CN108173839A - Rights management method and system - Google Patents

Abstract

The invention discloses a rights management method and system. Wherein, the method includes: storing the authority configuration information corresponding to each application server in the authority management database; when receiving the authority management request from the application server, obtaining the authority keyword contained in the authority management request; according to the authority management The permission configuration information stored in the database determines the permission query result corresponding to the permission keyword; returns a response message corresponding to the permission management request to the application server according to the permission query result. It can be seen that, by adopting this solution, the permission information of multiple application systems can be managed and queried in a unified manner, without the need for each application system to maintain the permission management information by itself, which saves the overhead of each application system and improves the business operation efficiency of the application system. Provides convenience for rights management operations.

Description

Rights management method and system

technical field

The present invention relates to the field of computer technology, in particular to a rights management method and system.

Background technique

At present, with the popularization of computer technology, various application systems emerge in an endless stream, bringing a lot of convenience to users. For example, some application systems can provide users with query and use functions of various test questions, some application systems can provide users with convenient shopping functions, and some application systems can provide users with reading functions.

Usually, each application system has a corresponding authorized operation user, and different authorized operation users may have different operation permissions. For example, taking the test application system as an example, its authorized operating users include operation and maintenance users and consumption users. Among them, the operation and maintenance users are responsible for various setting operations on the test application system, and the consumer users can browse the content of the test questions they purchased. It can be seen that the operation permissions of operation and maintenance users and consumption users are different. Moreover, for the same consumer users, the content of the test questions that user A and user B can browse will also be different. In order to set corresponding operation permissions for different users, permission configuration operations need to be performed inside the test application system to realize the permission management function. It can be seen that, in the prior art, in order to implement the authority management operation, each application system needs to implement authority configuration and management functions within the system.

However, in the process of implementing the present invention, the inventors found that the above-mentioned methods in the prior art have at least the following defects: each application system must maintain the business data related to business operation, and must also maintain additional rights related to authority management. As a result, the load on the application system has been greatly increased, which has brought unnecessary impact on the normal business operation of the application system.

Contents of the invention

In view of the above problems, the present invention is proposed to provide a rights management method and system that overcome the above problems or at least partially solve the above problems.

According to one aspect of the present invention, a rights management method is provided, including:

Store the rights configuration information corresponding to each application server in the rights management database;

When receiving the permission management request from the application server, obtain the permission keyword included in the permission management request;

Determine the authority query result corresponding to the authority keyword according to the authority configuration information stored in the authority management database;

A response message corresponding to the permission management request is returned to the application server according to the permission query result.

According to another aspect of the present invention, a rights management system is provided, including:

A storage module, adapted to store the authority configuration information corresponding to each application server in the authority management database;

The obtaining module is adapted to obtain the permission keyword contained in the permission management request when receiving the permission management request from the application server;

A query module, adapted to determine the authority query result corresponding to the authority keyword according to the authority configuration information stored in the authority management database;

The response module is adapted to return a response message corresponding to the rights management request to the application server according to the rights query result.

According to yet another aspect of the present invention, an electronic device is provided, including: a processor, a memory, a communication interface, and a communication bus, and the processor, the memory, and the communication interface complete mutual communication through the communication bus;

The memory is used to store at least one executable instruction, and the executable instruction causes the processor to execute the operation corresponding to the above rights management method.

According to yet another aspect of the present invention, a computer storage medium is provided, wherein at least one executable instruction is stored in the storage medium, and the executable instruction causes a processor to perform operations corresponding to the above rights management method.

According to the rights management method and system disclosed in the present invention, the rights configuration information corresponding to each application server can be stored in the rights management database. Correspondingly, when receiving a rights management request from an application server, according to the The permission keyword and the permission configuration information stored in the permission management database determine the permission query result corresponding to the permission keyword; return a response message corresponding to the permission management request to the application server according to the permission query result. It can be seen that the method in this embodiment can uniformly manage and query the permission information of multiple application systems, without the need for each application system to maintain the permission management information by itself, which saves the overhead of each application system and improves the business operation of the application system Efficiency provides convenience for rights management operations.

