WO2015135331A1

WO2015135331A1 - Authorization method, apparatus and system for authentication

Info

Publication number: WO2015135331A1
Application number: PCT/CN2014/090427
Authority: WO
Inventors: 朱建庭; 郑伟德
Original assignee: 百度在线网络技术（北京）有限公司
Priority date: 2014-03-10
Filing date: 2014-11-06
Publication date: 2015-09-17
Also published as: CN103888451A; CN103888451B

Abstract

The present invention provides an authorization method, device and system for authentication. The authorization method comprises: receiving an authentication request transmitted by a server of a third-party application, the authentication request carrying account information, third-party application information and information of to-be-obtained authority that are input by a user on a login interface provided by the third-party application; parsing the authentication request to obtain a parsing result, interacting with the corresponding application according to the parsing result and a correspondence between pre-stored account information and persistent connection channel information, generating an authorization code, and transmitting the authorization code to the server of the third-party application; and receiving an information obtaining request comprising the authorization code and transmitted by the server of the third-party application, and returning corresponding user information to the server of the third-party application according to the information obtaining request, so as to enable the server of the third-party application to complete an authentication process according to the corresponding user information. The present invention can enable the user login interface to be completely provided by the third-party application, so as to ensure security of the account and data.

Description

Authentication method, device and system

Cross-reference to related applications

This application claims the priority of the Chinese Patent Application No. "201410086413.6" filed on March 10, 2014 by Baidu Online Network Technology (Beijing) Co., Ltd., entitled "Authorization Authorization Method, Apparatus and System".

Technical field

The present invention relates to the field of computer technologies, and in particular, to an authentication method, apparatus, and system for authentication.

Background technique

In order to increase the number of user registrations and logins of their products, thereby accelerating product development, more and more applications or sites are beginning to dock account systems such as Sina Weibo, QQ, Baidu and other open platforms, supporting the use of these platform accounts. Log in to your product.

In order to prevent third-party applications or sites from accessing the user's account password and the user's login session information on the platform side site to ensure the security of the user account and its user data, all open platforms are currently based on an open authorization mechanism (currently The mainstream is based on the OAuth1.0a or OAuth2.0 standard protocol) to provide account login functions for third-party applications or sites. In this open authorization mechanism, when a third-party application or site guides a user to log in using the user account on the platform side, the user is first redirected to a login authorization page provided by the platform, after the user completes the login in the page. The platform side will return the corresponding authorization code to the third-party application, and the third-party application finally obtains the basic information of the currently logged-in user through the authorization code and the unique authentication information of the application on the platform side to complete the entire login process.

Since the user login interface is provided by the platform side of the platform, the display content and style of the login interface are completely limited by the platform side, and the platform side is basically difficult to customize the login interface for all third-party applications or sites. . In most cases, the third-party application or site is very much hope that the style of the login interface that the user sees is completely consistent with the interface style of the application or the site itself, or even the login interface that the user wants to see. The content is completely controllable by itself to ensure and enhance the user experience in the application or site, especially in various online games (including end games, page games, mobile games).

In addition, even if the login interface is provided in the platform side page, the user account is not necessarily secure. For example, due to the Trojan virus in the user's computer, the user is stolen by the Trojan when entering the password on the platform side page, for example, when the third party application When the login authorization page of the platform side is loaded through the webview mode, the third-party application can also obtain the password input by the user. The root cause is because the user needs to enter a login authorization process. A reusable password that is insecure once the password is compromised.

Summary of the invention

The present invention aims to solve at least one of the technical problems in the related art to some extent. To this end, the embodiments of the present invention provide an authorization method, apparatus, and system capable of simultaneously solving account security issues and third-party applications or sites that are fully customizable for the login interface.

The authorization method for authentication according to the embodiment of the present invention includes: receiving an authentication request sent by a server of a third-party application, where the authentication request carries account information, third-party application information, and information to be acquired that the user inputs on the login interface provided by the third-party application. Privilege information; parsing the authentication request, obtaining the parsing result, interacting with the corresponding application APP according to the parsing result and the correspondence between the pre-stored account information and the long connection channel information, generating an authorization code, and transmitting the authorization to the server of the third-party application And the information acquisition request that is sent by the server that receives the third-party application and includes the authorization code, and returns the corresponding user information to the server of the third-party application according to the information acquisition request, so that the server of the third-party application completes the authentication process according to the corresponding user information. .

