CN103139168A - Method of improving success rate of capacity call and open platform - Google Patents

Method of improving success rate of capacity call and open platform Download PDF

Info

Publication number
CN103139168A
CN103139168A CN2011103904682A CN201110390468A CN103139168A CN 103139168 A CN103139168 A CN 103139168A CN 2011103904682 A CN2011103904682 A CN 2011103904682A CN 201110390468 A CN201110390468 A CN 201110390468A CN 103139168 A CN103139168 A CN 103139168A
Authority
CN
China
Prior art keywords
token
validity
term
open platform
interim authorization
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN2011103904682A
Other languages
Chinese (zh)
Other versions
CN103139168B (en
Inventor
陈曦
渠娜
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
China Mobile Communications Group Co Ltd
Original Assignee
China Mobile Communications Group Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by China Mobile Communications Group Co Ltd filed Critical China Mobile Communications Group Co Ltd
Priority to CN201110390468.2A priority Critical patent/CN103139168B/en
Publication of CN103139168A publication Critical patent/CN103139168A/en
Application granted granted Critical
Publication of CN103139168B publication Critical patent/CN103139168B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Abstract

The invention discloses a method of improving the success rate of capacity call and an open platform. The method includes that the open platform receives a token obtaining request specific to a web application sent by an application example, and judges whether temporary authorization tokens generated for the web application do not exist in the open platform self, or whether the temporary authorization tokens generated for the web application exist in the open platform self but the tokens pass the validity period; if the validity period is passed, a temporary authorization tokens are generated for the web application, the validity period and a buffering period of the tokens are set and the tokens and the declared remained validity period are set to the application example; otherwise, a latest token generated for the web application and the declared remained validity period are set to the application example; the open platform receives a token verification request of a carried token sent by the application example; and whether the validity period and the buffering period are passed is judged, and verification is passed and a capacity call request is sent to a third capacity platform if the validity period and the buffering period are not passed. The method and the open platform improve the success rate of the capacity call.

