WO2017067137A1 - 资源使用权限判断系统及方法 - Google Patents

资源使用权限判断系统及方法 Download PDF

Info

Publication number
WO2017067137A1
WO2017067137A1 PCT/CN2016/077760 CN2016077760W WO2017067137A1 WO 2017067137 A1 WO2017067137 A1 WO 2017067137A1 CN 2016077760 W CN2016077760 W CN 2016077760W WO 2017067137 A1 WO2017067137 A1 WO 2017067137A1
Authority
WO
WIPO (PCT)
Prior art keywords
user
resource
privilege level
resource identifier
identifier
Prior art date
Application number
PCT/CN2016/077760
Other languages
English (en)
French (fr)
Inventor
傅鸿城
周国金
栗波
Original Assignee
腾讯科技（深圳）有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 腾讯科技（深圳）有限公司 filed Critical 腾讯科技（深圳）有限公司
Publication of WO2017067137A1 publication Critical patent/WO2017067137A1/zh

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/40—Network security protocols
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/10—Network architectures or network communication protocols for network security for controlling access to devices or network resources
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/20—Servers specifically adapted for the distribution of content, e.g. VOD servers; Operations thereof
    • H04N21/25—Management operations performed by the server for facilitating the content distribution or administrating data related to end-users or client devices, e.g. end-user or client device authentication, learning user preferences for recommending movies
    • H04N21/254—Management at additional data server, e.g. shopping server, rights management server

