WO2020042791A1 - 获取、反馈用户资源的方法、装置及电子设备 - Google Patents

获取、反馈用户资源的方法、装置及电子设备 Download PDF

Info

Publication number
WO2020042791A1
WO2020042791A1 PCT/CN2019/096267 CN2019096267W WO2020042791A1 WO 2020042791 A1 WO2020042791 A1 WO 2020042791A1 CN 2019096267 W CN2019096267 W CN 2019096267W WO 2020042791 A1 WO2020042791 A1 WO 2020042791A1
Authority
WO
WIPO (PCT)
Prior art keywords
preset
resource
authorization
target user
application
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/CN2019/096267
Other languages
English (en)
French (fr)
Inventor
胡燚铠
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Alibaba Group Holding Ltd
Original Assignee
Alibaba Group Holding Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Alibaba Group Holding Ltd filed Critical Alibaba Group Holding Ltd
Publication of WO2020042791A1 publication Critical patent/WO2020042791A1/zh
Anticipated expiration legal-status Critical
Ceased legal-status Critical Current

Links

Images

Classifications

    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/31—User authentication

Definitions

  • the present application relates to the field of computer technology, and in particular, to a method, an apparatus, and an electronic device for feedback and obtaining user resources.
  • an insurance company often accepts traffic accident claims through an online service platform, and when the liability of the accident is clear, the responsible party needs to submit relevant certificate information of itself and the non-responsible party to the online service platform of the insurance company.
  • the responsible party needs to collect its own credential information in advance, but also the responsible party needs to collect the relevant credential information of the non-responsible party in advance, which means that in the process of submitting relevant credential information to the insurance company's network service platform , Some privacy and sensitive information of the non-responsible party will be leaked to the responsible party.
  • the embodiments of the present application provide a method, an apparatus, and an electronic device for feedback and obtaining user resources, so as to protect users' resources from being leaked.
  • a method for acquiring user resources includes:
  • a method for feeding back user resources includes:
  • an authorization information application request sent by a third-party application where the authorization information application request carries an authorization credential, and the authorization credential is a credential that the target user confirms that the third-party application has access rights to a preset resource of the target user ;
  • the authorization information includes a token and an identity of the target user
  • an apparatus for acquiring user resources includes:
  • An authorization request sending module configured to send an authorization request to a target user, where the authorization request is used to request access to a preset resource of the target user, and the preset resource is stored in a resource server of a preset social application;
  • An authorization credential receiving module configured to receive the authorization credentials fed back after the target user confirms granting the authority
  • An authorization information application module configured to apply to the authentication server of the preset social application for obtaining authorization information of the preset resource based on the authorization credential, where the authorization information includes a token and an identity of the target user;
  • a resource obtaining module is configured to access the resource server to obtain the preset resource based on the token and the identity.
  • an apparatus for feeding back user resources includes:
  • the first request receiving module is configured to receive an authorization information application request sent by a third-party application, where the authorization information application request carries an authorization credential, and the authorization credential is a target user confirming that the third-party application has the target user. Credentials for access rights to preset resources;
  • An authorization information sending module configured to feed back to the third-party application authorization information used to obtain the preset resource, where the authorization information includes a token and an identity of the target user;
  • a second request receiving module configured to receive a resource acquisition request sent by the third-party application, where the resource acquisition request carries the token and the identity identifier;
  • a resource feedback module is configured to feedback the preset resource to the third-party application based on the token and the identity.
  • an electronic device including:
  • a memory arranged to store computer-executable instructions which, when executed, cause the processor to perform the following operations:
  • a computer-readable storage medium stores one or more programs, and the one or more programs, when executed by an electronic device including a plurality of application programs, cause all the The electronic device performs the following operations:
  • an electronic device including:
  • a memory arranged to store computer-executable instructions that, when executed, cause the processor to perform the following operations:
  • an authorization information application request sent by a third-party application where the authorization information application request carries an authorization credential, and the authorization credential is a credential that the target user confirms that the third-party application has access rights to a preset resource of the target user ;
  • the authorization information includes a token and an identity of the target user
  • a computer-readable storage medium stores one or more programs, and the one or more programs, when executed by an electronic device including a plurality of application programs, cause all the The electronic device performs the following operations:
  • an authorization information application request sent by a third-party application where the authorization information application request carries an authorization credential, and the authorization credential is a credential that the target user confirms that the third-party application has access rights to a preset resource of the target user ;
  • the authorization information includes a token and an identity of the target user
  • the solutions provided by the embodiments of the present application have at least one of the following technical effects: Since a third-party application can access resources of a preset social application when the target user grants access rights The server can obtain the preset resources stored in advance by the target user without the need for others to manually submit the preset resources of the target user to the third-party application. Therefore, it is possible to avoid the situation where the preset resources of the target user are passed between different persons, and to further protect the target user's personal privacy and sensitive information from being leaked.
  • FIG. 1 is one of the schematic flowcharts of a method for acquiring user resources provided by an embodiment of the present specification.
  • FIG. 2 is a schematic structural diagram of a method for acquiring user resources according to an embodiment of the present specification.
  • FIG. 3 is a second schematic flowchart of a method for acquiring user resources according to an embodiment of the present specification.
  • FIG. 4 is a schematic flowchart of a method for feeding back user resources according to an embodiment of the present specification.
  • FIG. 5 is a schematic structural diagram of an electronic device according to an embodiment of the present specification.
  • FIG. 6 is a schematic structural diagram of another electronic device according to an embodiment of the present specification.
  • FIG. 7 is a schematic structural diagram of an apparatus for acquiring user resources according to an embodiment of the present specification.
  • FIG. 8 is a schematic structural diagram of an apparatus for feeding back user resources according to an embodiment of the present specification.
  • the embodiments of the present specification provide a method and device for acquiring user resources, and a method and device for feeding back user resources.
  • a method and device for obtaining user resources can be applied to third-party applications that need to obtain user resources.
  • the method and device can be used in an insurance company network service platform that needs to obtain relevant certificate information of the non-responsible party.
  • a method and device for feeding back user resources can be applied to preset social applications, for example, to applications with social functions such as WeChat and Alipay.
  • a method for obtaining user resources provided by an embodiment of this specification can be applied to a third-party application.
  • the method may include the following steps:
  • Step 102 Send an authorization request to the target user, where the authorization request is used to request access to a preset resource of the target user, and the preset resource is stored in a resource server of a preset social application.
  • the target user may be a user who needs to submit a preset resource to a third-party application, for example, an irresponsible party in a traffic accident described in the background art of this specification.
  • the third-party application may be, for example, a network service platform of an insurance company.
  • the preset resource can be any resource that needs to be submitted by the target user to a third-party application, for example, it can be related certificate information that needs to be submitted by the target user to the network service platform of the insurance company.
  • the relevant certificate information of the non-responsible party can be, for example, the identity card information, driving license information of the non-responsible party, and so on.
  • the preset social application may be any application having a social function.
  • the preset social application may be a social application with an open platform, for example, WeChat with a public account, Alipay with a life account, and so on.
  • the "sending authorization request to the target user" in step 101 may include: sending an authorization request to the target user by sending a short message to the target user or by sending information to the instant communication account of the target user. For example, a link that guides the user to grant the access right may be sent to the target user through a short message, and after the target user clicks the link, he can choose whether to grant the access right.
  • sending an authorization request to a target user in step 101 may include: directly sending the authorization request to the target user through the preset social application, where the target user is a registration of the social application user.
  • the method shown in FIG. 1 may further include: Register a public service number in a social application.
  • the preset social application is Alipay
  • the authorization request may include: sending the authorization request to the target user through the public service number, for example, pushing the authorization request to the target user through the Alipay life number.
  • the method shown in FIG. 1 may further include: obtaining an account registered by the target user in the social application, for example, obtaining The account registered by the target user in Alipay. This account is usually the mobile phone number of the target user. Based on this, sending the authorization request to the target user through the public service number may include sending the authorization request to the account of the target user through the public service number, such as to The Alipay account of the target user sends the authorization request.
  • Step 104 Receive authorization credentials fed back after the target user confirms granting the access right.
  • the authorization credential can be an authorization code. It can be understood that after the target user confirms that the access right is granted, the preset social application can generate an authorization code accordingly.
  • Step 106 Apply to the authentication server of the preset social application for obtaining authorization information of the preset resource based on the authorization credentials, where the authorization information includes a token and an identity of the target user.
  • the third-party application may send the authorization credentials to the authentication server of the preset social application, and use the authorization credentials to obtain authorization information from the authentication server.