Description

The raising ability is called method and the open platform of success rate
Technical field
The present invention relates to ability open technique field, be specifically related to method and open platform that the raising ability is called success rate.
Background technology
Open platform is the hot technology of current mobile Internet, open platform is responsible for access and open various telecommunication capabilities and the Internet capability, telecommunication capability is as short coloured silk, voice etc., the Internet capability as: everybody net application interface (API, Application Interface), Alipay API etc., and authentication and charging are carried out in its use.How safely open third-party platform providing capability and resource by non-proxy pattern access becomes vital problem.Fig. 1 has provided existing typical capabilities open architecture figure, and as shown in Figure 1, it mainly is comprised of developer's application platform, open platform and third party's ability platform.
Fig. 2 has provided the open message flow schematic diagram of existing typical capabilities, and as shown in Figure 2, its concrete steps are as follows:
Step 201: developer's application platform sends WebToken (token) by the HTTPs encrypted tunnel to open platform and generates request message, with the call mandate of request to third party's ability.
Step 202: open platform receives this WebToken and generates request message, consults with third party's ability platform, and acquisition capability calls mandate, generates Webtoken, Webtoken is returned to developer's application platform.
Step 203: developer's application platform sends API Calls message to third party's ability platform, and this message is carried Webtoken and APPID (application identities).
Step 204: third party's ability platform receives this API Calls message, the Webtoken in this message is carried in ValidateToken (checking token) message sends to open platform, with request, this Webtoken is carried out authentication.
Step 205: open platform receives this ValidateToken message, and the Webtoken in this message is carried out authentication, if authentication is passed through, notifies third party's ability platform to be proved to be successful.
Step 206: third party's ability platform notice open platform charging.
Under the scene of open platform by non-proxy pattern access third party ability platform, in the flow process that ability is called, data flow need not through open platform, only have control stream must be through open platform, need to complete authentication to using by unified token distribution mechanism.
Current, along with developing rapidly of cloud computing, Web uses the method for service that mostly adopts the cluster storage, to realize load balancing, improves validity and the stability of service.Operate in a Web application on group system and brought the high concurrent application scenarios of many examples.Fig. 3 has provided the message flow schematic diagram of existing many examples token distribution mechanism, as shown in Figure 3, is provided with two application examples: application example 1,2, and concrete steps are as follows:
Step 301: application example 1 sends getToken (obtaining token) message to open platform, and this message is carried APPID and APPKey (application key).
Step 302: open platform receives this getToken message, carry out authentication according to APPKey to using example 1, be verified, generate interim authorization token (TmpAuthToken) 1, the residue term of validity of interim authorization token 1 and interim authorization token 1 is returned to application example 1.
Step 303: application example 1 uses interim authorization token 1 to initiate CheckToken (check token) message to open platform.
Step 304: open platform receives CheckToken message, finds that the interim authorization token 1 in this message is effective token, determines the Token verification succeeds.
Step 305: application example 2 sends getToken message to open platform, and this message is carried APPID and APPKey.
Step 306: open platform receives this getToken message, carry out authentication according to APPKey to using example 2, be verified, find the unexpired term of interim authorization token 1, the residue term of validity of interim authorization token 1 and interim authorization token 1 is returned to application example 2.
Step 307: application example 2 uses interim authorization token 1 to initiate CheckToken message to open platform.
Step 308: open platform receives CheckToken message, finds term of validity mistake, definite Token verification failure of the interim authorization token 1 in this message.
As shown in Figure 3, when the Web that moves is applied to open platform application token, adopt the mechanism of many application examples shared token on group system.When application example carries APPID that Web uses and APPKey to open platform application token, open platform can distribute one with the interim authorization token of the term of validity to this application example, in the process of Web application call, application example carries effectively interim authorization token and completes verification to open platform.In the term of validity of this interim authorization token, open platform can not distribute new token, until this token lost efficacy.
There is following problem in the open security mechanism of current third party's ability platform ability:
One, each ability call request all can arrive open platform application token, and application process need to be by the encryption of HTTPS passage, and is in the situation that the request Concurrency amount is large, larger to the open platform performance impact.