The authentication authorization method according to the embodiment of the present invention receives an authentication request including account information input by a user on a login interface provided by a third-party application, parses the authentication request, and obtains an authorization code by interacting with the corresponding application, and then According to the authorization code, the user information is returned to the server of the third-party application to complete the process of logging in to the user using the platform party account, so that the user login interface is completely provided by the third-party application or the site, and the user account and data security can be fully ensured. Therefore, multiple forms of login can be implemented, so that the user does not need to register and manage the login accounts of multiple websites, and only through an open platform registration account, it is authorized to access multiple websites, which provides convenience for the user, and Simple to implement.

The authentication device according to the embodiment of the present invention includes: a receiving module, configured to receive an authentication request sent by a server of a third-party application, where the authentication request carries the account information and the third-party application input by the user on the login interface provided by the third-party application. The information and the permission information to be obtained; the processing module is configured to parse the authentication request, obtain the parsing result, and interact with the corresponding application APP according to the parsing result and the correspondence between the pre-stored account information and the long connection channel information to generate an authorization code. And sending an authorization code to the server of the third-party application; and an authorization module, configured to receive an information acquisition request that includes an authorization code sent by the server of the third-party application, and return the corresponding user information to the server of the third-party application according to the information acquisition request, The server of the third-party application is configured to complete the authentication process according to the corresponding user information.

The authentication device according to the embodiment of the present invention receives the authentication request including the account information input by the user on the login interface provided by the third-party application, and the processing module parses the authentication request and performs the corresponding application through the corresponding application. The authorization code is obtained interactively, and then the authorization module returns the user information to the server of the third-party application to complete the process of the user login using the platform party account, so that the user login interface is completely provided by the third-party application or the site, and the user can be fully guaranteed. Account and data security; thus enabling multiple forms of login, making Users do not need to register and manage login accounts of multiple websites. They only need to access multiple websites through an open platform registration account, which provides convenience for users and is simple to implement.

The authentication authorization system according to an embodiment of the present invention includes: a client of a third-party application, a server of a third-party application, an application APP running on the mobile terminal, and a platform-side server.

According to the authentication authorization system of the embodiment of the present invention, multiple forms of login can be implemented through the interaction between the client of the third-party application, the server of the third-party application, the APP running on the mobile terminal, and the platform-side server, so that Users do not need to register and manage login accounts of multiple websites. They only need to access multiple websites through an open platform registration account, which provides convenience for users and is simple to implement.

A storage medium according to an embodiment of the present invention is configured to store an application, and the application is used to execute an authorization method for authentication according to an embodiment of the present invention.

The additional aspects and advantages of the invention will be set forth in part in the description which follows.

DRAWINGS

The above and/or additional aspects and advantages of the present invention will become apparent and readily understood from

1 is a flow chart of an authorization method of authentication according to an embodiment of the present invention;

2 is a signaling flow diagram of an authentication method of authentication according to an embodiment of the present invention;

3 is a schematic structural diagram of an authentication apparatus for authentication according to an embodiment of the present invention;

4 is a schematic structural diagram of an authentication system for authentication according to an embodiment of the present invention.

detailed description

The embodiments of the present invention are described in detail below, and the examples of the embodiments are illustrated in the drawings, wherein the same or similar reference numerals are used to refer to the same or similar elements or elements having the same or similar functions. The embodiments described below with reference to the accompanying drawings are intended to be illustrative of the invention and are not to be construed as limiting. Rather, the invention is to cover all modifications, modifications and equivalents within the spirit and scope of the appended claims.

In the description of the present invention, it is to be understood that the terms "first", "second" and the like are used for descriptive purposes only and are not to be construed as indicating or implying relative importance. In the description of the present invention, it should be noted that the terms "connected" and "connected" are to be understood broadly, and may be, for example, a fixed connection, a detachable connection, or an integral, unless otherwise explicitly defined and defined. Ground connection; it can be mechanical connection or electrical connection; it can be directly connected or indirectly connected through an intermediate medium. The specific meaning of the above terms in the present invention can be understood in a specific case by those skilled in the art. Further, in the description of the present invention, the meaning of "a plurality" is two or more unless otherwise specified.