The above description is only an overview of the technical solution of the present invention. In order to better understand the technical means of the present invention, it can be implemented according to the contents of the description, and in order to make the above and other purposes, features and advantages of the present invention more obvious and understandable , the specific embodiments of the present invention are enumerated below.

Description of drawings

Various other advantages and benefits will become apparent to those of ordinary skill in the art upon reading the following detailed description of the preferred embodiment. The drawings are only for the purpose of illustrating a preferred embodiment and are not to be considered as limiting the invention. Also throughout the drawings, the same reference numerals are used to designate the same components. In the attached picture:

FIG. 1 shows a schematic flow diagram of a rights management method according to an embodiment of the present invention;

FIG. 2 shows a schematic flow diagram of a rights management method according to another embodiment of the present invention;

Fig. 3 shows a system structure diagram of a rights management system provided by another embodiment of the present invention;

Fig. 4 shows a schematic structural diagram of an electronic device according to an embodiment of the present invention.

Detailed ways

Exemplary embodiments of the present disclosure will be described in more detail below with reference to the accompanying drawings. Although exemplary embodiments of the present disclosure are shown in the drawings, it should be understood that the present disclosure may be embodied in various forms and should not be limited by the embodiments set forth herein. Rather, these embodiments are provided for more thorough understanding of the present disclosure and to fully convey the scope of the present disclosure to those skilled in the art.

Fig. 1 shows a schematic flowchart of a rights management method according to an embodiment of the present invention. As shown in Figure 1, the method includes:

Step S110: storing the rights configuration information corresponding to each application server in the rights management database.

Wherein, the application server is a server that provides service support for the corresponding application. For example, taking a test-question application as an example, the test-question application server needs to provide business support for it, and the number of specific test-question application servers may be one or multiple. The subject of execution of this step and subsequent steps may be a rights management system dedicated to managing rights of various applications, and the rights configuration information corresponding to each application server is stored in the rights management database through the rights management system.

Wherein, the permission configuration information corresponding to each application server refers to the permission configuration information related to the corresponding application. Specifically, the permission configuration information may include multiple types, for example, it may include application permission configuration information, resource permission configuration information, terminal permission configuration information, and operation permission configuration information. Wherein, the application permission configuration information is used to configure permissions of the application itself. The resource permission configuration information is used to configure the permission corresponding to each resource included in the application, including the user ID of the user who can operate the resource and/or the type of operation that can be performed on the resource. The terminal authority configuration information is used to configure the authority corresponding to each user terminal, including the resource identifier of the resource that the user terminal can operate and/or the type of operation that can be performed. The operation permission configuration information is used to configure permissions related to various operations, including resources and/or user terminals applicable to a certain operation type.

In addition, the rights configuration information may also include various forms of information, as long as they are related to the rights configuration operation, and the present invention does not limit the specific connotation of the rights configuration information.

Step S120: When receiving the rights management request from the application server, obtain the rights keyword included in the rights management request.

Wherein, the rights management request sent by the application server may be triggered and sent by the application server itself. For example, when the operation and maintenance personnel corresponding to the application server need to inquire about the permission configuration of the application, they can directly send a permission management request through the application server. Alternatively, the rights management request sent by the application server may be triggered according to the received operation request sent by the user terminal. For example, when the first user terminal sends a query-type operation request for the first resource included in the application, the application server generates a corresponding rights management request according to the operation request.

The permission management request includes a permission keyword, and the permission keyword is used to determine corresponding permission information. The specific content and quantity of authority keywords can be set according to actual conditions. For example, in the first case above, the authority keyword can be set by the operation and maintenance personnel according to the specific content of the authority configuration situation to be queried. As another example, in the second case above, the permission keyword is determined according to the operation request sent by the user terminal. Specifically, the permission keyword may include: query operation information, resource identification information of the first resource, application corresponding and/or terminal information of the first user terminal, etc.