Two, under the scene of many application examples shared token, can not upgrade simultaneously token, or because of the ability call request message is concurrent cause obtain token request and checking token request and first send out after extremely, cause token verification failure, application can't normal call.
As shown in Figure 3, the term of validity of supposing interim authorization token 1 is 60s, application example 1 has been completed obtaining and successful verification of token in this term of validity, but application example 2 (as the 58th second) when the term of validity critical point of interim authorization token 1 has sent the getToken request, open platform has distributed interim authorization token 1 still for application example 2, due to factors such as network delays, when the check token request of application example 2 arrives open platform, interim authorization token 1 had lost efficacy, cause the verification failure of application example 2, thereby cause the application call failure.
Summary of the invention
The invention provides and improve method and the open platform that the open platform ability is called success rate, call success rate with the raising ability.
Technical scheme of the present invention is achieved in that
A kind of ability of raising is called the method for success rate, and the method comprises:
Open platform receives the token request of obtaining for a Web application that application example is sent, judge that self whether not existing for this Web uses the interim authorization token that generates, perhaps, self exist for that this Web uses the interim authorization token that generates but the term of validity of all tokens mistake all, if, being that this Web uses generates an interim authorization token, and for this token is provided with effect phase and phase buffer, and the residue term of validity of this token that this token and this open platform are declared sends to this application example; Otherwise, the up-to-date residue term of validity of using this token that the interim authorization token that generates and this open platform declare for this Web is sent to this application example;
Open platform receives the check token request of carrying interim authorization token that application example is sent, and whether the term of validity+the phase buffer that judges this token mistake, if determine the verification failure; Otherwise, determine that verification passes through, to third party's ability platform initiating capacity call request.
When the term of validity of an interim authorization token+buffering is expired, this interim authorization token of open platform deletion.
The minimum length of the phase buffer of described interim authorization token satisfies: making open platform is that this token that application example distributes can verification succeeds when the exhaustion of effect of this token.
The residue term of validity of this token that described open platform is declared can be determined according to following mode:
When the term of validity of the real surplus term of validity of this token+phase buffer length 〉=this token, the residue term of validity of this token that open platform is declared to application example is the term of validity of this token; Otherwise the residue term of validity of this token that open platform is declared to application example is the real surplus term of validity of this token+phase buffer length, and wherein, the real surplus term of validity of this token is the remaining time of the term of validity of this token.
A kind of open platform comprises:
token generation module: receive the token request of obtaining for a Web application that application example is sent, judge that self whether not existing for this Web uses the interim authorization token that generates, perhaps, self exist for that this Web uses the interim authorization token that generates but the term of validity of all tokens mistake all, if, for using, this Web generates an interim authorization token, and be provided with effect phase and phase buffer for this token, the residue term of validity of this token that this token and this open platform are declared sends to this application example, record simultaneously the Web application identities in the token information maintenance module, token, the term of validity of this token and the corresponding relation of phase buffer, otherwise, the up-to-date residue term of validity of using this token that the interim authorization token that generates and this open platform declare for this Web is sent to this application example,
The token information maintenance module receives and records Web application identities, token, the term of validity of this token and the corresponding relation of phase buffer that the token generation module is sent;
The token correction verification module: receive the check token request of carrying interim authorization token that application example is sent, whether the term of validity+the phase buffer that judges this token mistake, if determine the verification failure; Otherwise, determine that verification passes through, to third party's ability platform initiating capacity call request.
Described token information maintenance module is further used for, and when the term of validity of an interim authorization token+buffering is expired, deletes the relative recording of this interim authorization token.
Described token generation module is further used for, and the minimum length of the phase buffer of interim authorization token is set to satisfy: making open platform is that this token that application example distributes can verification succeeds when the exhaustion of effect of this token.