  • the authentication server of the preset social application may maintain a correspondence table between the identity (ID) and the token of the target user, and when the authentication server determines that the third-party application has When obtaining the access right of the target user's preset resources, the token and its corresponding identity are fed back to the third-party application as authorization information.
  • Step 108 Access the resource server to obtain the preset resource based on the token and the identity.
  • step 108 may include: obtaining permission to access a preset interface of the resource server based on the token, the preset resource is stored under the preset interface; and obtaining access based on the identity The permission of the preset resource under the preset interface; accessing the preset interface to obtain the preset resource.
  • the above steps 102 to 108 may be implemented based on an open protocol OAuth (Open Authorization).
  • OAuth Open Authorization
  • the principle of obtaining the authorization of the target user by the third-party application, obtaining the authorization information issued by the authentication server of the preset social application, and using the authorization information to obtain the preset resource will be described below with reference to FIG. 2.
  • the client 11 (Client) of the third-party application 1 sends an authorization request to the resource owner 21 (target user) of the preset social application 2.
  • the preset resources are stored in the resource server 23 of the preset social application 2;
  • the target user 21 agrees to grant the access permissions described in the third party application 1, and It is assumed that the social application 2 feeds back the authorization certificate (Authorization Grant) to the client 11 of the third-party application 1;
  • the client 11 of the third-party application 1 applies to the authentication server (Authorization Server) 22 of the preset social application 2 according to the authorization certificate
  • Obtain authorization information which includes the token (Access token) and the ID of the target user; 4
  • the authentication server 22 sends authorization information to the client 11 of the third-party application 1 after the authentication of the above-mentioned authorization credentials is passed; 5 the third-party application 1
  • the client 11 sends a resource query request to the resource server 23 of the preset social application 1.
  • the resource query request carries a token and a target user. ID; 6
  • the resource server 23 confirms that the third-party application 1 has the above access authority according to the token and the ID of the target user, it opens a preset interface to the client 11 of the third-party application 1 and makes the preset interface available to the third-party application 1 through the preset interface.
  • the client 11 feeds back preset resources.
  • the authentication server 22 and the resource server 23 of the preset social application 1 may be the same server or different servers, but the functions to be implemented by the two may be preset by the social application 1 Different business domains.
  • the preset social application is Alipay and the preset resource is the credential information of the target user
  • the process of the resource server 23 feeding back the preset resource can be implemented by the member domain of Alipay, because the identity of the target user is saved in the server corresponding to the member domain Credential information such as a certificate number
  • the process of authentication authentication and feedback authorization information by the authentication server 22 may be implemented by Alipay's open platform.
  • the preset social application can also specifically establish a credential library, and third-party applications can obtain preset resources by accessing the credential library.
  • the method shown in FIG. 1 provides a method for acquiring user resources. Because a third-party application can access a resource server of a preset social application to obtain a pre-stored Set resources, without the need for others to manually submit preset resources for the target user to the third-party application. Therefore, the situation in which the preset resources of the target user are transferred between different people can be avoided, and the resources such as the personal privacy and sensitive information of the target user can be protected from being leaked.
  • FIG. 3 uses FIG. 3 as an example to obtain information about an unaccountable party in a traffic accident from an insurance company's network service platform.
  • the third-party application is an insurance company's network service platform (for ease of understanding, the insurance company 5 is used instead in FIG. 3), the default social application is Alipay 4, and the target user is The default party 6 in the traffic accident needs to obtain preset resources related to the relevant certificate information of the default party 6, and the process of obtaining the relevant user information of the target user is triggered by the responsible party 3 in the traffic accident. And, in this embodiment, the insurance company 5 can be accessed through Alipay 4.
  • a method for acquiring user resources may include the following steps:
  • Step 31 The responsible party 3 in the traffic accident selects the insurance company 5 in the insurance service of Alipay 4 and fills in the Alipay account number of the non-responsible party 6 (for example, the mobile phone number of the non-responsible party 6).
  • Step 32 Alipay 4 reports to the insurance company 5 based on the operation of the responsible party 3.
  • Step 33 The insurance company 5 reviews the report materials submitted by the responsible party 3 through Alipay 4 and sends an authorization request to the non-responsible party 6 through Alipay 4 after the verification is passed, and the authorization request is used to request the relevant documents of the non-responsible party 6
  • the access rights of the information and the relevant credential information of the non-responsible party 6 are stored in the resource server of Alipay 4.
  • Step 34 The non-responsible party 6 agrees to grant the access right described by the insurance company 5.
  • Step 35 Alipay 4 generates an authorization certificate and feeds it back to the insurance company 5.
  • Step 36 Based on the authorization credentials, the insurance company 5 applies to the authentication server of Alipay 4 for authorization information, and the authorization information includes the token and the ID of the non-responsible party 6.
  • Step 37 The authentication server of Alipay 4 feeds back the authorization information to the insurance company 5.
  • Step 38 Based on the token ID in the authorization information, the insurance company 5 accesses the resource server of Alipay 4 to obtain the relevant certificate information of the non-responsible party 6.
  • Step 39 The resource server of Alipay 4 feeds back the relevant certificate information of the non-responsible party 6 to the insurance company 5.
  • the embodiment shown in FIG. 3 provides a method for obtaining user resources. Since the insurance company 5 can obtain the access right from the non-responsible party 6, by accessing the resource server of Alipay 4, the related information of the non-responsible party 6 can be obtained. Credential information, without requiring the responsible party 3 to manually submit relevant credential information of the responsible party 6 to the insurance company 5. Therefore, it is possible to avoid leakage of the relevant credential information of the blameless party 6 to the blameable party 3, and to protect the personal privacy and sensitive information and other resources of the blameless party 6.
  • a method for feeding back user resources provided in an embodiment of the present specification may be applied to a preset social application, and the method may include:
  • Step 402 Receive an authorization information application request sent by a third-party application, where the authorization information application request carries authorization credentials, and the authorization credentials are a target user confirming that the third-party application has access to preset resources of the target user Credentials for permissions.
  • the authentication server of Alipay can receive the authorization information application request sent by the insurance company's network service platform.
  • Step 404 Feed back to the third-party application authorization information used to obtain the preset resource, where the authorization information includes a token and an identity of the target user.
  • the authentication server of Alipay may feed back to the network service platform of the insurance company the authorization information used to obtain the preset resource.
  • Step 406 Receive a resource acquisition request sent by the third-party application, where the resource acquisition request carries the token and the identity.
  • the Alipay resource server may receive a resource acquisition request sent by an insurance company's network service platform.
  • Step 408 Feedback the preset resource to the third-party application based on the token and the identity.
  • the resource server of Alipay may feed the preset resource to the network service platform of the insurance company.
  • step 408 may include: opening the access right of a preset interface of the resource server to the third-party application based on the token, where the preset interface stores the preset Resources; based on the identity, opening access to the preset resource under the preset interface to the third-party application; and feeding back the preset resource to the third-party application through the preset interface.
  • steps 402 and 404 may be performed by an authentication server of a preset social application (which may correspond to an open platform business domain of the preset social application), and steps 406 and 408 may be performed by the preset social
  • the application's resource server (which may correspond to the member domain of the preset social application) is executed, and the authentication server and the resource server of the preset social application may be the same server or different servers.
  • the embodiment shown in FIG. 4 provides a method for feeding back user resources. Because a resource server of a preset social application can obtain access rights granted by a target user from a third-party application, the target user is fed back to the third-party application.
  • the preset resources on the resource server of the preset social application do not need others to manually submit the preset resources of the target user to the third-party application. Therefore, it is possible to avoid the situation where the preset resources of the target user are passed between different persons, and to further protect the target user's personal privacy and sensitive information from being leaked.
  • FIG. 5 is a schematic structural diagram of an electronic device according to an embodiment of the present specification. Please refer to FIG. 5.
  • the electronic device includes a processor, and optionally includes an internal bus, a network interface, and a memory.
  • the memory may include a memory, such as a high-speed random access memory (Random-Access Memory, RAM), and may also include a non-volatile memory (non-volatile memory), such as at least one disk memory.
  • RAM random access memory
  • non-volatile memory such as at least one disk memory.
  • the electronic device may also include hardware required for other services.
  • the processor, network interface and memory can be connected to each other through an internal bus, which can be an ISA (Industry Standard Architecture) bus, a PCI (Peripheral Component Interconnect) bus, or an EISA (Extended Industry Standard Architecture (Extended Industry Standard Architecture) bus and so on.
  • the bus can be divided into an address bus, a data bus, a control bus, and the like. For ease of representation, only a two-way arrow is used in FIG. 5, but it does not mean that there is only one bus or one type of bus.
  • the program may include program code, where the program code includes a computer operation instruction.
  • the memory may include memory and non-volatile memory, and provide instructions and data to the processor.
  • the processor reads the corresponding computer program from the non-volatile memory into the memory and then runs it to form a device for obtaining user resources on a logical level.
  • the processor executes a program stored in the memory, and is specifically used to perform the following operations:
  • the method for acquiring user resources disclosed in the embodiment shown in FIG. 1 of this specification may be applied to the processor shown in FIG. 5 or implemented by the processor.
  • the processor may be an integrated circuit chip with signal processing capabilities.
  • each step of the above method may be completed by an integrated logic circuit of hardware in a processor or an instruction in a form of software.
  • the aforementioned processor may be a general-purpose processor, including a central processing unit (CPU), a network processor (NP), etc .; it may also be a digital signal processor (DSP), special integration Circuit (Application Specific Integrated Circuit, ASIC), Field Programmable Gate Array (Field-Programmable Gate Array, FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components.
  • a general-purpose processor may be a microprocessor or the processor may be any conventional processor or the like.
  • the steps of the method disclosed in combination with one or more embodiments of the present specification may be directly embodied as being executed by a hardware decoding processor, or may be executed and completed by using a combination of hardware and software modules in the decoding processor.
  • the software module may be located in a mature storage medium such as a random access memory, a flash memory, a read-only memory, a programmable read-only memory, or an electrically erasable programmable memory, a register, and the like.
  • the storage medium is located in a memory, and the processor reads the information in the memory and completes the steps of the foregoing method in combination with its hardware.
  • the electronic device shown in FIG. 5 can also execute the method for acquiring user resources of FIG. 1, which is not described in this specification.
  • FIG. 6 is a schematic structural diagram of an electronic device according to another embodiment of the present specification. The difference between the device shown in FIG. 6 and the electronic device shown in FIG. 5 is that the processor executes a program stored in the memory and is specifically configured to perform the following operations:
  • an authorization information application request sent by a third-party application where the authorization information application request carries an authorization credential, and the authorization credential is a credential that the target user confirms that the third-party application has access rights to a preset resource of the target user ;
  • the authorization information includes a token and an identity of the target user
  • the electronic device shown in FIG. 6 may also perform the method for feedback of user resources of FIG. 4, which is not described in this specification.
  • the electronic device in this specification does not exclude other implementations, such as logic devices or a combination of software and hardware, etc.
  • the execution body of the following processing flow is not limited to each logical unit. It can also be a hardware or logic device.
  • An embodiment of the present specification also provides a computer-readable storage medium that stores one or more programs, the one or more programs include instructions, and the instructions should be portable electronic devices that include multiple application programs.
  • the portable electronic device can be caused to execute the method in the embodiment shown in FIG. 1, and is specifically configured to perform the following operations:
  • an embodiment of the present specification further provides a computer-readable storage medium, where the computer-readable storage medium stores one or more programs, the one or more programs include instructions, and the instructions should be included in the multiple
  • the portable electronic device can cause the portable electronic device to execute the method in the embodiment shown in FIG. 1, and is specifically configured to perform the following operations:
  • an authorization information application request sent by a third-party application where the authorization information application request carries an authorization credential, and the authorization credential is a credential that the target user confirms that the third-party application has access rights to a preset resource of the target user ;
  • the authorization information includes a token and an identity of the target user
  • the following describes a device for acquiring user resources provided in this specification.
  • FIG. 7 is a schematic structural diagram of an apparatus 700 for acquiring user resources provided in this specification.
  • the device 700 for acquiring user resources may include: an authorization request sending module 701, an authorization credential receiving module 702, an authorization information application module 703, and a resource acquisition module 704.
  • An authorization request sending module 701 is configured to send an authorization request to a target user, where the authorization request is used to request access to a preset resource of the target user, and the preset resource is stored in a resource server of a preset social application. .
  • the authorization request sending module 701 may be configured to send an authorization request to the target user by sending a short message to the target user or by sending information to the instant user account of the target user.
  • the authorization request sending module 701 may be configured to send the authorization request to the target user through the preset social application, where the target user is a registered user of the social application.
  • the apparatus 700 for obtaining user resources may further include a registration module, configured to: before sending the authorization request to the target user through the preset social application, in the preset Register a public service number in a social application.
  • the authorization request sending module 701 may be configured to send the authorization request to the target user through the public service number, for example, push the authorization request to the target user through the Alipay life number.
  • the apparatus 700 for obtaining user resources may further include: an obtaining module, configured to obtain the target user ’s presence before sending the authorization request to the target user through the preset social application.
  • the authorization request sending module 701 may be configured to send the authorization request to the account of the target user by using the public service number.
  • the authorization credential receiving module 702 is configured to receive the authorization credential that is returned after the target user confirms that the permission is granted.
  • An authorization information application module 703 is configured to apply for obtaining authorization information of the preset resource from an authentication server of the preset social application based on the authorization credential, where the authorization information includes a token and an identity of the target user .
  • a resource obtaining module 704 is configured to access the resource server to obtain the preset resource based on the token and the identity.
  • the resource obtaining module 704 may be configured to obtain a right to access a preset interface of the resource server based on the token, and the preset resource is stored under the preset interface; based on the identity To identify, to obtain permission to access the preset resource under the preset interface; to access the preset interface to obtain the preset resource.
  • the apparatus 700 for acquiring user resources provided by the embodiment shown in FIG. 7 is that, in the case that a target user grants access rights, a third-party application can obtain a pre-stored target user by accessing a resource server of a preset social application. Preset resources, without the need for others to manually submit preset resources of the target user to the third-party application. Therefore, it is possible to avoid the situation where the preset resources of the target user are passed between different persons, and to further protect the target user's personal privacy and sensitive information from being leaked.
  • the apparatus 700 for acquiring user resources can implement the method in the method embodiment of FIG. 1, and for details, reference may be made to the method for acquiring user resources in the embodiment shown in FIG. 1, and details are not described herein again.
  • FIG. 8 is a schematic structural diagram of an apparatus 800 for feeding back user resources provided in this specification.
  • the device 800 for feeding back user resources may include a first request receiving module 801, an authorization information sending module 802, a second request receiving module 803, and a resource feedback module 804.
  • a first request receiving module 801 is configured to receive an authorization information application request sent by a third-party application.
  • the authorization information application request carries an authorization credential
  • the authorization credential is a target user confirming that the third-party application has the target user Credentials for access to the preset resources.
  • the authorization information sending module 802 is configured to feed back to the third-party application authorization information used to obtain the preset resource, where the authorization information includes a token and an identity of the target user.
  • the second request receiving module 803 is configured to receive a resource acquisition request sent by the third-party application, where the resource acquisition request carries the token and the identity.
  • a resource feedback module 804 is configured to feedback the preset resource to the third-party application based on the token and the identity.
  • the resource feedback module 804 may be configured to open the access right of a preset interface of the resource server to the third-party application based on the token, and the preset interface stores the A preset resource; based on the identity, opening a permission to the third-party application to access the preset resource under the preset interface; and feeding back the preset to the third-party application through the preset interface Resources.
  • the device 800 for feedback of user resources provided by the embodiment shown in FIG. 8 is that since a resource server of a preset social application can feedback the target user storage to the third-party application when the third-party application obtains the access rights granted by the target user.
  • the preset resource on the resource server of the preset social application does not require others to manually submit the preset resource of the target user to the third-party application. Therefore, it is possible to avoid the situation where the preset resources of the target user are passed between different persons, and to further protect the target user's personal privacy and sensitive information from being leaked.
  • the device 800 for acquiring user resources can implement the method in the method embodiment of FIG. 4.
  • the method for acquiring user resources in the embodiment shown in FIG. 4, and details are not described herein again.
  • the system, device, module, or unit described in the foregoing embodiments may be specifically implemented by a computer chip or entity, or a product with a certain function.
  • a typical implementation device is a computer.
  • the computer may be, for example, a personal computer, a laptop computer, a cellular phone, a camera phone, a smart phone, a personal digital assistant, a media player, a navigation device, an email device, a game console, a tablet computer, a wearable device, or A combination of any of these devices.
  • Computer-readable media includes both permanent and non-persistent, removable and non-removable media.
  • Information can be stored by any method or technology.
  • Information may be computer-readable instructions, data structures, modules of a program, or other data.
  • Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), and read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technologies, read-only disc read-only memory (CD-ROM), digital versatile disc (DVD) or other optical storage, Magnetic tape cartridges, magnetic tape magnetic disk storage or other magnetic storage devices or any other non-transmission media may be used to store information that can be accessed by computing devices.
  • computer-readable media does not include temporary computer-readable media, such as modulated data signals and carrier waves.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Hardware Design (AREA)
  • Software Systems (AREA)
  • Physics & Mathematics (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Management, Administration, Business Operations System, And Electronic Commerce (AREA)
  • Telephonic Communication Services (AREA)

