WO2016138652A1

WO2016138652A1 - Method for obtaining member resource data, and corresponding device and apparatus

Info

Publication number: WO2016138652A1
Application number: PCT/CN2015/073663
Authority: WO
Inventors: 陈剑峰; 李炜; 程浩
Original assignee: 华为技术有限公司
Priority date: 2015-03-04
Filing date: 2015-03-04
Publication date: 2016-09-09

Abstract

Disclosed are a method for obtaining member resource data, and a corresponding device and apparatus, which are intended to solve the problem of difficulty in securely and effectively collecting member resource data of a virtual resource in the prior art. The method comprises: a virtual resource provider receives a virtual resource request sent by a terminal, the virtual resource request comprising identification information about an application that initiates the virtual resource request in the terminal and identification information about a target virtual resource requested by the application; locate, according to the identification information about the target virtual resource, the target virtual resource and determine, according to attribute information about the target virtual resource, a member resource provider that provides a member resource of the target virtual resource; send a member resource request to the member resource provider; and receive member resource data returned by the member resource provider according to the identification information about the target virtual resource and the identification information about the application in the member resource request.

Description

Method for acquiring member resource data, corresponding device and device

Technical field

The present invention relates to the field of communications technologies, and in particular, to a method, a corresponding device, and a device for acquiring member resource data.

Background technique

Machine-to-Machine Communications (M2M) is a networked application and service centered on machine intelligence interaction. It embeds wireless or wired communication modules and application modules inside the machine. Realize data communication without manual intervention to meet the information needs of users in monitoring, command and dispatch, data acquisition and measurement.

Referring to FIG. 1 , the application of the M2M technology in the smart home field, wherein the temperature sensor, the humidity sensor, and the oxygen concentration sensor are all provided with a communication module, which can send the collected data to the gateway, and the gateway can not only send the data of the sensor. For the mobile phone, it is also possible to run an application that provides room comfort, and perform a mixture of temperature data, humidity data, and oxygen concentration data to obtain a comfort index. The user can send a request for obtaining a comfort index to the gateway, receive data of the comfort index returned by the gateway, and know the current comfort level of the room.

Both physical and application objects in the M2M system are represented as resources, described by resource structures, are independently addressable, can be searched and discovered, and have unique identifiers, usually with universal resource identifiers (English: Uniform Resource Identifier (URI) is used as the resource identifier.

As shown in Figure 1, the smart home system, temperature sensor, humidity sensor, oxygen concentration sensor and other sensing devices are abstracted into resources after being registered to the smart home system, and are described by a set of common attributes, one of which is The data provided by the physical device (such as temperature value, humidity value, oxygen concentration value). The service that provides the comfort index in the gateway is also a resource. The resource does not correspond to a specific physical entity, but is an application object corresponding to the service, and is called a virtual resource.

A virtual resource passes through an existing resource (which may be a resource abstracted by a physical device). The data provided by the existing virtual resources is subjected to a hybrid processing, thereby obtaining new information that is not included in the existing resources. Following the smart home system shown in Figure 1, the application service providing the "comfort index" is a virtual resource, which is assigned a URI, which can be abstracted according to physical devices such as a temperature sensor, a humidity sensor, and an oxygen concentration sensor. The data provided by the resources to get the current comfort index. The resource that provides data for the virtual resource is called a member resource of the virtual resource. For example, the resource corresponding to the temperature sensor, the humidity sensor, and the oxygen concentration sensor are member resources of the virtual resource that provides the application service of the “comfort index”.

In actual situations, the member resources of a virtual resource may also be other existing virtual resources. For example, an application service that provides a "comfort index" uses a "user clothing index" when calculating a comfort index, and " The user's clothing index is obtained by an application according to the user's body temperature detected by the wearable device and the image data of the user photographed by the camera. The service providing the "user's clothing index" is itself a virtual resource, and also provides a "comfort index". Member resources of the application service.

When a new virtual resource is registered (or published) in the M2M system, the list of member resources used by the virtual resource will be stored as an attribute of the virtual resource. After the virtual resource provider (such as the gateway in FIG. 1) receives the operation request for the virtual resource from the terminal, the virtual resource provider needs to acquire data from each member resource to perform the operation requested by the terminal. However, there is a lack of a safe and effective method of collecting member resource data of virtual resources in the prior art.

Summary of the invention

The embodiments of the present invention provide a method for acquiring member resource data, and a corresponding device and device, which are used to solve the problem that it is difficult to collect member resource data of a virtual resource in a safe and effective manner in the prior art.

In a first aspect, an embodiment of the present invention provides a method for acquiring member resource data, including:

The virtual resource provider receives the virtual resource request sent by the terminal, where the virtual resource request includes the identifier information of the application that initiates the virtual resource request in the terminal, and the identifier information of the target virtual resource requested by the application;

The virtual resource provider locates the target virtual resource according to the identifier information of the target virtual resource, and determines, according to the attribute information of the target virtual resource, the member that provides the target virtual resource. Member resource provider of the resource;

The virtual resource providing direction sends the member resource request to the member resource provider;

The virtual resource provider receives the data of the member resource returned by the member resource provider according to the identifier information of the target virtual resource included in the member resource request and the identifier information of the application.

Based on the first aspect, in a first possible implementation manner of the first aspect, after receiving the data of the member resource returned by the member resource provider, the method further includes:

Determining data corresponding to the target virtual resource according to the received data of the member resource;

Returning, to the terminal, the determined data corresponding to the target virtual resource.

In a second aspect, an embodiment of the present invention provides a method for responding to a member resource request, including:

The member resource provider receives the member resource request sent by the virtual resource provider;

Obtaining, from the member resource request, identifier information of an application as a resource original requester, and determining, according to the identifier information of the application, that the application has permission to access a member resource;

And obtaining, by the member resource request, identifier information of the target virtual resource, and determining, according to the identifier information of the target virtual resource, a path for returning data to the virtual resource provider, and returning the member according to the determined path. Resource data.

Based on the second aspect, in a first possible implementation manner of the second aspect, the obtaining, by the member resource request, the identifier information of the application that is the resource original requester, includes:

Obtaining a value of an initiator parameter in the member resource request, and using a value of the initiator parameter as identifier information of the application;

And obtaining the identifier information of the target virtual resource from the member resource request, including:

Obtaining a value of the virtual parameter in the member resource request, and using a value of the virtual parameter as the identifier information of the target virtual resource.

Based on the second aspect, in a second possible implementation manner of the second aspect, the obtaining, by the member resource request, the identifier information of the application that is the resource original requester, includes:

Obtaining a value of an original requester parameter in the member resource request, and the original requester is The value of the number is used as the identification information of the application;

Obtaining a value of an initiator parameter in the member resource request, and using a value of the initiator parameter as identifier information of the target virtual resource.

Based on the second aspect, the first possible implementation of the second aspect, and the second possible implementation of the second aspect, in a third possible implementation of the second aspect, Before the path returns the data of the member resource, it also includes:

Determining, according to the identifier information of the target virtual resource, whether the target virtual resource has the right to access the member resource, and executing the slave member when determining that the target virtual resource has the right to access the member resource And obtaining, by the resource request, the identifier information of the target virtual resource, and determining, according to the identifier information of the target virtual resource, a path for returning data to the virtual resource provider, and returning data of the member resource according to the determined path. step.