Definitions

  • the present invention relates to the field of network technologies, and in particular, to a resource usage authority judgment system and method.
  • resources refer to topics, skin multimedia display pages and background images.
  • the service provider When a user uses a client to obtain resources from a server, the service provider often imposes restrictions on the level of user rights regarding the use of resources. For example, for resource A, the user privilege level corresponding to the client needs to reach level 2 to use the resource A; for example, for resource B, the user privilege level corresponding to the client needs to reach level 3 to have the right to use the resource B. .
  • the user privilege level corresponding to the resource and the user privilege level corresponding to the user are usually obtained by the client, and then the client determines whether the user has the right to download and use the resource.
  • the server may change the user privilege level corresponding to a resource. For example, if you change the user privilege level of resource A to level 4, you must use it. In this case, all clients need to be upgraded to support this modification. When some users are unwilling to upgrade the client, some of the clients use the old judgment logic, and some of the clients use the new judgment logic, which causes the judgment logic of the global user authority level to be confusing and affects the normal operation of the service.
  • an embodiment of the present invention provides a resource usage authority judgment system and method.
  • the technical solution is as follows:
  • a resource usage authority judging system comprising: resource usage Qualification check device, resource permission cache component, and user rights storage component;
  • the resource usage qualification checking device is configured to receive a resource usage request sent by the client, where the resource usage request carries a resource identifier and a user identity, and sends a first query request to the resource permission cache component, where the first The query request carries the resource identifier, and sends a second query request to the user rights storage component, where the second query request carries the user identity identifier;
  • the resource authority cache component is configured to store the resource identifier and a user privilege level corresponding to the resource identifier, and when the first query request is received, the stored resource identifier and the resource identifier Obtaining, in the corresponding user privilege level, the user privilege level corresponding to the resource identifier, and sending the user privilege level corresponding to the resource identifier to the resource use qualification verification device;
  • the user rights storage component is configured to store the user identity and the user permission level to which the user identity belongs, and when the second query request is received, the user identity and the user are stored.
  • the user privilege level to which the user identity belongs is obtained, and the user privilege level to which the user identity belongs is sent to the resource use qualification check device;
  • the resource usage qualification checking device is further configured to receive a user privilege level corresponding to the resource identifier and a user privilege level to which the user identity identifier belongs, and compare the user privilege level corresponding to the resource identifier with the user identity identifier. If the user privilege level to which the user identity belongs is higher than or equal to the user privilege level corresponding to the resource identifier, the client is granted the use permission of the resource indicated by the resource identifier. .
  • a method for judging resource usage rights includes:
  • the user privilege level to which the user identity belongs is higher than or equal to the user privilege level corresponding to the resource identifier, the user is granted the right to use the resource.
  • a resource usage authority judgment system includes:
  • One or more processors are One or more processors.
  • the memory stores one or more programs, the one or more programs being configured to be executed by the one or more processors, the one or more programs including instructions for:
  • the client is granted the use permission of the resource indicated by the resource identifier.
  • the resource usage qualification device, the resource permission cache component, and the user rights storage component are set in the resource usage authority judgment system, wherein the resource permission cache component is configured to query the user permission level corresponding to the resource identifier, and the user permission storage component is used to query The user privilege level corresponding to the user identity, the resource usage qualification device is configured to compare the user privilege level corresponding to the resource identifier queried by the resource privilege cache component and the user identities queried by the user privilege storage component after receiving the resource usage request Identify the corresponding user privilege level to determine whether the user has the right to use the corresponding resource, so that the logic for determining whether the user has the right to use the resource is transferred from the client to the server.
  • the user privilege level corresponding to the resource needs to be modified, only A global update can be completed by making a modification to the server, without requiring the user to update the client or affect the normal use of the service.
  • FIG. 1 is a schematic structural diagram of a resource usage authority judgment system according to an embodiment of the present invention.
  • FIG. 2 is a schematic structural diagram of a resource usage authority judgment system according to an embodiment of the present invention.
  • FIG. 3 is a flowchart of a method for determining resource usage rights according to an embodiment of the present invention
  • FIG. 4 is a block diagram of a server according to an embodiment of the present invention.
  • FIG. 5 is a schematic structural diagram of a terminal according to an embodiment of the present invention.
  • FIG. 1 is a schematic structural diagram of a resource usage authority judging system according to an embodiment of the present invention.
  • the system can include, but is not limited to, a terminal and a web server.
  • the client can be a client that provides a certain network service, such as a music client, a video client, an information aggregation read client, and the like.
  • a web server is a server, multiple servers, a virtual computing module, or a cloud computing center.
  • the network server is a background server of the network service, for example, a background server of the music service, a background server of the video service, a background server of the information aggregation reading service, and the like.
  • the network server includes: application components implemented by software, hardware, or a combination of both.
  • the application component includes a resource usage qualification verification device 110, a resource rights cache component 120, and a user rights storage component 130.
  • the resource usage qualification checking device 110 is configured to receive a resource usage request sent by the client, where the resource usage request carries the resource identifier and the user identity, and sends a first query request to the resource permission cache component 120, where the first query request carries the resource identifier. Sending a second query request to the user rights storage component 130, wherein the second query request carries the user identity.
  • the client After the user selects the resource to be used on the client, the client sends a resource usage request to the qualification verification device 110 configured on the network server, where the resource usage request carries the resource identifier and the user identifier, where the resource identifier is
  • the identifier used to index the resource package may be used to uniquely identify a resource, and the user identity may be the user's account number and ID.
  • the resource usage qualification verification device 110 is configured to: after receiving the resource usage request sent by the client, extract the corresponding resource identifier and the user identity identifier; send a first query request to the resource rights cache component 120, where the first query request is used to request the resource.
  • the permission cache component 120 queries the user permission level corresponding to the corresponding resource identifier, wherein the first query request carries the extracted resource identifier; the second query request is sent to the user rights storage component 130, and the second query request is used to request the user permission storage.
  • Component 130 check The user privilege level to which the corresponding user identity belongs, wherein the second query request carries the extracted user identity.
  • a user whose account is xiaxiadong wants to use a resource named "EXO", and the resource identifier corresponding to the resource is "ID-P#A#B".
  • the client sends a resource usage request to the resource usage qualification device 110 configured on the server, and the resource usage request carries "xiaxiadong" and "ID-P#A#B".
  • the resource use qualification verification device 110 After receiving the resource use request, the resource use qualification verification device 110 extracts "xiaxiadong” and "ID-P#A#B", and sends a first query request to the resource right cache component 120, where the first query request carries " ID-P#A#B” sends a second query request to the user rights storage component 130, and the second query request carries “xiaxiadong”.
  • the resource usage qualification checking apparatus 110 is further configured to receive a user privilege level corresponding to the resource identifier and a user privilege level to which the user identity identifier belongs, and compare the user privilege level corresponding to the resource identifier and the user privilege level to which the user identity identifier belongs, If the user privilege level of the user identity is higher than or equal to the user privilege level corresponding to the resource identifier, the user is granted the right to use the resource, or the client is granted the use permission of the resource indicated by the resource identifier.
  • the resource is a visual resource for characterizing the interface style of the client.
  • the above resources may include: a theme, a skin multimedia display page, a background image, and the like.
  • Resource privilege cache component 120
  • the resource privilege cache component 120 is configured to store the resource identifier and the user privilege level corresponding to the resource identifier, and obtain the resource identifier corresponding to the stored resource identifier and the user privilege level corresponding to the resource identifier when the first query request is received.
  • the user privilege level sends the user privilege level corresponding to the resource identifier to the resource usage qualification device 110.
  • the data stored in the resource rights cache component 120 takes the form of a key value Key-Value.
  • the resource permission cache component 120 can be a key value Key-Value cache component, such as CMEM (Cloud Memcache), and the Key-Value cache component has a fast query speed, a large amount of data storage, and high concurrency support. Very suitable for querying user privilege levels.
  • the resource rights cache component 120 can also be a database such as mySQL or Oracle.
  • the advantage of setting the resource right cache component 120 is that the resource usage qualification device 110 can be prevented from querying the user database for the user authority level corresponding to the user identity, thereby speeding up the query.
  • the resource identifiers stored in the resource rights cache component 120 and the user rights levels corresponding to the resource identifiers are in one-to-one correspondence, and the corresponding relationships may be as shown in Table 1:
  • the resource right cache component 120 After receiving the first query request, the resource right cache component 120 extracts the resource identifier, and queries the user authority level corresponding to the resource identifier according to the resource identifier and the corresponding relationship of the user authority level corresponding to the resource identifier.
  • the resource right cache component 120 queries the user corresponding to the resource identifier “ID-P#A#B” according to the corresponding relationship.
  • the authority level is 10, and the resource authority cache component 120 transmits information of the user authority level to the level 10 to the resource use qualification verification apparatus 110.
  • the user rights storage component 130 is configured to store the user identity and the user permission level to which the user identity belongs, and obtain the user from the stored user identity and the user authority level to which the user identity belongs when receiving the second query request.
  • the user privilege level to which the identity belongs, and the user privilege level to which the user identity belongs is sent to the resource usage qualification device 110.
  • the user identity identifier stored in the user rights storage component 130 and the user permission level to which the user identity identifier belongs are one-to-one correspondence, and the corresponding relationship may be as shown in Table 2:
  • the user rights storage component 130 After receiving the second query request, the user rights storage component 130 extracts the user identity, and queries the user rights level to which the user identity belongs according to the user identity and the corresponding relationship of the user rights level to which the user identity belongs.
  • the user rights storage component 130 queries the user identity level of the user identity "xiaxiadong” to be 12 according to the corresponding relationship, and the user rights storage component The information of the user authority level 12 is transmitted to the resource use qualification verification device 110.
  • the resource usage qualification checking apparatus 110 is further configured to: if the user privilege level to which the user identity belongs is lower than the user privilege level corresponding to the resource identifier, instruct the client to display the predetermined prompt information, where the predetermined prompt information is used to prompt the user to perform Authority upgrade.
  • the resource usage qualification device 110 receives the user privilege level corresponding to the resource identifier “ID-P#A#B” is 10, and receives the user privilege level of the user identity “xiaxiadong” belongs to level 12, and the resource is used.
  • the qualification verification device 110 compares the above two user permission levels, and concludes that the user authorization level 12 of the user identity identifier “xiaxiadong” belongs to level 10 of the user authority level corresponding to the resource identifier “ID-P#A#B”.
  • the resource use qualification verification device 110 grants the client the right to use the resource, and the user whose account is "xiaxiadong" can use the resource.
  • the resource qualification verification device 110 compares the "meiling" to which the resource belongs.
  • the user privilege level 2 and the user privilege level corresponding to the resource identifier "ID-P#A#B” are 10, and the user privilege level 2 of the user identity "meiling" belongs to the level lower than the resource identifier "ID-P#A”. If the user privilege level corresponding to #B is 10, the resource qualification verification device 110 sends the information for prompting the privilege escalation to the client, and the user whose account is "meiling" can choose to upgrade its own user privilege level.
  • the system provided in this embodiment is configured to set a resource usage qualification verification device, a resource permission cache component, and a user permission storage component in the resource usage authority judgment system, wherein the resource permission cache component is configured to query a user permission level corresponding to the resource identifier, and the user The permission storage component is used to query the user identity Having the corresponding user privilege level, the resource usage qualification checking device is configured to compare the user privilege level corresponding to the resource identifier queried by the resource privilege cache component with the user identities identified by the user privilege storage component after receiving the resource usage request The user privilege level, so as to determine whether the user has the right to use the corresponding resource, so that the logic for judging whether the user has the right to use the resource is transferred from the client to the server.
  • the user privilege level corresponding to the resource needs to be modified, only the server needs to be A global update can be done with one modification, without requiring the user to update the client or affect the normal use of the business.
  • FIG. 2 is a schematic structural diagram of a resource usage authority judging system according to an embodiment of the present invention.
  • the system can include, but is not limited to, a terminal and a web server.
  • the client can be a client that provides a certain network service, such as a music client, a video client, an information aggregation read client, and the like.
  • a web server is a server, multiple servers, a virtual computing module, or a cloud computing center.
