Resource access authorization method

Abstract

The invention relates to a resource access authorization method. The method concretely comprises the following steps: a user accesses or uses a specific application according to the following flows: the user accesses Widget application or other application in a terminal; the application acquires a user authentication token authenticated by the user from an application container and then initiates a resource access token request to an authentication, authorization and accounting server; the authentication, authorization and accounting server checks the user, the application, the application container and information of resources to be accessed by the application and generates a final resource access token after determining that the resources can be accessed; the authentication, authorization and accounting server gives the final resource access token to the application; the application initiates a resource access request to a resource server; the resource server checks a resource access token of the application; after the check is passed, the resources requested by the application are returned; and the application shows the resources to the terminal user. The resource access authorization method has the advantage that the method is suitable for resource access control and authorization of various terminals (a computer, a television / a set top box, a mobile phone, a mobile terminal and the like) in the fields of the Internet and tri-networks integration (the telecommunication network, the computer network and the cable television network).

Description

technical field [0001] The invention relates to the Internet, in particular to a resource access authorization method for cross-terminals (computers, televisions / set-top boxes, mobile phones, mobile terminals, etc.) in the field of triple-network integration (telecom network, computer network and cable television network). Background technique [0002] With the mutual penetration and mutual integration of telecommunication network, radio and television network and computer communication network, and gradually integrated into a unified information communication network all over the world (that is, "triple play"). "Triple play" is to realize the sharing of network resources on various terminal platforms (computers, TVs / set-top boxes, mobile phones, tablet PCs and mobile terminals, etc.). The sharing of network resources necessarily requires protection and authorized access to resources. [0003] OAuth (Open Authorization Protocol) is an open resource authorization standard th...

AI Technical Summary

Problems solved by technology

Since OAuth is a relatively new protocol, in some respects, especially the implementation is not very easy, the stability is not very good, and the access form is not very extensive.

Images