In a third aspect, an embodiment of the present invention provides an apparatus for acquiring member resource data, including:

a first receiving module, configured to receive a virtual resource request sent by the terminal, where the virtual resource request includes identifier information of an application that initiates the virtual resource request in the terminal, and identifier information of the target virtual resource requested by the application ;

a determining module, configured to locate the target virtual resource according to the identifier information of the target virtual resource, and determine, according to the attribute information of the target virtual resource, a member resource provider that provides a member resource of the target virtual resource;

a sending module, configured to send a member resource request to the member resource provider;

And a second receiving module, configured to receive, by the member resource provider, data of the member resource returned according to the identifier information of the target virtual resource included in the member resource request and the identifier information of the application.

Based on the third aspect, in a first possible implementation manner of the third aspect, the device further includes:

a second determining module, configured to determine, according to the received data of the member resource, data corresponding to the target virtual resource;

And a second sending module, configured to return, to the terminal, the determined data corresponding to the target virtual resource.

In a fourth aspect, an embodiment of the present invention provides an apparatus for responding to a member resource request, including:

a receiving module, configured to receive a member resource request sent by the virtual resource provider;

An authentication module, configured to obtain, from the member resource request, identifier information of an application that is a resource original requester, and determine, according to the identifier information of the application, that the application has permission to access a member resource;

a sending module, configured to obtain, from the member resource request, identifier information of the target virtual resource, and determine, according to the identifier information of the target virtual resource, a path for returning data to the virtual resource provider, according to the determined The path returns data for the member resource.

According to the fourth aspect, in a first possible implementation manner of the fourth aspect, the authentication module is specifically configured to: obtain a value of an initiator parameter in the member resource request, and set a value of the initiator parameter As identification information of the application;

The sending module is specifically configured to: obtain a value of the virtual parameter in the member resource request, and use the value of the virtual parameter as the identifier information of the target virtual resource.

According to the fourth aspect, in a second possible implementation manner of the fourth aspect, the authentication module is specifically configured to: acquire a value of an original requester parameter in the member resource request, and use the original requester parameter Value as the identification information of the application;

The sending module is specifically configured to: obtain a value of an initiator parameter in the member resource request, and use a value of the initiator parameter as identifier information of the target virtual resource.

Based on the fourth aspect, the first possible implementation manner of the fourth aspect, and the second possible implementation manner of the fourth aspect, in a third possible implementation manner of the fourth aspect, the authentication module is further used And determining, according to the identifier information of the target virtual resource, whether the target virtual resource has the right to access the member resource.

In a fifth aspect, an embodiment of the present invention provides an apparatus for acquiring member resource data, including:

An interface, configured to receive a virtual resource request sent by the terminal, where the virtual resource request includes identifier information of an application that initiates the virtual resource request in the terminal, and is requested by the application Identification information of the target virtual resource;

a storage unit for storing instructions;

And the processor is configured to be configured to execute the instruction, locate the target virtual resource according to the identifier information of the target virtual resource, and determine to provide according to the attribute information of the target virtual resource. a member resource provider of the member resource of the target virtual resource; controlling the interface to send a member resource request to the member resource provider; and controlling the interface to receive the member resource provider according to the member resource request The identification information of the target virtual resource and the identification information of the application, and the returned data of the member resource.

The fifth aspect, in a first possible implementation manner of the fifth aspect, the processor is further configured to: determine, according to the received data of the member resource, data corresponding to the target virtual resource; The interface returns the determined data corresponding to the target virtual resource to the terminal.

In a sixth aspect, an embodiment of the present invention provides a device that responds to a member resource request, including:

An interface, configured to receive a member resource request sent by a virtual resource provider;

a storage unit for storing instructions;

The processor is connected to the interface and the storage unit, respectively, for executing the instruction, acquiring identifier information of an application as a resource original requester from the member resource request, and according to the identifier of the application Determining, by the information, that the application has the right to access the member resource, obtaining the identifier information of the target virtual resource from the member resource request, and determining, according to the identifier information of the target virtual resource, a path for returning data to the virtual resource provider. And controlling the interface to return data of the member resource according to the determined path.

According to the sixth aspect, in a first possible implementation manner of the sixth aspect, the processor is configured to: obtain, from the member resource request, identifier information of an application that is a resource original requester, specifically: acquiring a value of an initiator parameter in the member resource request, where the value of the initiator parameter is used as identifier information of the application;

The processor is configured to: obtain the identifier information of the target virtual resource from the member resource request, specifically: obtain a value of the virtual parameter in the member resource request, and use the value of the virtual parameter as the target virtual resource Identification information.

According to the sixth aspect, in a second possible implementation manner of the sixth aspect, the processor is configured to: obtain, from the member resource request, identifier information of an application that is a resource original requester, specifically: acquiring Determining a value of the original requester parameter in the member resource request, and using the value of the original requester parameter as the identification information of the application;

The processor is configured to: obtain the identifier information of the target virtual resource from the member resource request, specifically: obtain the value of the initiator parameter in the member resource request, and use the value of the initiator parameter as the target Identification information of the virtual resource.

Based on the sixth aspect, the first possible implementation manner of the sixth aspect, and the second possible implementation manner of the sixth aspect, in a third possible implementation manner of the sixth aspect, the processor is configured to: Before the returning the data of the member resource according to the determined path, the interface is further configured to: determine, according to the identifier information of the target virtual resource, whether the target virtual resource has the right to access the member resource, and Determining, when the target virtual resource has the right to access the member resource, obtaining the identifier information of the target virtual resource from the member resource request, and determining to return to the virtual resource provider according to the identifier information of the target virtual resource a path of the data, and controlling the interface to return data of the member resource according to the determined path.

One or more technical solutions provided in the embodiments of the present invention have at least the following technical effects or advantages:

In the technical solution provided by the embodiment of the present invention, the member resource request sent by the virtual resource providing direction member resource provider includes the identifier information of the target virtual resource that needs to collect the member resource data in the virtual resource provider, and the target information is requested in the terminal. The identification information of the application of the virtual resource enables the member resource provider to verify whether the application has the right to access the member resource according to the identification information of the application, ensure the data security, and determine the virtual information according to the identification information of the target virtual resource. The resource provider returns the path of the data, avoiding directly returning the data to the terminal, and realizing the safe and effective collection of the member resource data.

DRAWINGS

In order to more clearly illustrate the technical solution in the embodiment of the present invention, the following description will be made on the embodiment. BRIEF DESCRIPTION OF THE DRAWINGS The accompanying drawings, which are incorporated in the drawings, FIG. Other figures are obtained from these figures.

1 is a schematic diagram of M2M communication in the field of smart home in the background art;

2a is a schematic diagram of a request for sending a member resource in a forwarding manner in the prior art;

2b is a schematic diagram of a request for sending a member resource in a request manner in the prior art;

3 is a schematic flowchart of a method for acquiring member resource data according to an embodiment of the present invention;

4 is a schematic flowchart of a method for responding to a member resource request according to an embodiment of the present invention;

5a-5b are schematic diagrams of an application example 1 according to an embodiment of the present invention;

6a-6b are schematic diagrams of an application example 2 according to an embodiment of the present invention;

FIG. 7 is a schematic block diagram showing the structure of an apparatus 300 according to an embodiment of the present invention;

FIG. 8 is a schematic block diagram showing the structure of an apparatus 400 according to an embodiment of the present invention; FIG.