Step S130: Determine the authority query result corresponding to the authority keyword according to the authority configuration information stored in the authority management database.

Wherein, since the authority configuration information and the authority keywords are provided by the application server, there is an association between the authority configuration information and the authority keywords, and the authority query results corresponding to the authority keywords can be determined through the authority configuration information .

For example, in the above-mentioned first case, it is assumed that the permission keyword includes: resource identification information of the first resource, through which it can be determined that the application server wants to confirm the following content: the user terminal and/or The type of operation that can be performed on the first resource. Correspondingly, information about each user terminal capable of operating the first resource and an operation type corresponding to the first resource are stored in the pre-stored authority configuration information. Therefore, the terminal list of user terminals capable of operating the first resource and/or the types of operations that can be performed on the first resource (for example, including operations such as query, modification, and deletion) can be determined by querying.

As another example, in the second case above, it is assumed that the authority key includes: query-type operation information, resource identification information of the first resource, and terminal information of the first user terminal. It can be determined through the above keywords that the application server wants to confirm the following content: whether the first user terminal has the authority to perform a query operation on the first resource. Correspondingly, the pre-stored authority configuration information stores the information of each user terminal capable of operating the first resource, and further stores the operation mode in which each user terminal can operate the first resource. Therefore, it can be determined whether the first user terminal has the right to perform a query operation on the first resource by querying.

Step S140: Return a response message corresponding to the rights management request to the application server according to the rights query result.

Specifically, the specific content of the response message depends on the specific form of the rights management request and the type of the query result. For example, in the first case above, the terminal list of user terminals capable of operating the first resource and/or the types of operations that can be performed on the first resource are determined through query. Correspondingly, a terminal list of user terminals capable of operating the first resource and/or types of operations that can be performed on the first resource may be included in the response message for viewing by the operation and maintenance personnel.

As another example, in the second case above, it can be determined whether the first user terminal has the right to perform a query operation on the first resource by querying. Correspondingly, the response message may include a parameter indicating whether the first user terminal has the right to query the first resource, so that the application server can determine whether the first user terminal has the right according to the value of the parameter. For example, assuming that the parameter value is 0, it means that the first user terminal has the right to perform query operations on the first resource, and assuming that the parameter value is 1, it means that the first user terminal does not have the right to perform query operations on the first resource. Correspondingly, the application server responds to the operation request of the first user terminal according to the query result. For example, if it is found out that the first user terminal has the authority to perform query operations on the first resource, the application server allows the first user terminal to perform query operations on the first resource; Perform query operations.

It can be seen that the method in this embodiment can uniformly manage and query the permission information of multiple application systems, without the need for each application system to maintain the permission management information by itself, which saves the overhead of each application system and improves the business operation of the application system Efficiency provides convenience for rights management operations.

Fig. 2 shows a schematic flowchart of a rights management method according to another embodiment of the present invention. The subject of execution of the method is a rights management system (or called a rights management platform), and the rights of multiple applications can be managed through the rights management system. As shown in Figure 2, the method includes:

Step S200: Receive in advance permission configuration information sent by each application server through a preset permission configuration entry.

Wherein, the permission configuration entry may be an interface provided by the permission management system, specifically including at least one of the following: an application permission configuration entry, a resource permission configuration entry, an authorized terminal configuration entry, and an authorized operation configuration entry.

Specifically, when the permission configuration entry is an application permission configuration entry, permission information related to the application can be configured through the application permission configuration entry. Correspondingly, the permission configuration information sent through the application permission configuration entry includes: the application identifier of the application whose permission is to be configured, and the application permission configuration information corresponding to the application identifier. For example, the operator can add relevant information about the application to be configured with the permission through the permission configuration entry provided by the permission management system in the present invention, specifically including the application identification of the application and the application permission configuration information corresponding to the application identification. For example, a newly developed application can add relevant information about the application through the permission configuration entry.