Described token generation module is further used for, in the time will sending interim authorization token to application example, if during the term of validity of the real surplus of this interim authorization token term of validity+phase buffer length 〉=this token, the residue term of validity of this token of declaring to this application example is the term of validity of this token; Otherwise the residue term of validity of this token of declaring to this application example is the real surplus term of validity of this token+phase buffer length, and wherein, the real surplus term of validity of this token is the remaining time of the term of validity of this token.
Compared with prior art, in the present invention, open platform is when using the interim authorization token of generation for Web, for token arranges a phase buffer, the application example still can be successful to the verification of this token in phase buffer, thereby the performance issue that the ability call request of effectively having avoided large concurrent is brought, the ability that improved is called success rate.
Description of drawings
Fig. 1 is existing typical capabilities open architecture figure;
Fig. 2 is the open message flow schematic diagram of existing typical capabilities;
Fig. 3 is the message flow schematic diagram of existing many examples token distribution mechanism;
The raising ability that Fig. 4 provides for the embodiment of the present invention is called the method flow diagram of success rate;
Fig. 5 is application exemplary plot of the present invention;
The composition schematic diagram of the open platform that Fig. 6 provides for the embodiment of the present invention.
Embodiment
The present invention is further described in more detail below in conjunction with drawings and the specific embodiments.
The raising ability that Fig. 4 provides for the embodiment of the present invention is called the method flow diagram of success rate, and as shown in Figure 4, its concrete steps are as follows:
Step 401: application example 1 is wanted to call Web and is used 1, sends getToken (obtaining token) message to open platform, and this message is carried Web and used 1 APPID1 and APPKey.
Step 402: open platform receives this getToken message, carries out authentication according to APPKey to using example 1, is verified, and according to APPID1, judges that self whether existing for Web uses the 1 interim authorization token that generates, if, execution in step 404; Otherwise, execution in step 403.
Step 403: open platform is that Web uses the 1 interim authorization token 1 of generation, and for interim authorization token 1, the term of validity and phase buffer are set, the residue term of validity of the interim authorization token 1 that interim authorization token 1 and this open platform are declared is carried at and sends to application example 1 in the getToken response message, record the corresponding relation of APPID1, interim authorization token 1 and the term of validity and phase buffer, and begin the term of validity+phase buffer of interim authorization token 1 is carried out timing, go to step 407.
In the present invention, the means of the interim authorization token of open platform generation are same as the prior art.
The minimum length of the phase buffer of interim authorization token should satisfy: making open platform is that the interim authorization token that an application example distributes can verification succeeds when exhaustion of effect.For example: the term of validity of interim authorization token 1 is 60s, the minimum length of the phase buffer of interim authorization token 1 should satisfy: when open platform during in exhaustion of effect, be that an application example has distributed interim authorization token 1 when being 60s, the phase buffer of interim authorization token 1 wants to guarantee that application example 1 completes the checking procedure of interim authorization token 1 in this phase buffer.The maximum length of the phase buffer of interim authorization token can not be restricted, and specifically can rule of thumb determine.
The residue term of validity of the interim authorization token that open platform is declared to application example can be determined according to following mode: when the term of validity of the real surplus term of validity of interim authorization token+phase buffer length 〉=interim authorization token, open platform is the term of validity of interim authorization token to the residue term of validity of the interim authorization token that application example is declared; Otherwise the residue term of validity of the interim authorization token that open platform is declared to application example is the real surplus term of validity of interim authorization token+phase buffer length.Wherein, the real surplus term of validity of interim authorization token is the remaining time of the term of validity of interim authorization token, as: the term of validity of interim authorization token 1 is 60s, and this term of validity has been pass by 20s, and the real surplus term of validity of interim authorization token 1 is 60-20=40s.
For instance, if the term of validity of the interim authorization token 1 of Web application 1 is T1, phase buffer is T2, the real surplus term of validity of current interim authorization token 1 is: and t1 (t1<T1), send when using 1 getToken message for Web as an application example m, open platform is that application example m distributes interim authorization token 1, and the residue term of validity of using the interim authorization token 1 that example m declares is determined in the following way:
If 1 t1+T2 〉=T1, the residue term of validity of declaring interim authorization token 1 is T1;
If 2 t1+T2<T1, the residue term of validity of declaring interim authorization token 1 is t1+T2.