FIG. 9 is a schematic block diagram showing the structure of a device 500 according to an embodiment of the present invention;

FIG. 10 is a schematic block diagram showing the structure of a device 600 according to an embodiment of the present invention.

detailed description

In order to facilitate understanding of the technical solutions provided by the embodiments of the present invention, related related technologies are first introduced:

The two devices in the M2M system can communicate with each other to implement information transmission. The party requesting the information needs to send a resource request (Request) to the party providing the information. The Request mainly includes the following parameters:

The originator parameter (From), referred to as the fr parameter, indicates the initiator of the resource request;

The target resource parameter (To), referred to as the to parameter, represents the target resource pointed to by the resource request;

Operation type parameter (Operation), indicating the type of the specific operation requested for the target resource, including: operation to read the data of the target resource (Retrieve), operation to create a new resource under the target resource (Create: to), update The operation of the target resource (Update); the operation of deleting the target resource (Delete), and so on.

Referring to FIG. 2a and FIG. 2b, when the terminal requests to acquire virtual resource data, the terminal according to the target virtual The identification information of the resource (eg, the universal resource identifier URI) determines a path for sending the resource request, and sends a virtual resource request (Request1) to the virtual resource provider according to the determined path, and the initiator parameter in the virtual resource request (fr) The parameter is the identification information of the application App that initiates the virtual resource request in the terminal, the target resource parameter (to parameter) is the identification information of the target virtual resource VR requested by the application, and the virtual resource provider refers to the virtual resource where the virtual resource is located. The device, as shown in the gateway in Figure 1.

After receiving the Request1, the virtual resource provider needs to collect data from each member resource of the target virtual resource to determine the data of the target virtual resource. Therefore, the virtual resource provider first needs to locate the requested VR according to the to parameter of the virtual resource request, and then determines Ab1 according to the member resources Ab1 and Ab2 of the target virtual resource recorded in the attribute information of the located VR. Identification information of Ab2. Since the identification information of Ab1 and Ab2 can indicate the addresses of Ab1 and Ab2, the identification information of Ab1 and Ab2 is determined, and the member resource providers that provide Ab1 and Ab2 are determined.

Then, the virtual resource provides a member resource request to each member resource provider. In the prior art, the sending member resource request mainly has the following implementation manners:

Mode 1, forwarding mode.

With continued reference to FIG. 2a, the virtual resource provider modifies the received to parameter in Request1 to the identification information of each member resource, and sends the modified request to the member resource provider. The fr parameter in the modified virtual resource request remains unchanged, that is, the fr parameter in the member resource request received by the member resource provider is still the identification information of the application that initiates the virtual resource request in the terminal, and therefore, The way image is called the forwarding method.

In the forwarding mode, the member resource provider can verify whether the APP in the terminal has the right to access the member resource according to the fr parameter in the member resource request. However, when the member resource provider returns the data, the member resource directly returns the data according to the fr parameter. The terminal where the application is located, not the virtual resource provider. Therefore, the terminal finally receives the data of each member resource of the target virtual resource, instead of the target virtual resource data that is aggregated according to the member resource data.

Mode 2, request method.

With continued reference to Figure 2b, the to parameter of the member resource request sent in the request mode is still for each member. The identification information of the resource, but different from the forwarding mode, the fr parameter is the identification information of the target virtual resource in the virtual resource provider.

In the request mode, although the member resource provider can return the data to the virtual resource provider, because the member resource request lacks the information of the original requester of the target virtual resource, it cannot verify whether the application that initiated the virtual resource request in the terminal has Access to the resources of each member does not meet the security requirements of M2M communication.

Therefore, the above two methods of the prior art cannot implement the data collection of the member resources of the virtual resource in a safe and effective manner. To solve the problem, the embodiment of the present invention provides a method for acquiring the member resource data, including: The virtual resource provider receives the virtual resource request sent by the terminal, where the virtual resource request includes the identifier information of the application that initiates the virtual resource request in the terminal, and the identifier information of the target virtual resource requested by the application; the virtual resource The provider locates the target virtual resource according to the identifier information of the target virtual resource, and determines a member resource provider that provides the member resource of the target virtual resource according to the attribute information of the target virtual resource; And the member resource provider sends the member resource request; and receives the identifier information of the target virtual resource that is included in the member resource request and the identifier information of the application, and returns the data of the member resource. .

The identifier information of the target virtual resource that includes the data of the member resource in the virtual resource provider, and the identifier of the application that requests the target virtual resource in the terminal, is included in the member resource request sent by the member resource provider. The member resource provider can verify whether the application has the right to access the member resource according to the identification information of the application, ensure the security of the information, and determine the return data to the virtual resource provider according to the identification information of the target virtual resource. The path avoids directly returning data to the terminal, and achieves safe and effective collection of member resource data.

Correspondingly, another aspect of the embodiment of the present invention provides a method for responding to a member resource request, including: a member resource provider receiving a member resource request sent by a virtual resource provider; and obtaining, as the resource original request, the member resource request Identification information of the application of the application, and determining, according to the identification information of the application, that the application has permission to access member resources; from the member And obtaining, by the resource request, identifier information of the target virtual resource, and determining a path for returning data to the virtual resource provider according to the identifier information of the target virtual resource, and returning data of the member resource according to the determined path.

The member resource provider can verify whether the application has the right to access the member resource according to the identification information of the application, ensure the security of the information, and determine the path to return the data to the virtual resource provider according to the identification information of the target virtual resource. To avoid direct return of data to the terminal, and to achieve safe and effective collection of member resource data.

The technical solutions of the present invention are described in detail below with reference to the accompanying drawings and specific embodiments. It is understood that the specific features of the embodiments and the embodiments of the present invention are the detailed description of the technical solutions of the present invention, and are not limited to the technical solutions of the present invention. In the case of no conflict, the technical features of the embodiments of the present invention and the embodiments may be combined with each other.

FIG. 3 is a schematic flowchart of a method for acquiring member resource data according to an embodiment of the present invention, where the process includes the following steps:

Step 101: The virtual resource provider receives the virtual resource request sent by the terminal, where the virtual resource request includes the identifier information of the application that initiates the virtual resource request in the terminal, and the identifier information of the target virtual resource requested by the application.

Specifically, after the physical device, the application, and the data, which are abstracted as the resource, are registered in the M2M system, the identifier that is unique in the M2M system, and the identifier information in the embodiment of the present invention is assigned. It may be the identifier itself, or may be information formed after the identifier is compiled, and the identifier of the resource may be unambiguously determined by the compiled identification information. For example, the identification information can be a resource identifier URI.

The virtual resource request received by the virtual resource provider includes at least an initiator parameter (fr parameter) and a target parameter (to parameter), wherein the fr parameter is identification information of an application that initiates the virtual resource request in the terminal, and the to parameter is the application. Identification information of the requested target virtual resource.

Step 102: The virtual resource provider locates the target virtual resource according to the identifier information of the target virtual resource, and determines a member resource provider that provides the member resource of the target virtual resource according to the attribute information of the target virtual resource.