When the permission configuration entry is a resource permission configuration entry, the permission configuration information sent through the resource permission configuration entry includes: the resource identifier of the resource whose permission is to be configured, and the resource permission configuration information corresponding to the resource identifier. Wherein, the resource permission configuration information includes: authorized operation type information corresponding to the resource identifier and/or authorized terminal type information corresponding to the resource identifier. Specifically, an application further includes multiple resources, and each resource needs to be distinguished through a resource identifier, and corresponding resource permission configuration information is configured for each resource. For example, assume that a website navigation application includes navigation bar resources, home page resources, user comment resources, and leaderboard resources. Correspondingly, add the above-mentioned resources for the website navigation application through the resource permission configuration entry, and set the resource permission configuration information of each resource respectively. Wherein, the resource permission configuration information includes authorized operation type information corresponding to the resource identifier and/or authorized terminal type information corresponding to the resource identifier. Wherein, the authorized operation type information corresponding to the resource identifier refers to: legal operation types supported by the resource, including query operations, modification operations, and the like. The authorized terminal type information corresponding to the resource identifier refers to: the information of the legal terminal capable of operating the resource. Optionally, the resource permission configuration information of the resource specifically includes: authorized operation information possessed by the authorized terminal corresponding to the resource identifier. For example, in practical applications, a resource itself supports query operations and modification operations, and both user A and user B can operate the resource, but the authorized operation information of user A is only for query operations, that is, user A can only The resource can be queried and cannot be modified; the authorized operation information possessed by user B includes both query operation and modification operation, that is, user B can not only query the resource but also modify it. It can be seen that, in this embodiment, the authorized operation information possessed by each authorized terminal may be further stored, so as to better realize the management of each terminal user. It can be seen from the above description that the resource permission configuration entry is a configuration entry from the perspective of resource type, and is used to configure various permissions related to the resource for each resource.

When the authority configuration entry includes an authorized terminal configuration entry, the authority configuration information sent through the authorized terminal configuration entry includes: the terminal identifier of the authorized terminal, and terminal authority configuration information corresponding to the terminal identifier; wherein, the terminal authority configuration information includes: Authorized operation type information corresponding to the terminal identifier and/or authorized resource type information corresponding to the terminal identifier. Wherein, the authorized operation type information corresponding to the terminal identifier refers to: legal operation types supported by the terminal, including query operations, modification operations, and the like. The authorized resource information corresponding to the terminal identifier refers to: information about legal resources that the terminal can operate. Optionally, the terminal authority configuration information specifically includes: what type of operations the terminal can perform on the resources it can operate. For example, in practical applications, an end user can operate both resource one and resource two, but the user can only perform query operations on resource one, and can perform both query operations and modification operations on resource two. Therefore, for each resource that the terminal user can operate, it is necessary to further store the type of operation that the user can perform on the resource. It can be seen from the above description that the authorized terminal configuration entry is an entry for configuration from the perspective of the user terminal. For example, the roles of various user terminals (including ordinary administrators, advanced administrators, ordinary users, advanced users, etc.) can be configured.

When the permission configuration entry includes an authorized operation configuration entry, the permission configuration information sent through the authorized operation configuration entry includes: the operation identifier of the authorized operation, and the operation permission configuration information corresponding to the operation identifier; wherein, the operation permission configuration information includes: Authorized resource type information corresponding to the operation identifier and/or authorized terminal type information corresponding to the operation identifier. Wherein, the authorized terminal type information corresponding to the operation identifier refers to: information of terminals capable of performing the operation. The authorized resource type information corresponding to the operation identifier refers to: information of legal resources corresponding to the operation. Optionally, the operation authority configuration information specifically includes: specifically for which resources the terminal capable of performing the operation can perform the operation. It can be seen that the authorized operation configuration entry is an entry for configuration from the perspective of operation types, for example, it can be specifically configured for each operation type. Wherein, the operation type specifically includes various types of operations such as query, modification, login, logout, and statistics. For example, resources that can support the operation can be configured for the query operation, including: navigation bar resources, user comment resources, etc.; and a list of end users that can use the operation can be configured for the query operation.

