to After the resource processing request sent by the requesting user of the first site server, the authorization request of the requested user for the second site server generated according to the resource processing request; the sending unit, configured to use the first After the site server performs the authentication, the resource authorization request is sent to the requested user; the processing unit is configured to receive the authorization confirmation information sent by the requesting user, and generate, according to the authorization confirmation information, the first site. Responding to the resource authorization of the server, and sending the resource authorization response to the first site server, where the first site server performs resource processing according to the resource authorization response.

With reference to the first possible implementation manner of the fourth aspect, in a second possible implementation manner, the authorization confirmation information is authorized for the requesting user, and the processing unit is further configured to: when the requested user allows After the authorization, the second site server generates a resource authorization response to the first site server according to the authorization confirmation information, where the resource authorization response includes an authorization token, a resource sharing URL, an initial serial number, and Sending a resource authorization response to the first site server; and receiving, by the first site server, the shared resource of the requesting user sent by the resource sharing URL in the resource authorization response, so that the The requested user obtains the shared resource and shares the shared resource. In a third possible implementation manner, the resource processing request is a resource sharing request, where the resource sharing request further carries a shared resource name of the requested user, where the resource authorization request carries a unique transaction ID and a The shared resource information, the account number of the requested user, the callback URL, and the identity password of the first site server.

In conjunction with the third possible implementation of the first aspect, in a fourth possible implementation, the authorization confirmation information is authorized for the requesting user, and the processing unit is further configured to: when the requested user allows After the authorization, the second site server generates a resource authorization response to the first site server according to the authorization confirmation information, where the resource authorization response includes an authorization token, a resource sharing URL, an initial serial number, and Transmitting a URL to the first site server to send a resource authorization response; and, after receiving the resource acquisition request that is sent by the first site server and carrying the authorization token, and verifying the authorization token, The first site server returns a shared resource of the requested user, so that the first site server sends the shared resource to the requesting user.

By applying the resource processing method and the site server disclosed by the present invention, the first site server receives the resource processing request sent by the requesting user, generates a resource authorization request according to the resource processing request, and sends the resource authorization request to the second site server, when After the second site server authenticates the first site server, the resource authorization request is sent to the requested user. When the requesting user agrees to the authorization, the second site server receives the authorization confirmation information sent by the requesting user, and generates the authorization confirmation information according to the authorization. Responding to the resource authorization of the first site server, and sending the resource authorization response to the first site server. After receiving the resource authorization response sent by the second site server, the first site server performs resource processing according to the resource authorization response, thereby implementing Resource processing between different site servers, and can be widely used for sharing and sharing resources such as cross-site network disks, microblogs, SNS contacts, conferences/schedules, and the like. DRAWINGS

In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the embodiments or the description of the prior art will be briefly described below. Obviously, the drawings in the following description are only It is a certain embodiment of the present invention, and other drawings can be obtained from those skilled in the art without any inventive labor.

FIG. 1 is a flowchart of a resource processing method according to Embodiment 1 of the present invention;

2 is a flowchart of a resource processing method according to Embodiment 2 of the present invention; 3 is a schematic diagram of a resource processing method according to Embodiment 3 of the present invention;

4 is a schematic diagram of a resource processing method according to Embodiment 4 of the present invention;

5 is a schematic diagram of a site server according to Embodiment 5 of the present invention;

6 is a schematic diagram of a site server according to Embodiment 6 of the present invention;

7 is a schematic diagram of a site server according to Embodiment 7 of the present invention;

FIG. 8 is a schematic diagram of a site server according to Embodiment 8 of the present invention. detailed description

The technical solutions in the embodiments of the present invention are clearly and completely described in the following with reference to the accompanying drawings in the embodiments of the present invention. It is a partial embodiment of the invention, and not all of the embodiments. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.

The present invention discloses a resource processing method and a site server. The first site server receives a resource processing request sent by a requesting user, the resource processing request includes a resource sharing request and a resource sharing request, and generates a resource authorization request according to the resource processing request, and Sending the resource authorization request to the second site server, and after the second site server authenticates the first site server, sending the resource authorization request to the requested user, and after requesting the user to approve the authorization, the second site server receives the request. And the authorization confirmation information sent by the user, and generating a resource authorization response to the first site server according to the authorization confirmation information, and sending the resource authorization response to the first site server, where the first site server receives the resource authorization response sent by the second site server Resource processing according to the resource authorization response, the resource processing includes resource sharing and resource sharing, thereby implementing resource processing between different site servers, including but not limited to: sounds that can be stored in the computer: Video, pictures, text and various forms of documents. The method of the embodiment of the present invention can be widely applied to sharing and sharing resources of a cross-site network disk, a microblog, an SNS contact, a conference/schedule, and the like, and an authorization method between the second site server and the requested user, The two-site server can select its authorization mode according to the communication mode between itself and the requested user. The first site server and the second site server in the embodiments of the present invention refer to servers that belong to different owners or are managed by different owners, and the server includes one or more resource servers and/or portal servers. The different site servers typically have different domain names or network identities.

