Authentication method for invoking open interface and system

Abstract

The embodiment of the invention discloses an authentication method for invoking an open interface and a system for executing the method. The method comprises the following steps: a service provision platform receives an interface invoking request of an application program transmitted by a server side or a client side, wherein the interface invoking parameters comprise application identification, a private secret key and valid time allocated by the server side for the interface invoking; the private secret key is allocated by the service provision platform when the server side is registered in the service provision platform; the client side logs in the server side, acquires authentication and acquires the interface invoking parameters from the server side; the service provision platform acquires the private secret key corresponding to the application identification from the pre-assigned parameter records, and authenticates the interface invoking request based on the acquired private secret key; if the authentication is successful, the corresponding interface invoking is permitted; or, the interface invoking request party is refused to invoke the corresponding interface. The authentication method can ensure the interface invoking security, the interface invoking process is simple, and the interface invoking efficiency is high.

Description

technical field [0001] The invention relates to Internet technology, in particular to an authentication method and system called by an open interface. Background technique [0002] The Internet Service Platform (Service Platform) provides open interfaces for third-party developers to call in the development of Internet applications. These open interfaces, such as an application programming interface (REST API), communicate based on a hypertext transfer protocol (Hyper TextTransport Protocol, hereinafter referred to as: HTTP). The service provider platform shall perform effective authentication on the received interface call requests, and only respond to legal interface call requests. [0003] In the prior art, in the scenario of interface invocation for the three parties of the application server / client (C / S) and the service provider platform, the interface invocation is mainly performed through the following two interface invocation methods: [0004] In the first method, ...

AI Technical Summary

Problems solved by technology

[0007] In the first method, after the server opens the password to the client, the client can freely request the service provider platform to make interface calls. Low;

[0008] In the second method, it is necessary for the server to act on behalf of the client to send an interface call request to the service provider platform each time, and then transfer the obtained content to the client. The process is circuitous and complicated, the interface call efficiency is low, and the server-side work Load, reducing the performance of the server-side work

Images