Any process or method description in the flowcharts or otherwise described herein may be understood to represent a module, segment or portion of code that includes one or more executable instructions for implementing the steps of a particular logical function or process. And the scope of the preferred embodiments of the invention includes additional implementations, in which the functions may be performed in a substantially simultaneous manner or in an opposite order depending on the functions involved, in the order shown or discussed. It will be understood by those skilled in the art to which the embodiments of the present invention pertain.

1 is a flow chart of an authentication method of authentication according to an embodiment of the present invention, which is described from a platform side server, that is, a platform side login system server side.

As shown in FIG. 1, the authorization method of the authentication includes the following steps:

S101. Receive an authentication request sent by a server of a third-party application, where the authentication request carries account information, third-party application information, and permission information to be obtained, which are input by the user on the login interface provided by the third-party application.

In the embodiment of the present invention, when the client of the third-party application chooses to log in using a certain platform party account, such as a Baidu account, the client of the third-party application redirects the user to the login interface provided by the third-party application. The content displayed by this login interface, the style of the interface, etc. are completely controlled by the third-party application, and have nothing to do with the platform.

The user inputs the account information, such as the account name, and triggers the client of the third-party application to send a request for logging in to the Baidu account to the server of the third-party application, where the request carries the account name entered by the user; wherein the account name may be the user Name, mobile phone number, email address, etc.

After receiving the request from the corresponding client, the server of the third-party application assigns the account name and the platform party to the unique identifier and application key of the third-party application and the permission information to be obtained (that is, the third-party application wants the platform party and the user to grant The data access encapsulation is sent to the platform side server in the authentication request to obtain the user's authorization code.

S102: Parsing the authentication request, obtaining the parsing result, and interacting with the corresponding application (APP) according to the parsing result and the correspondence between the pre-stored account information and the long connection channel information, generating an authorization code, and sending the authorization code to the server of the third-party application. Authorization code.

The platform side server parses the authentication request, and obtains the account name, the third-party application information, and the permission information to be obtained. The third-party application information may include the application identifier and the application key of the third-party application.

In this embodiment, before obtaining the long connection channel information according to the account information and the correspondence between the pre-stored account information and the long connection channel information, the method further includes: the platform side server receiving the establishment request of the long connection channel sent by the APP, and The account information provided by the user is added to the APP; and then the account authentication request sent by the APP is received. After the authentication is passed, the account information carried in the account authentication request is used to save the correspondence between the account information and the long connection channel information, that is, the account and the APP are saved. Correspondence of long connection channels maintained by the platform side server.

In this embodiment, the platform side server interacts with the APP, and the process of generating the authorization code may be: obtaining corresponding account information according to the account information, and obtaining a long correspondence according to the account information and the correspondence between the pre-stored account information and the long connection channel information. Connect channel information; send the parsing result to the corresponding application APP according to the long connection channel information, so that the APP Displaying the analysis result and the information to be confirmed to the user; after the user makes a selection according to the analysis result and the to-be-confirmed information, the user returns the user confirmation information to the platform side server, and the platform side server receives the user confirmation information returned by the APP, and when the user confirms the information as the consent information At the time, an authorization code is generated based on the analysis result. Of course, when the user confirms that the information is a rejection information, the platform side server returns an error message to the server of the third party application.

S103. Receive an information acquisition request that includes an authorization code sent by a server of the third-party application, and return a corresponding user information to the server of the third-party application according to the information acquisition request, so that the server of the third-party application completes the authentication process according to the corresponding user information.

The server of the third-party application obtains the basic information of the currently logged-in user, such as the user identifier and the user name, from the platform-side server according to the authorization code, to complete the process of logging in to the application by using the platform-side account.

The authentication authorization method of the embodiment of the present invention receives an authentication request including account information input by a user on a login interface provided by a third-party application, parses the authentication request, and obtains an authorization code by interacting with the corresponding application, and then according to The authorization code returns the user information to the server of the third-party application to complete the process of the user login using the platform party account, so that the user login interface is completely provided by the third-party application or the site, and the user account and data security can be fully ensured; Therefore, multiple forms of login can be implemented, so that the user does not need to register and manage the login accounts of multiple websites, and only through an open platform registration account can access multiple websites after authorization, which provides convenience for the user and realizes simple.