Specifically, the virtual resource provider extracts the to parameter from the virtual resource request, and the virtual resource pointed to by the to parameter is the target virtual resource requested by the terminal. Therefore, the target virtual resource may be located according to the to parameter.

In the M2M system, the identification information of the member resources of the virtual resource is stored in the attribute information of the virtual resource. Therefore, the virtual resource provider can determine the identification information of each member resource of the target virtual resource according to the attribute information of the target virtual resource. Since the identification information of the member resource can indicate the location where the member resource is located, the identification information of the member resource is known, and the member resource provider that provides the member resource is also known.

Step 103: The virtual resource providing direction sends a member resource request to the member resource provider.

Specifically, the virtual resource sends a member resource request to the member resource provider where each member resource is located, wherein, in order to ensure that the member resource provider can return the data of the member resource to the virtual resource provider, the target virtual resource is mixed and processed. The member resource request includes the identification information of the target virtual resource, and the member resource provider can determine the path of the returned data according to the identification information of the target virtual resource in the member resource request.

In addition, in order to ensure data security, the member resource provider will authenticate the original requester of the member resource to determine its access to the member resources. The original requester of the member resource refers to the initial requester that triggers the operation of acquiring the member resource. For example, the App requests the virtual resource VR in the terminal, and the VR needs to request the data of the member resources Ab1, Ab2, Ab3, and Ab1 itself is also For a virtual resource, the data of the member resources Ab4 and Ab5 needs to be requested. For VR, Ab1, Ab2, Ab3, Ab4, Ab5, the original requestor is the App in the terminal.

In the embodiment of the present invention, in order to enable the member resource provider to authenticate the original requester, the member resource request sent by the virtual resource provider further includes information of the original requester, that is, an application requesting the target virtual resource in the terminal. Identification information. The member resource provider can obtain the identification information of the application from the member resource request, and determine whether the application has the right to access the target member resource according to the identification information of the application. During the specific implementation, the access authority information of the member resource may be saved in the attribute information of the member resource, and the member resource provider performs the authentication according to the access authority information recorded by the attribute information. Can also be local maintenance on the server or member resource provider There is a list of access rights of the target member resource, and the member resource provider can query the access permission list for authentication.

Step 104: Receive data of the member resources returned by the member resource provider according to the identification information of the target virtual resource included in the member resource request and the identification information of the application.

Specifically, after determining, according to the identification information of the application, the application resource has the right to access the member resource, the member resource provider determines the path of the returned data according to the identification information of the target virtual resource, and returns the data of the member resource to the member resource. Therefore, the virtual resource provider can receive the data of the member resources returned by each member resource provider.

In the foregoing technical solution of the embodiment of the present invention, the member resource request sent by the virtual resource providing direction member resource provider includes the identifier information of the target virtual resource that needs to collect the member resource data in the virtual resource provider, and the target virtual object is requested in the terminal. The identification information of the application of the resource enables the member resource provider to verify whether the application has the right to access the member resource according to the identification information of the application, ensure data security, and determine the virtual resource according to the identification information of the target virtual resource. The provider returns the path of the data, avoids directly returning the data to the terminal, and realizes the safe and effective collection of the member resource data.

Optionally, in the embodiment of the present invention, step 103 may have two implementation manners:

method one

The parameter of the member resource request sent by the virtual resource provider includes an initiator parameter and a virtual parameter. The value of the initiator parameter is the identification information of the application, and is used to enable the member resource provider to determine whether the application has access to the member resource. Permission; the value of the virtual parameter is the identification information of the target virtual resource, and is used to enable the member resource provider to determine the path to return data to the virtual resource provider.

Specifically, the initiator parameter in the member resource request is identifier information of the application requesting the target virtual resource in the terminal, so that the member resource provider can verify whether the application has the right to access the member resource. Moreover, in order to prevent the member resource provider from directly returning the data to the terminal, a virtual parameter (English: Virtual Reference, referred to as vr) is added to the member resource request to indicate that the member resource request is from the virtual resource provider, and the member is received. The party requesting the resource needs to determine the path of the returned data according to the virtual parameter to return the data to the virtual resource provider for the virtual resource. The source is subjected to a coagulation process.

Optionally, when the vr parameter included in the resource request is a null value, it indicates that the resource request is not forwarded by the virtual resource provider, and the party that receives the resource request needs to determine the path of the returned data according to the initiator parameter in the resource request. For example, when the terminal sends a virtual resource request to the virtual resource provider, the virtual resource request may also include a vr parameter, but the vr parameter is a null value, and the virtual resource provider still needs to determine a path for returning data to the terminal according to the initiator parameter.

The foregoing method 1 corresponds to the forwarding mode in the prior art (refer to FIG. 2a). The virtual parameter is added to the member resource request, and the value of the virtual parameter is the identification information of the target virtual resource that needs to be mixed according to the member resource. The member resource provider that receives the member resource request determines the path of the returned data according to the virtual parameter, thereby avoiding directly returning the data to the terminal.

Way two

The parameter of the member resource request sent by the virtual resource provider includes an initiator parameter and an original requester parameter. The value of the initiator parameter is identifier information of the target virtual resource, and is used to enable the member resource provider to determine to return to the virtual resource provider. The path of the data; the value of the original requester parameter is the identification information of the application, which is used to enable the member resource provider to determine whether the application has permission to access the member resource.

Specifically, the initiator parameter in the member resource request is the identifier information of the target virtual resource that needs to acquire the member resource for the hybrid processing, so that the member resource provider determines the path to return the data to the virtual resource provider. Moreover, the member resource request also includes an original requester parameter (English: Create Reference, referred to as: cr), which is used to identify the original requester of the member resource.

For example, the application App in the terminal requests the virtual resource VR in the virtual resource provider, and the VR needs to acquire Ab1 in the member resource provider 1 and Ab2 in the member resource provider 2, and the virtual resource provides the direction member resource provider 1 2 When the member resource request is sent, the cr parameter needs to be added to the member resource request, and the value of the cr parameter is the identification information of the application A.

Optionally, the virtual resource request sent by the terminal to the virtual resource provider may also include a cr parameter, where the value of the cr parameter is the identifier information of the application requesting the virtual resource, so that the virtual resource providing direction sends the member resource to the member resource provider. When requested, the cr parameter is added to the member resource request.

The foregoing method 2 corresponds to the request mode in the prior art (refer to FIG. 2b). Since the original requester parameter is added in the member resource request, the value of the original requester parameter is the identifier of the application requesting the target virtual resource in the terminal. The information enables the member resource provider receiving the member resource request to verify whether the application has the right to access the member resource according to the original requester parameter to ensure data security.

Optionally, in step 101, the target virtual resource pointed to by the to parameter in the virtual resource request received by the virtual resource provider may be a virtual resource that has not been created yet, and the virtual resource provider firstly according to the target included in the virtual resource request. The attribute information of the virtual resource is used to create the target virtual resource, and then the member resource request is sent to each member resource provider corresponding to the target virtual resource.

Optionally, after the step 104, the method further includes the following steps: determining data corresponding to the target virtual resource according to the received data of the member resource; and returning, to the terminal, the data corresponding to the determined target virtual resource.