FIG. 1 is a flowchart of a resource processing method according to Embodiment 1 of the present invention. As shown in the figure, this is The example specifically includes the following steps:

Step 110: The first site server receives a resource processing request of the requesting user of the first site server. The received resource processing request carries the address of the second site server and the account of the requested user of the second site server. The first site server is the site server where the requesting user is located, and the second site server is the site server where the requested user is located.

Specifically, the requesting user A of the first site server logs in to the first site server and initiates a resource processing request to the requested user B of the second site server. The resource processing request includes a resource sharing request or a resource sharing request. In this embodiment, the requesting user A of the first site server is simply referred to as user A, and the requested user B of the second site server is referred to as user B. The other embodiments are the same, and are not described again.

When the user needs to send a resource sharing request to User B, User A selects its resource on the first site server and shares the resource with User B who has an account on the second site server. At this time, User A only needs to know the account of User B and the address of the second site server where User B is located. For example, the information of the user B that the user A knows is: account_of_b@www.sitey.com, and the first site server determines, according to the information, the object of the resource sharing, that is, the account of the user B is account_of-b, and the user B is located. The address of the second site server is www.sitey.com.

When the user needs to send a resource sharing request to user B, user A selects the resource shared by user B on the second site server. At this time, in addition to knowing the account of the user B and the address of the second site server where the user B is located, the user A must also know the resource name of the sharable resource, and the user B may disclose the user B to the user A in multiple channels. The name of the sharable resource. For example, user B can send the shareable resource path to user A in the email, microblog, and instant chat tool, where the second site server provides the shared resource path mode provided by user B as follows:

Account— of — b@www. sitey.com/networkdisk/sharedPhoto. From the shared resource path, it is also determined that the account of user B is account-of-b, and the address of the second-site server where user B is located is www.sitey.com.

Step 120: The first site server generates a resource authorization request according to the resource processing request, and sends the resource authorization request to the second site server, where the first site server sends the resource to the second site server according to the address of the second site server. Authorization request. Specifically, when the resource processing request of the user A is a resource sharing request, the first site server where the user A is located sends a resource authorization request to the second site server according to the address of the second site server that is carried by the resource sharing request, and the resource is requested. The authorization request carries the initial serial number, shared resource information, user B's account number, callback Uniform Resource Locator (URL), and the identity code of the first site server. The sharing resource information includes one or more of the following information: sharing a resource name, sharing a resource content size, sharing a resource type, and sharing a resource format.

In addition, when the resource processing request of the user A is a resource sharing request, the resource sharing request carries the shared resource information of the user B in addition to the address of the second site server and the account of the user B, so the user A The first site server sends a resource authorization request to the second site server according to the address of the second site server that is carried by the resource sharing request, and the resource authorization request carries the initial serial number, the shared resource name of the user B, and the user B. Account number, callback URL, and identity password for the first site server. The shared resource information includes one or more of the following information: a shared resource name, a shared resource content size, a shared resource type, and a shared resource format. In addition, the initial serial number is a serial number that uniquely identifies the current resource authorization request, and may also be referred to as a unique transaction ID.

Step 130: After the user B permits the authorization, the first site server receives the resource authorization response sent by the second site server, and performs resource processing according to the resource authorization response.

Specifically, for sharing, the resource authorization response of the second site server returning to the first site server includes an authorization token, a resource sharing URL, and an initial serial number, when the first site server receives the second site server and sends the message through the callback URL. After the resource authorization response, the user A's shared resource is sent to the second site server through the resource sharing URL carried in the resource authorization response, so that the user B obtains the user A's shared resource from the second site server and shares the shared resource.

Similarly, for sharing, the resource authorization response of the second site server returning to the first site server includes an authorization token, a resource sharing URL, and an initial serial number, when the first site server receives the second site server and sends the message through the callback URL. When the resource authorization response is received, and the resource acquisition request sent by the user A is received, the resource sharing request carrying the authorization token is sent to the second site server by using the resource sharing URL carried in the resource authorization response; After the card verification is passed, the first site server receives the resource acquisition response sent by the second site server, and sends the resource acquisition response to the user A, so that the user A obtains the sharing of the user B. Resources.