Abstract

本发明公开了一种获取、反馈用户资源的方法、装置及电子设备，所述获取用户资源的方法可以向目标用户发送用于请求获取所述目标用户的预设资源的访问权限的授权请求，所述预设资源存储在预设社交应用的资源服务器中；接收所述目标用户确认授予所述访问权限后反馈的授权凭证；基于所述授权凭证，向所述预设社交应用的认证服务器申请获取所述预设资源的授权信息，所述授权信息包括令牌和所述目标用户的身份标识；基于所述令牌和所述身份标识，访问所述资源服务器获取所述预设资源。

Description

获取、反馈用户资源的方法、装置及电子设备 技术领域
本申请涉及计算机技术领域，尤其涉及反馈、获取用户资源的方法、装置及电子设备。
背景技术
随着科学技术的进步，越来越多的组织或机构通过网络服务平台向用户提供服务。例如，保险公司常通过网络服务平台受理交通事故理赔案件，且在事故责任明确地情况下，需要责任方将自身与无责方的相关证件信息提交至保险公司的网络服务平台。
然而，这种情况下，不但需要责任方事先收集自身的证件信息，还需要责任方事先收集无责方的相关证件信息，这意味着在向保险公司的网络服务平台提交相关证件信息的过程中，无责方的一些隐私和敏感信息等资源会被泄露给责任方。
发明内容
本申请实施例提供了一种反馈、获取用户资源的方法、装置及电子设备，以保护用户的资源不被泄露。
为解决上述技术问题，本申请实施例是这样实现的：
第一方面，提出了一种获取用户资源的方法，所述方法包括：
向目标用户发送授权请求，所述授权请求用于请求获取所述目标用户的预设资源的访问权限，所述预设资源存储在预设社交应用的资源服务器中；
接收所述目标用户确认授予所述访问权限后反馈的授权凭证；
基于所述授权凭证，向所述预设社交应用的认证服务器申请获取所述预设资源的授权信息，所述授权信息包括令牌和所述目标用户的身份标识；
基于所述令牌和所述身份标识，访问所述资源服务器获取所述预设资源。
第二方面，提出了一种反馈用户资源的方法，所述方法包括：
接收第三方应用发送的授权信息申请请求，所述授权信息申请请求中携带有授权凭证，所述授权凭证是目标用户确认所述第三方应用具有所述目标用户的预设资源的访问 权限的凭证；
向所述第三方应用反馈用于获取所述预设资源的授权信息，所述授权信息包括令牌和所述目标用户的身份标识；
接收所述第三方应用发送的资源获取请求，所述资源获取请求中携带有所述令牌和所述身份标识；
基于所述令牌和所述身份标识，向所述第三方应用反馈所述预设资源。
第三方面，提出了一种获取用户资源的装置，所述装置包括：
授权请求发送模块，用于向目标用户发送授权请求，所述授权请求用于请求获取所述目标用户的预设资源的访问权限，所述预设资源存储在预设社交应用的资源服务器中；
授权凭证接收模块，用于接收所述目标用户确认授予所述权限后反馈的授权凭证；
授权信息申请模块，用于基于所述授权凭证，向所述预设社交应用的认证服务器申请获取所述预设资源的授权信息，所述授权信息包括令牌和所述目标用户的身份标识；
资源获取模块，用于基于所述令牌和所述身份标识，访问所述资源服务器获取所述预设资源。
第四方面，提出了一种反馈用户资源的装置，所述装置包括：
第一请求接收模块，用于接收第三方应用发送的授权信息申请请求，所述授权信息申请请求中携带有授权凭证，所述授权凭证是目标用户确认所述第三方应用具有所述目标用户的预设资源的访问权限的凭证；
授权信息发送模块，用于向所述第三方应用反馈用于获取所述预设资源的授权信息，所述授权信息包括令牌和所述目标用户的身份标识；
第二请求接收模块，用于接收所述第三方应用发送的资源获取请求，所述资源获取请求中携带有所述令牌和所述身份标识；
资源反馈模块，用于基于所述令牌和所述身份标识，向所述第三方应用反馈所述预设资源。
第五方面，提出了一种电子设备，包括：
处理器；以及
被安排成存储计算机可执行指令的存储器，所述可执行指令在被执行时使所述处理 器执行以下操作：
向目标用户发送授权请求，所述授权请求用于请求获取所述目标用户的预设资源的访问权限，所述预设资源存储在预设社交应用的资源服务器中；
接收所述目标用户确认授予所述访问权限后反馈的授权凭证；
基于所述授权凭证，向所述预设社交应用的认证服务器申请获取所述预设资源的授权信息，所述授权信息包括令牌和所述目标用户的身份标识；
基于所述令牌和所述身份标识，访问所述资源服务器获取所述预设资源。
第六方面，提出了一种计算机可读存储介质，所述计算机可读存储介质存储一个或多个程序，所述一个或多个程序当被包括多个应用程序的电子设备执行时，使得所述电子设备执行以下操作：
向目标用户发送授权请求，所述授权请求用于请求获取所述目标用户的预设资源的访问权限，所述预设资源存储在预设社交应用的资源服务器中；
接收所述目标用户确认授予所述访问权限后反馈的授权凭证；
基于所述授权凭证，向所述预设社交应用的认证服务器申请获取所述预设资源的授权信息，所述授权信息包括令牌和所述目标用户的身份标识；
基于所述令牌和所述身份标识，访问所述资源服务器获取所述预设资源。
第七方面，提出了一种电子设备，包括：
处理器；以及
被安排成存储计算机可执行指令的存储器，所述可执行指令在被执行时使所述处理器执行以下操作：
接收第三方应用发送的授权信息申请请求，所述授权信息申请请求中携带有授权凭证，所述授权凭证是目标用户确认所述第三方应用具有所述目标用户的预设资源的访问权限的凭证；
向所述第三方应用反馈用于获取所述预设资源的授权信息，所述授权信息包括令牌和所述目标用户的身份标识；
接收所述第三方应用发送的资源获取请求，所述资源获取请求中携带有所述令牌和所述身份标识；
基于所述令牌和所述身份标识，向所述第三方应用反馈所述预设资源。
第八方面，提出了一种计算机可读存储介质，所述计算机可读存储介质存储一个或多个程序，所述一个或多个程序当被包括多个应用程序的电子设备执行时，使得所述电子设备执行以下操作：
接收第三方应用发送的授权信息申请请求，所述授权信息申请请求中携带有授权凭证，所述授权凭证是目标用户确认所述第三方应用具有所述目标用户的预设资源的访问权限的凭证；
向所述第三方应用反馈用于获取所述预设资源的授权信息，所述授权信息包括令牌和所述目标用户的身份标识；
接收所述第三方应用发送的资源获取请求，所述资源获取请求中携带有所述令牌和所述身份标识；
基于所述令牌和所述身份标识，向所述第三方应用反馈所述预设资源。
由以上本申请实施例提供的技术方案可见，本申请实施例提供的方案至少具备如下一种技术效果：由于第三方应用可以在目标用户授予访问权限的情况下，通过访问预设社交应用的资源服务器就可以获取目标用户预先存储的预设资源，而不需要他人手动地向第三方应用提交目标用户的预设资源。因此，可以避免目标用户的预设资源在不同人员之间传递的情况发生，进而可以保护目标用户的个人隐私和敏感信息等资源不被泄露。
附图说明
此处所说明的附图用来提供对本申请的进一步理解，构成本申请的一部分，本申请的示意性实施例及其说明用于解释本申请，并不构成对本申请的不当限定。在附图中：
图1是本说明书实施例提供的获取用户资源的方法的流程示意图之一。
图2是本说明书实施例提供的获取用户资源的方法的架构示意图。
图3是本说明书实施例提供的获取用户资源的方法的流程示意图之二。
图4是本说明书实施例提供的反馈用户资源的方法的流程示意图。
图5是本说明书实施例提供的一种电子设备的结构示意图。
图6是本说明书实施例提供的另一种电子设备的结构示意图。
图7是本说明书实施例提供的获取用户资源的装置的结构示意图。
图8是本说明书实施例提供的反馈用户资源的装置的结构示意图。
具体实施方式
为使本申请的目的、技术方案和优点更加清楚，下面将结合本申请具体实施例及相应的附图对本申请技术方案进行清楚、完整地描述。显然，所描述的实施例仅是本申请一部分实施例，而不是全部的实施例。基于本申请中的实施例，本领域普通技术人员在没有做出创造性劳动前提下所获得的所有其他实施例，都属于本申请保护的范围。
为了保护用户的资源不被泄露，本说明书实施例提供一种获取用户资源的方法及装置，以及一种反馈用户资源的方法及装置。其中，一种获取用户资源的方法及装置可以应用于需要获取用户资源的第三方应用中，例如，可以应用于需要获取无责方的相关证件信息的保险公司网络服务平台中。其中，一种反馈用户资源的方法及装置可以应用预设社交应用中，例如，可以应用于微信、支付宝等具有社交功能的应用中。
下面结合附图1至图3对本说明书实施例提供的一种获取用户资源的方法进行详细的说明。
如图1所示，本说明书实施例提供的一种获取用户资源的方法，可以应用于第三方应用，该方法可以包括如下步骤：
步骤102、向目标用户发送授权请求，所述授权请求用于请求获取所述目标用户的预设资源的访问权限，所述预设资源存储在预设社交应用的资源服务器中。
目标用户，可以是需要向第三方应用提交预设资源的用户，例如，本说明书背景技术中所述的交通事故中的无责方。
第三方应用，例如可以是保险公司的网络服务平台。
预设资源，可以是需要目标用户向第三方应用提交的任意资源，例如可以是需要目标用户向保险公司的网络服务平台提交的相关证件信息。其中，无责方的相关证件信息，例如可以是无责方的身份证信息、驾驶证信息，等等。
预设社交应用，可以是任何具有社交功能的应用。可选地，预设社交应用，可以是具有开放平台的社交应用，例如，具有公众号的微信，具有生活号的支付宝，等等。
在一个例子中，步骤101中的“向目标用户发送授权请求”可以包括：通过向目标 用户发送短信或通过向目标用户的即时通信账号发送信息，以向目标用户发送授权请求。例如，可以通过短信向目标用户发送引导用户授予所述访问权限的链接，目标用户点击该链接之后，可以选择是否授予所述访问权限。
在另一个例子中，步骤101中的“向目标用户发送授权请求”可以包括：直接通过上述预设社交应用向所述目标用户发送所述授权请求，所述目标用户为所述社交应用的注册用户。
可选地，在该例子的一种具体实施方式中，在通过所述预设社交应用向所述目标用户发送所述授权请求之前，图1所示的方法还可以包括：在所述预设社交应用中注册公众服务号，例如，假设预设社交应用为支付宝，可以在支付宝的开放平台上注册一个支付宝生活号；在此基础上，上述通过上述预设社交应用向所述目标用户发送所述授权请求，可以包括：通过所述公众服务号向所述目标用户发送所述授权请求，例如通过支付宝生活号向目标用户推送所述授权请求。