  • the network server is a background server of the network service, for example, a background server of the music service, a background server of the video service, a background server of the information aggregation reading service, and the like.
  • the network server includes: application components implemented by software, hardware, or a combination of both.
  • the application component includes a resource usage qualification verification device 110, a resource rights cache component 120, a user rights storage component 130, an update component 140, and at least one function component 150.
  • system further includes: an update component 140 and at least one functional component 150;
  • the update component 140 is configured to receive and store the updated resource identifier and the user privilege level corresponding to the updated resource identifier, and periodically write the stored updated resource identifier and the user privilege level corresponding to the updated resource identifier to the resource. Privilege cache component 120.
  • the updated resource identifier includes the newly added resource identifier and the modified resource identifier.
  • the user rights storage component 130 is further configured to provide a query service for any of the functional components 150 upon receiving a second query request sent by any of the functional components 150.
  • the user right storage component 130 only performs the service of querying the user authority level corresponding to the user identity, which is separated from the service provided by the resource use qualification verification device 110, and thus can implement the function.
  • at least one functional component 150 can be provided with a query service.
  • the functional components 150 can include an identity information verification component, a music download authorization component, an advertisement screening authorization component, and the like.
  • the advertisement screening authorization component receives the advertisement screening request
  • the advertisement blocking authorization component sends a second query request to the user permission storage component 130, where the second query request carries the user identity identifier, and the second query request is used for the second query request.
  • the user permission level corresponding to the user identifier is requested to be queried to determine whether the user is allowed to block the advertisement.
  • the system provided in this embodiment is configured to set a resource usage qualification verification device, a resource permission cache component, and a user permission storage component in the resource usage authority judgment system, wherein the resource permission cache component is configured to query a user permission level corresponding to the resource identifier, and the user The privilege storage component is configured to query a user privilege level corresponding to the user identity, and the resource privilege verification device is configured to compare the user privilege level and the user privilege storage corresponding to the resource identifier queried by the resource privilege cache component after receiving the resource usage request The user privilege level corresponding to the user identity queried by the component, thereby determining whether the user has the right to use the corresponding resource, so that the logic for determining whether the user has the right to use the resource is transferred from the client to the server, and the user privilege level corresponding to the resource is required.
  • the user rights storage component and the resource usage qualification checking device are independent of each other, so that the service multiplexing can be implemented, so that the user rights storage component can provide services for other functional components.
  • FIG. 3 is a flowchart of a resource usage authority judging method according to an embodiment of the present invention.
  • the method can be performed by the web server shown in FIG. As shown in FIG. 3, the method may include but is not limited to:
  • the network server acquires, by using the resource usage qualification device, the user permission level corresponding to the resource identifier from the resource permission cache component; the network server uses the resource use qualification verification device.
  • the user rights storage component obtains the user permission level corresponding to the resource identifier.
  • the resource identifier and the user privilege level corresponding to the resource identifier adopt a key value Key-Value storage form.
  • the network server compares the user privilege level corresponding to the resource identifier and the user privilege level to which the user identity identifier belongs by using the resource usage qualification checking device.
  • the network server grants the client permission to use the resource indicated by the resource identifier through the resource usage qualification device.
  • the network server grants the user the right to use the resource through the resource use qualification verification device;
  • the client is instructed to display the predetermined prompt information, and the predetermined prompt information is used to prompt the user to perform the privilege escalation.
  • the embodiment of the present invention may further include:
  • the updated resource identifier is written periodically and the user privilege level corresponding to the updated resource identifier.
  • the resource usage authority judging method After receiving the resource usage request, the resource usage authority judging method obtains the user privilege level corresponding to the resource identifier and the user privilege level to which the user identity identifier belongs, and compares the user privilege level and the user identity corresponding to the resource identifier. Indicates the user privilege level to which the user ID belongs. If the user privilege level of the user ID is higher than or equal to the user privilege level corresponding to the resource ID, the user is granted the right to use the resource, so that the logic for determining whether the user has permission to use the resource is used by the client. When you transfer to the server, you need to modify the user privilege level of the resource. You only need to modify the server to complete the global update. You do not need to update the client or affect the normal use of the service.
  • FIG. 4 is a block diagram of a server 400, according to an exemplary embodiment.
  • server 400 includes processing component 422 that further includes one or more processors, and memory resources represented by memory 432 for storing instructions executable by processing component 422, such as an application.
  • the application stored in the memory 432 may include one or more corresponding ones each A module of a set of instructions.
  • processing component 422 is configured to execute instructions including instructions for performing network server side operations in FIG. 3 and its alternative embodiments described above.
  • Server 400 may also include a power component 426 configured to perform power management of server 400, a wired or wireless network interface 450 configured to connect server 400 to the network, and an input/output (I/O) interface 458.
  • Server 400 may operate based on an operating system stored in the memory 432, for example, Windows Server TM, Mac OS X TM , Unix TM, Linux TM, FreeBSD TM or the like.
  • FIG. 5 is a block diagram of a terminal 500, which may be used to perform the resource usage authority determination method provided in the foregoing various embodiments, according to an exemplary embodiment.
  • the terminal 500 includes:
  • the terminal 500 may include an RF (Radio Frequency) circuit 510, a memory 520 including one or more computer readable storage media, an input unit 530, a display unit 540, a sensor 550, an audio circuit 560, and a WiFi (Wireless Fidelity, wireless).
  • the fidelity module 570 includes a processor 580 having one or more processing cores, and a power supply 590 and the like. It will be understood by those skilled in the art that the terminal structure shown in FIG. 5 does not constitute a limitation to the terminal, and may include more or less components than those illustrated, or a combination of certain components, or different component arrangements. among them:
  • the RF circuit 510 can be used for receiving and transmitting signals during and after receiving or transmitting information, in particular, after receiving downlink information of the base station, and processing it by one or more processors 580; in addition, transmitting data related to the uplink to the base station.
  • the RF circuit 510 includes, but is not limited to, an antenna, at least one amplifier, a tuner, one or more oscillators, a Subscriber Identity Module (SIM) card, a transceiver, a coupler, an LNA (Low Noise Amplifier). , duplexer, etc.
  • SIM Subscriber Identity Module
  • RF circuitry 110 can also communicate with the network and other devices via wireless communication.
  • the wireless communication may use any communication standard or protocol, including but not limited to GSM (Global System of Mobile communication), GPRS (General Packet Radio Service), CDMA (Code Division Multiple Access). , Code Division Multiple Access), WCDMA (Wideband Code Division Multiple Access), LTE (Long Term Evolution), e-mail, SMS (Short Messaging Service), and the like.
  • GSM Global System of Mobile communication
  • GPRS General Packet Radio Service
  • CDMA Code Division Multiple Access
  • WCDMA Wideband Code Division Multiple Access
  • LTE Long Term Evolution
  • e-mail Short Messaging Service
  • the memory 520 can be used to store software programs and modules, and the processor 580 stores them in storage.
  • the software program and modules of the storage 520 perform various functional applications and data processing.
  • the memory 520 may mainly include a storage program area and a storage data area, wherein the storage program area may store an operating system, an application required for at least one function (such as a sound playing function, an image playing function, etc.), and the like; the storage data area may be stored according to The data created by the use of the terminal 500 (such as audio data, phone book, etc.) and the like.
  • memory 520 can include high speed random access memory, and can also include non-volatile memory, such as at least one magnetic disk storage device, flash memory device, or other volatile solid state storage device. Accordingly, memory 520 may also include a memory controller to provide access to memory 520 by processor 580 and input unit 530.
  • Input unit 530 can be used to receive input numeric or character information, as well as to generate keyboard, mouse, joystick, optical or trackball signal inputs related to user settings and function controls.
  • input unit 530 can include touch-sensitive surface 531 as well as other input devices 532.
  • a touch-sensitive surface 531 also referred to as a touch display or trackpad, can collect touch operations on or near the user (eg, the user uses a finger, stylus, etc., any suitable object or accessory on the touch-sensitive surface 531 or The operation near the touch-sensitive surface 531) and driving the corresponding connecting device according to a preset program.
  • the touch-sensitive surface 531 can include two portions of a touch detection device and a touch controller.
  • the touch detection device detects the touch orientation of the user, and detects a signal brought by the touch operation, and transmits the signal to the touch controller; the touch controller receives the touch information from the touch detection device, converts the touch information into contact coordinates, and sends the touch information.
  • the processor 580 is provided and can receive commands from the processor 580 and execute them.
  • the touch sensitive surface 531 can be implemented in various types such as resistive, capacitive, infrared, and surface acoustic waves.
  • the input unit 530 can also include other input devices 532. Specifically, other input devices 532 may include, but are not limited to, one or more of a physical keyboard, function keys (such as volume control buttons, switch buttons, etc.), trackballs, mice, joysticks, and the like.
  • Display unit 540 can be used to display information entered by the user or information provided to the user and various graphical user interfaces of terminal 500, which can be composed of graphics, text, icons, video, and any combination thereof.
  • the display unit 540 can include a display panel 541.
  • the display panel 541 can be configured in the form of an LCD (Liquid Crystal Display), an OLED (Organic Light-Emitting Diode), or the like.
  • the touch-sensitive surface 531 can cover the display panel 541, and when the touch-sensitive surface 531 detects a touch operation thereon or nearby, it is transmitted to the processor 580 to determine the type of the touch event, and then the processor 580 according to the touch event The type provides a corresponding visual output on display panel 541.
  • touch-sensitive surface 531 and display panel 541 are implemented as two separate components to implement input and input functions, in some embodiments, The touch-sensitive surface 531 is integrated with the display panel 541 to implement input and output functions.
  • Terminal 500 can also include at least one type of sensor 550, such as a light sensor, motion sensor, and other sensors.
  • the light sensor may include an ambient light sensor and a proximity sensor, wherein the ambient light sensor may adjust the brightness of the display panel 541 according to the brightness of the ambient light, and the proximity sensor may close the display panel 541 when the terminal 500 moves to the ear. / or backlight.
  • the gravity acceleration sensor can detect the magnitude of acceleration in all directions (usually three axes). When it is stationary, it can detect the magnitude and direction of gravity.
  • the terminal 500 can also be configured with gyroscopes, barometers, hygrometers, thermometers, infrared sensors and other sensors, here Let me repeat.
  • Audio circuit 560, speaker 561, and microphone 562 can provide an audio interface between the user and terminal 500.
  • the audio circuit 560 can transmit the converted electrical data of the received audio data to the speaker 561, and convert it into a sound signal output by the speaker 561.
  • the microphone 562 converts the collected sound signal into an electrical signal, and the audio circuit 560 is used by the audio circuit 560. After receiving, it is converted into audio data, and then processed by the audio data output processor 580, transmitted to the terminal, for example, via the RF circuit 510, or outputted to the memory 520 for further processing.
  • the audio circuit 560 may also include an earbud jack to provide communication of the peripheral earphones with the terminal 500.
  • WiFi is a short-range wireless transmission technology
  • the terminal 500 can help users to send and receive emails, browse web pages, and access streaming media through the WiFi module 570, which provides wireless broadband Internet access for users.
  • FIG. 5 shows the WiFi module 570, it can be understood that it does not belong to the essential configuration of the terminal 500, and may be omitted as needed within the scope of not changing the essence of the invention.
  • Processor 580 is the control center of terminal 500, which connects various portions of the entire handset using various interfaces and lines, by running or executing software programs and/or modules stored in memory 520, and recalling data stored in memory 520, The various functions and processing data of the terminal 500 are performed to perform overall monitoring of the mobile phone.
  • the processor 580 may include one or more processing cores; preferably, the processor 580 may integrate an application processor and a modem processor, where the application processor mainly processes an operating system, a user interface, an application, and the like.
  • the modem processor primarily handles wireless communications. It will be appreciated that the above described modem processor may also not be integrated into the processor 580.
  • the terminal 500 also includes a power source 590 (such as a battery) that supplies power to the various components.
  • a power source 590 such as a battery
  • the power source can be logically coupled to the processor 580 through a power management system to manage functions such as charging, discharging, and power management through the power management system.
  • the power supply 590 can also include one or more straight Any component such as a stream or AC power source, recharging system, power failure detection circuit, power converter or inverter, power status indicator.
  • the terminal 500 may further include a camera, a Bluetooth module, and the like, and details are not described herein again.
  • the display unit of the terminal is a touch screen display
  • the terminal further includes a memory, and one or more programs, wherein one or more programs are stored in the memory and configured to be processed by one or more Execution.
  • the one or more programs include instructions for performing terminal side operations in Figure 3 above and alternative embodiments thereof.
  • a person skilled in the art may understand that all or part of the steps of implementing the above embodiments may be completed by hardware, or may be instructed by a program to execute related hardware, and the program may be stored in a computer readable storage medium.
  • the storage medium mentioned may be a read only memory, a magnetic disk or an optical disk or the like.