Therefore, the resource processing method provided by the embodiment of the present invention, the first site server receives a resource processing request sent by the requesting user, the resource processing request includes a resource sharing request and a resource sharing request, and generates a resource authorization request according to the resource processing request, and The resource authorization request is sent to the second site server. After the second site server authenticates the first site server, the resource authorization request is sent to the requested user, and when the requested user agrees to authorize, the second site server sends the second site server. After the resource authorization response, the resource processing is performed according to the resource authorization response, and the resource processing includes resource sharing and resource sharing, thereby realizing resource processing between different site servers.

FIG. 2 is a flowchart of a resource processing method according to Embodiment 2 of the present invention. As shown in the figure, the embodiment specifically includes the following steps:

Step 210: The second site server receives the resource authorization request sent by the first site server. The resource authorization request is an authorization request of the requested user of the second site server generated according to the resource processing request after the first site server receives the resource processing request sent by the user of the first site server. Here, the first site server is the site server where the requesting user is located, and the second site server is the site server where the requested user is located.

Step 220: After the second site server authenticates the first site server, send the received resource authorization request to the requested user. The second site server may authenticate the first site server according to the identity code of the first site server carried in the resource authorization request.

Specifically, the second site server sends the received resource authorization request to the user B according to the registered user account of the requested user, that is, the user B on the own site server. There are many ways to send it, than the mouth:

If the user B is registered with the email, the resource authorization request is sent by means of email; if the user B is registered with the mobile phone number, the resource authorization request is sent by sending the short message or the multimedia message;

If the user B is registered as a live chat server, the resource authorization request is sent by sending a system message;

If the user B is registered with the BBS site server, the microblog server, etc., the resource authorization request is sent in the manner of sending the message in the station.

Step 230, the second site server receives the authorization confirmation information sent by the requesting user, according to the The authorization confirmation information generates a resource authorization response to the first site server, and sends the resource authorization response to the first site server, where the first site server performs resource processing according to the resource authorization response.

In the above step 210, the resource processing request sent by the requesting user of the first site server is divided into two types: a resource sharing request and a resource sharing request. The resource processing method provided by the embodiment of the present invention is specifically:

(1) When the resource processing request sent by the requesting user of the first site server is a resource sharing request, the first site server generates a resource authorization request for the requested user of the second site server according to the resource sharing request, which carries the unique Transaction ID, shared resource information, the account of the requested user, the callback URL, and the identity password of the first site server.

After receiving the resource authorization request, the second site server sends the resource authorization request to the requested user after authenticating the first site server according to the identity password of the first site server carried in the resource authorization request;

Receiving the authorization confirmation information sent by the requesting user, the authorization confirmation information indicating that the requesting user has allowed the authorization, and after the requested user permits the authorization, the second site server generates a resource authorization response to the first site server according to the authorization confirmation information, the resource authorization The response includes an authorization token, a resource sharing URL, an initial serial number, and a resource authorization response is sent to the first site server via a callback URL.

Receiving, by the first site server, the shared resource of the request sent by the resource sharing URL in the resource authorization response, so that the requested user obtains the shared resource and shares the same.

(2) when the resource processing request sent by the requesting user of the first site server is a resource sharing request, the first site server generates a resource authorization request for the requested user of the second site server according to the resource sharing request, which carries the unique a transaction ID, the shared resource information, an account of the requested user, a callback URL, and an identity password of the first site server.

Receiving the authorization confirmation information sent by the requesting user, the authorization confirmation information indicating that the requesting user has allowed the authorization, and after the requested user allows the authorization, the second site server generates a resource authorization response to the first site server according to the authorization confirmation information, The resource authorization response includes an authorization token, The resource share URL, the initial serial number, and the resource 4 authorized response is sent to the first site server through the callback URL.

After receiving the resource acquisition request that is sent by the first site server and carrying the authorization token, and verifying the authorization token, sending the shared resource of the requested user to the first site server, so that the first site server sends the shared resource. The requesting user is given, thereby requesting the user to obtain the shared resources of the requested user.

Therefore, in the resource processing method provided by the embodiment of the present invention, the second site server receives the resource authorization request sent by the first site server, and after the second site server authenticates the first site server, sends the resource authorization request to the requested request. Receiving, by the user, the authorization confirmation information sent by the requested user, and generating a resource authorization response to the first site server according to the authorization confirmation information, and sending the resource authorization response to the first site server, where the first site server is configured according to the The resource authorization response performs resource processing, and the resource processing includes resource sharing or resource sharing, thereby realizing resource processing between different site servers.