Specifically, after receiving the data of each member resource of the target virtual resource, the virtual resource provider performs a hybrid processing according to the received data, determines data of the target virtual resource, and then returns the determined data to the terminal requesting the target virtual The application of the resource, wherein the path of the virtual resource providing direction return data to the terminal is determined according to the identification information of the application included in the virtual resource request sent by the terminal.

In the embodiment of the present invention, the data returned to the terminal is the data after the virtual resource is mixed, and the correctness of the returned data is ensured, and the member resource provider corresponding to the target virtual resource verifies the application of the target virtual resource in the terminal. The program's access rights ensure secure access to data.

Optionally, in step 103, the parameter of the member resource request sent by the virtual resource provider further includes a target resource parameter, where the value of the target resource parameter is identifier information of the member resource of the target virtual resource, so that the member resource of the member resource request is received. The provider locates the target member resource based on the target resource parameter.

Based on the same technical concept, the embodiment of the present invention further provides a method for responding to a member resource request. Referring to FIG. 4, it is a schematic flowchart of the method. The process includes the following steps:

Step 201: The member resource provider receives the member resource request sent by the virtual resource provider.

Step 202: Obtain identification information of an application as a resource original requester from the member resource request, and determine, according to the identification information of the application, the application has the right to access the target member resource;

Step 203: Obtain identification information of the target virtual resource from the member resource request, and determine a path for returning data to the virtual resource provider according to the identification information of the target virtual resource, and return data of the member resource according to the determined path.

Specifically, the member resource request received by the member resource provider includes the identifier information of the target virtual resource that initiates the member resource request in the virtual resource provider, and the identifier information of the original requester that requests the target virtual resource. The member resource provider verifies the authority of the original requester of the resource according to the identification information of the original requester (ie, the application requesting the target virtual resource in the terminal), and after determining that the original requester has the access right, according to the virtual The identification information of the resource determines the path of the returned data, and returns the data of the member resource according to the determined path.

The member resource provider can verify whether the original requester of the resource has the right to access the member resource according to the identification information of the application requesting the virtual resource in the terminal, thereby ensuring the security of the information, and providing the virtual resource according to the request for sending the member resource. The identification information of the virtual resource requesting the member resource in the party determines the path of the returned data, and avoids directly returning the data to the terminal, thereby realizing the safe and effective collection of the member resource data.

Optionally, the manner in which the member resource provider responds to the member resource request is different according to the type of the member resource request sent by the virtual resource provider, and specifically includes the following two methods: first, corresponding to the implementation manner 1 of step 103. When the member resource request includes the initiator (fr) parameter and the forwarding (vr) parameter, in step 202, the identification information of the application as the resource original requester is obtained from the member resource request, and when executed, specifically: acquiring The value of the initiator parameter in the member resource request, and the value of the initiator parameter is used as the identification information of the application.

In step 203, the identifier information of the target virtual resource is obtained from the member resource request. When executed, the value of the virtual parameter in the member resource request is obtained, and the value of the virtual parameter is used as the identifier information of the target virtual resource.

Specifically, the member resource provider parses the value of the fr parameter in the member resource request into the identifier information of the original requester of the resource, and verifies whether the application in the terminal has the right to access the member resource according to the value of the fr parameter; The value is parsed into the identification information of the target virtual resource directly requesting the member resource data, and the value of the vr parameter is used to determine the path of the returned member resource data.

Second, corresponding to the implementation manner 2 of step 103, when the member resource request includes the initiator (fr) parameter and the original requester (cr) parameter, in step 202, the resource requester is obtained from the member resource request. The identification information of the application, when executed, specifically: obtaining the value of the original requester parameter in the member resource request, and using the value of the original requester parameter as the identification information of the application.

In step 203, the identifier information of the target virtual resource is obtained from the member resource request, and the value of the initiator parameter in the member resource request is obtained as the identifier information of the target virtual resource. .

Specifically, the member resource provider parses the value of the cr parameter in the member resource request into the identifier information of the original requester of the resource, and verifies whether the application in the terminal has the right to access the member resource according to the value of the cr parameter; The value is parsed into the identification information of the target virtual resource directly requesting the member resource data, and the value of the fr parameter is used to determine the path of the member resource data.

Optionally, before step 203, the method further includes the following steps:

And determining, according to the identifier information of the target virtual resource, whether the target virtual resource has the right to access the member resource, and performing the step 203 when determining that the target virtual resource has the right to access the member resource.

Specifically, the member resource provider not only needs to verify the access rights of the original requester of the resource, but also the direct requester of the member resource, that is, whether the target virtual resource that needs to obtain the member resource for the hybrid processing in the virtual resource provider has access. The permissions of member resources further protect the security of the data.

Optionally, the member resource request received by the member resource provider further includes a target resource parameter (to parameter), and the value of the to parameter in the member resource request is identifier information of the target member resource requested by the virtual resource, so that the member The resource provider locates the target member resource that needs to return data according to the to parameter.

Optionally, if the member resource provider verifies the access right of the original requester, and the verification result indicates that the original requester does not have the right to return data, the data of the member resource is not returned to the virtual resource provider. Preferably, the member resource provider may send a message to the virtual resource provider to inform the original requester that the user does not have the right to access the member resource to notify the virtual resource provider.

Optionally, when the member resource Ab1 pointed to by the to parameter in the member resource request is also a virtual resource, the member resource provider needs to perform operations consistent with steps 102-104 to determine the data of Ab1.

That is, the member resource provider needs to determine that each sub-member resource of Ab1 is Ab3, Ab4, and the corresponding sub-member resource provider according to the attribute information of Ab1, and then send a sub-member resource request to each sub-member resource provider, the sub-member The resource request includes the identification information of the Ab1 and the identification information of the application (ie, the original resource requester) requesting the virtual resource in the terminal, where the former is used to enable each sub-member resource provider to determine the path of the returned data, and the latter Used to enable each child member resource provider to verify the access rights of the original requester of the resource. Then, the data of the member resources is determined according to the data returned by each sub-member resource provider. Then, the member resource provider performs step 203 to return the determined data to the virtual resource provider.

Since the virtual resources involve multiple levels of member resources, each level of member resources is verified to verify the access rights of the original requesters of the resources to ensure data security, and each level of member resources returns the data directly to the upper level. Resources to avoid errors in data return paths.

Based on the same technical concept, the embodiment of the present invention further provides a method for acquiring data of a virtual resource, where the method includes the following steps:

The terminal sends a virtual resource request to the virtual resource provider, where the identifier information of the application that initiates the virtual resource request in the terminal is an original requester parameter of the virtual resource request, and is used to determine whether the application has access to the requested target virtual resource. Permissions for member resources;

Receive data of the virtual resource returned by the virtual resource provider.

Specifically, when the virtual resource provider sends a virtual resource request, the terminal adds an original requester (cr) parameter to the virtual resource request to indicate the original requester of the resource, so that the virtual resource that receives the virtual resource request is provided in a direction-related manner. When a member resource provider sends a member resource request, it is in progress. The original requester parameter is also added in the resource request, so that each member resource provider can verify whether the original requester of the resource has the right to access the member resource according to the original requester parameter, thereby ensuring data security.

In order to facilitate the understanding of the technical solutions provided by the embodiments of the present invention, the following is a detailed description of the application examples.