Landscapes

  • Engineering & Computer Science (AREA)
  • Signal Processing (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Databases & Information Systems (AREA)
  • Multimedia (AREA)
  • Storage Device Security (AREA)

Abstract

本发明公开了一种资源使用权限判断系统及方法，属于网络技术领域。该资源使用权限判断系统包括：资源使用资格校验装置、资源权限缓存组件和用户权限存储组件；该资源权限判断方法包括：接收资源使用请求，获取资源标识对应的用户权限级别和用户身份标识所属的用户权限级别，比较资源标识对应的用户权限级别及用户身份标识所属的用户权限级别，若后者高于或等于前者，则为用户发放使用资源的权限。该资源使用权限判断系统和方法使判断用户是否有权限使用资源的逻辑由客户端转移到服务器，避免了客户端逻辑臃肿，保证了客户端的正常运行。

Description

资源使用权限判断系统及方法
本申请要求于2015年10月21日提交中国专利局、申请号为2015106893334、发明名称为“资源使用权限判断系统及方法”的中国专利申请的优先权，其全部内容通过引用结合在本申请中。
技术领域
本发明涉及网络技术领域，特别涉及一种资源使用权限判断系统及方法。
背景技术
在网络技术领域，为了丰富客户端的显示效果，用户可以下载并使用服务提供商所提供的各种资源。其中，资源指的是主题、皮肤多媒体展示页面和背景图片等内容。
在用户使用客户端从服务器获取资源时，服务提供商经常会对资源的使用进行有关用户权限级别的限制。比如，对于资源A，需要客户端对应的用户权限级别达到2级才有权使用该资源A；又比如，对于资源B，需要客户端对应的用户权限级别达到3级才有权使用该资源B。现有技术中，通常由客户端获取资源对应的用户权限级别和用户对应的用户权限级别，然后再由客户端判断用户是否有权限下载和使用该资源。
然而，这种方法的判断逻辑是由客户端完成的。由于服务器可能会更改某个资源对应的用户权限级别，比如将资源A的用户权限级别修改为达到4级才有权使用，此时需要所有的客户端全部进行升级才能支持本次修改。当一些用户不愿意升级客户端时，存在一部分客户端使用旧的判断逻辑，而一部分客户端使用新的判断逻辑，导致全局的用户权限级别的判断逻辑发生混乱，影响业务的正常运行。
发明内容
为了解决现有技术的问题，本发明实施例提供了一种资源使用权限判断系统及方法。所述技术方案如下：
第一方面，提供了一种资源使用权限判断系统，所述系统包括：资源使用 资格校验装置、资源权限缓存组件和用户权限存储组件；
所述资源使用资格校验装置，用于接收客户端发送的资源使用请求，所述资源使用请求携带资源标识及用户身份标识，向所述资源权限缓存组件发送第一查询请求，所述第一查询请求携带所述资源标识，向所述用户权限存储组件发送第二查询请求，所述第二查询请求携带所述用户身份标识；
所述资源权限缓存组件，用于存储所述资源标识以及与所述资源标识对应的用户权限级别，在接收到所述第一查询请求时，从存储的所述资源标识以及与所述资源标识对应的用户权限级别中，获取所述资源标识对应的用户权限级别，并将所述资源标识对应的用户权限级别发送至所述资源使用资格校验装置；
所述用户权限存储组件，用于存储所述用户身份标识以及所述用户身份标识所属的用户权限级别，在接收到所述第二查询请求时，从存储的所述用户身份标识以及所述用户身份标识所属的用户权限级别中，获取所述用户身份标识所属的用户权限级别，并将所述用户身份标识所属的用户权限级别发送至所述资源使用资格校验装置；
所述资源使用资格校验装置，还用于接收所述资源标识对应的用户权限级别和所述用户身份标识所属的用户权限级别，比较所述资源标识对应的用户权限级别及所述用户身份标识所属的用户权限级别，若所述用户身份标识所属的用户权限级别高于或等于所述资源标识对应的用户权限级别，则向所述客户端授予使用所述资源标识所指示的资源的使用权限。
第二方面，提供了一种资源使用权限判断方法，所述方法包括：
接收资源使用请求，所述资源使用请求携带资源标识及用户身份标识；
获取所述资源标识对应的用户权限级别和所述用户身份标识所属的用户权限级别；
比较所述资源标识对应的用户权限级别及所述用户身份标识所属的用户权限级别；
若所述用户身份标识所属的用户权限级别高于或等于所述资源标识对应的用户权限级别，则为用户发放使用资源的权限。
第三方面，提供了一种资源使用权限判断系统，所述系统包括：
一个或多个处理器；和
存储器；
所述存储器存储有一个或多个程序，所述一个或多个程序被配置成由所述一个或多个处理器执行，所述一个或多个程序包含用于进行以下操作的指令：
接收客户端发送的资源使用请求，所述资源使用请求携带资源标识及用户身份标识；
获取所述资源标识对应的用户权限级别和所述用户身份标识所属的用户权限级别；
比较所述资源标识对应的用户权限级别及所述用户身份标识所属的用户权限级别；
若所述用户身份标识所属的用户权限级别高于或等于所述资源标识对应的用户权限级别，则向所述客户端授予使用所述资源标识所指示的资源的使用权限。
本发明实施例提供的技术方案带来的有益效果是：
通过在资源使用权限判断系统中设置资源使用资格校验装置、资源权限缓存组件和用户权限存储组件，其中，资源权限缓存组件用于查询资源标识对应的用户权限级别，用户权限存储组件用于查询用户身份标识对应的用户权限级别，资源使用资格校验装置用于在接收到资源使用请求后，比较资源权限缓存组件查询到的资源标识对应的用户权限级别和用户权限存储组件查询到的用户身份标识对应的用户权限级别，以判断用户是否有权限使用相应资源，从而将判断用户是否有权限使用资源的逻辑由客户端转移到服务器，当需要对资源对应的用户权限级别进行修改时，仅需要在服务器进行一次修改即可完成全局更新，不需要用户更新客户端，也不会影响业务的正常使用的效果。
应当理解的是，以上的一般描述和后文的细节描述仅是示例性的，并不能限制本发明。
附图说明
为了更清楚地说明本发明实施例中的技术方案，下面将对实施例描述中所需要使用的附图作简单地介绍，显而易见地，下面描述中的附图仅仅是本发明的一些实施例，对于本领域普通技术人员来讲，在不付出创造性劳动的前提下，还可以根据这些附图获得其他的附图。
图1是本发明实施例提供的一种资源使用权限判断系统的结构示意图；
图2是本发明实施例提供的一种资源使用权限判断系统的结构示意图；
图3是本发明实施例提供的一种资源使用权限判断方法的流程图；
图4是本发明实施例提供的一种服务器的框图。
图5是本发明实施例提供的一种终端的结构示意图。
具体实施方式
为使本发明的目的、技术方案和优点更加清楚，下面将结合附图对本发明实施方式作进一步地详细描述。
请参考图1，其示出了本发明一个实施例提供的资源使用权限判断系统的结构示意图。如图1所示，该系统可以包括但不限于：终端和网络服务器。
终端中运行有客户端。该客户端可以是提供某一网络服务的客户端，比如，音乐客户端、视频客户端、信息聚合阅读客户端等等。
网络服务器是一台服务器、多台服务器、虚拟运算模组或者云计算中心。网络服务器是网络服务的后台服务器，比如，音乐服务的后台服务器、视频服务的后台服务器、信息聚合阅读服务的后台服务器等等。
网络服务器中包括：由软件、硬件或者两者的结合所实现的应用组件。该应用组件包括：资源使用资格校验装置110、资源权限缓存组件120和用户权限存储组件130。
1、资源使用资格校验装置110：
资源使用资格校验装置110用于客户端发送的接收资源使用请求，该资源使用请求携带资源标识及用户身份标识，向资源权限缓存组件120发送第一查询请求，其中第一查询请求携带资源标识；向用户权限存储组件130发送第二查询请求，其中第二查询请求携带用户身份标识。
用户通过在客户端上选中待使用的资源后，客户端向配置在网络服务器上的资格校验装置110发送资源使用请求，该资源使用请求携带有资源标识及用户身份标识，其中，资源标识是用于索引资源包的标识，可以用于唯一标识一个资源，用户身份标识可以是用户的账号、ID。
资源使用资格校验装置110用于接收客户端发送的资源使用请求后，提取出相应的资源标识及用户身份标识；向资源权限缓存组件120发送第一查询请求，第一查询请求用于请求资源权限缓存组件120查询相应资源标识对应的用户权限级别，其中，该第一查询请求携带有提取的资源标识；向用户权限存储组件130发送第二查询请求，第二查询请求用于请求用户权限存储组件130查 询的相应用户身份标识所属的用户权限级别，其中，该第二查询请求携带有提取的用户身份标识。
例如，账户为xiaxiadong的用户想要使用名为“EXO”的资源，该资源对应的资源标识为“ID-P#A#B”。用户点击该资源后，客户端向配置在服务器上的资源使用资格校验装置110发送资源使用请求，该资源使用请求携带有“xiaxiadong”和“ID-P#A#B”。资源使用资格校验装置110接收该资源使用请求后，提取出“xiaxiadong”和“ID-P#A#B”，向资源权限缓存组件120发送第一查询请求，该第一查询请求携带有“ID-P#A#B”，向用户权限存储组件130发送第二查询请求，该第二查询请求携带有“xiaxiadong”。
进一步地，资源使用资格校验装置110还用于接收资源标识对应的用户权限级别和用户身份标识所属的用户权限级别，比较资源标识对应的用户权限级别及用户身份标识所属的用户权限级别，若用户身份标识所属的用户权限级别高于或等于资源标识对应的用户权限级别，则为用户发放使用资源的权限，或者说，向客户端授予使用该资源标识所指示的资源的使用权限。