FIG. 3 is a schematic diagram of a resource processing method according to Embodiment 3 of the present invention. This embodiment is a cross-site resource sharing between users. It is assumed that the requesting user Bob and the requested user Alice have accounts on the network disk server X (ie, the first site server) and the network disk server Y (ie, the second site server), respectively, and the account names are Bob and Alice, respectively. Bob selects some of the contents of his network disk and shares it with Alice. After Alice agrees to authorize, Bob transfers the contents of the network disk to Alice's network disk. As shown in the figure, the embodiment specifically includes the following steps:

Step 310: Request the user Bob to send a resource processing request to the first site server. among them,

After Bob uses the terminal device to log in to the network disk server X, he needs to select some of the network disk contents to share with Alice, and the sharing object is alice@www.sitey.com.

Step 320: The network disk server X parses the shared object of the Bob, constructs a resource authorization request sent to the network disk server Y, and sends the resource authorization request to the network disk server. The resource authorization request includes: an initial serial number (transld), a shared resource name, a shared user account (alice), a callback URL, and an identity password (password) of the network disk server X. In addition, for transmission considerations, information such as the size, type, format, and the like of the shared resource content may be added.

Step 330, the network disk server Y sends Alice a request authorization email to Alice registered mailbox, for example, alice(g).exa. mplemail.com, and sends a consent authorization link in the cow, when Alice clicks the link, then Triggered to the network disk server Y, indicating that Alice agreed to the authorization. In this embodiment The request authorization process is completed in the form of sending an email. However, the request authorization process is not limited to mail, but can also be completed in the form of short messages, in-site notifications, and the like.

Step 340, when Alice logs in to her mailbox, browses the request authorization email, selects consent or does not agree to the authorization; if Alice agrees to authorize, click the consent link to trigger to the network disk server Y;

Step 350: The network disk server Y generates a resource authorization response for the network disk server X. The resource authorization response includes an authorization token (Access Token), a resource sharing URL, an initial serial number, and the resource authorization response is returned to the network disk server X. . The authorization token also includes its validity period.

Step 360: The network disk server X uploads the content shared by the Bob to the network disk server Y, and carries the authorization token in step 350.

Step 370, when Alice logs in to the network disk to serve its Y, it can browse and download the content shared by Bob.

FIG. 4 is a schematic diagram of a resource processing method according to Embodiment 4 of the present invention. This embodiment is a cross-site resource sharing between users. It is assumed that the requesting user Bob and the requested user Alice have accounts on the network disk server X (ie, the first site server) and the network disk server Y (ie, the second site server), respectively, and the account names are bob and alice, respectively. Bob knows Alice's shareable resource name: alice@www.sitey.com/networkdisk/sharedPhotos. Bob requests Alice to share resources on the network server. The network disk server X requests the network disk server Y to authorize, Y requests the Alice authorization by means of a message, for example, an email (email), a short message, a station notification, a system message, etc., and when Alice agrees to authorize, Alice's network disk The resource sharing path, together with the authorization token (Access Token), is called back to the network disk server X. Finally, Bob can browse Alice's shared resources through the network disk server X. As shown in the figure, the embodiment specifically includes the following steps:

Step 410: Bob initiates a resource sharing request after logging in to the network disk server X by using the terminal device.

Alice's shared resources on the network disk server Y, for example,

Y's resource authorization request, and the resource authorization request is sent to the network disk server. The resource authorization request includes: an initial serial number (transld), a shared resource name (/networkdisk/sharedPhotos), a shared user account (alice), a callback URL, and an identity password (password) of the network disk server X. In addition, for transmission considerations, information such as the size, type, format, and the like of the shared resource content may be added; Step 430: The network disk server sends Alice a request authorization email to Alice's registered email address, for example, alice@examplemail.como and sends a consent authorization link in the email. When Alice clicks the link, it triggers the network disk server Y, indicating that Alice agrees. Authorized. In this embodiment, the request authorization process is completed in the form of sending an email. However, the request authorization process is not limited to mail, but can also be completed in the form of short messages, in-site notifications, and the like.

Step 440, after Alice logs in to his mailbox, browses the request authorization email, selects consent or does not agree to the authorization;

Step 450, Alice agrees to authorize, clicks the consent link, triggers to the network disk server Y;

Step 460: The network disk server Y generates a resource authorization response for the network disk server X. The resource authorization response includes an authorization token (Access Token), a resource sharing URL, an initial serial number, and the resource authorization response is returned to the network disk server X. . The authorization token also includes its validity period.