Step 404: whether open platform judges the up-to-date term of validity of using the 1 interim authorization token that generates for Web mistake, if, execution in step 406; Otherwise, execution in step 405.
When existing for the interim authorization token of Web application 1 generation on open platform, this token has two kinds of situations: one, unexpired term; Two, term of validity mistake, but phase buffer less than.
Existence due to phase buffer, use 1 for a Web, may there be simultaneously a plurality of interim authorization token, in this step, whether the term of validity that only needs judge up-to-date interim authorization token for Web application 1 generation mistake, if do not cross, interim authorization token that will this up-to-date generation is distributed to application example 1 and is got final product; If cross, need a newly-generated interim authorization token to distribute to application example 1.
Step 405: open platform will this up-to-date residue term of validity of using this interim authorization token that the 1 interim authorization token that generates and this open platform declare for Web be carried at and sends to application example 1 in the getToken response message, goes to step 407.
Step 406: open platform is that Web uses the 1 new interim authorization token 2 of generation, and for interim authorization token 2, the term of validity and phase buffer are set, the residue term of validity of the interim authorization token 2 that interim authorization token 2 and this open platform are declared is carried at and sends to application example 1 in the getToken response message, record the corresponding relation of APPID1, interim authorization token 2 and the term of validity and phase buffer, and begin the term of validity+phase buffer of interim authorization token 2 is carried out timing.
Step 407: application example 1 receives the interim authorization token that open platform is sent, and should interim authorization token be carried in CheckToken message to send to open platform.
Step 408: open platform receives this CheckToken message, and whether the term of validity+the phase buffer that judges the interim authorization token in this message mistake, if, execution in step 409; Otherwise, execution in step 410.
Step 409: open platform returns to the CheckToken response message that carries unsuccessfully indication code to application example 1, and this flow process finishes.
Application example 1 can send the getToken message of carrying APPID1 and APPKey to open platform again after receiving the CheckToken response message that carries unsuccessfully indication code, until the token verification succeeds namely, ability is called successfully.
Step 410: open platform is determined verification succeeds, sends API Calls message to third party's ability platform.
When the term of validity of an interim authorization token+buffering was expired, open platform can be deleted the relative recording of this token.
In actual applications, during the exhaustion of effect of an interim authorization token of using as Web, can directly for using, this Web generate a new interim authorization token at this moment by open platform, can be also when the getToken message of using for this Web that after this open platform receives that first sends, be that this Web uses and generates a new interim authorization token.
Below provide one of the present invention and use example:
If application example 1 and application example 2 all are under the jurisdiction of the APPID1 that is designated that Web uses 1, Web application 1, as shown in Figure 5, the ability invoked procedure is as follows:
Step 501: when initial, application example 1 is wanted to call Web and is used 1, sends getToken message to open platform, and this message is carried Web and used 1 APPID1 and APPKey.
Step 502: open platform receives this getToken message, carry out authentication according to APPKey to using example 1, be verified, find also not generate any interim authorization token for Web uses 1, for using 1, Web generates interim authorization token 1, and for interim authorization token 1, term of validity 60s and phase buffer 30s are set, the residue term of validity 60s of interim authorization token 1 and the interim authorization token 1 declared is sent to application example 1.
Due to the term of validity 60s of the real surplus term of validity 60s+ phase buffer 30s of interim authorization token 1>interim authorization token 1, therefore, open platform is the term of validity 60s of interim authorization token 1 to the residue term of validity of the interim authorization token 1 using example 1 and declare.
Step 503: application example 1 receives the residue term of validity of interim authorization token 1 and interim authorization token 1, sends the CheckToken message of carrying interim authorization token 1 to open platform.
Step 504: open platform receives this CheckToken message, and whether the term of validity+the phase buffer that checks the interim authorization token 1 in this message mistake, finds not mistake, determines verification succeeds.
Step 505: application example 2 is wanted to call Web and is used 1 when 58s, sends getToken message to open platform, and this message is carried Web and used 1 APPID1 and APPKey.
Step 506: open platform receives this getToken message, carry out authentication according to APPKey to using example 2, be verified, find up-to-dately to have generated interim authorization token 1 for Web uses 1, and the unexpired term of interim authorization token 1, the residue term of validity 32s with interim authorization token 1 and the interim authorization token 1 of declaring sends to application example 2.