The technical solution of the embodiment of the present invention is described in detail below by taking the signaling flowchart shown in FIG. 2 as an example.

As shown in Figure 2, the authorization process of the authentication includes the following steps:

S201, the APP establishes and maintains a long connection channel with the platform side server.

After the user starts the APP on his mobile device, the APP establishes and maintains a long connection channel with the platform side server in the background. If the long connection channel is interrupted for some reason, the APP will re-establish with the platform side server according to a certain policy. A new long connection channel.

S202. The platform side server adds the account information provided by the user to the APP.

The user adds the user account registered in the platform to the account management module of the APP, the mobile device has certain privacy, and the current mainstream mobile device system is relatively safe (not so many trojan viruses), and The login process is done in the platform's own app, so this process is safe.

S203. The platform side server saves the correspondence between the account and the long connection channel maintained by the APP and the platform side server.

When the platform side server authenticates the account authentication request sent by the APP, if the authentication is passed, the correspondence between the account and the APP and the long connection channel maintained by the platform server is saved.

S204. The client of the third-party application receives the account information input by the user on the login interface provided by the third-party application.

When the user of the third-party application chooses to log in with the Baidu account, the client of the third-party application redirects the user to the login interface provided by the third-party application. The content and interface style of the login interface are completely Three-party application control can have nothing to do with the platform.

S205. The client of the third-party application sends a request for logging in to the Baidu account to the server of the third-party application.

The user enters an account name (which may be a user name, a mobile phone number, a mailbox, etc.) on the login interface, and triggers the client of the third-party application to send a request for logging in to the Baidu account to the server of the third-party application, where the request may carry the account entered by the user. name.

S206. The server of the third-party application sends an authentication request to the platform-side server, where the authentication request carries account information, third-party application information, and permission information to be acquired.

The server of the third-party application sends the account name, the application identifier and the application key of the platform party to the third-party application, and the access operation authority granted by the third-party application to the platform party and the user to the platform server to obtain the user authorization code.

S207. The platform side server authenticates the validity of the third-party application according to the application identifier and the application key of the third-party application. If invalid, returns the corresponding error information, otherwise, the process proceeds to step S208.

S208. The platform side server obtains corresponding user account information according to the account name. If the account number does not exist, the corresponding error information is returned. Otherwise, the process proceeds to step S209.

S209. The platform side server obtains a long connection channel between the platform side server and the APP corresponding to the account information. If the long connection channel does not exist, the corresponding error information is returned. Otherwise, the process proceeds to step S210.

S210: The platform side server sends the user account information, the third-party application information, and the access operation authority information that the third-party application wants to obtain, to the user's APP through the long connection channel.

S211: The APP displays the user account information, the third-party application information, and the access operation authority information that the third-party application wants to obtain to the user in a certain manner, and asks whether the user agrees to log in to the third-party application as an account and grants access to the third-party application. Operation authority, and return the user confirmation information to the platform side server after the user makes a selection.

S212. If the user confirms that the information is the consent information, the authorization code is generated and returned to the server of the third-party application, and if the user confirms that the information is the rejection information, an error message is returned.

If the user chooses to disagree, the platform side server returns a corresponding error message to the server of the third-party application, otherwise, an authorization code is generated according to the user account information, the third-party application information, and the access operation authority information that the third-party application wants to obtain, and The authorization code is returned to the server of the third-party application.

S213. The server of the third-party application obtains basic information or error information of the user from the platform side server by using an authorization code, and completes the authentication process according to the basic information of the user.

If the result of the platform-side server received by the server of the third-party application is an error message, the corresponding error message is returned to the client of the third-party application, and the client prompts and guides the user for the corresponding, otherwise, according to the authorization The code obtains the basic information of the currently logged-in user, such as the user ID and the user name, to complete the process of logging in to the application using the platform party account.

In the authentication authorization method of the embodiment of the present invention, multiple forms of login can be implemented through interaction between the platform side server, the APP, the client of the third-party application, and the server of the third-party application, so that the user does not need to register and manage more. The login account of each website can access multiple websites through authorization through a registered account of a platform, which provides convenience for the user and is simple to implement.