Application example 1

Referring to FIG. 5a, first, the application App in the terminal requests to acquire the virtual resource VR1, and the terminal determines the virtual resource provider that provides the VR1 according to the identification information of the VR1, and then sends a virtual resource request (Request1) to the virtual resource provider, the virtual The resource request includes an initiator parameter (fr parameter), a target resource parameter (to parameter), and a virtual parameter (vr parameter), wherein the fr parameter is the identification information of the App, the to parameter is the identification information of the VR1, and the vr parameter is empty. A value indicating that the virtual resource request was not sent by forwarding.

After receiving the virtual resource request, the virtual resource provider locates VR1 according to the to parameter in the virtual resource request, reads the attribute information of VR1, determines that the member resources of VR1 include Ab1 and Ab2, and determines Ab1 according to the identification information of the three. Ab2 is provided by member resource providers 1, 2, respectively.

Then, the virtual resource providing direction member resource provider 1 sends a member resource request (Request2), the to parameter of Request2 is the identification information of Ab1, the fr parameter is the identification information of the App, and the vr parameter is the identification information of VR1. Similarly, the virtual resource provider also sends a member resource request Request3 to the member resource provider 2, which will not be described in detail herein.

After receiving the member resource request, the member resource provider 1 locates Ab1 according to the to parameter, and then verifies whether the original requester App of the resource has the right to access Ab1 according to the fr parameter, and determines to return according to the vr parameter after determining that the App has the access right. The path to the data, returning the data of Ab1 to the virtual resource provider. The member resource provider 2 responds to the Request3 in a manner consistent with it, and will not be described in detail herein.

After receiving the data returned by the member resource providers 1, 2, the virtual resource provider performs a hybrid processing according to the returned data to determine the data of the VR1. Then, according to the fr parameter in the received virtual resource request, the path of returning data to the terminal is determined, and the data of VR1 is returned to the App.

Optionally, referring to FIG. 5b, when the Ab1 itself is a virtual resource, after receiving the member resource request, the member resource provider 1 locates the Ab1 according to the to parameter in the member resource request, and reads the attribute information of the Ab1 to determine The member resources of Ab1 are Ab3 and Ab4, and it is determined according to the identification information of Ab3 and Ab4 that the two are provided by the member resource providers 3 and 4, respectively.

Then, the member resource provider 1 sends a member resource request (Request4, Request5, respectively) to the member resource provider 3, 4, respectively, to send Request4 to the member resource provider 3 as an example, and the to parameter of Request4 is the identification information of Ab3. The fr parameter is the identification information of the App, and the vr parameter is the identification information of the Ab1.

The virtual resource provider 3, 4 responds to the member resource request in the same manner as the member resource provider 1 responds to the member resource request, and will not be described in detail herein.

Optionally, when the member resources Ab1 and Ab2 of the VR1 are provided by the same member resource provider, the virtual resource providing direction may send two independent member resource requests to the member resource provider when sending the member resource request, respectively, for the Ab1. Ab2, may also be a request to send a member resource, in which it is declared to acquire Ab1 and Ab2.

Application example 2

Referring to FIG. 6a, first, in the Request1 sent by the terminal to the virtual resource provider, the fr parameter is the identification information of the App, the to parameter is the identification information of the VR1, the cr parameter is the identification information of the App, and the fr parameter is the same as the value of the cr parameter.

After receiving the Request1, the virtual resource provider locates VR1 according to the to parameter in Request1, reads the attribute information of VR1, determines that the member resources of VR1 include Ab1 and Ab2, and determines that Ab1 and Ab2 are respectively members according to the identification information of the three. Resource providers 1, 2 are provided.

Then, the virtual resource providing direction member resource providers 1, 2 send member resource requests (Request2, Request3 respectively), sending Request2 as an example, the to parameter of Request2 is the identification information of Ab1, and the fr parameter is the identification information of VR1, cr The parameter is the identification information of the App.

After receiving the Request2, the member resource provider 1 locates Ab1 according to the to parameter in Request2, and then verifies whether the original requester App of the resource has the right to access Ab1 according to the cr parameter, and after determining that the App has the access right, according to the fr parameter Determine the path to return data, will Ab1 The data is returned to the virtual resource provider. The member resource provider 2 responds in the same way and will not be described in detail here.

After receiving the data returned by the member resource providers 1, 2, the virtual resource provider performs a hybrid processing according to the returned data to determine the data of the VR1. Then, according to the fr parameter in the received Request1, the path for returning data to the terminal is determined, and the data of VR1 is returned to the App.

Optionally, referring to FIG. 6b, when the Ab1 itself is a virtual resource, after receiving the Request2, the member resource provider 1 locates the Ab1 according to the to parameter in the Request2, reads the attribute information of the Ab1, and determines the member resources of the Ab1. It is Ab3, Ab4, and according to the identification information of Ab3 and Ab4, the two are respectively provided by the member resource providers 3, 4.

Then, the member resource provider 1 sends a member resource request to the member resource providers 3 and 4 respectively (Request4, Request5, respectively, to send Request4 to the member resource provider 3 as an example, and the to parameter of Request4 is the identification information of Ab3, The fr parameter is the identification information of Ab1, and the cr parameter is the identification information of the App.

Based on the same technical concept, the embodiment of the present invention further provides an apparatus 300 for acquiring data of a member resource. Referring to FIG. 7, the apparatus 300 includes:

The first receiving module 301 is configured to receive a virtual resource request sent by the terminal, where the virtual resource request includes identifier information of the application that initiates the virtual resource request in the terminal, and identifier information of the target virtual resource requested by the application;

The determining module 302 is configured to locate the target virtual resource according to the identification information of the target virtual resource, and determine, according to the attribute information of the target virtual resource, a member resource provider that provides the member resource of the target virtual resource;

The sending module 303 is configured to send a member resource request to the member resource provider.

The second receiving module 304 is configured to receive, by the member resource provider, the data of the returned member resource according to the identifier information of the target virtual resource included in the member resource request and the identifier information of the application.

Optionally, the parameter of the member resource request sent by the sending module 303 includes an initiator parameter and a virtual parameter, where the initiator parameter is the identification information of the application, and is used to enable the member resource provider to determine whether the application has the right to access the member resource; the virtual parameter is the identification information of the target virtual resource, and is used to enable the member resource provider. Determine the path to return data to the virtual resource provider.

Optionally, the parameter of the member resource request sent by the sending module 303 includes an initiator parameter and an original requester parameter. The initiator parameter is identifier information of the target virtual resource, and is used to enable the member resource provider to determine the virtual resource provider. Returns the path of the data; the original requester parameter is the identification information of the application, which is used to enable the member resource provider to determine whether the application has permission to access the member resources.

Optionally, the device 300 further includes:

a second determining module, configured to determine, according to data of the received member resources, data corresponding to the target virtual resource;

The second sending module is configured to return, to the terminal, data corresponding to the determined target virtual resource.

The method corresponding to FIG. 3 in the embodiment of the present invention is based on two aspects of the same inventive concept. The implementation process of the method has been described in detail above, so that those skilled in the art can clearly understand according to the foregoing description. The structure and implementation process of the device 300 in this embodiment are not described herein for the sake of brevity of the description.

Based on the same technical concept, the embodiment of the present invention further provides an apparatus 400 for responding to a member resource request. Referring to FIG. 8, the apparatus 400 includes:

The receiving module 401 is configured to receive a member resource request sent by the virtual resource provider.

