Application system access method and device

Abstract

The invention discloses an application system access method. The method comprises the following steps that: an authorization client of a target application system generates an authorization code according to a received access request and authorization equipment, acquires enterprise identity information from the authorization equipment, and sends the authorization code and the enterprise identity information to an authorization center and an access system; the access system sends the authorization code and the enterprise identity information to an authorization center; the authorization centerjudges whether the authorization code and the enterprise identity information sent by the access system are consistent with the authorization code and the enterprise identity information sent by the authorization client or not, if yes, an access token is generated according to the authorization code and the enterprise identity information, and the access token is sent to the access system; and theaccess system accesses the target application system by using the access token. According to the method, access to the third-party application system can be realized more safely and effectively, andinformation leakage is avoided. The invention further discloses an application system access device which also has the above beneficial effects.

Description

technical field [0001] The present application relates to the field of information security, in particular to an application system access method, and also relates to an application system access device. Background technique [0002] An enterprise application system is a software system running within an enterprise, and the application systems developed by different operators have different business functions or different business data. With the continuous improvement of enterprise informatization, an enterprise application system often needs to obtain the required data from another third-party application system or use the functions of the third-party application system in order to improve user experience and enrich functions or data. Among them, in the process of system-to-system interaction, how to obtain the trust of the third-party application system and ensure the security of data interaction or function execution is currently mainly used in the way of user account aut...

AI Technical Summary

Problems solved by technology

Among them, in the process of system-to-system interaction, how to obtain the trust of the third-party application system and ensure the security of data interaction or function execution is currently mainly used in the way of user account authorization. However, user account authorization is too simple. If the account is illegally stolen, the application system will face a great risk of information leakage

Images