In step 470, Bob queries the network disk server X for the shared resource, and X lists the shared resource list that has been authorized.

Step 480: When Bob browses the authorized shared resource, the network disk server X acquires the shared resource from the resource sharing URL provided by the network disk server Y, and carries an access token (Access Token). The network disk server Y needs to verify the validity of the Access Token carried by the network disk server X. If it passes, it returns the shared resource to the network disk server X.

FIG. 5 is a schematic diagram of a site server according to Embodiment 5 of the present invention. The site server is a site server where the requesting user is located, and is defined as a first site server for performing the resource processing methods provided in Embodiments 1 to 4 of the present invention. As shown in the figure, the embodiment of the present invention specifically includes: a receiving unit 51, a first processing unit 52, and a second processing unit 53.

The receiving unit 51 is configured to receive a resource processing request sent by the requesting user of the first site server, where the resource processing request carries an address of the second site server and an account of the requested user of the second site server, and the The resource processing request is transmitted to the first processing unit 52; the first processing unit 52 is configured to receive the resource processing request from the receiving unit, generate the resource authorization request according to the resource processing request, and authorize the resource Sending a request to the second site server; the second processing unit 53 is configured to: after the requested user allows authorization, receive a resource authorization response sent by the second site server, and perform resource processing according to the resource authorization response. .

In an embodiment, the resource processing request is a resource sharing request, and the resource authorization is requested. The request carries a unique transaction ID, shared resource information, an account of the requested user, a callback Uniform Resource Locator URL, and an identity password of the first site server. The resource authorization response includes an authorization token, a resource sharing URL, and an initial serial number. The second processing unit 53 is further configured to receive a resource authorization response sent by the second site server by using the callback URL, and authorize the resource by using the resource. Transmitting, by the resource sharing URL in the response, the shared resource of the requesting user to the second site server, so that the requested user obtains the shared resource from the second site server and shares the shared resource .

In another embodiment, the resource processing request is a resource sharing request, and the resource sharing request further carries a shared resource name of the requested user, where the resource authorization request carries a unique transaction ID and the shared resource information. The account of the requested user, the callback URL, and the identity password of the first site server. The resource authorization response includes an authorization token, a resource sharing URL, and an initial serial number, and the receiving the resource authorization response sent by the second site server, where the second processing unit 53 is further configured to receive the second site server. The resource authorization response sent by the callback URL, and when the resource acquisition request of the requesting user is received, the resource sharing URL in the resource authorization response is sent to the second site server to carry the authorization order. a resource acquisition request of the card, and receiving a resource acquisition response sent by the second site server, and sending the resource acquisition response to the requesting user, so that the requesting user acquires the shared resource of the requested user.

Therefore, the site server provided by the embodiment of the present invention receives the resource processing request sent by the requesting user, the resource processing request includes a resource sharing request and a resource sharing request, and generates a resource authorization request according to the resource processing request, and sends the resource authorization request. Giving the second site server, after the second site server authenticates the first site server, sending a resource authorization request to the requested user, and after receiving the resource authorization response sent by the second site server, after requesting the user to approve the authorization, And performing resource processing according to the resource authorization response, the resource processing includes resource sharing and resource sharing, thereby realizing resource processing between different site servers, and can be widely applied to cross-site network disks, microblogs, SNS contacts, conferences/ Sharing and sharing of resources such as schedules.

FIG. 6 is a schematic diagram of a site server according to Embodiment 6 of the present invention. The site server is a site server where the requested user is located, and is defined as a second site server, and is used to perform the resource processing method provided in Embodiments 1 to 4 of the present invention. As shown in the figure, the embodiment of the present invention specifically includes: a receiving unit 61, a sending unit 62, and a processing unit 63. The receiving unit 61 is configured to receive a resource authorization request sent by the first site server, where the resource authorization request is after the first site server receives the resource processing request sent by the user of the first site server, according to the The resource processing request generates an authorization request for the requested user of the second site server; the sending unit 62 is configured to send the resource authorization request to the requested user after authenticating the first site server The processing unit 63 is configured to receive the authorization confirmation information sent by the requesting user, generate a resource authorization response to the first site server according to the authorization confirmation information, and send the resource authorization response to the first site. And a server, configured to perform resource processing according to the resource authorization response by the first site server. The sending unit 62 is further configured to send the resource authorization request to the requested user after performing identity verification on the first site server according to the identity password of the first site server.