Term of validity 60s due to the real surplus term of validity 2s+ phase buffer 30s of interim authorization token 1<interim authorization token 1, therefore, open platform is the real surplus term of validity 2s+ phase buffer 30s=32s of interim authorization token 1 to the residue term of validity of the interim authorization token 1 using example 1 and declare.
Step 507: application example 2 receives the residue term of validity of interim authorization token 1 and interim authorization token 1, sends the CheckToken message of carrying interim authorization token 1 to open platform.
Step 508: open platform receives this CheckToken message, and whether the term of validity+the phase buffer that checks the interim authorization token 1 in this message mistake, finds not mistake, determines verification succeeds.
Step 509: afterwards, when application example 1 is wanted again to call Web and is used 1, the residue term of validity of the interim authorization token 1 of sending in step 502 according to open platform, the term of validity of confirming interim authorization token 1 is mistake, again send getToken message to open platform, this message is carried Web and is used 1 APPID1 and APPKey.
Here, establish when open platform finds that the term of validity 60s of interim authorization token 1 expires, be initiatively that Web application 1 has generated interim authorization token 2, and be provided with term of validity 60s and phase buffer 30s for interim authorization token 2.
Step 510: open platform receives this getToken message, carry out authentication according to APPKey to using example 2, be verified, find up-to-dately to have generated interim authorization token 2 for Web uses 1, and the unexpired term of interim authorization token 2, the residue term of validity with interim authorization token 2 and the interim authorization token 2 of declaring sends to application example 1.
Step 511: application example 1 receives the residue term of validity of interim authorization token 2 and interim authorization token 2, sends the CheckToken message of carrying interim authorization token 2 to open platform.
Step 512: open platform receives this CheckToken message, and whether the term of validity+the phase buffer that checks the interim authorization token 2 in this message mistake, finds not mistake, determines verification succeeds.
The composition schematic diagram of the open platform that Fig. 6 provides for the embodiment of the present invention, as shown in Figure 6, it mainly comprises: token generation module 61, token information maintenance module 62 and token correction verification module 63, wherein:
token generation module 61: receive the getToken message of carrying APPID and APPKey that application example is sent, according to this APPKey, this application example is carried out authentication, if be verified, judge and self whether do not exist for the interim authorization token that this APPID generates, perhaps, self exist for interim authorization token that this APPID generates but the term of validity of all tokens mistake all, if, generate an interim authorization token for this APPID, and be provided with effect phase and phase buffer for this token, the residue term of validity of this token that this token and this open platform are declared sends to this application example, record simultaneously this APPID in token information maintenance module 62, this token, the term of validity of this token and the corresponding relation of phase buffer, otherwise the residue term of validity of this token that the up-to-date interim authorization token that generates for this APPID and this open platform are declared sends to this application example.
Token generation module 61 is when generating an interim authorization token, and the minimum length of the phase buffer of this token is set to satisfy: making open platform is that this token that application example distributes can verification succeeds when the exhaustion of effect of this token.
When token generation module 61 will send interim authorization token to application example, if during the term of validity of the real surplus of this interim authorization token term of validity+phase buffer length 〉=this token, the residue term of validity of this token of declaring to this application example is the term of validity of this token; Otherwise the residue term of validity of this token of declaring to this application example is the real surplus term of validity of this token+phase buffer length, and wherein, the real surplus term of validity of this token is the remaining time of the term of validity of this token.
Token information maintenance module 62: receive and record APPID, token, the term of validity of this token and the corresponding relation of phase buffer that token generation module 61 is sent, and begin the term of validity+phase buffer of this token is carried out timing.
Token information maintenance module 62 is further used for, and when the term of validity of an interim authorization token+buffering is expired, deletes the relative recording of this interim authorization token.
Token correction verification module 63: receive the CheckToken message of carrying interim authorization token that application example is sent, to the term of validity+phase buffer of token information maintenance module 62 these tokens of inquiry mistake whether, if determine the verification failure; Otherwise, determine that verification passes through, to third party's ability platform initiating capacity call request.
The above is only preferred embodiment of the present invention, and is in order to limit the present invention, within the spirit and principles in the present invention not all, any modification of making, is equal to replacement, improvement etc., within all should being included in the scope of protection of the invention.