Step S210: storing the rights configuration information corresponding to each application server in the rights management database.

Wherein, the application server is a server that provides service support for the corresponding application. For example, taking a test-question application as an example, the test-question application server needs to provide business support for it, and the number of specific test-question application servers may be one or multiple.

Wherein, the permission configuration information corresponding to each application server refers to the permission configuration information related to the corresponding application. Specifically, the permission configuration information may include various types, for example, it may include various permission configuration information input through the above-mentioned various permission configuration entries, specifically including application permission configuration information, resource permission configuration information, terminal permission configuration information, and operation permission configuration information. configuration information, etc. In addition, the rights configuration information may also include information in various forms, as long as it is related to the rights configuration operation, and the present invention does not limit the specific connotation of the rights configuration information.

Step S220: When receiving the rights management request from the application server, obtain the rights keyword included in the rights management request.

Wherein, the rights management request sent by the application server may be triggered and sent by the application server itself. For example, when the operation and maintenance personnel corresponding to the application server need to inquire about the permission configuration of the application, they can directly send a permission management request through the application server. Alternatively, the rights management request sent by the application server may be triggered according to the received operation request sent by the user terminal. For example, when the first user terminal sends a query-type operation request for the first resource included in the application, the application server generates a corresponding rights management request according to the operation request.

In this embodiment, the latter implementation manner is mainly described as an example. Correspondingly, the rights management system receives the rights management request corresponding to the operation request generated by the application server according to the operation request sent by the user terminal, and obtains the rights keyword included in the rights management request. Wherein, the operation request sent by the user terminal includes at least one of the following information: application-type information, resource-type information, terminal-type information, and operation-type information. Correspondingly, the permission keyword in the permission management request is determined according to the operation request, and may include at least one of the following: an application keyword, a resource keyword, a terminal keyword, and an operation keyword. The specific content and quantity of authority keywords can be set according to actual conditions. For example, in this embodiment, the corresponding permission keyword is determined according to the operation request sent by the user terminal. Specifically, the permission keyword may include: operation keyword (specifically querying operation information), resource keyword (specifically The resource identification information of the first resource), the application key (specifically, the application identification corresponding to the application), and/or the terminal key (specifically, the terminal information of the first user terminal), etc.

Step S230: Determine the authority query result corresponding to the authority keyword according to the authority configuration information stored in the authority management database.

Wherein, since the authority configuration information and the authority keywords are provided by the application server, there is an association between the authority configuration information and the authority keywords, and the authority query results corresponding to the authority keywords can be determined through the authority configuration information .

For example, in this embodiment, since the authority key includes: query type operation information, resource identification information of the first resource, and terminal information of the first user terminal. It can be determined through the above keywords that the application server wants to confirm the following content: whether the first user terminal has the authority to perform a query operation on the first resource. Correspondingly, the pre-stored authority configuration information stores the information of each user terminal capable of operating the first resource, and further stores the operation mode in which each user terminal can operate the first resource. Therefore, it can be determined whether the first user terminal has the right to perform a query operation on the first resource by querying.

Step S240: Return a response message corresponding to the rights management request to the application server according to the rights query result.

Specifically, the specific content of the response message depends on the specific form of the rights management request and the type of the query result. For example, in this embodiment, it can be determined by querying whether the first user terminal has the authority to perform query operations on the first resource. Correspondingly, the response message may include a parameter indicating whether the first user terminal has the right to query the first resource, so that the application server can determine whether the first user terminal has the right according to the value of the parameter. For example, assuming that the parameter value is 0, it means that the first user terminal has the right to perform query operations on the first resource, and assuming that the parameter value is 1, it means that the first user terminal does not have the right to perform query operations on the first resource. Correspondingly, the application server responds to the operation request of the user terminal according to the query result contained in the response message. For example, if it is found out that the first user terminal has the authority to perform query operations on the first resource, the application server allows the first user terminal to perform query operations on the first resource; Perform query operations.