3 is a block diagram showing the structure of an authentication device for authentication, which is located in a platform side server, in accordance with one embodiment of the present invention.

As shown in FIG. 3, the authorization device includes a receiving module 31, a processing module 32, and an authorization module 33.

The receiving module 31 is configured to receive an authentication request sent by a server of a third-party application, where the authentication request carries account information, third-party application information, and permission information to be obtained, which are input by the user on the login interface provided by the third-party application.

In the embodiment of the present invention, when the client of the third-party application chooses to log in using a certain platform party account, such as a Baidu account, the client of the third-party application redirects the user to the login interface provided by the third-party application. The content displayed by this login interface, the style of the interface, etc. are completely controlled by the third-party application, and have nothing to do with the platform. The user inputs the account information, such as the account name, and triggers the client of the third-party application to send a request for logging in to the Baidu account to the server of the third-party application, where the request carries the account name entered by the user; wherein the account name may be the user Name, mobile phone number, email address, etc. After receiving the request from the corresponding client, the server of the third-party application assigns the account name and the platform party to the unique identifier and application key of the third-party application and the permission information to be obtained (that is, the third-party application wants the platform party and the user to grant The data access encapsulation is sent to the platform side server in the authentication request to obtain the user's authorization code.

The processing module 32 is configured to parse the authentication request, obtain the parsing result, and interact with the corresponding application APP according to the parsing result and the correspondence between the pre-stored account information and the long connection channel information, generate an authorization code, and apply to the third party. The server sends an authorization code.

Specifically, the processing module 32 may be configured to: obtain corresponding account information according to the account information in the analysis result, obtain long connection channel information according to the account information and the correspondence between the pre-stored account information and the long connection channel information; and according to the long connection channel information Sending the parsing result to the corresponding application APP, so that the APP displays the parsing result and the to-be-confirmed information to the user; receiving the user confirmation information returned by the APP, and when the user confirms that the information is the consent information, generating an authorization code according to the parsing result. More specifically, the processing module 32 may obtain corresponding account information according to the account information after determining that the third-party application is valid according to the third-party application information. In addition, when the user confirms that the information is the rejection information, the processing module 32 may also return an error message to the server of the third-party application, so that the server of the third-party application returns the error information to the client of the third-party application.

The authorization module 33 is configured to receive an information acquisition request that includes an authorization code sent by a server of the third-party application, and return the corresponding user information to the server of the third-party application according to the information acquisition request, so that the server of the third-party application is based on the corresponding user. The information completes the certification process.

In order to obtain the long connection channel information according to the account information and the corresponding relationship between the account information and the long connection channel information, the authorization device may further include: an adding module 34 and a saving module 35, wherein: the adding module 34 is used in the processing module 32. Before obtaining the long connection channel information according to the account information and the pre-stored account information and the long connection channel information, the request for establishing the long connection channel sent by the APP is received, and the account information provided by the user is added to the APP; the saving module 35 is used for The account authentication request sent by the APP is received, and the correspondence between the account information and the long connection channel information is saved according to the account information carried in the account authentication request.

The implementation authentication process of the authorization device including the receiving module 31, the processing module 32, the authorization module 33, the adding module 34, and the saving module 35 can be referred to FIG. 1 and FIG. 2, and details are not described herein.

The authentication device of the embodiment of the present invention receives the authentication request including the account information input by the user on the login interface provided by the third-party application, and the processing module parses the authentication request and interacts with the corresponding application. Obtain an authorization code, and then return the user information to the server of the third-party application through the authorization module to complete the process of logging in using the platform party account, so that the user login interface is completely provided by the third-party application or the site, and the user account can be fully guaranteed. And data security; thus enabling multiple forms of login, so that users do not need to register and manage login accounts of multiple websites, just through an open platform registration account, authorized to access multiple websites for users It is convenient and easy to implement.