更进一步地，在通过所述预设社交应用向所述目标用户发送所述授权请求之前，图1所示的方法还可以包括：获取目标用户在所述社交应用中注册的账号，例如，获取目标用户在支付宝中注册的账号，该账号一般是目标用户的手机号。在此基础上，上述通过所述公众服务号向所述目标用户发送所述授权请求，可以包括：通过所述公众服务号，向所述目标用户的所述账号发送所述授权请求，例如向目标用户的支付宝账号发送所述授权请求。
步骤104、接收所述目标用户确认授予所述访问权限后反馈的授权凭证。
其中，授权凭证可以是授权码。可以理解，当目标用户确认授予上述访问权限之后，预设社交应用可以相应的产生一个授权码。
步骤106、基于所述授权凭证，向所述预设社交应用的认证服务器申请获取所述预设资源的授权信息，所述授权信息包括令牌和所述目标用户的身份标识。
在此步骤中，第三方应用可以将授权凭证发送给预设社交应用的认证服务器，利用授权凭证从所述认证服务器中置换得到授权信息。相应的，在一种实施方式中，预设社交应用的认证服务器可以维护一张目标用户的身份标识(Identity，ID)与令牌的对应关系表，当认证服务器根据授权凭证确定第三方应用具有获取目标用户的预设资源的访问权限时，将令牌及其对应的身份标识作为授权信息反馈给第三方应用。
步骤108、基于所述令牌和所述身份标识，访问所述资源服务器获取所述预设资源。
作为一个例子，步骤108可以包括：基于所述令牌，获取访问所述资源服务器的预设接口的权限，所述预设接口下存储有所述预设资源；基于所述身份标识，获取访问所述预设接口下的所述预设资源的权限；访问所述预设接口获取所述预设资源。
上述步骤102至步骤108可以基于开放协议OAuth(Open Authorization)实现。下面结合图2，对本发明实施例中第三方应用获得目标用户的授权、获得预设社交应用的认证服务器发放的授权信息，以及利用授权信息获取预设资源的原理进行说明。
如图2所示：①第三方应用1的客户端11(Client)向预设社交应用2的资源拥有者(Resource Owner)21(目标用户)发送授权请求(Authorization Request)，所述授权请求用于请求获取所述目标用户的预设资源的访问权限，所述预设资源存储在预设社交应用2的资源服务器23中；②目标用户21同意授予第三方应用1所述访问权限，且预设社交应用2向第三方应用1的客户端11反馈授权凭证(Authorization Grant)；③第三方应用1的客户端11根据所述授权凭证向预设社交应用2的认证服务器(Authorization Server)22申请获取授权信息，该授权信息包括令牌(Access Token)和目标用户的ID；④认证服务器22对上述授权凭证验证通过后，向第三方应用1的客户端11发送授权信息；⑤第三方应用1的客户端11向预设社交应用1的资源服务器(Resource Server)23发送资源查询请求，该资源查询请求中携带有令牌和目标用户的ID；⑥资源服务器23根据令牌和目标用户的ID确认第三方应用1具有上述访问权限时，向第三方应用1的客户端11开放预设接口，并通过预设接口向第三方应用1的客户端11反馈预设资源。
需要说明的是，在实际应用中，预设社交应用1的认证服务器22和资源服务器23可以是同一服务器，也可以是不同的服务器，但这两者所要实现的功能可以由预设社交应用1的不同业务域实现。例如，当预设社交应用为支付宝，预设资源为目标用户的证件信息，资源服务器23反馈预设资源的过程可以由支付宝的会员域实现，因为会员域对应的服务器中保存了目标用户的身份证号等证件信息；而认证服务器22进行权限认证和反馈授权信息的过程可以由支付宝的开放平台实现。
当然，在实际应用中，预设社交应用还可以专门建立一个证件库，第三方应用可以通过访问该证件库获取预设资源。
图1所示的实施例提供的一种获取用户资源的方法，由于第三方应用可以在目标用户授予访问权限的情况下，通过访问预设社交应用的资源服务器就可以获取目标用户预先存储的预设资源，而不需要他人手动地向第三方应用提交目标用户的预设资源。因此， 可以避免目标用户的预设资源在不同人员之间传递的情况发生，进而可以保护目标用户的个人隐私和敏感信息等资源不被泄露。
为了更清楚的理解本说明书实施例提供的一种获取用户的资源的方法，下面结合图3，以保险公司的网络服务平台获取交通事故中的无责方的相关证件信息为例进行说明。
如图3所示，在该实施例中，第三方应用为保险公司的网络服务平台(为了方便理解，在图3中用保险公司5代替表示)，预设社交应用为支付宝4，目标用户为交通事故中的无责方6，需要获取的预设资源为无责方6的相关证件信息，获取目标用户的相关件信息的流程由交通事故中的责任方3触发。并且，在该实施例中，保险公司5可以通过支付宝4来访问。
如图3所示，本说明书实施例提供的一种获取用户资源的方法，可以包括如下步骤：
步骤31、交通事故中的责任方3在支付宝4的保险服务中选择保险公司5，并填写无责方6的支付宝账号(例如填写无责方6的手机号)。
步骤32、支付宝4基于责任方3的操作向保险公司5报案。
步骤33、保险公司5审核责任方3通过支付宝4提交的报案材料，并在审核通过后通过支付宝4向无责方6发送授权请求，所述授权请求用于请求获取无责方6的相关证件信息的访问权限，无责方6的相关证件信息存储在支付宝4的资源服务器中。
步骤34、无责方6同意授予保险公司5所述访问权限。
步骤35、支付宝4生成授权凭证并反馈给保险公司5。
步骤36、保险公司5基于所述授权凭证，向支付宝4的认证服务器申请获取授权信息，授权信息包括令牌和无责方6的ID。
步骤37、支付宝4的认证服务器向保险公司5反馈所述授权信息。
步骤38、保险公司5基于授权信息中的令牌的ID，访问支付宝4的资源服务器获取无责方6的相关证件信息。
步骤39、支付宝4的资源服务器向保险公司5反馈无责方6的相关证件信息。
图3所示的实施例提供的一种获取用户资源的方法，由于保险公司5可以在无责方6授予访问权限的情况下，通过访问支付宝4的资源服务器就可以获取无责方6的相关证件信息，而不需要责任方3手动地向保险公司5提交责任方6的相关证件信息。因此，可以避免无责方6的相关证件信息泄露给责任方3，保护了无责方6的个人隐私和敏感 信息等资源的安全。
以上是对本说明书提供一种获取用户资源的方法的说明，下面对本说明书提供的一种反馈用户资源的方法进行介绍。
如图4所示，本说明书实施例提供的一种反馈用户资源的方法，可以应用于预设社交应用，该方法可以包括：
步骤402、接收第三方应用发送的授权信息申请请求，所述授权信息申请请求中携带有授权凭证，所述授权凭证是目标用户确认所述第三方应用具有所述目标用户的预设资源的访问权限的凭证。
例如，支付宝的认证服务器可以接收保险公司的网络服务平台发送的授权信息申请请求。
步骤404、向所述第三方应用反馈用于获取所述预设资源的授权信息，所述授权信息包括令牌和所述目标用户的身份标识。
例如，支付宝的认证服务器可以向保险公司的网络服务平台反馈用于获取所述预设资源的授权信息。
步骤406、接收所述第三方应用发送的资源获取请求，所述资源获取请求中携带有所述令牌和所述身份标识。
例如，支付宝的资源服务器可以接收保险公司的网络服务平台发送的资源获取请求。
步骤408、基于所述令牌和所述身份标识，向所述第三方应用反馈所述预设资源。
例如，支付宝的资源服务器可以向保险公司的网络服务平台反馈所述预设资源。
在一种具体实施方式中，步骤408可以包括：基于所述令牌，向所述第三方应用开放所述资源服务器的预设接口的访问权限，所述预设接口下存储有所述预设资源；基于所述身份标识，向所述第三方应用开放访问所述预设接口下的所述预设资源的权限；通过所述预设接口向所述第三方应用反馈所述预设资源。
需要说明的是，在本实施例中，步骤402和步骤404可以由预设社交应用的认证服务器(可以对应预设社交应用的开放平台业务域)执行，步骤406和步骤408可以由预设社交应用的资源服务器(可以对应预设社交应用的会员域)执行，且预设社交应用的认证服务器和资源服务器可以是同一服务器，也可以是不同的服务器。
图4所示的实施例提供的一种反馈用户资源的方法，由于预设社交应用的资源服务器可以在第三方应用获取目标用户授予的访问权限的情况下，向第三方应用反馈目标用户存储在预设社交应用的资源服务器上的预设资源，而不需要他人手动地向第三方应用提交目标用户的预设资源。因此，可以避免目标用户的预设资源在不同人员之间传递的情况发生，进而可以保护目标用户的个人隐私和敏感信息等资源不被泄露。
以上是对本说明书提供一种反馈用户资源的方法的说明，下面对本说明书提供的电子设备进行介绍。
图5是本说明书的一个实施例提供的电子设备的结构示意图。请参考图5，在硬件层面，该电子设备包括处理器，可选地还包括内部总线、网络接口、存储器。其中，存储器可能包含内存，例如高速随机存取存储器(Random-Access Memory，RAM)，也可能还包括非易失性存储器(non-volatile memory)，例如至少1个磁盘存储器等。当然，该电子设备还可能包括其他业务所需要的硬件。
处理器、网络接口和存储器可以通过内部总线相互连接，该内部总线可以是ISA(Industry Standard Architecture，工业标准体系结构)总线、PCI(Peripheral Component Interconnect，外设部件互连标准)总线或EISA(Extended Industry Standard Architecture，扩展工业标准结构)总线等。所述总线可以分为地址总线、数据总线、控制总线等。为便于表示，图5中仅用一个双向箭头表示，但并不表示仅有一根总线或一种类型的总线。
存储器，用于存放程序。具体地，程序可以包括程序代码，所述程序代码包括计算机操作指令。存储器可以包括内存和非易失性存储器，并向处理器提供指令和数据。
处理器从非易失性存储器中读取对应的计算机程序到内存中然后运行，在逻辑层面上形成获取用户资源的装置。处理器，执行存储器所存放的程序，并具体用于执行以下操作：
向目标用户发送授权请求，所述授权请求用于请求获取所述目标用户的预设资源的访问权限，所述预设资源存储在预设社交应用的资源服务器中；
接收所述目标用户确认授予所述访问权限后反馈的授权凭证；
基于所述授权凭证，向所述预设社交应用的认证服务器申请获取所述预设资源的授权信息，所述授权信息包括令牌和所述目标用户的身份标识；
基于所述令牌和所述身份标识，访问所述资源服务器获取所述预设资源。