The authentication module 402 is configured to obtain, from the member resource request, identifier information of the application that is the resource original requester, and determine, according to the identifier information of the application, that the application has the right to access the member resource;

The sending module 403 is configured to obtain the identifier information of the target virtual resource from the member resource request, and determine a path for returning data to the virtual resource provider according to the identifier information of the target virtual resource, and return data of the member resource according to the determined path.

Optionally, the authentication module 402 is specifically configured to: obtain a value of an initiator parameter in the member resource request, and use a value of the initiator parameter as the identifier information of the application;

The sending module 403 is specifically configured to: obtain a value of the virtual parameter in the member resource request, and use the value of the virtual parameter as the identifier information of the target virtual resource.

Optionally, the authentication module 402 is specifically configured to: obtain the value of the original requester parameter in the member resource request, and use the value of the original requester parameter as the identification information of the application;

The sending module 403 is specifically configured to: obtain the value of the initiator parameter in the member resource request, and use the value of the initiator parameter as the identifier information of the target virtual resource.

Optionally, the authentication module 402 is further configured to: determine, according to the identifier information of the target virtual resource, whether the target virtual resource has the right to access the member resource.

The sending module 403 is specifically configured to: when the authentication result indicates that the target virtual resource and the application have the right to access the member resource, obtain the identifier information of the target virtual resource from the member resource request, and determine the direction according to the identifier information of the target virtual resource. The virtual resource provider returns the path of the data and returns the data of the member resource according to the determined path.

The method of the device 400 in this embodiment and the method corresponding to FIG. 4 are based on two aspects under the same inventive concept. The implementation process of the method has been described in detail above, so that those skilled in the art can clearly understand according to the foregoing description. The structure and implementation process of the device 400 in this embodiment are not described herein for the sake of brevity of the description.

Based on the same technical concept, the embodiment of the present invention further includes an apparatus 500 for acquiring data of a member resource. Referring to FIG. 9, the apparatus 500 includes: a bus 501, and a processor 502, a storage unit 503, and an interface 504 connected to the bus 501. .

The interface 504 is configured to receive a virtual resource request sent by the terminal, where the virtual resource request includes identifier information of the application that initiates the virtual resource request in the terminal, and identifier information of the target virtual resource requested by the application;

The storage unit 503 is configured to store an instruction;

The processor 502 is configured to execute an instruction stored by the storage unit 503, locate the target virtual resource according to the identification information of the target virtual resource, and determine a member resource provider that provides the member resource of the target virtual resource according to the attribute information of the target virtual resource; the control interface 504 Sending a member resource request to the member resource provider; and the control interface 504 receives the member resource provider according to the member resource request packet The identification information of the target virtual resource and the identification information of the application, and the data of the returned member resource.

Optionally, the processor 502 is further configured to: determine data corresponding to the target virtual resource according to the received data of the member resource; and control the interface to return the data corresponding to the determined target virtual resource to the terminal.

The method of the device 500 in this embodiment and the method corresponding to FIG. 3 are based on two aspects under the same inventive concept. The implementation process of the method has been described in detail above, so that those skilled in the art can clearly understand according to the foregoing description. The structure and implementation process of the device 500 in this embodiment are not described herein for the sake of brevity of the description.

Based on the same technical concept, the embodiment of the present invention further provides a device 600 for responding to a member resource request. Referring to FIG. 10, the device 600 includes a bus 601, and a processor 602, a storage unit 603, and an interface 604 connected to the bus.

The interface 604 is configured to receive a member resource request sent by the virtual resource provider, and the storage unit 603 is configured to store the instruction.

The processor 602 is configured to execute the instruction stored by the storage unit 603, obtain the identification information of the application as the resource original requester from the member resource request, and determine, according to the identification information of the application, the application has the right to access the member resource; The resource request obtains the identification information of the target virtual resource, and determines a path for returning data to the virtual resource provider according to the identification information of the target virtual resource, and the control interface 604 returns the data of the member resource according to the determined path.

Optionally, the processor 602 is configured to: obtain the identifier information of the application that is the resource original requester from the member resource request, specifically: obtain the value of the initiator parameter in the member resource request, and use the value of the initiator parameter as Identification information of the application;

The processor 602 is configured to: obtain the identifier information of the target virtual resource from the member resource request, specifically: obtain the value of the virtual parameter in the member resource request, and use the value of the virtual parameter as the identifier information of the target virtual resource.

Optionally, the processor 602 is configured to: obtain, from the member resource request, the identifier information of the application that is the original requester of the resource, specifically: acquiring the original requester parameter in the member resource request. Value, the value of the original requester parameter is used as the identification information of the application;

The processor 602 is configured to: obtain the identifier information of the target virtual resource from the member resource request, specifically: obtain the value of the initiator parameter in the member resource request, and use the value of the initiator parameter as the identifier information of the target virtual resource.

Optionally, the processor 602 is configured to: before the control interface 604 returns the data of the member resource according to the determined path, the method is further configured to: determine, according to the identifier information of the target virtual resource, whether the target virtual resource has the right to access the member resource, and When the target virtual resource has the right to access the member resource, the identifier information of the target virtual resource is obtained from the member resource request, and the path of returning data to the virtual resource provider is determined according to the identifier information of the target virtual resource, and the control interface determines according to the The path returns the data of the member resource.

The method of the device 600 in this embodiment and the method corresponding to FIG. 4 are based on two aspects under the same inventive concept. The implementation process of the method has been described in detail above, so that those skilled in the art can clearly understand according to the foregoing description. The structure and implementation process of the device 600 in this embodiment are not described herein for the sake of brevity of the description.

Those skilled in the art will appreciate that embodiments of the present invention can be provided as a method, system, or computer program product. Accordingly, the present invention may take the form of an entirely hardware embodiment, an entirely software embodiment, or a combination of software and hardware. Moreover, the present invention may employ computer-usable storage media (including but not limited to disks) in one or more of the computer-usable program code embodied therein. The form of a computer program product implemented on a memory, CD-ROM, optical memory, or the like.

The present invention has been described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (system), and computer program products according to embodiments of the invention. It will be understood that each flow and/or block of the flowchart illustrations and/or FIG. These computer program instructions can be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing device to produce a machine for the execution of instructions for execution by a processor of a computer or other programmable data processing device. Means for implementing the functions specified in one or more of the flow or in a block or blocks of the flow chart.

The computer program instructions can also be stored in a computer readable memory that can direct a computer or other programmable data processing device to operate in a particular manner, such that the instructions stored in the computer readable memory produce an article of manufacture comprising the instruction device. The apparatus implements the functions specified in one or more blocks of a flow or a flow and/or block diagram of the flowchart.