优选的，该资源是用于表征客户端的界面风格的视觉资源。上述资源可以包括：主题、皮肤多媒体展示页面和背景图片等。
2、资源权限缓存组件120：
资源权限缓存组件120用于存储资源标识以及与资源标识对应的用户权限级别，在接收到第一查询请求时，从存储的资源标识以及与资源标识对应的用户权限级别中，获取资源标识对应的用户权限级别，将资源标识对应的用户权限级别发送至资源使用资格校验装置110。
优选的，资源权限缓存组件120中所存储的数据采取键值Key-Value存储形式。也即是，资源权限缓存组件120可以是键值Key-Value缓存组件，如CMEM(Cloud Memcache，云存储缓存)，键值Key-Value缓存组件查询速度快、存放数据量大、支持高并发，非常适合用户权限级别的查询。此外，资源权限缓存组件120也可以是mySQL、Oracle等数据库。
设置资源权限缓存组件120的优势在于可以避免资源使用资格校验装置110向用户数据库查询用户身份标识对应的用户权限级别，从而可以加速查询速度。
资源权限缓存组件120中存储的资源标识以及与资源标识对应的用户权限级别是一一对应的，其对应关系可以如表1所示：
表1
资源标识 用户权限级别
ID-P#B#A 1级以上
ID-Q#C#A 1级以上
ID-R#D#B 5级以上
ID-P#A#B 10级以上
ID-O#B#F 11级以上
…… ……
需要说明的是，以上表1资源标识与用户权限级别的对应关系仅仅是示例性的，并不能限制本发明。
资源权限缓存组件120接收到第一查询请求后，提取资源标识，并根据资源标识以及与资源标识对应的用户权限级别的对应关系，查询资源标识对应的用户权限级别。
例如，资源权限缓存组件120接收到携带有资源标识“ID-P#A#B”的第一查询请求后，根据上述对应关系查询到该资源标识“ID-P#A#B”对应的用户权限级别为10级，资源权限缓存组件120将用户权限级别为10级的信息发送至资源使用资格校验装置110。
3、用户权限存储组件130：
用户权限存储组件130用于存储用户身份标识以及用户身份标识所属的用户权限级别，并在接收到第二查询请求时，从存储的用户身份标识以及用户身份标识所属的用户权限级别中，获取用户身份标识所属的用户权限级别，并将用户身份标识所属的用户权限级别发送至资源使用资格校验装置110。
用户权限存储组件130中存储的用户身份标识以及用户身份标识所属的用户权限级别是一一对应的，其对应关系可以如表2所示：
表2
用户身份标识 用户权限级别
meiling 2级
nannan 2级
lingling 5级
xiaomei 11级
xiaxiadong 12级
…… ……
需要说明的是，以上表2用户身份标识与用户权限级别的对应关系仅仅是示例性的，并不能限制本发明。
用户权限存储组件130接收到第二查询请求后，提取用户身份标识，并根据用户身份标识以及用户身份标识所属的用户权限级别的对应关系，查询用户身份标识所属的用户权限级别。
例如，用户权限存储组件130接收到携带有用户身份标识“xiaxiadong”的第二查询请求后，根据上述对应关系查询到该用户身份标识“xiaxiadong”所属的用户权限级别为12级，用户权限存储组件130将用户权限级别12级的信息发送至资源使用资格校验装置110。
优选的，资源使用资格校验装置110还用于，若用户身份标识所属的用户权限级别低于资源标识对应的用户权限级别，则指示客户端显示预定提示信息，预定提示信息用于提示用户进行权限升级。
例如，资源使用资格校验装置110接收到资源标识“ID-P#A#B”对应的用户权限级别为10级，接收到用户身份标识“xiaxiadong”所属的用户权限级别为12级，资源使用资格校验装置110比较上述两个用户权限级别，得出用户身份标识“xiaxiadong”所属的用户权限级别12级高于资源标识“ID-P#A#B”对应的用户权限级别10级，则资源使用资格校验装置110向客户端授予使用该资源的权限，账户为“xiaxiadong”的用户即可使用该资源。
若账户为“meiling”的用户想要使用名为“EXO”的资源，该资源对应的资源标识为“ID-P#A#B”，则资源使用资格校验装置110比较“meiling”所属的用户权限级别2级和资源标识“ID-P#A#B”对应的用户权限级别10级，得出用户身份标识“meiling”所属的用户权限级别2级低于资源标识“ID-P#A#B”对应的用户权限级别10级，则资源使用资格校验装置110向客户端发送用于提示权限升级的信息，账户为“meiling”的用户可以选择升级其自身的用户权限级别。
本实施例提供的系统，通过在资源使用权限判断系统中设置资源使用资格校验装置、资源权限缓存组件和用户权限存储组件，其中资源权限缓存组件用于查询资源标识对应的用户权限级别，用户权限存储组件用于查询用户身份标 识对应的用户权限级别，资源使用资格校验装置用于在接收到资源使用请求后，比较资源权限缓存组件查询到的资源标识对应的用户权限级别和用户权限存储组件查询到的用户身份标识对应的用户权限级别，从而判断用户是否有权限使用相应资源，从而使判断用户是否有权限使用资源的逻辑由客户端转移到服务器，当需要对资源对应的用户权限级别进行修改时，仅需要在服务器进行一次修改即可完成全局更新，不需要用户更新客户端，也不会影响业务的正常使用的效果。
请参考图2，其示出了本发明一个实施例提供的资源使用权限判断系统的结构示意图。如图2所示，该系统可以包括但不限于：终端和网络服务器。
终端中运行有客户端。该客户端可以是提供某一网络服务的客户端，比如，音乐客户端、视频客户端、信息聚合阅读客户端等等。
网络服务器是一台服务器、多台服务器、虚拟运算模组或者云计算中心。网络服务器是网络服务的后台服务器，比如，音乐服务的后台服务器、视频服务的后台服务器、信息聚合阅读服务的后台服务器等等。
网络服务器中包括：由软件、硬件或者两者的结合所实现的应用组件。该应用组件包括：资源使用资格校验装置110、资源权限缓存组件120、用户权限存储组件130、更新组件140和至少一个功能组件150。
1、资源使用资格校验装置110；
2、资源权限缓存组件120；
3、用户权限存储组件130；
上述系统构成与图1所示实施例中的描述同理，在此不作赘述。进一步地，该系统还包括：更新组件140和至少一个功能组件150；
其中，更新组件140用于接收并存储更新的资源标识以及与更新的资源标识对应的用户权限级别，并定时将已存储的更新的资源标识以及与更新的资源标识对应的用户权限级别写入资源权限缓存组件120。更新的资源标识包括新增的资源标识以及修改的资源标识。
在另一实施例中，用户权限存储组件130还用于在接收到任一个功能组件150发送的第二查询请求时，为任一个功能组件150提供查询服务。
用户权限存储组件130仅执行查询用户身份标识对应的用户权限级别的业务，其与资源使用资格校验装置110提供的业务分离，因而可以实现功能上的 复用，可以为至少一个功能组件150提供查询服务。
例如，至少一个功能组件150可以包括身份信息验证组件、音乐下载授权组件和广告屏蔽授权组件等。下面以广告屏蔽授权组件为例进行说明，广告屏蔽授权组件接收到广告屏蔽请求时，向用户权限存储组件130发送第二查询请求，该第二查询请求携带用户身份标识，第二查询请求用于请求查询上述用户身份标识对应的用户权限级别，以判断是否允许用户屏蔽广告。
本实施例提供的系统，通过在资源使用权限判断系统中设置资源使用资格校验装置、资源权限缓存组件和用户权限存储组件，其中资源权限缓存组件用于查询资源标识对应的用户权限级别，用户权限存储组件用于查询用户身份标识对应的用户权限级别，资源使用资格校验装置用于在接收到资源使用请求后，比较资源权限缓存组件查询到的资源标识对应的用户权限级别和用户权限存储组件查询到的用户身份标识对应的用户权限级别，从而判断用户是否有权限使用相应资源，从而使判断用户是否有权限使用资源的逻辑由客户端转移到服务器，当需要对资源对应的用户权限级别进行修改时，仅需要在服务器进行一次修改即可完成全局更新，不需要用户更新客户端，也不会影响业务的正常使用的效果。
进一步地，用户权限存储组件与资源使用资格校验装置之间业务独立，因而可以实现业务上的复用，使用户权限存储组件可以为其他功能组件提供服务。
下述为本发明的方法实施例，可以应用于本发明的系统实施例。对于本发明方法实施例中未披露的细节，请参照本发明的系统实施例。
请参考图3，其示出了本发明一个实施例提供的资源使用权限判断方法的流程图。该方法可以由图1中所示的网络服务器执行。如图3所示，该方法可以包括但不限于：
310、接收客户端发送的资源使用请求，该资源使用请求携带资源标识及用户身份标识。
320、获取资源标识对应的用户权限级别和用户身份标识所属的用户权限级别；
可选地，网络服务器通过资源使用资格校验装置从资源权限缓存组件，获取资源标识对应的用户权限级别；网络服务器通过资源使用资格校验装置从用 户权限存储组件，获取资源标识对应的用户权限级别。
优选的，资源标识及与资源标识对应的用户权限级别采取键值Key-Value存储形式。
330、比较资源标识对应的用户权限级别及用户身份标识所属的用户权限级别；
可选地，网络服务器通过资源使用资格校验装置比较资源标识对应的用户权限级别及用户身份标识所属的用户权限级别。
340、若用户身份标识所属的用户权限级别高于或等于资源标识对应的用户权限级别，则向客户端授予使用资源标识所指示的资源的使用权限。
可选地，网络服务器通过资源使用资格校验装置向客户端授予使用资源标识所指示的资源的使用权限。或者说，网络服务器通过资源使用资格校验装置为用户发放使用资源的权限；