Claims (8)

1. one kind is improved the method that ability is called success rate, it is characterized in that, the method comprises:
Open platform receives the token request of obtaining for a Web application that application example is sent, judge that self whether not existing for this Web uses the interim authorization token that generates, perhaps, self exist for that this Web uses the interim authorization token that generates but the term of validity of all tokens mistake all, if, being that this Web uses generates an interim authorization token, and for this token is provided with effect phase and phase buffer, and the residue term of validity of this token that this token and this open platform are declared sends to this application example; Otherwise, the up-to-date residue term of validity of using this token that the interim authorization token that generates and this open platform declare for this Web is sent to this application example;
Open platform receives the check token request of carrying interim authorization token that application example is sent, and whether the term of validity+the phase buffer that judges this token mistake, if determine the verification failure; Otherwise, determine that verification passes through, to third party's ability platform initiating capacity call request.
2. method according to claim 1, is characterized in that, when the term of validity of an interim authorization token+buffering is expired, and this interim authorization token of open platform deletion.
3. method according to claim 1, is characterized in that, the minimum length of the phase buffer of described interim authorization token satisfies: making open platform is that this token that application example distributes can verification succeeds when the exhaustion of effect of this token.
4. method according to claim 1, is characterized in that, the residue term of validity of this token that described open platform is declared can be determined according to following mode:
When the term of validity of the real surplus term of validity of this token+phase buffer length 〉=this token, the residue term of validity of this token that open platform is declared to application example is the term of validity of this token; Otherwise the residue term of validity of this token that open platform is declared to application example is the real surplus term of validity of this token+phase buffer length, and wherein, the real surplus term of validity of this token is the remaining time of the term of validity of this token.
5. an open platform, is characterized in that, comprising:
token generation module: receive the token request of obtaining for a Web application that application example is sent, judge that self whether not existing for this Web uses the interim authorization token that generates, perhaps, self exist for that this Web uses the interim authorization token that generates but the term of validity of all tokens mistake all, if, for using, this Web generates an interim authorization token, and be provided with effect phase and phase buffer for this token, the residue term of validity of this token that this token and this open platform are declared sends to this application example, record simultaneously the Web application identities in the token information maintenance module, token, the term of validity of this token and the corresponding relation of phase buffer, otherwise, the up-to-date residue term of validity of using this token that the interim authorization token that generates and this open platform declare for this Web is sent to this application example,
The token information maintenance module receives and records Web application identities, token, the term of validity of this token and the corresponding relation of phase buffer that the token generation module is sent;
The token correction verification module: receive the check token request of carrying interim authorization token that application example is sent, whether the term of validity+the phase buffer that judges this token mistake, if determine the verification failure; Otherwise, determine that verification passes through, to third party's ability platform initiating capacity call request.
6. open platform according to claim 5, is characterized in that, described token information maintenance module is further used for, and when the term of validity of an interim authorization token+buffering is expired, deletes the relative recording of this interim authorization token.
7. open platform according to claim 5, it is characterized in that, described token generation module is further used for, and the minimum length of the phase buffer of interim authorization token is set to satisfy: making open platform is that this token that application example distributes can verification succeeds when the exhaustion of effect of this token.
8. open platform according to claim 5, it is characterized in that, described token generation module is further used for, in the time will sending interim authorization token to application example, if during the term of validity of the real surplus of this interim authorization token term of validity+phase buffer length 〉=this token, the residue term of validity of this token of declaring to this application example is the term of validity of this token; Otherwise the residue term of validity of this token of declaring to this application example is the real surplus term of validity of this token+phase buffer length, and wherein, the real surplus term of validity of this token is the remaining time of the term of validity of this token.
CN201110390468.2A 2011-11-30 2011-11-30 Raising ability calls method and the open platform of success rate Active CN103139168B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201110390468.2A CN103139168B (en) 2011-11-30 2011-11-30 Raising ability calls method and the open platform of success rate