While the preferred embodiment of the invention has been described, it will be understood that Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and the modifications and

It is apparent that those skilled in the art can make various modifications and variations to the invention without departing from the spirit and scope of the invention. Thus, it is intended that the present invention cover the modifications and modifications of the invention

Claims

A method for obtaining member resource data, comprising:

The virtual resource provider receives the virtual resource request sent by the terminal, where the virtual resource request includes the identifier information of the application that initiates the virtual resource request in the terminal, and the identifier information of the target virtual resource requested by the application;

The virtual resource provider locates the target virtual resource according to the identifier information of the target virtual resource, and determines a member resource provider that provides the member resource of the target virtual resource according to the attribute information of the target virtual resource;

The virtual resource providing direction sends the member resource request to the member resource provider;

The virtual resource provider receives the data of the member resource returned by the member resource provider according to the identifier information of the target virtual resource included in the member resource request and the identifier information of the application.
The method of claim 1, after receiving the data of the member resource returned by the member resource provider, further comprising:

Determining data corresponding to the target virtual resource according to the received data of the member resource;

Returning, to the terminal, the determined data corresponding to the target virtual resource.
A method for responding to a member resource request, comprising:

The member resource provider receives the member resource request sent by the virtual resource provider;

Obtaining, from the member resource request, identifier information of an application as a resource original requester, and determining, according to the identifier information of the application, that the application has permission to access a member resource;

And obtaining, by the member resource request, identifier information of the target virtual resource, and determining, according to the identifier information of the target virtual resource, a path for returning data to the virtual resource provider, and returning the member according to the determined path. Resource data.
The method of claim 3, wherein the obtaining the identification information of the application as the resource original requester from the member resource request comprises:

Obtaining a value of an initiator parameter in the member resource request, and using a value of the initiator parameter as identifier information of the application;

And obtaining the identifier information of the target virtual resource from the member resource request, including:

Obtaining a value of the virtual parameter in the member resource request, and using a value of the virtual parameter as the identifier information of the target virtual resource.
The method of claim 3, wherein the obtaining the identification information of the application as the resource original requester from the member resource request comprises:

Obtaining a value of the original requester parameter in the member resource request, and using the value of the original requester parameter as the identification information of the application;

And obtaining the identifier information of the target virtual resource from the member resource request, including:

Obtaining a value of an initiator parameter in the member resource request, and using a value of the initiator parameter as identifier information of the target virtual resource.
The method according to any one of claims 3-5, further comprising: before returning the data of the member resource according to the determined path;

Determining, according to the identifier information of the target virtual resource, whether the target virtual resource has the right to access the member resource, and executing the slave member when determining that the target virtual resource has the right to access the member resource And obtaining, by the resource request, the identifier information of the target virtual resource, and determining, according to the identifier information of the target virtual resource, a path for returning data to the virtual resource provider, and returning data of the member resource according to the determined path. step.
An apparatus for acquiring member resource data, comprising:

a first receiving module, configured to receive a virtual resource request sent by the terminal, where the virtual resource request includes identifier information of an application that initiates the virtual resource request in the terminal, and identifier information of the target virtual resource requested by the application ;

a determining module, configured to locate the target virtual resource according to the identifier information of the target virtual resource, and determine, according to the attribute information of the target virtual resource, a member resource provider that provides a member resource of the target virtual resource;

a sending module, configured to send a member resource request to the member resource provider;

And a second receiving module, configured to receive, by the member resource provider, data of the member resource returned according to the identifier information of the target virtual resource included in the member resource request and the identifier information of the application.
The device of claim 7 further comprising:

a second determining module, configured to determine, according to the received data of the member resource, data corresponding to the target virtual resource;

And a second sending module, configured to return, to the terminal, the determined data corresponding to the target virtual resource.
An apparatus for responding to a member resource request, comprising:

a receiving module, configured to receive a member resource request sent by the virtual resource provider;

An authentication module, configured to obtain, from the member resource request, identifier information of an application that is a resource original requester, and determine, according to the identifier information of the application, that the application has permission to access a member resource;

a sending module, configured to obtain, from the member resource request, identifier information of the target virtual resource, and determine, according to the identifier information of the target virtual resource, a path for returning data to the virtual resource provider, according to the determined The path returns data for the member resource.
The device according to claim 9, wherein the authentication module is specifically configured to: acquire a value of an initiator parameter in the member resource request, and use a value of the initiator parameter as the application Identification information;

The sending module is specifically configured to: obtain a value of the virtual parameter in the member resource request, and use the value of the virtual parameter as the identifier information of the target virtual resource.
The device according to claim 9, wherein the authentication module is specifically configured to: acquire a value of an original requester parameter in the member resource request, and use a value of the original requester parameter as the application Identification information of the program;

The sending module is specifically configured to: obtain a value of an initiator parameter in the member resource request, and use a value of the initiator parameter as identifier information of the target virtual resource.
Apparatus according to any of claims 9-11, wherein said The weight module is further configured to: determine, according to the identifier information of the target virtual resource, whether the target virtual resource has the right to access the member resource.
A device for acquiring member resource data, comprising:

An interface, configured to receive a virtual resource request sent by the terminal, where the virtual resource request includes identifier information of an application that initiates the virtual resource request in the terminal, and identifier information of the target virtual resource requested by the application;

a storage unit for storing instructions;

And the processor is configured to be configured to execute the instruction, locate the target virtual resource according to the identifier information of the target virtual resource, and determine to provide according to the attribute information of the target virtual resource. a member resource provider of the member resource of the target virtual resource; controlling the interface to send a member resource request to the member resource provider; and controlling the interface to receive the member resource provider according to the member resource request The identification information of the target virtual resource and the identification information of the application, and the returned data of the member resource.
The device according to claim 13, wherein the processor is further configured to: determine data corresponding to the target virtual resource according to the received data of the member resource; and control the interface to the terminal Returning the determined data corresponding to the target virtual resource.
A device for responding to a member resource request, comprising:

An interface, configured to receive a member resource request sent by a virtual resource provider;

a storage unit for storing instructions;

The processor is connected to the interface and the storage unit, respectively, for executing the instruction, acquiring identifier information of an application as a resource original requester from the member resource request, and according to the identifier of the application Determining, by the information, that the application has the right to access the member resource, obtaining the identifier information of the target virtual resource from the member resource request, and determining, according to the identifier information of the target virtual resource, a path for returning data to the virtual resource provider. And controlling the interface to return data of the member resource according to the determined path.
The device according to claim 15, wherein the processor is configured to: obtain, from the member resource request, identification information of an application that is a resource original requester, specifically: Obtaining a value of an initiator parameter in the member resource request, and using a value of the initiator parameter as identifier information of the application;

The processor is configured to: obtain the identifier information of the target virtual resource from the member resource request, specifically: obtain a value of the virtual parameter in the member resource request, and use the value of the virtual parameter as the target virtual resource Identification information.
The device according to claim 15, wherein the processor is configured to: obtain, from the member resource request, identification information of an application as a resource original requester, specifically: acquiring the member resource request a value of the original requester parameter, the value of the original requester parameter is used as identification information of the application;

The processor is configured to: obtain the identifier information of the target virtual resource from the member resource request, specifically: obtain the value of the initiator parameter in the member resource request, and use the value of the initiator parameter as the target Identification information of the virtual resource.
The device according to any one of claims 15-17, wherein the processor is configured to: before the controlling the interface returns the data of the member resource according to the determined path, further: Determining, according to the identifier information of the target virtual resource, whether the target virtual resource has the right to access the member resource, and determining that the target virtual resource has the right to access the member resource, from the member resource request Obtaining identification information of the target virtual resource, and determining a path for returning data to the virtual resource provider according to the identifier information of the target virtual resource, and controlling the interface to return data of the member resource according to the determined path. .