OAuth protocol-based safety certificate method of open platform and system thereof

Abstract

The invention relates to an OAuth protocol-based safety certificate method of an open platform and a system thereof. The method comprises the following steps that: an open platform checks whether an application example identifier that is consistent with the platform is carried in an access request for application of an unauthorized Request Token, wherein the access request is sent by a third part application apparatus; if not, a new application example identifier is distributed; and the application example identifier, a Request Token that is not authorized by a user and a corresponded token secret key are returned to the third part application apparatus; and the third part application apparatus updates the application example identifier to the local and continuously carries the application example identifier to carry out a subsequent OAuth certificate request; the open platform utilizes the application example identifier to guide the user authorization; and then, an Access Token and a corresponded secret key are issued to the third part application apparatus. According to the invention, the method and the system belong to the network technology field; and accurate certificate and authentication can be carried out on service scenes of a plurality of third part application operation examples; and moreover, flexible charging can be realized.

Description

technical field [0001] The invention relates to an open platform security authentication method and system based on the OAuth protocol, which belongs to the network technology. Background technique [0002] At present, most Internet open platforms use the OAuth protocol to implement authentication and authentication for third-party applications. OAuth is an open protocol that provides a simple and standard way for desktop applications or B / S-based WWW applications to access API services that require user authorization. Any third-party application needs to pass the user's authorization when accessing user resources. It can only be accessed after authentication and consent, which ensures the privacy and confidentiality of user data. Because of its security and easy development, many Internet vendors such as Google, Yahoo, Sina, and Tencent have provided OAuth authentication services when building open platforms. [0003] In the OAuth protocol framework, it mainly includes th...

AI Technical Summary

Problems solved by technology

For mobile Internet capability open platforms with billing requirements, accurate billing and access statistics for users and third-party application running instances cannot be realized based on third-party application identifiers, and there are service defects

Images