优选的，若用户身份标识所属的用户权限级别低于资源标识对应的用户权限级别，则指示客户端显示预定提示信息，预定提示信息用于提示所述用户进行权限升级。
优选的，本发明实施例还可以包括：
接收更新的资源标识以及与更新的资源标识对应的用户权限级别；
定时写入更新的资源标识以及与更新的资源标识对应的用户权限级别。
本实施例提供的资源使用权限判断方法，通过在接收到资源使用请求后，获取资源标识对应的用户权限级别和用户身份标识所属的用户权限级别，并比较资源标识对应的用户权限级别及用户身份标识所属的用户权限级别，若用户身份标识所属的用户权限级别高于或等于资源标识对应的用户权限级别，则为用户发放使用资源的权限，使判断用户是否有权限使用资源的逻辑由客户端转移到服务器，当需要对资源对应的用户权限级别进行修改时，仅需要在服务器进行一次修改即可完成全局更新，不需要用户更新客户端，也不会影响业务的正常使用的效果。
图4是根据一示例性实施例示出的一种服务器400的框图。参照图4，服务器400包括处理组件422，其进一步包括一个或多个处理器，以及由存储器432所代表的存储器资源，用于存储可由处理部件422的执行的指令，例如应用程序。存储器432中存储的应用程序可以包括一个或一个以上的每一个对应 于一组指令的模块。此外，处理组件422被配置为执行指令，该一个或一个以上的指令包括用于执行上述图3以及其可选实施例中网络服务器侧操作的指令。
服务器400还可以包括一个电源组件426被配置为执行服务器400的电源管理，一个有线或无线网络接口450被配置为将服务器400连接到网络，和一个输入输出(I/O)接口458。服务器400可以操作基于存储在存储器432的操作系统，例如Windows ServerTM，Mac OS XTM，UnixTM,LinuxTM，FreeBSDTM或类似。
图5是根据一示例性实施例示出的一种终端500的框图，该终端可以用于执行上述各个实施例中提供的资源使用权限判断方法。参见图5，该终端500包括：
终端500可以包括RF(Radio Frequency，射频)电路510、包括有一个或一个以上计算机可读存储介质的存储器520、输入单元530、显示单元540、传感器550、音频电路560、WiFi(Wireless Fidelity，无线保真)模块570、包括有一个或者一个以上处理核心的处理器580、以及电源590等部件。本领域技术人员可以理解，图5中示出的终端结构并不构成对终端的限定，可以包括比图示更多或更少的部件，或者组合某些部件，或者不同的部件布置。其中：
RF电路510可用于收发信息或通话过程中，信号的接收和发送，特别地，将基站的下行信息接收后，交由一个或者一个以上处理器580处理；另外，将涉及上行的数据发送给基站。通常，RF电路510包括但不限于天线、至少一个放大器、调谐器、一个或多个振荡器、用户身份模块(SIM)卡、收发信机、耦合器、LNA(Low Noise Amplifier，低噪声放大器)、双工器等。此外，RF电路110还可以通过无线通信与网络和其他设备通信。所述无线通信可以使用任一通信标准或协议，包括但不限于GSM(Global System of Mobile communication，全球移动通讯系统)、GPRS(General Packet Radio Service，通用分组无线服务)、CDMA(Code Division Multiple Access，码分多址)、WCDMA(Wideband Code Division Multiple Access,宽带码分多址)、LTE(Long Term Evolution,长期演进)、电子邮件、SMS(Short Messaging Service，短消息服务)等。
存储器520可用于存储软件程序以及模块，处理器580通过运行存储在存 储器520的软件程序以及模块，从而执行各种功能应用以及数据处理。存储器520可主要包括存储程序区和存储数据区，其中，存储程序区可存储操作系统、至少一个功能所需的应用程序(比如声音播放功能、图像播放功能等)等；存储数据区可存储根据终端500的使用所创建的数据(比如音频数据、电话本等)等。此外，存储器520可以包括高速随机存取存储器，还可以包括非易失性存储器，例如至少一个磁盘存储器件、闪存器件、或其他易失性固态存储器件。相应地，存储器520还可以包括存储器控制器，以提供处理器580和输入单元530对存储器520的访问。
输入单元530可用于接收输入的数字或字符信息，以及产生与用户设置以及功能控制有关的键盘、鼠标、操作杆、光学或者轨迹球信号输入。具体地，输入单元530可包括触敏表面531以及其他输入设备532。触敏表面531，也称为触摸显示屏或者触控板，可收集用户在其上或附近的触摸操作(比如用户使用手指、触笔等任何适合的物体或附件在触敏表面531上或在触敏表面531附近的操作)，并根据预先设定的程式驱动相应的连接装置。可选的，触敏表面531可包括触摸检测装置和触摸控制器两个部分。其中，触摸检测装置检测用户的触摸方位，并检测触摸操作带来的信号，将信号传送给触摸控制器；触摸控制器从触摸检测装置上接收触摸信息，并将它转换成触点坐标，再送给处理器580，并能接收处理器580发来的命令并加以执行。此外，可以采用电阻式、电容式、红外线以及表面声波等多种类型实现触敏表面531。除了触敏表面531，输入单元530还可以包括其他输入设备532。具体地，其他输入设备532可以包括但不限于物理键盘、功能键(比如音量控制按键、开关按键等)、轨迹球、鼠标、操作杆等中的一种或多种。
显示单元540可用于显示由用户输入的信息或提供给用户的信息以及终端500的各种图形用户接口，这些图形用户接口可以由图形、文本、图标、视频和其任意组合来构成。显示单元540可包括显示面板541，可选的，可以采用LCD(Liquid Crystal Display，液晶显示器)、OLED(Organic Light-Emitting Diode,有机发光二极管)等形式来配置显示面板541。进一步的，触敏表面531可覆盖显示面板541，当触敏表面531检测到在其上或附近的触摸操作后，传送给处理器580以确定触摸事件的类型，随后处理器580根据触摸事件的类型在显示面板541上提供相应的视觉输出。虽然在图5中，触敏表面531与显示面板541是作为两个独立的部件来实现输入和输入功能，但是在某些实施例中，可以将 触敏表面531与显示面板541集成而实现输入和输出功能。
终端500还可包括至少一种传感器550，比如光传感器、运动传感器以及其他传感器。具体地，光传感器可包括环境光传感器及接近传感器，其中，环境光传感器可根据环境光线的明暗来调节显示面板541的亮度，接近传感器可在终端500移动到耳边时，关闭显示面板541和/或背光。作为运动传感器的一种，重力加速度传感器可检测各个方向上(一般为三轴)加速度的大小，静止时可检测出重力的大小及方向，可用于识别手机姿态的应用(比如横竖屏切换、相关游戏、磁力计姿态校准)、振动识别相关功能(比如计步器、敲击)等；至于终端500还可配置的陀螺仪、气压计、湿度计、温度计、红外线传感器等其他传感器，在此不再赘述。
音频电路560、扬声器561，传声器562可提供用户与终端500之间的音频接口。音频电路560可将接收到的音频数据转换后的电信号，传输到扬声器561，由扬声器561转换为声音信号输出；另一方面，传声器562将收集的声音信号转换为电信号，由音频电路560接收后转换为音频数据，再将音频数据输出处理器580处理后，经RF电路510以发送给比如另一终端，或者将音频数据输出至存储器520以便进一步处理。音频电路560还可能包括耳塞插孔，以提供外设耳机与终端500的通信。
WiFi属于短距离无线传输技术，终端500通过WiFi模块570可以帮助用户收发电子邮件、浏览网页和访问流式媒体等，它为用户提供了无线的宽带互联网访问。虽然图5示出了WiFi模块570，但是可以理解的是，其并不属于终端500的必须构成，完全可以根据需要在不改变发明的本质的范围内而省略。
处理器580是终端500的控制中心，利用各种接口和线路连接整个手机的各个部分，通过运行或执行存储在存储器520内的软件程序和/或模块，以及调用存储在存储器520内的数据，执行终端500的各种功能和处理数据，从而对手机进行整体监控。可选的，处理器580可包括一个或多个处理核心；优选的，处理器580可集成应用处理器和调制解调处理器，其中，应用处理器主要处理操作系统、用户界面和应用程序等，调制解调处理器主要处理无线通信。可以理解的是，上述调制解调处理器也可以不集成到处理器580中。
终端500还包括给各个部件供电的电源590(比如电池)，优选的，电源可以通过电源管理系统与处理器580逻辑相连，从而通过电源管理系统实现管理充电、放电、以及功耗管理等功能。电源590还可以包括一个或一个以上的直 流或交流电源、再充电系统、电源故障检测电路、电源转换器或者逆变器、电源状态指示器等任意组件。
尽管未示出，终端500还可以包括摄像头、蓝牙模块等，在此不再赘述。具体在本实施例中，终端的显示单元是触摸屏显示器，终端还包括有存储器，以及一个或者一个以上的程序，其中一个或者一个以上程序存储于存储器中，且经配置以由一个或者一个以上处理器执行。所述一个或者一个以上程序包含用于执行上述图3以及其可选实施例中终端侧操作的指令。
本领域普通技术人员可以理解实现上述实施例的全部或部分步骤可以通过硬件来完成，也可以通过程序来指令相关的硬件完成，所述的程序可以存储于一种计算机可读存储介质中，上述提到的存储介质可以是只读存储器，磁盘或光盘等。
以上所述仅为本发明的较佳实施例，并不用以限制本发明，凡在本发明的精神和原则之内，所作的任何修改、等同替换、改进等，均应包含在本发明的保护范围之内。