In an embodiment, the resource processing request is a resource sharing request, where the resource authorization request carries a unique transaction ID, shared resource information, an account of the requested user, a callback uniform resource locator URL, and the first The identity password of the site server. The authorization confirmation information is that the requesting user allows the authorization, and the processing unit 63 is further configured to: after the requested user allows the authorization, the second site server generates, according to the authorization confirmation information, the first site. a resource authorization response of the server, the resource authorization response including an authorization token, a resource sharing URL, an initial serial number, and sending a resource authorization response to the first site server by using the callback URL; and receiving the first site And the server shares the shared resource of the requesting user sent by the resource sharing URL in the resource authorization response, so that the requested user acquires the shared resource and shares the shared resource.

In another embodiment, the resource processing request is a resource sharing request, and the resource sharing request further carries a shared resource name of the requested user, where the resource authorization request carries a unique transaction ID and the shared resource information. The account of the requested user, the callback URL, and the identity password of the first site server. The authorization confirmation information is that the requesting user allows the authorization, and the processing unit 63 is further configured to: after the requested user allows the authorization, the second site server generates, according to the authorization confirmation information, the first site. a resource authorization response of the server, the resource authorization response including an authorization token, a resource sharing URL, an initial serial number, and sending a resource authorization response to the first site server by using the callback URL; and, when receiving the first a resource acquisition request sent by the site server carrying the authorization token, and performing the authorization token After the verification, the shared resource of the requested user is sent to the first site server, so that the first site server sends the shared resource to the requesting user.

Therefore, the second site server provided by the embodiment of the present invention receives the resource authorization request sent by the first site server, and sends the resource authorization request to the requested user after the second site server authenticates the first site server. And receiving the authorization confirmation information sent by the requested user, and generating a resource authorization response to the first site server according to the authorization confirmation information, and sending the resource authorization response to the first site server, where the first site server is authorized according to the resource In response to resource processing, the resource processing includes resource sharing or resource sharing, thereby realizing resource processing between different site servers, and can be widely applied to sharing resources of cross-site network disks, microblogs, SNS contacts, conferences/schedules, and the like. And sharing, while expanding the authorization method between the second site server and the requested user, the second site server can select its authorization mode according to the communication mode between itself and the requested user.

FIG. 7 is a schematic diagram of a site server according to Embodiment 7 of the present invention. The site server is a site server where the requesting user is located, and is defined as a first site server for performing the resource processing methods provided in Embodiments 1 to 4 of the present invention. As shown, the first site server provided in this embodiment includes: a site server port 71, a processor 72, and a memory 77. The site server bus 74 is used to connect the site server port 71, the processor 72, and the memory 77.

The site server port 71 can be connected to the requesting user and the second site server where the requested user is located, respectively.

The memory 77 can be a persistent storage such as a hard disk drive and a flash memory having a software module and a device driver. The software modules are capable of executing the various functional modules of the above described method of the present invention; the device drivers can be network and interface drivers.

At startup, these software components are loaded into memory 77 and then accessed by processor 72 and executed as shown in Figures 1-4.

FIG. 8 is a schematic diagram of a site server according to Embodiment 8 of the present invention. The site server is a site server where the requested user is located, and is defined as a second site server for performing the resource processing methods provided by the first to fourth embodiments of the present invention. As shown in the figure, the first site server provided in this embodiment includes: a site server port 81, a processor 82, and a memory 88. The site server bus 84 is used to connect to the site server port 81, processor 82, and memory 88.

The site server port 81 can be respectively associated with the requesting user and the requested user. The site server is connected.

Memory 88 can be a persistent storage, such as a hard drive and flash memory, with software modules and device drivers in memory 88. The software modules are capable of executing the various functional modules of the above described method of the present invention; the device drivers can be network and interface drivers.

At startup, these software components are loaded into memory 88 and then accessed by processor 82 and executed as shown in Figures 1-4. A person skilled in the art should further appreciate that the elements and algorithm steps of the various examples described in connection with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of both, in order to clearly illustrate hardware and software. Interchangeability, the composition and steps of the various examples have been generally described in terms of function in the above description. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the solution. A person skilled in the art can use different methods for implementing the described functions for each particular application, but such implementation should not be considered to be beyond the scope of the present invention.

The steps of a method or algorithm described in connection with the embodiments disclosed herein may be implemented in hardware, a software module executed by a processor, or a combination of both. The software module can be placed in random access memory (RAM), memory, read only memory (ROM), electrically programmable ROM, electrically erasable programmable ROM, registers, hard disk, removable disk, CD-ROM, or technical field. Any other form of storage medium known.