上述如本说明书图1所示实施例揭示的获取用户资源的方法可以应用于图5所示的处理器中，或者由处理器实现。处理器可能是一种集成电路芯片，具有信号的处理能力。在实现过程中，上述方法的各步骤可以通过处理器中的硬件的集成逻辑电路或者软件形式的指令完成。上述的处理器可以是通用处理器，包括中央处理器(Central Processing Unit，CPU)、网络处理器(Network Processor，NP)等；还可以是数字信号处理器(Digital Signal Processor，DSP)、专用集成电路(Application Specific Integrated Circuit，ASIC)、现场可编程门阵列(Field－Programmable Gate Array，FPGA)或者其他可编程逻辑器件、分立门或者晶体管逻辑器件、分立硬件组件。可以实现或者执行本说明书一个或多个实施例中的公开的各方法、步骤及逻辑框图。通用处理器可以是微处理器或者该处理器也可以是任何常规的处理器等。结合本说明书一个或多个实施例所公开的方法的步骤可以直接体现为硬件译码处理器执行完成，或者用译码处理器中的硬件及软件模块组合执行完成。软件模块可以位于随机存储器，闪存、只读存储器，可编程只读存储器或者电可擦写可编程存储器、寄存器等本领域成熟的存储介质中。该存储介质位于存储器，处理器读取存储器中的信息，结合其硬件完成上述方法的步骤。
图5所示的电子设备还可执行图1的获取用户资源的方法，本说明书在此不再赘述。
图6是本说明书的另一个实施例提供的电子设备的结构示意图。图6所示的设备与图5所示的电子设备的不同之处在于，处理器执行存储器所存放的程序，并具体用于执行以下操作：
接收第三方应用发送的授权信息申请请求，所述授权信息申请请求中携带有授权凭证，所述授权凭证是目标用户确认所述第三方应用具有所述目标用户的预设资源的访问权限的凭证；
向所述第三方应用反馈用于获取所述预设资源的授权信息，所述授权信息包括令牌和所述目标用户的身份标识；
接收所述第三方应用发送的资源获取请求，所述资源获取请求中携带有所述令牌和所述身份标识；
基于所述令牌和所述身份标识，向所述第三方应用反馈所述预设资源。
图6所示的电子设备还可执行图4的反馈用户资源的方法，本说明书在此不再赘述。
当然，除了软件实现方式之外，本说明书的电子设备并不排除其他实现方式，比如逻辑器件抑或软硬件结合的方式等等，也就是说以下处理流程的执行主体并不限定于各个逻辑单元，也可以是硬件或逻辑器件。
本说明书实施例还提出了一种计算机可读存储介质，该计算机可读存储介质存储一个或多个程序，该一个或多个程序包括指令，该指令当被包括多个应用程序的便携式电子设备执行时，能够使该便携式电子设备执行图1所示实施例的方法，并具体用于执行以下操作：
向目标用户发送授权请求，所述授权请求用于请求获取所述目标用户的预设资源的访问权限，所述预设资源存储在预设社交应用的资源服务器中；
接收所述目标用户确认授予所述访问权限后反馈的授权凭证；
基于所述授权凭证，向所述预设社交应用的认证服务器申请获取所述预设资源的授权信息，所述授权信息包括令牌和所述目标用户的身份标识；
基于所述令牌和所述身份标识，访问所述资源服务器获取所述预设资源。
在另一实施例中，本说明书实施例还提出了一种计算机可读存储介质，该计算机可读存储介质存储一个或多个程序，该一个或多个程序包括指令，该指令当被包括多个应用程序的便携式电子设备执行时，能够使该便携式电子设备执行图1所示实施例的方法，并具体用于执行以下操作：
接收第三方应用发送的授权信息申请请求，所述授权信息申请请求中携带有授权凭证，所述授权凭证是目标用户确认所述第三方应用具有所述目标用户的预设资源的访问权限的凭证；
向所述第三方应用反馈用于获取所述预设资源的授权信息，所述授权信息包括令牌和所述目标用户的身份标识；
接收所述第三方应用发送的资源获取请求，所述资源获取请求中携带有所述令牌和所述身份标识；
基于所述令牌和所述身份标识，向所述第三方应用反馈所述预设资源。
下面对本说明书提供的一种获取用户资源的装置进行说明。
图7是本说明书提供的获取用户资源的装置700的结构示意图。请参考图7，在一种软件实施方式中，获取用户资源的装置700可包括：授权请求发送模块701、授权 凭证接收模块702、授权信息申请模块703和资源获取模块704。
授权请求发送模块701，用于向目标用户发送授权请求，所述授权请求用于请求获取所述目标用户的预设资源的访问权限，所述预设资源存储在预设社交应用的资源服务器中。
可选地，在一个例子中，授权请求发送模块701，可用于通过向目标用户发送短信或通过向目标用户的即时通信账号发送信息，以向目标用户发送授权请求。
可选地，在另一个例子中，授权请求发送模块701，可用于通过上述预设社交应用向所述目标用户发送所述授权请求，所述目标用户为所述社交应用的注册用户。
进一步地，在该例子的基础上，获取用户资源的装置700还可以包括：注册模块，用于在通过所述预设社交应用向所述目标用户发送所述授权请求之前，在所述预设社交应用中注册公众服务号。相应的，授权请求发送模块701，可用于通过所述公众服务号向所述目标用户发送所述授权请求，例如通过支付宝生活号向目标用户推送所述授权请求。
更进一步地，在该例子的基础上，获取用户资源的装置700还可以包括：获取模块，用于在通过所述预设社交应用向所述目标用户发送所述授权请求之前，获取目标用户在所述社交应用中注册的账号。相应的，授权请求发送模块701，可用于通过所述公众服务号，向所述目标用户的所述账号发送所述授权请求。
授权凭证接收模块702，用于接收所述目标用户确认授予所述权限后反馈的授权凭证。
授权信息申请模块703，用于基于所述授权凭证，向所述预设社交应用的认证服务器申请获取所述预设资源的授权信息，所述授权信息包括令牌和所述目标用户的身份标识。
资源获取模块704，用于基于所述令牌和所述身份标识，访问所述资源服务器获取所述预设资源。
作为一个具体的例子，资源获取模块704，可用于基于所述令牌，获取访问所述资源服务器的预设接口的权限，所述预设接口下存储有所述预设资源；基于所述身份标识，获取访问所述预设接口下的所述预设资源的权限；访问所述预设接口获取所述预设资源。
图7所示的实施例提供的一种获取用户资源的装置700，由于第三方应用可以在目标用户授予访问权限的情况下，通过访问预设社交应用的资源服务器就可以获取目标用户预先存储的预设资源，而不需要他人手动地向第三方应用提交目标用户的预设资源。因此，可以避免目标用户的预设资源在不同人员之间传递的情况发生，进而可以保护目标用户的个人隐私和敏感信息等资源不被泄露。
需要说明的是，获取用户资源的装置700能够实现图1的方法实施例的方法，具体可参考图1所示实施例的获取用户资源的方法，不再赘述。
图8是本说明书提供的反馈用户资源的装置800的结构示意图。请参考图8，在一种软件实施方式中，反馈用户资源的装置800可包括：第一请求接收模块801、授权信息发送模块802、第二请求接收模块803和资源反馈模块804。
第一请求接收模块801，用于接收第三方应用发送的授权信息申请请求，所述授权信息申请请求中携带有授权凭证，所述授权凭证是目标用户确认所述第三方应用具有所述目标用户的预设资源的访问权限的凭证。
授权信息发送模块802，用于向所述第三方应用反馈用于获取所述预设资源的授权信息，所述授权信息包括令牌和所述目标用户的身份标识。
第二请求接收模块803，用于接收所述第三方应用发送的资源获取请求，所述资源获取请求中携带有所述令牌和所述身份标识。
资源反馈模块804，用于基于所述令牌和所述身份标识，向所述第三方应用反馈所述预设资源。
在一种具体实施方式中，资源反馈模块804，可用于基于所述令牌，向所述第三方应用开放所述资源服务器的预设接口的访问权限，所述预设接口下存储有所述预设资源；基于所述身份标识，向所述第三方应用开放访问所述预设接口下的所述预设资源的权限；通过所述预设接口向所述第三方应用反馈所述预设资源。
图8所示的实施例提供的一种反馈用户资源的装置800，由于预设社交应用的资源服务器可以在第三方应用获取目标用户授予的访问权限的情况下，向第三方应用反馈目标用户存储在预设社交应用的资源服务器上的预设资源，而不需要他人手动地向第三方应用提交目标用户的预设资源。因此，可以避免目标用户的预设资源在不同人员之间传递的情况发生，进而可以保护目标用户的个人隐私和敏感信息等资源不被泄露。
需要说明的是，获取用户资源的装置800能够实现图4的方法实施例的方法， 具体可参考图4所示实施例的获取用户资源的方法，不再赘述。
总之，以上所述仅为本说明书的较佳实施例而已，并非用于限定本说明书的保护范围。凡在本说明书一个或多个实施例的精神和原则之内，所作的任何修改、等同替换、改进等，均应包含在本说明书一个或多个实施例的保护范围之内。
上述实施例阐明的系统、装置、模块或单元，具体可以由计算机芯片或实体实现，或者由具有某种功能的产品来实现。一种典型的实现设备为计算机。具体的，计算机例如可以为个人计算机、膝上型计算机、蜂窝电话、相机电话、智能电话、个人数字助理、媒体播放器、导航设备、电子邮件设备、游戏控制台、平板计算机、可穿戴设备或者这些设备中的任何设备的组合。
计算机可读介质包括永久性和非永久性、可移动和非可移动媒体可以由任何方法或技术来实现信息存储。信息可以是计算机可读指令、数据结构、程序的模块或其他数据。计算机的存储介质的例子包括，但不限于相变内存(PRAM)、静态随机存取存储器(SRAM)、动态随机存取存储器(DRAM)、其他类型的随机存取存储器(RAM)、只读存储器(ROM)、电可擦除可编程只读存储器(EEPROM)、快闪记忆体或其他内存技术、只读光盘只读存储器(CD-ROM)、数字多功能光盘(DVD)或其他光学存储、磁盒式磁带，磁带磁磁盘存储或其他磁性存储设备或任何其他非传输介质，可用于存储可以被计算设备访问的信息。按照本文中的界定，计算机可读介质不包括暂存电脑可读媒体(transitory media)，如调制的数据信号和载波。
还需要说明的是，术语“包括”、“包含”或者其任何其他变体意在涵盖非排他性的包含，从而使得包括一系列要素的过程、方法、商品或者设备不仅包括那些要素，而且还包括没有明确列出的其他要素，或者是还包括为这种过程、方法、商品或者设备所固有的要素。在没有更多限制时，由语句“包括一个……”限定的要素，并不排除在包括所述要素的过程、方法、商品或者设备中还存在另外的相同要素。
本说明书中的各个实施例均采用递进的方式描述，各个实施例之间相同相似的部分互相参见即可，每个实施例重点说明的都是与其他实施例的不同之处。尤其，对于系统实施例而言，由于其基本相似于方法实施例，所以描述的比较简单，相关之处参见方法实施例的部分说明即可。