It can be seen that the method in this embodiment can uniformly manage and query the permission information of multiple application systems, without the need for each application system to maintain the permission management information by itself, which saves the overhead of each application system and improves the business operation of the application system Efficiency provides convenience for rights management operations. Each application system only needs to store business-related data, and does not need to store and manage permission-related data. When the application system needs to know the specific authority information, it can access the authority management system in the present invention, or realize communication with the authority management system in the present invention by sending API requests or other forms of messages, and then through the authority management system in the present invention The authority management system obtains the corresponding authority information and realizes the authority management function. In addition, since the permission management function involves management at multiple granularities, for example, it can be managed at the granularity of resources, at the granularity of operations, at the granularity of users, or at the granularity of applications. For granular management, through the authority management system in the present invention, multiple applications can be managed at the same time, and management query operations of different granularities can be provided, which provides convenience for authority management.

Fig. 3 shows a system structure diagram of a rights management system provided by another embodiment of the present invention, including:

The storage module 31 is adapted to store the authority configuration information corresponding to each application server in the authority management database;

The acquiring module 32 is adapted to acquire the authority keyword contained in the authority management request when receiving the authority management request from the application server;

The query module 33 is adapted to determine the permission query result corresponding to the permission keyword according to the permission configuration information stored in the permission management database;

The response module 34 is adapted to return a response message corresponding to the permission management request to the application server according to the permission query result.

Optionally, the system further includes:

The receiving module receives in advance the permission configuration information sent by each application server through the preset permission configuration entry;

Wherein, the permission configuration entry includes at least one of the following: an application permission configuration entry, a resource permission configuration entry, an authorized terminal configuration entry, and an authorized operation configuration entry.

Optionally, when the permission configuration entry includes an application permission configuration entry, the permission configuration information sent through the application permission configuration entry includes: the application identifier of the application whose permission is to be configured, and the application permission corresponding to the application identifier configuration information;

When the permission configuration entry includes a resource permission configuration entry, the permission configuration information sent through the resource permission configuration entry includes: the resource identifier of the resource whose permission is to be configured, and the resource permission configuration information corresponding to the resource identifier; wherein , the resource permission configuration information includes: authorized operation information corresponding to the resource identifier and/or authorized terminal information corresponding to the resource identifier;

When the authority configuration entry includes an authorized terminal configuration entry, the authority configuration information sent through the authorized terminal configuration entry includes: a terminal identifier of an authorized terminal, and terminal authority configuration information corresponding to the terminal identifier; wherein, the The terminal authority configuration information includes: authorized operation information corresponding to the terminal identifier and/or authorized resource information corresponding to the terminal identifier;

When the permission configuration entry includes an authorized operation configuration entry, the permission configuration information sent through the authorized operation configuration entry includes: an operation identifier of an authorized operation, and operation permission configuration information corresponding to the operation identifier; wherein, the The operation authority configuration information includes: authorized resource type information corresponding to the operation identifier and/or authorized terminal type information corresponding to the operation identifier.

Optionally, the permission keyword included in the permission management request includes at least one of the following: an application keyword, a resource keyword, a terminal keyword, and an operation keyword.

Optionally, the receiving module is specifically adapted to: receiving a rights management request corresponding to the operation request generated by the application server according to the operation request sent by the user terminal;

Then the response module is specifically adapted to: return a response message corresponding to the permission management request to the application server according to the permission query result, so that the application server can perform operations sent by the user terminal according to the response message. Request a response.

Optionally, the operation request sent by the user terminal includes at least one of the following information: application-type information, resource-type information, terminal-type information, and operation-type information.

For the specific structure and working principle of each of the above modules, reference may be made to the description of corresponding steps in the method embodiments, which will not be repeated here.