The above described embodiments of the present invention are further described in detail, and the embodiments of the present invention are intended to be illustrative only. The scope of the protection, any modifications, equivalents, improvements, etc., made within the spirit and scope of the invention are intended to be included within the scope of the invention.

Claims

Rights request

1. A resource processing method, characterized in that the method includes:

The first site server receives a resource processing request sent by the requesting user of the first site server, where the resource processing request carries the address of the second site server and the account number of the requested user of the second site server;

Generate the resource authorization request according to the resource processing request, and send the resource authorization request to the second site server;

After the requested user allows authorization, the resource authorization response sent by the second site server is received, and resource processing is performed according to the resource authorization response.

2. The resource processing method according to claim 1, characterized in that, the resource processing request is a resource sharing request, and the resource authorization request carries an initial serial number, shared resource information, the account number of the requested user, Call back the Uniform Resource Locator URL and the identity password of the first site server.

3. The resource processing method according to claim 2, wherein the resource authorization response includes an authorization token, a resource sharing URL, and an initial serial number, and the receiving the resource authorization response sent by the second site server, And performing resource processing according to the resource authorization response is specifically: the first site server receives the resource authorization response sent by the second site server through the callback URL, and shares the resource through the resource authorization response The URL sends the shared resources of the requesting user to the second site server, so that the requested user obtains the shared resources from the second site server and shares the shared resources.

4. The resource processing method according to claim 1, wherein the resource processing request is a resource sharing request, and the resource sharing request also carries the shared resources of the requested user. The source name, the resource authorization request carries the initial serial number, the shared resource information, the account number of the requested user, the callback URL and the identity password of the first site server.

5. The resource processing method according to claim 4, wherein the resource authorization response includes an authorization token, a resource sharing URL, and an initial serial number, and the receiving the resource authorization response sent by the second site server, And performing resource processing based on the resource authorization response is specifically: when the first site server receives the resource authorization response sent by the second site server through the callback URL, and receives a resource acquisition request from the requesting user , sending a resource acquisition request carrying the authorization token to the second site server through the resource sharing URL in the resource authorization response;

Receive the shared resources of the requested user sent by the second site server, and send the shared resources to the requesting user, so that the requesting user obtains the shared resources.

6. A resource processing method, characterized in that the method includes:

The second site server receives the resource authorization request sent by the first site server. The resource authorization request is the resource processing request sent by the first site server based on the request of the first site server. processing an authorization request generated by the request for the requested user of the second site server;

After the second site server authenticates the first site server, sends the resource authorization request to the requested user;

Receive the authorization confirmation information sent by the requesting user, generate a resource authorization response to the first site server based on the authorization confirmation information, and send the resource authorization response to the first site server for the purpose of The first site server performs resource processing according to the resource authorization response.

7. The resource processing method according to claim 6, wherein the resource processing request is a resource sharing request, and the resource authorization request carries a unique transaction ID, shared resource information, the account number of the requested user, Call back the Uniform Resource Locator URL and the identity password of the first site server.

8. The resource processing method according to claim 7, wherein the authorization confirmation information is that the requesting user allows authorization, and the resource authorization response to the first site server is generated based on the authorization confirmation information. , and send the resource authorization response to the first site server as follows:

When the requested user allows authorization, the second site server generates a resource authorization response to the first site server based on the authorization confirmation information. The resource authorization response includes an authorization token, a resource sharing URL, an initial Serial number, and send a resource authorization response to the first site server through the callback URL;

Receive the shared resources of the requesting user sent by the first site server through the resource sharing URL in the resource authorization response, so that the requested user obtains the shared resources and shares the shared resources.

9. The resource processing method according to claim 6, characterized in that: the resource processing request is a resource sharing request, the resource sharing request also carries the shared resource name of the requested user, and the resource authorization request It carries the initial serial number, the shared resource information, the account number of the requested user, the callback URL and the identity password of the first site server.

10. The resource processing method according to claim 9, characterized in that: the authorization confirmation information is that the requesting user allows authorization, and the resource authorization response to the first site server is generated based on the authorization confirmation information. , and send the resource authorization response to the first site server The server should be specifically:

When receiving the resource acquisition request carrying the authorization token sent by the first site server and verifying the authorization token, sending the shared resources of the requested user to the first site server, So that the first site server sends the shared resource to the requesting user.

11. The resource processing method according to any one of claims 7 to 10, characterized in that the identity verification performed by the second site server on the first site server is specifically:

The second site server performs identity verification on the first site server based on the identity password of the first site server.