Claims (13)

  1. 一种获取用户资源的方法，所述方法包括：
    向目标用户发送授权请求，所述授权请求用于请求获取所述目标用户的预设资源的访问权限，所述预设资源存储在预设社交应用的资源服务器中；
    接收所述目标用户确认授予所述访问权限后反馈的授权凭证；
    基于所述授权凭证，向所述预设社交应用的认证服务器申请获取所述预设资源的授权信息，所述授权信息包括令牌和所述目标用户的身份标识；
    基于所述令牌和所述身份标识，访问所述资源服务器获取所述预设资源。
  2. 根据权利要求1所述的方法，其中，所述向目标用户发送授权请求，包括：
    通过所述预设社交应用向所述目标用户发送所述授权请求，所述目标用户为所述社交应用的注册用户。
  3. 根据权利要求2所述的方法，在所述通过所述预设社交应用向所述目标用户发送所述授权请求之前，所述方法还包括：
    在所述预设社交应用中注册公众服务号；
    其中，所述通过所述预设社交应用向所述目标用户发送所述授权请求，包括：
    通过所述公众服务号向所述目标用户发送所述授权请求。
  4. 根据权利要求3所述的方法，在所述通过所述公众服务号向所述目标用户发送所述授权请求之前，所述方法还包括：
    获取所述目标用户在所述预设社交应用中注册的账号；
    其中，所述通过所述公众服务号向所述目标用户发送所述授权请求，包括：
    通过所述公众服务号，向所述目标用户的所述账号发送所述授权请求。
  5. 根据权利要求1-4任一项所述的方法，其中，所述基于所述令牌和所述身份标识，访问所述资源服务器获取所述预设资源，包括：
    基于所述令牌，获取访问所述资源服务器的预设接口的权限，所述预设接口下存储有所述预设资源；
    基于所述身份标识，获取访问所述预设接口下的所述预设资源的权限；
    访问所述预设接口获取所述预设资源。
  6. 一种反馈用户资源的方法，所述方法包括：
    接收第三方应用发送的授权信息申请请求，所述授权信息申请请求中携带有授权凭证，所述授权凭证是目标用户确认所述第三方应用具有所述目标用户的预设资源的访问权限的凭证；
    向所述第三方应用反馈用于获取所述预设资源的授权信息，所述授权信息包括令牌和所述目标用户的身份标识；
    接收所述第三方应用发送的资源获取请求，所述资源获取请求中携带有所述令牌和所述身份标识；
    基于所述令牌和所述身份标识，向所述第三方应用反馈所述预设资源。
  7. 根据权利要求6所述的方法，其中，所述基于所述令牌和所述身份标识，向所述第三方应用反馈所述预设资源，包括：
    基于所述令牌，向所述第三方应用开放所述资源服务器的预设接口的访问权限，所述预设接口下存储有所述预设资源；
    基于所述身份标识，向所述第三方应用开放访问所述预设接口下的所述预设资源的权限；
    通过所述预设接口向所述第三方应用反馈所述预设资源。
  8. 一种获取用户资源的装置，所述装置包括：
    授权请求发送模块，用于向目标用户发送授权请求，所述授权请求用于请求获取所述目标用户的预设资源的访问权限，所述预设资源存储在预设社交应用的资源服务器中；
    授权凭证接收模块，用于接收所述目标用户确认授予所述权限后反馈的授权凭证；
    授权信息申请模块，用于基于所述授权凭证，向所述预设社交应用的认证服务器申请获取所述预设资源的授权信息，所述授权信息包括令牌和所述目标用户的身份标识；
    资源获取模块，用于基于所述令牌和所述身份标识，访问所述资源服务器获取所述预设资源。
  9. 一种反馈用户资源的装置，所述装置包括：
    第一请求接收模块，用于接收第三方应用发送的授权信息申请请求，所述授权信息申请请求中携带有授权凭证，所述授权凭证是目标用户确认所述第三方应用具有所述目标用户的预设资源的访问权限的凭证；
    授权信息发送模块，用于向所述第三方应用反馈用于获取所述预设资源的授权信息，所述授权信息包括令牌和所述目标用户的身份标识；
    第二请求接收模块，用于接收所述第三方应用发送的资源获取请求，所述资源获取请求中携带有所述令牌和所述身份标识；
    资源反馈模块，用于基于所述令牌和所述身份标识，向所述第三方应用反馈所述预设资源。
  10. 一种电子设备，包括：
    处理器；以及
    被安排成存储计算机可执行指令的存储器，所述可执行指令在被执行时使所述处理器执行以下操作：
    向目标用户发送授权请求，所述授权请求用于请求获取所述目标用户的预设资源的访问权限，所述预设资源存储在预设社交应用的资源服务器中；
    接收所述目标用户确认授予所述权限后反馈的授权凭证；
    基于所述授权凭证，向所述预设社交应用的认证服务器申请获取所述预设资源的授权信息，所述授权信息包括令牌和所述目标用户的身份标识；
    基于所述令牌和所述身份标识，访问所述资源服务器获取所述预设资源。
  11. 一种计算机可读存储介质，所述计算机可读存储介质存储一个或多个程序，所述一个或多个程序当被包括多个应用程序的电子设备执行时，使得所述电子设备执行以下操作：
    向目标用户发送授权请求，所述授权请求用于请求获取所述目标用户的预设资源的访问权限，所述预设资源存储在预设社交应用的资源服务器中；
    接收所述目标用户确认授予所述权限后反馈的授权凭证；
    基于所述授权凭证，向所述预设社交应用的认证服务器申请获取所述预设资源的授权信息，所述授权信息包括令牌和所述目标用户的身份标识；
    基于所述令牌和所述身份标识，访问所述资源服务器获取所述预设资源。
  12. 一种电子设备，包括：
    处理器；以及
    被安排成存储计算机可执行指令的存储器，所述可执行指令在被执行时使所述处理器执行以下操作：
    接收第三方应用发送的授权信息申请请求，所述授权信息申请请求中携带有授权凭证，所述授权凭证是目标用户确认所述第三方应用具有所述目标用户的预设资源的访问权限的凭证；
    向所述第三方应用反馈用于获取所述预设资源的授权信息，所述授权信息包括令牌和所述目标用户的身份标识；
    接收所述第三方应用发送的资源获取请求，所述资源获取请求中携带有所述令牌和所述身份标识；
    基于所述令牌和所述身份标识，向所述第三方应用反馈所述预设资源。
  13. 一种计算机可读存储介质，所述计算机可读存储介质存储一个或多个程序，所 述一个或多个程序当被包括多个应用程序的电子设备执行时，使得所述电子设备执行以下操作：
    接收第三方应用发送的授权信息申请请求，所述授权信息申请请求中携带有授权凭证，所述授权凭证是目标用户确认所述第三方应用具有所述目标用户的预设资源的访问权限的凭证；
    向所述第三方应用反馈用于获取所述预设资源的授权信息，所述授权信息包括令牌和所述目标用户的身份标识；
    接收所述第三方应用发送的资源获取请求，所述资源获取请求中携带有所述令牌和所述身份标识；
    基于所述令牌和所述身份标识，向所述第三方应用反馈所述预设资源。
PCT/CN2019/096267 2018-08-31 2019-07-17 获取、反馈用户资源的方法、装置及电子设备 Ceased WO2020042791A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201811015333.6 2018-08-31
CN201811015333.6A CN109033774B (zh) 2018-08-31 2018-08-31 获取、反馈用户资源的方法、装置及电子设备

Publications (1)

Publication Number Publication Date
WO2020042791A1 true WO2020042791A1 (zh) 2020-03-05

Family

ID=64623310

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2019/096267 Ceased WO2020042791A1 (zh) 2018-08-31 2019-07-17 获取、反馈用户资源的方法、装置及电子设备

Country Status (3)

Country Link
CN (1) CN109033774B (zh)
TW (1) TWI704470B (zh)
WO (1) WO2020042791A1 (zh)