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201110390468.2A CN103139168B (en) 2011-11-30 2011-11-30 Raising ability calls method and the open platform of success rate

Publications (2)

Publication Number Publication Date
CN103139168A true CN103139168A (en) 2013-06-05
CN103139168B CN103139168B (en) 2016-01-20

Family

ID=48498478

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201110390468.2A Active CN103139168B (en) 2011-11-30 2011-11-30 Raising ability calls method and the open platform of success rate

Country Status (1)

Country Link
CN (1) CN103139168B (en)

Cited By (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103491100A (en) * 2013-09-30 2014-01-01 中国科学院计算技术研究所 System for establishing token association relationship between multiple parties
WO2016155668A1 (en) * 2015-04-02 2016-10-06 成都鼎桥通信技术有限公司 Method for unified application authentication in trunking system, server and terminal
CN109474419A (en) * 2018-10-22 2019-03-15 航天信息股份有限公司 A kind of living body portrait photo encryption and decryption method and encrypting and deciphering system
CN111478923A (en) * 2020-04-28 2020-07-31 华为技术有限公司 Access request response method and device and electronic equipment
CN111581612A (en) * 2020-04-26 2020-08-25 支付宝(杭州)信息技术有限公司 Login state data processing method, device, equipment and system of applet application

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20050005133A1 (en) * 2003-04-24 2005-01-06 Xia Sharon Hong Proxy server security token authorization
US20070261105A1 (en) * 2004-12-17 2007-11-08 Abb Research Ltd. Method for License Allocation and Management
CN101345620A (en) * 2007-07-10 2009-01-14 吕秀娥 Internet user account cipher protection method of on-line token
CN102238007A (en) * 2010-04-20 2011-11-09 阿里巴巴集团控股有限公司 Method, device and system for acquiring session token of user by third-party application

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20050005133A1 (en) * 2003-04-24 2005-01-06 Xia Sharon Hong Proxy server security token authorization
US20070261105A1 (en) * 2004-12-17 2007-11-08 Abb Research Ltd. Method for License Allocation and Management
CN101345620A (en) * 2007-07-10 2009-01-14 吕秀娥 Internet user account cipher protection method of on-line token
CN102238007A (en) * 2010-04-20 2011-11-09 阿里巴巴集团控股有限公司 Method, device and system for acquiring session token of user by third-party application

Cited By (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103491100A (en) * 2013-09-30 2014-01-01 中国科学院计算技术研究所 System for establishing token association relationship between multiple parties
WO2016155668A1 (en) * 2015-04-02 2016-10-06 成都鼎桥通信技术有限公司 Method for unified application authentication in trunking system, server and terminal
US10721230B2 (en) 2015-04-02 2020-07-21 Chengdu Td Tech Ltd. Unified authentication method for application in trunking system, server and terminal
CN109474419A (en) * 2018-10-22 2019-03-15 航天信息股份有限公司 A kind of living body portrait photo encryption and decryption method and encrypting and deciphering system
CN111581612A (en) * 2020-04-26 2020-08-25 支付宝(杭州)信息技术有限公司 Login state data processing method, device, equipment and system of applet application
CN111478923A (en) * 2020-04-28 2020-07-31 华为技术有限公司 Access request response method and device and electronic equipment

Also Published As

Publication number Publication date
CN103139168B (en) 2016-01-20

Similar Documents

Publication Publication Date Title
CN109190410B (en) Log behavior auditing method based on block chain in cloud storage environment
CN107911373B (en) A kind of block chain right management method and system
US20220239470A1 (en) Cross-blockchain data processing method and apparatus, device, and computer storage medium
CN108712395B (en) Account management method, device, server and storage medium based on block chain
CN109040271B (en) Network equipment integrity protection method under distributed environment
CN108712257B (en) Cross-block-chain authentication method and device and electronic equipment
CN102170440B (en) Method suitable for safely migrating data between storage clouds
US7953977B2 (en) Security and ticketing system control and management
CN108009823A (en) The distributed call method and system for calculating power resource based on block chain intelligence contract
CN102378170A (en) Method, device and system of authentication and service calling
US20200169389A1 (en) Creating a blockchain account and verifying blockchain transactions
CN103685194B (en) Capacity calling method and device, and terminal
CN103179176B (en) The call method that web applies under cloud/cluster environment, device and system
CN104348792A (en) Data processing method, device and system
CN103139168B (en) Raising ability calls method and the open platform of success rate
KR20180102269A (en) System and method for supporting external interface based on block chain
CN111260475A (en) Data processing method, block chain node point equipment and storage medium
CN109246704A (en) Safety auditing system and method for remotely connecting
CN111915308A (en) Transaction processing method of blockchain network and blockchain network
KR101120059B1 (en) Billing verifying apparatus, billing apparatus and method for cloud computing environment
CN110858211B (en) Data storage method, device and system and storage medium
CN109547195A (en) A kind of code data processing method and processing device
CN101888623B (en) Safety service-based mobile network safety protection method
CN106209728B (en) Telecommunication capability call method and system
CN111581613A (en) Account login verification method and system

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C14 Grant of patent or utility model
GR01 Patent grant