Authorization method, apparatus and system based on oAuth protocol

Abstract

The invention discloses an authorization method, apparatus and system based on an oAuth protocol, and belongs to the technical field of a computer. The method comprises the following steps: receiving a third-party authorization request sent by a third-party application client; sending a system access token to an authorization server corresponding to a service provider, wherein the system access token is a token applied for by a terminal in advance from the authorization server; receiving a third-party access token sent by the authorization server, wherein the third-party access token is generated after the authorization server verifies that the system access token is valid; and sending the third-party access token to the third-party application client. According to the invention, the problem of severely affected smoothness and convenience of an authorization process, caused by enormous repeated operation during realization of authorization of multiple third-party applications by use of a conventional authorization method related to in the prior art is solved; and the enormous repeated operation is avoided, the smoothness and convenience of the authorization process are improved, and the security of a whole authorization process is improved.

Description

technical field [0001] The invention relates to the field of computer technology, in particular to an authorization method, device and system based on the oAuth protocol. Background technique [0002] The oAuth protocol is an open authorization protocol that allows third-party applications to access certain resources of end users registered in the service provider. [0003] The authorization process based on the oAuth protocol involves three subjects, which are end users, third-party applications, and service providers. Taking the third-party application as an application that provides printing services, the end user prints resources such as pictures and documents stored at the service provider through the third application. The entire authorization process is as follows: the end user accesses the third-party application, and enters the account number and password registered by the end user in the service provider on the authorization page displayed by the third-party appli...

AI Technical Summary

Problems solved by technology

[0005] In order to solve the problem that the authorization method involved in the background technology will cause a large number of repeated operations and seriously affect the smoothness and convenience of the authorization process when it authorizes multiple third-party applications, the embodiment of the present invention provides an oAuth protocol-based Authorization method, device and system for

Images