Claims (16)

  1. 一种资源使用权限判断系统，其特征在于，所述系统包括：资源使用资格校验装置、资源权限缓存组件和用户权限存储组件；
    所述资源使用资格校验装置，用于接收客户端发送的资源使用请求，所述资源使用请求携带资源标识及用户身份标识，向所述资源权限缓存组件发送第一查询请求，所述第一查询请求携带所述资源标识，向所述用户权限存储组件发送第二查询请求，所述第二查询请求携带所述用户身份标识；
    所述资源权限缓存组件，用于存储所述资源标识以及与所述资源标识对应的用户权限级别；在接收到所述第一查询请求时，从存储的所述资源标识以及与所述资源标识对应的用户权限级别中，获取所述资源标识对应的用户权限级别，并将所述资源标识对应的用户权限级别发送至所述资源使用资格校验装置；
    所述用户权限存储组件，用于存储所述用户身份标识以及所述用户身份标识所属的用户权限级别，在接收到所述第二查询请求时，从存储的所述用户身份标识以及所述用户身份标识所属的用户权限级别中，获取所述用户身份标识所属的用户权限级别，并将所述用户身份标识所属的用户权限级别发送至所述资源使用资格校验装置；
    所述资源使用资格校验装置，还用于接收所述资源标识对应的用户权限级别和所述用户身份标识所属的用户权限级别，比较所述资源标识对应的用户权限级别及所述用户身份标识所属的用户权限级别，若所述用户身份标识所属的用户权限级别高于或等于所述资源标识对应的用户权限级别，则向所述客户端授予使用所述资源标识所指示的资源的使用权限。
  2. 根据权利要求1所述的系统，其特征在于，所述资源包括：主题、皮肤、多媒体展示页面和背景图片中的至少一种。
  3. 根据权利要求1所述的系统，其特征在于，所述资源权限缓存组件中所存储的数据采取键值Key-Value存储形式。
  4. 根据权利要求1所述的系统，其特征在于，所述系统还包括：更新组件；
    所述更新组件：用于接收并存储更新的资源标识以及与所述更新的资源标 识对应的用户权限级别，并定时将已存储的所述更新的资源标识以及与所述更新的资源标识对应的用户权限级别写入所述资源权限缓存组件。
  5. 根据权利要求1所述的系统，其特征在于，所述资源使用资格校验装置还用于，若所述用户身份标识所属的用户权限级别低于所述资源标识对应的用户权限级别，则指示所述客户端显示预定提示信息，所述预定提示信息用于提示用户进行权限升级。
  6. 根据权利要求1所述的系统，其特征在于，所述系统还包括至少一个功能组件；
    所述用户权限存储组件，还用于在接收到任一个所述功能组件发送的所述第二查询请求时，为所述任一个功能组件提供与所述用户权限级别对应的查询服务。
  7. 一种资源使用权限判断方法，其特征在于，所述方法包括：
    接收客户端发送的资源使用请求，所述资源使用请求携带资源标识及用户身份标识；
    获取所述资源标识对应的用户权限级别和所述用户身份标识所属的用户权限级别；
    比较所述资源标识对应的用户权限级别及所述用户身份标识所属的用户权限级别；
    若所述用户身份标识所属的用户权限级别高于或等于所述资源标识对应的用户权限级别，则向所述客户端授予使用所述资源标识所指示的资源的使用权限。
  8. 根据权利要求7所述的方法，其特征在于，所述资源包括：主题、皮肤多媒体展示页面和背景图片中的至少一种。
  9. 根据权利要求7所述的方法，其特征在于，所述资源标识及与所述资源标识对应的用户权限级别采取键值Key-Value存储形式。
  10. 根据权利要求7所述的方法，其特征在于，所述方法还包括：
    接收更新的资源标识以及与所述更新的资源标识对应的用户权限级别；
    定时写入所述更新的资源标识以及与所述更新的资源标识对应的用户权限级别。
  11. 根据权利要求7所述的方法，其特征在于，所述方法还包括：
    若所述用户身份标识所属的用户权限级别低于所述资源标识对应的用户权限级别，则指示所述客户端显示预定提示信息，所述预定提示信息用于提示用户进行权限升级。
  12. 一种资源使用权限判断系统，其特征在于，所述系统包括：
    一个或多个处理器；和
    存储器；
    所述存储器存储有一个或多个程序，所述一个或多个程序被配置成由所述一个或多个处理器执行，所述一个或多个程序包含用于进行以下操作的指令：
    接收客户端发送的资源使用请求，所述资源使用请求携带资源标识及用户身份标识；
    获取所述资源标识对应的用户权限级别和所述用户身份标识所属的用户权限级别；
    比较所述资源标识对应的用户权限级别及所述用户身份标识所属的用户权限级别；
    若所述用户身份标识所属的用户权限级别高于或等于所述资源标识对应的用户权限级别，则向所述客户端授予使用所述资源标识所指示的资源的使用权限。
  13. 根据权利要求12所述的系统，其特征在于，所述资源包括：主题、皮肤多媒体展示页面和背景图片中的至少一种。
  14. 根据权利要求12所述的系统，其特征在于，所述资源标识及与所述资源标识对应的用户权限级别采取键值Key-Value存储形式。
  15. 根据权利要求12所述的系统，其特征在于，所述一个或多个程序还包含用于进行以下操作的指令：
    接收更新的资源标识以及与所述更新的资源标识对应的用户权限级别；
    定时写入所述更新的资源标识以及与所述更新的资源标识对应的用户权限级别。
  16. 根据权利要求12所述的系统，其特征在于，所述一个或多个程序还包含用于进行以下操作的指令：
    若所述用户身份标识所属的用户权限级别低于所述资源标识对应的用户权限级别，则指示所述客户端显示预定提示信息，所述预定提示信息用于提示用户进行权限升级。
PCT/CN2016/077760 2015-10-21 2016-03-29 资源使用权限判断系统及方法 WO2017067137A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201510689333.4 2015-10-21
CN201510689333.4A CN106612250A (zh) 2015-10-21 2015-10-21 资源使用权限判断系统及方法