12. A site server, characterized in that, the site server includes:

A receiving unit configured to receive a resource processing request sent by a requesting user of the first site server, where the resource processing request carries the address of the second site server and the account number of the requested user of the second site server, and transfer the request to the resource processing request. The resource processing request is transmitted to the first processing unit; the first processing unit is configured to receive the resource processing request from the receiving unit, generate the resource authorization request according to the resource processing request, and send the resource authorization request Sent to the second site server;

The second processing unit is configured to receive the resource authorization response sent by the second site server after the requested user allows authorization, and perform resource processing according to the resource authorization response.

1 3. The site server according to claim 12, characterized in that, the resource processing request is a resource sharing request, and the resource authorization request carries an initial serial number, shared resource information, the account number of the requested user, Call back the Uniform Resource Locator URL and the identity password of the first site server.

14. The site server according to claim 13, characterized in that, the resource authorization response includes an authorization token, a resource sharing URL, and an initial serial number, and the second processing unit is also used to receive the second site The server sends the resource authorization response through the callback URL, and sends the shared resources of the requesting user to the second site server through the resource sharing URL in the resource authorization response, so that the requested user Obtain the shared resources from the second site server and share the shared resources.

15. The site server according to claim 12, wherein the resource processing request is a resource sharing request, the resource sharing request also carries the shared resource name of the requested user, and the resource authorization request carries There is an initial serial number, the shared resource information, the account of the requested user, the callback URL and the identity password of the first site server.

16. The site server according to claim 15, wherein the resource authorization response includes an authorization token, a resource sharing URL, and an initial serial number, and receiving the resource authorization response sent by the second site server, The second processing unit is also configured to receive a resource authorization response sent by the second site server through the callback URL, and when receiving a resource acquisition request from the requesting user, pass the resource authorization response in the resource authorization response. The resource sharing URL sends a resource acquisition request carrying the authorization token to the second site server, receives a resource acquisition response sent by the second site server, and sends the resource acquisition response to the requesting user. , so that the requesting user obtains the shared resources of the requested user.

17. A site server, characterized in that, the site server includes: a receiving unit, configured to receive a resource authorization request sent by the first site server, where the resource authorization request is received by the first site server. After the resource processing request sent by the requesting user of the first site server, an authorization request for the requested user of the second site server is generated based on the resource processing request;

A sending unit, configured to send the resource authorization request to the requested user after authenticating the first site server;

A processing unit configured to receive authorization confirmation information sent by the requesting user, generate a resource authorization response to the first site server based on the authorization confirmation information, and send the resource authorization response to the first site server. , used by the first site server to perform resource processing according to the resource authorization response.

18. The site server according to claim 17, characterized in that, the resource processing request is a resource sharing request, and the resource authorization request carries an initial serial number, shared resource information, the account number of the requested user, and a callback Uniform Resource Locator URL and the identity password of the first site server.

19. The site server according to claim 18, wherein the authorization confirmation information indicates that the requesting user allows authorization, and the processing unit is also configured to: when the requested user allows authorization, the second The site server generates a resource authorization response to the first site server based on the authorization confirmation information. The resource authorization response includes an authorization token, a resource sharing URL, and an initial serial number, and sends a request to the first site server through the callback URL. The site server sends a resource authorization response; and, receives the shared resource of the requesting user sent by the first site server through the resource sharing URL in the resource authorization response, so that the requested user obtains the share capital source and share said shared resources.

20. The site server according to claim 17, wherein the resource processing request is a resource sharing request, the resource sharing request also carries the shared resource name of the requested user, and the resource authorization request carries There is a unique transaction ID, the shared resource information, the account of the requested user, the callback URL and the identity password of the first site server.

21. The site server according to claim 20, wherein the authorization confirmation information indicates that the requesting user allows authorization, and the processing unit is also configured to: when the requested user allows authorization, the second The site server generates a resource authorization response to the first site server based on the authorization confirmation information. The resource authorization response includes an authorization token, a resource sharing URL, and an initial serial number, and sends a request to the first site server through the callback URL. The site server sends a resource authorization response; and, after receiving the resource acquisition request carrying the authorization token sent by the first site server and verifying the authorization token, return to the first site server The shared resources of the requested user, so that the first site server sends the shared resources to the requesting user.

22. The site server according to claims 18 to 21, characterized in that, the sending unit is further configured to authenticate the first site server according to the identity password of the first site server, and then send the The resource authorization request is sent to the requested user.