In addition, an embodiment of the present invention further provides an authentication authorization system. As shown in FIG. 4, the system includes a client 41 of a third-party application, a server 42 of a third-party application, an APP 43 and a platform side running on the mobile terminal. Server 44, wherein:

The client 41 of the third-party application is configured to receive the account information input by the user on the login interface provided by the third-party application, and send the account information to the server of the third-party application; the server 42 of the third-party application is configured to send the authentication to the platform-side server. The request, the authentication request carries the account information, the third-party application information, and the permission information to be acquired; receives the authorization code sent by the platform side server; sends an information acquisition request including the authorization code to the platform side server, and receives the corresponding information returned by the platform side server. The user information completes the authentication process according to the corresponding user information; the APP 43 is used to interact with the platform side server; the platform side server 44 includes the authenticated authorization device shown in FIG.

Specifically, the APP 43 may be configured to: receive the parsing result sent by the platform side server 44, display the parsing result and the to-be-confirmed information to the user, and send the user confirming information to the platform side server 44.

In addition, the APP 43 may be further configured to: before receiving the parsing result sent by the platform side server, send a request for establishing a long connection channel to the platform side server, add the account information sent by the platform side server, and send the account information to the platform side server. Account authentication request.

Further, the server 44 of the third-party application may be further configured to: receive error information sent by the platform-side server, and return an error message to the client.

The client 41 of the third-party application, the server 42 of the third-party application, the APP 43 running on the mobile terminal, and The interaction process between the platform side servers 44 is as shown in FIG. 2, and details are not described herein.

The mobile terminal may be a device such as a mobile phone or a tablet computer, and the third-party application may run on a computer (PC), a smart TV, a wearable device, or the like.

The authentication authorization system of the embodiment of the present invention can implement multiple forms of login through the interaction between the client of the third-party application, the server of the third-party application, the APP running on the mobile terminal, and the platform-side server, so that the user is enabled. You don't need to register and manage the login accounts of multiple websites. You only need to access multiple websites through an open platform registration account, which provides users with convenience and simple implementation.

In order to implement the above embodiments, the present invention also provides a storage medium for storing an application for performing an authentication method of authentication according to any of the embodiments of the present invention.

It should be understood that portions of the invention may be implemented in hardware, software, firmware or a combination thereof. In the above-described embodiments, multiple steps or methods may be implemented in software or firmware stored in a memory and executed by a suitable instruction execution system. For example, if implemented in hardware, as in another embodiment, it can be implemented by any one or combination of the following techniques well known in the art: having logic gates for implementing logic functions on data signals. Discrete logic circuits, application specific integrated circuits with suitable combinational logic gates, programmable gate arrays (PGAs), field programmable gate arrays (FPGAs), etc.

In the description of the present specification, the description with reference to the terms "one embodiment", "some embodiments", "example", "specific example", or "some examples" and the like means a specific feature described in connection with the embodiment or example. The structure, materials, or characteristics are included in various embodiments or examples of the invention. In the present specification, the schematic representation of the above terms does not necessarily mean the same embodiment or example. Furthermore, the particular features, structures, materials, or characteristics described may be combined in a suitable manner in any one or more embodiments or examples.

While the embodiments of the present invention have been shown and described, the embodiments of the invention may The scope of the invention is defined by the claims and their equivalents.

Claims

An authentication authorization method, characterized in that the method comprises:

Receiving an authentication request sent by a server of the third-party application, where the authentication request carries account information, third-party application information, and permission information to be obtained, which are input by the user on the login interface provided by the third-party application;

Parsing the authentication request, obtaining an analysis result, and interacting with the corresponding application APP according to the analysis result and the correspondence between the pre-stored account information and the long connection channel information, generating an authorization code, and applying the authorization code to the third party The server sends the authorization code;

Receiving, by the server of the third-party application, an information acquisition request that includes the authorization code, and returning corresponding user information to the server of the third-party application according to the information acquisition request, so that the server of the third-party application is configured according to The corresponding user information completes the authentication process.
The method according to claim 1, wherein the interaction between the parsing result and the pre-stored account information and the long connection channel information and the corresponding application APP generates an authorization code, including:

Obtaining the corresponding account information according to the account information in the parsing result, and obtaining the long connection channel information according to the account information and the correspondence between the pre-stored account information and the long connection channel information;

And sending the parsing result to the corresponding application APP according to the long connection channel information, so that the APP displays the parsing result and the to-be-confirmed information to the user;

Receiving the user confirmation information returned by the APP, when the user confirmation information is the consent information, generating an authorization code according to the analysis result.
The method according to claim 2, wherein before the obtaining the long connection channel information according to the account information and the correspondence between the pre-stored account information and the long connection channel information, the method further includes:

Receiving a request for establishing a long connection channel sent by the APP, and adding account information provided by the user to the APP;

Receiving an account authentication request sent by the APP, and storing a correspondence between the account information and the long connection channel information according to the account information carried in the account authentication request.
The method according to claim 2, wherein the obtaining the corresponding account information according to the account information in the parsing result comprises:

After determining that the third-party application is valid according to the third-party application information, obtaining corresponding account information according to the account information.
The method according to claim 2, after the receiving the user confirmation information returned by the APP, further comprising:

When the user confirmation information is the rejection information, the error information is returned to the server of the third-party application, so that the server of the third-party application returns the error information to the client of the third-party application.
An authentication authorization device, characterized in that the device comprises:

a receiving module, configured to receive an authentication request sent by a server of a third-party application, where the authentication request carries account information, third-party application information, and permission information to be obtained, which are input by the user on a login interface provided by the third-party application;

The processing module is configured to parse the authentication request, obtain an analysis result, and interact with the corresponding application APP according to the parsing result and the corresponding relationship between the pre-stored account information and the long connection channel information to generate an authorization code, and generate an authorization code. Transmitting, by the server of the third-party application, the authorization code;

An authorization module, configured to receive an information acquisition request that is sent by the server of the third-party application and that includes the authorization code, and return corresponding user information to the server of the third-party application according to the information acquisition request, so that the first The server of the three-party application completes the authentication process according to the corresponding user information.
The device according to claim 6, wherein the processing module is specifically configured to:

Obtaining the corresponding account information according to the account information in the parsing result, and obtaining the long connection channel information according to the account information and the correspondence between the pre-stored account information and the long connection channel information;

And sending the parsing result to the corresponding application APP according to the long connection channel information, so that the APP displays the parsing result and the to-be-confirmed information to the user;

Receiving the user confirmation information returned by the APP, when the user confirmation information is the consent information, generating an authorization code according to the analysis result.
The device according to claim 7, further comprising:

Adding a module, before the processing module obtains the long connection channel information according to the account information and the correspondence between the pre-stored account information and the long connection channel information, receiving a request for establishing a long connection channel sent by the APP, and the user is requested The provided account information is added to the APP;

The saving module is configured to receive an account authentication request sent by the APP, and save the correspondence between the account information and the long connection channel information according to the account information carried in the account authentication request.
The device according to claim 8, wherein the processing module is specifically configured to:

After determining that the third-party application is valid according to the third-party application information, obtaining corresponding account information according to the account information.
The device according to claim 6, wherein the processing module is further configured to: after receiving the user confirmation information returned by the APP, when the user confirmation information is a rejection information, to the The server of the third party application returns an error message to cause the server of the third party application to return the error information to the client of the third party application.
An authentication authorization system, characterized in that the system comprises a client of a third-party application, a server of a third-party application, an application APP running on the mobile terminal, and a platform-side server, wherein:

a client of the third-party application, configured to receive an account entered by a user on a login interface provided by a third-party application Information and transmitting the account information to a server of the third party application;

The server of the third-party application is configured to send an authentication request to the platform-side server, where the authentication request carries the account information, third-party application information, and permission information to be acquired; and receives the sent by the platform-side server. Sending an information acquisition request including the authorization code to the platform side server, and receiving corresponding user information returned by the platform side server, and completing an authentication process according to the corresponding user information;

The APP is configured to interact with the platform side server;

The platform side server includes the authenticated authorization device of any of claims 6-10.
The system according to claim 11, wherein the APP is specifically configured to: receive the parsing result sent by the platform side server, and display the parsing result and the to-be-confirmed information to the user, and Sending user confirmation information to the platform side server.
The system according to claim 12, wherein the APP is further configured to: before receiving the parsing result sent by the platform side server, send a request for establishing a long connection channel to the platform side server, Adding the account information sent by the platform side server, and sending an account authentication request carrying the account information to the platform side server.
The system according to claim 11, wherein the server of the third-party application is further configured to: receive error information sent by the platform-side server, and return the error information to the client.
A storage medium for storing an application for executing an authorization method of the authentication according to any one of claims 1 to 5.