Publications (1)

Publication Number Publication Date
WO2017067137A1 true WO2017067137A1 (zh) 2017-04-27

Family

ID=58556632

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2016/077760 WO2017067137A1 (zh) 2015-10-21 2016-03-29 资源使用权限判断系统及方法

Country Status (2)

Country Link
CN (1) CN106612250A (zh)
WO (1) WO2017067137A1 (zh)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN113343216A (zh) * 2021-05-25 2021-09-03 网易（杭州）网络有限公司 一种发行者的管理方法、装置、存储介质及服务器
CN115080945A (zh) * 2022-07-27 2022-09-20 保利长大工程有限公司 一种施工装置的控制方法及控制系统

Families Citing this family (17)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN107612880A (zh) * 2017-07-28 2018-01-19 深圳竹云科技有限公司 一种应用访问方法和装置
CN110417566B (zh) * 2018-04-27 2021-11-26 华为技术有限公司 一种多头配置方法、设备及系统
CN108647524B (zh) * 2018-04-28 2021-08-27 新疆熙菱信息技术股份有限公司 一种数据服务访问权限管理方法
CN109033139B (zh) * 2018-06-06 2023-06-27 中国平安人寿保险股份有限公司 客户信息查询方法、装置、计算机设备和存储介质
CN108829824B (zh) * 2018-06-13 2022-02-18 广东小天才科技有限公司 互联网运营活动中的资源处理方法及装置
CN108829422A (zh) * 2018-06-28 2018-11-16 中国建设银行股份有限公司 一种动态部署方法及装置
CN109246238A (zh) * 2018-10-15 2019-01-18 中国联合网络通信集团有限公司 内容缓存加速方法及网络设备
CN109522063A (zh) * 2018-11-16 2019-03-26 深圳时空数字科技有限公司 一种展示设备启动方法、启动设备及存储设备
CN110287723B (zh) * 2019-05-21 2020-11-24 北京达佳互联信息技术有限公司 资源信息确定方法、装置、电子设备及存储介质
CN110365745B (zh) * 2019-06-21 2022-08-05 北京奇艺世纪科技有限公司 数据处理系统、方法、装置、服务器和计算机可读介质
CN111031088A (zh) * 2019-10-14 2020-04-17 西安万像电子科技有限公司 资源传输方法、设备及系统
CN110753060B (zh) * 2019-10-25 2022-06-21 深信服科技股份有限公司 一种进程操作控制方法、装置及电子设备和存储介质
CN111260375B (zh) * 2019-11-26 2023-09-26 泰康保险集团股份有限公司 一种服务处理方法和装置
CN111092892A (zh) * 2019-12-20 2020-05-01 上海众源网络有限公司 一种鉴权方法、装置、服务器及存储介质
CN111491172B (zh) * 2020-04-09 2021-09-14 广州市百果园信息技术有限公司 一种直播权限管理系统及直播权限管理方法
CN112182788B (zh) * 2020-11-03 2023-05-02 智慧航海（青岛）科技有限公司 基于虚拟仿真试验平台的资源配置方法
CN112581294A (zh) * 2020-12-07 2021-03-30 泰康保险集团股份有限公司 一种理赔和服务权益数据处理方法及装置

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101729574A (zh) * 2008-10-31 2010-06-09 中兴通讯股份有限公司 一种iptv业务内容分级保护的系统、装置及方法
WO2011102825A1 (en) * 2010-02-19 2011-08-25 Thomson Licensing System and method for publishing content on the internet
CN102419771A (zh) * 2011-11-30 2012-04-18 华为技术有限公司 一种用户访问网站的推荐方法、装置和系统
CN104967875A (zh) * 2015-07-28 2015-10-07 浙江宇视科技有限公司 控制监控视频查看权限的方法和装置

Family Cites Families (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2011116528A1 (en) * 2010-03-26 2011-09-29 Nokia Corporation Method and apparatus for providing a trust level to access a resource
CN102571873B (zh) * 2010-12-31 2015-01-28 上海可鲁系统软件有限公司 一种分布式系统中的双向安全审计方法及装置
CN104967598B (zh) * 2014-11-19 2016-12-21 广州酷狗计算机科技有限公司 一种用户多媒体权限资讯的获取方法和装置
CN104572852B (zh) * 2014-12-16 2019-09-03 百度在线网络技术（北京）有限公司 资源的推荐方法及装置

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101729574A (zh) * 2008-10-31 2010-06-09 中兴通讯股份有限公司 一种iptv业务内容分级保护的系统、装置及方法
WO2011102825A1 (en) * 2010-02-19 2011-08-25 Thomson Licensing System and method for publishing content on the internet
CN102419771A (zh) * 2011-11-30 2012-04-18 华为技术有限公司 一种用户访问网站的推荐方法、装置和系统
CN104967875A (zh) * 2015-07-28 2015-10-07 浙江宇视科技有限公司 控制监控视频查看权限的方法和装置

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN113343216A (zh) * 2021-05-25 2021-09-03 网易（杭州）网络有限公司 一种发行者的管理方法、装置、存储介质及服务器
CN115080945A (zh) * 2022-07-27 2022-09-20 保利长大工程有限公司 一种施工装置的控制方法及控制系统
CN115080945B (zh) * 2022-07-27 2022-11-08 保利长大工程有限公司 一种施工装置的控制方法及控制系统

Also Published As

Publication number Publication date
CN106612250A (zh) 2017-05-03

Similar Documents

Publication Publication Date Title
WO2017067137A1 (zh) 资源使用权限判断系统及方法
US9712562B2 (en) Method, device and system for detecting potential phishing websites
US10304461B2 (en) Remote electronic service requesting and processing method, server, and terminal
EP3200487B1 (en) Message processing method and apparatus
US11765170B2 (en) Data processing method, system, and apparatus, storage medium, and device
CN104852885B (zh) 一种进行验证码验证的方法、装置和系统
CN105471931B (zh) 一种查询业务数据的方法、装置和系统
US11323542B2 (en) Objection blocking method, terminal, server, and storage medium
US20150163232A1 (en) Method, device and system for detecting malware in a mobile terminal
WO2015090248A1 (zh) 服务器的过载保护方法及装置
CN107204964B (zh) 一种权限管理的方法、装置和系统
WO2017211205A1 (zh) 一种白名单更新方法和装置
WO2018095130A1 (zh) 一种确定直播时长的方法和系统
WO2014206138A1 (zh) 一种更新网页数据的方法、装置和终端设备
WO2015085966A1 (zh) 界面显示方法、装置、终端、服务器和系统
JP2018504708A (ja) 情報の推薦を管理するための方法、デバイス、およびシステム
WO2017096909A1 (zh) 建立数据连接的方法及装置
WO2017054585A1 (zh) 网络接入方法、装置及系统
WO2015081880A1 (zh) 集群业务属性处理的方法、装置和系统
WO2015101302A1 (zh) 数据共享方法、系统、用户端及后台服务器
WO2015062234A1 (zh) 移动终端资源处理方法、装置和设备
US20160119695A1 (en) Method, apparatus, and system for sending and playing multimedia information
WO2014026581A1 (zh) 信息管理的方法、客户端及移动终端
WO2015062241A1 (zh) 应用程序保护方法、装置和终端
CN105159655B (zh) 行为事件的播放方法和装置

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 16856584

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

32PN Ep: public notification in the ep bulletin as address of the adressee cannot be established

Free format text: NOTING OF LOSS OF RIGHTS PURSUANT TO RULE 112(1) EPC (EPO FORM 1205 DATED 29/08/2018)

122 Ep: pct application non-entry in european phase

Ref document number: 16856584

Country of ref document: EP

Kind code of ref document: A1