Permission application verification method and device, equipment and storage medium

Abstract

The invention provides a permission application verification method. The permission application verification method comprises the following steps of: receiving a first token for applying permission, wherein the first token comprises a user ID, a permission calling interface parameter and a timestamp; acquiring a user key according to the user ID; acquiring a temporary verification key according tothe user key and the permission calling interface parameter; generating a second token according to the user ID, the temporary verification key, the permission calling interface parameter and the timestamp; and judging whether the first token is consistent with the second token or not through comparison, and if yes, determining that permission application verification succeeds and performing authorization according to the permission calling interface parameter. According to the invention, the purpose of improving the security of permission authorization between systems can be achieved.

Description

technical field [0001] The present invention relates to the field of cryptography / information encryption and decryption technology, and in particular to a permission application verification method, device, equipment and storage medium. Background technique [0002] For non-closed software systems, such as background systems and middle-end systems, in order to support the connection of other systems, the interaction between systems usually adopts the way that users log in to multiple systems to operate separately or the user authorizes the system to call through api . [0003] The way that users log in to multiple systems to operate separately requires human intervention. Users need to participate in the whole process of multi-system operation. When the system is called, they operate on multiple systems separately. The operation is cumbersome and takes up a lot of user time. Poor user experience. [0004] The way for users to call APIs between systems through authorization...

AI Technical Summary

Problems solved by technology

[0003] The way that users log in to multiple systems to operate separately requires human intervention. Users need to participate in the whole process of multi-system operation. When the system is called, they operate on multiple systems separately. The operation is cumbersome and takes up a lot of user time. poor user experience

[0004] The way for users to call APIs between systems through authorization is usually to apply for permissions. The system uses the user key stored in the system, the permissions to be applied for, the parameters of the API call, and the current time stamp to generate a token token and send it to the issuing authority. The system that issues permissions uses the same key to generate a token, and compares whether the received token is the same as the generated token. If they are the same, the verification passes. In this way, when the verification passes The permissions of the latter system are fully developed, but usually api calls do not require all permissions, there is a certain security risk, and the user key is the same in multiple systems, there is also a certain security risk

Images