Families Citing this family (36)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN109033774B (zh) * 2018-08-31 2020-08-07 阿里巴巴集团控股有限公司 获取、反馈用户资源的方法、装置及电子设备
CN109976914A (zh) * 2019-04-01 2019-07-05 北京百度网讯科技有限公司 用于控制资源访问的方法和装置
CN111861611B (zh) * 2019-05-19 2024-05-28 北京骑胜科技有限公司 基于区块链的资源处理方法、装置、电子设备及存储介质
CN110348195A (zh) * 2019-05-24 2019-10-18 深圳壹账通智能科技有限公司 数据凭证授权方法、装置、计算机设备和存储介质
CN112016065B (zh) * 2019-05-31 2023-10-10 杭州海康威视数字技术股份有限公司 一种双用户认证方法及装置
WO2021003751A1 (zh) * 2019-07-11 2021-01-14 深圳市鹰硕技术有限公司 一种单账号多身份登录方法、装置、服务器及存储介质
CN111327582B (zh) * 2019-08-22 2022-12-20 刘高峰 一种基于OAuth协议的授权方法、装置及系统
CN111064708B (zh) * 2019-11-25 2022-05-17 北京秒针人工智能科技有限公司 授权认证方法、装置及电子设备
CN111159693B (zh) * 2019-12-28 2022-11-29 西安精雕软件科技有限公司 一种电子设备权限验证方法、装置、系统以及可读介质
CN111241555B (zh) * 2019-12-30 2022-07-12 北京顺达同行科技有限公司 模拟用户登录的访问方法、装置、计算机设备和存储介质
CN111222973B (zh) * 2020-01-03 2023-02-10 深圳市思凯科技开发有限公司 信息处理系统及方法
CN111294515B (zh) * 2020-02-25 2021-07-16 维沃软件技术有限公司 一种图像获取方法及第一电子设备
CN113328971B (zh) * 2020-02-28 2023-07-11 中国移动通信集团福建有限公司 访问资源认证方法、装置及电子设备
CN111639327B (zh) * 2020-05-29 2025-06-13 深圳前海微众银行股份有限公司 一种开放平台的认证方法及装置
CN111639319B (zh) * 2020-06-02 2023-04-25 抖音视界有限公司 用户资源授权方法、装置及计算机可读存储介质
CN116167044A (zh) * 2020-06-18 2023-05-26 支付宝(杭州)信息技术有限公司 一种应用容器的创建方法、装置及设备
CN111814186B (zh) * 2020-07-13 2021-03-16 四川虹魔方网络科技有限公司 智能设备运营平台的菜单权限访问控制方法
CN112084527B (zh) * 2020-08-18 2024-06-18 中国银联股份有限公司 数据存储及获取方法、装置、设备、介质
CN112085419B (zh) * 2020-09-25 2025-01-03 中国建设银行股份有限公司 一种资源获取方法、装置及设备
CN112241544B (zh) * 2020-10-27 2023-10-31 北京百家科技集团有限公司 业务系统、访问方法、装置、计算机设备和存储介质
CN112989380B (zh) * 2021-03-18 2025-01-28 深圳前海微众银行股份有限公司 资源交换处理方法、装置、设备及存储介质
CN113312653A (zh) * 2021-06-25 2021-08-27 中国农业银行股份有限公司 开放平台认证授权方法、装置及存储介质
CN115563398B (zh) * 2021-06-30 2025-08-15 上海掌门科技集团有限公司 一种用于发送资源的方法、设备、介质及程序产品
CN113743882A (zh) * 2021-08-02 2021-12-03 深圳兆日科技股份有限公司 资源管理方法、装置、设备及存储介质
CN113382024B (zh) * 2021-08-12 2021-12-21 阿里云计算有限公司 凭据的轮转方法、计算设备及存储介质
CN114386008B (zh) * 2021-12-27 2025-07-29 斑马网络技术股份有限公司 信息处理方法及装置、设备、存储介质
CN114546316A (zh) * 2022-02-18 2022-05-27 阿里巴巴（中国）有限公司 基于互动白板的信息处理方法、装置、设备和存储介质
CN114666126B (zh) * 2022-03-21 2024-06-07 阿里云计算有限公司 资源管理方法、装置、服务器及系统
CN114978673B (zh) * 2022-05-19 2023-07-04 中国联合网络通信集团有限公司 用户权限认证方法、装置、电子设备及存储介质
CN114978551B (zh) * 2022-06-14 2024-02-06 中国电信股份有限公司 访问令牌下发方法、获取方法、装置、系统、设备及介质
CN115118697B (zh) * 2022-06-27 2024-04-26 北京爱奇艺科技有限公司 一种资源访问权限激活方法和装置
CN115603958B (zh) * 2022-09-28 2026-03-13 中国建设银行股份有限公司 登陆数据处理方法、装置、计算机设备和存储介质
CN116702100B (zh) * 2022-10-21 2024-04-16 荣耀终端有限公司 权限管理方法和电子设备
CN115987558A (zh) * 2022-11-29 2023-04-18 北京淘友天下技术有限公司 请求处理方法及系统
CN116011019A (zh) * 2023-01-29 2023-04-25 中国银联股份有限公司 一种隐私计算系统、方法、装置、设备及介质
CN117669917B (zh) * 2023-11-06 2025-05-06 睿智合创(北京)科技有限公司 一种三方数据信息平台的客户数据调用方法及系统

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN106330813A (zh) * 2015-06-16 2017-01-11 华为技术有限公司 一种处理授权的方法、设备和系统
CN106341234A (zh) * 2015-07-17 2017-01-18 华为技术有限公司 一种授权方法及装置
US20170337361A1 (en) * 2015-06-16 2017-11-23 Tencent Technology (Shenzhen) Company Limited Method, device and system for sharing cross-platform account resources
CN109033774A (zh) * 2018-08-31 2018-12-18 阿里巴巴集团控股有限公司 获取、反馈用户资源的方法、装置及电子设备

Family Cites Families (17)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US9532222B2 (en) * 2010-03-03 2016-12-27 Duo Security, Inc. System and method of notifying mobile devices to complete transactions after additional agent verification
CN102546534A (zh) * 2010-12-15 2012-07-04 上海杉达学院 访问权限自分配系统
CN102938757B (zh) * 2011-08-15 2017-12-08 中兴通讯股份有限公司 共享网络中用户数据的方法和身份提供服务器
CN103220261B (zh) * 2012-01-21 2016-10-05 华为技术有限公司 一种开放鉴权应用程序接口代理的方法、装置及系统
CN102638473B (zh) * 2012-05-04 2014-12-10 盛趣信息技术（上海）有限公司 一种用户数据授权方法、装置及系统
EP2765529B1 (en) * 2013-02-12 2021-11-17 Canon Europa N.V. A method of authenticating a user of a peripheral apparatus, a peripheral apparatus, and a system for authenticating a user of a peripheral apparatus
CN103220344B (zh) * 2013-03-29 2016-08-31 新浪技术（中国）有限公司 微博授权使用方法和系统
US9264436B2 (en) * 2013-05-08 2016-02-16 International Business Machines Corporation Policy-based automated consent
CN103327100B (zh) * 2013-06-21 2017-04-19 华为技术有限公司 资源处理方法和站点服务器
CN104869102B (zh) * 2014-02-24 2019-04-02 腾讯科技（北京）有限公司 基于xAuth协议的授权方法、装置和系统
EP2925037A1 (en) * 2014-03-28 2015-09-30 Nxp B.V. NFC-based authorization of access to data from a third party device
CN105207974B (zh) * 2014-06-18 2018-09-11 中国电信股份有限公司 一种实现用户资源差异化开放的方法、平台、应用和系统
CN105681259A (zh) * 2014-11-20 2016-06-15 中兴通讯股份有限公司 一种开放授权方法、装置及开放平台
CN106295394B (zh) * 2016-07-22 2018-11-23 飞天诚信科技股份有限公司 资源授权方法及系统和授权服务器及工作方法
CN106230838A (zh) * 2016-08-04 2016-12-14 中国银联股份有限公司 一种第三方应用访问资源的方法和装置
CN108011862A (zh) * 2016-10-31 2018-05-08 中兴通讯股份有限公司 镜像仓库授权、访问、管理方法及服务器和客户端
TWI620087B (zh) * 2017-02-15 2018-04-01 財團法人資訊工業策進會 驗證伺服器、驗證方法及其電腦程式產品

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN106330813A (zh) * 2015-06-16 2017-01-11 华为技术有限公司 一种处理授权的方法、设备和系统
US20170337361A1 (en) * 2015-06-16 2017-11-23 Tencent Technology (Shenzhen) Company Limited Method, device and system for sharing cross-platform account resources
CN106341234A (zh) * 2015-07-17 2017-01-18 华为技术有限公司 一种授权方法及装置
CN109033774A (zh) * 2018-08-31 2018-12-18 阿里巴巴集团控股有限公司 获取、反馈用户资源的方法、装置及电子设备

Also Published As

Publication number Publication date
TW202011244A (zh) 2020-03-16
CN109033774A (zh) 2018-12-18
TWI704470B (zh) 2020-09-11
CN109033774B (zh) 2020-08-07

Similar Documents

Publication Publication Date Title
WO2020042791A1 (zh) 获取、反馈用户资源的方法、装置及电子设备
CN111541656B (zh) 基于融合媒体云平台的身份认证方法及系统
CN111191268B (zh) 一种可验证声明的存储方法、装置及设备
US11595215B1 (en) Transparently using macaroons with caveats to delegate authorization for access
US20150381625A1 (en) Secure mobile client with assertions for access to service provider applications
WO2017202312A1 (zh) 消息权限管理方法及设备、存储介质
US10536271B1 (en) Silicon key attestation
AU2017275376B2 (en) Method and apparatus for issuing a credential for an incident area network
CN106897586B (zh) 一种应用程序编程接口api权限管理方法与装置
US11218464B2 (en) Information registration and authentication method and device
CN114579951B (zh) 业务访问方法、电子设备及存储介质
WO2020173019A1 (zh) 访问凭证验证方法、装置、计算机设备及存储介质
CN106341234A (zh) 一种授权方法及装置
CN107204978B (zh) 一种基于多租户云环境的访问控制方法及装置
WO2019052411A1 (zh) 一种智能设备的绑定方法、装置和系统、通讯系统
CN106330813A (zh) 一种处理授权的方法、设备和系统
US10218700B2 (en) Authorizations for computing devices to access a protected resource
WO2017041562A1 (zh) 一种识别终端设备用户身份的方法和装置
WO2017121387A1 (zh) 资源授权方法及装置
WO2013071836A1 (zh) 客户端应用访问鉴权处理方法和装置
CN112100610B (zh) 登录及用户登录相关业务的处理方法、装置和设备
CN106161358B (zh) 联络信息的管理方法及装置
CN116260852A (zh) 一种第三方服务的调用方法、设备及介质
CN116074107A (zh) 一种通信数据的传输方法、装置、电子设备及存储介质
CN114584978A (zh) 增值业务鉴权方法、装置、设备及可读介质

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 19853869

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 19853869

Country of ref document: EP

Kind code of ref document: A1