An embodiment of the present application provides a non-volatile computer storage medium, the computer storage medium stores at least one executable instruction, and the computer executable instruction can execute the rights management method in any of the above method embodiments.

Fig. 4 shows a schematic structural diagram of an electronic device according to an embodiment of the present invention, and the specific embodiment of the present invention does not limit the specific implementation of the electronic device.

As shown in FIG. 4 , the electronic device may include: a processor (processor) 402 , a communication interface (Communications Interface) 404 , a memory (memory) 406 , and a communication bus 408 .

in:

The processor 402 , the communication interface 404 , and the memory 406 communicate with each other through the communication bus 408 .

The communication interface 404 is used to communicate with network elements of other devices such as clients or other servers.

The processor 402 is configured to execute the program 410, and may specifically execute the relevant steps in the above embodiments of the rights management method.

Specifically, the program 410 may include program codes including computer operation instructions.

The processor 402 may be a central processing unit CPU, or an Application Specific Integrated Circuit (ASIC), or one or more integrated circuits configured to implement the embodiments of the present invention. The one or more processors included in the electronic device may be of the same type, such as one or more CPUs, or may be different types of processors, such as one or more CPUs and one or more ASICs.

The memory 406 is used to store the program 410 . The memory 406 may include a high-speed RAM memory, and may also include a non-volatile memory (non-volatile memory), such as at least one disk memory.

The program 410 can specifically be used to make the processor 402 perform the following operations:

Store the rights configuration information corresponding to each application server in the rights management database;

When receiving the rights management request from the application server, obtain the rights keyword included in the rights management request;

determining the authority query result corresponding to the authority keyword according to the authority configuration information stored in the authority management database;

Returning a response message corresponding to the rights management request to the application server according to the rights query result.

In an optional manner, the program 410 may be further specifically configured to enable the processor 402 to perform the following operations:

Receive in advance the permission configuration information sent by each application server through the preset permission configuration entry;

Wherein, the permission configuration entry includes at least one of the following: an application permission configuration entry, a resource permission configuration entry, an authorized terminal configuration entry, and an authorized operation configuration entry.

Wherein, when the permission configuration entry includes an application permission configuration entry, the permission configuration information sent through the application permission configuration entry includes: the application identifier of the application whose permission is to be configured, and the application permission configuration information corresponding to the application identifier ;

When the permission configuration entry includes a resource permission configuration entry, the permission configuration information sent through the resource permission configuration entry includes: the resource identifier of the resource whose permission is to be configured, and the resource permission configuration information corresponding to the resource identifier; wherein , the resource permission configuration information includes: authorized operation information corresponding to the resource identifier and/or authorized terminal information corresponding to the resource identifier;

When the authority configuration entry includes an authorized terminal configuration entry, the authority configuration information sent through the authorized terminal configuration entry includes: a terminal identifier of an authorized terminal, and terminal authority configuration information corresponding to the terminal identifier; wherein, the The terminal authority configuration information includes: authorized operation information corresponding to the terminal identifier and/or authorized resource information corresponding to the terminal identifier;

When the permission configuration entry includes an authorized operation configuration entry, the permission configuration information sent through the authorized operation configuration entry includes: an operation identifier of an authorized operation, and operation permission configuration information corresponding to the operation identifier; wherein, the The operation authority configuration information includes: authorized resource type information corresponding to the operation identifier and/or authorized terminal type information corresponding to the operation identifier.

Wherein, the authority key included in the authority management request includes at least one of the following: an application key, a resource key, a terminal key, and an operation key.

In an optional manner, the program 410 may be further specifically configured to enable the processor 402 to perform the following operations:

receiving a rights management request corresponding to the operation request generated by the application server according to the operation request sent by the user terminal; for the application server to respond to the operation request sent by the user terminal according to the response message.

Wherein, the operation request sent by the user terminal includes at least one of the following information: application type information, resource type information, terminal type information, and operation type information.

The algorithms and displays presented herein are not inherently related to any particular computer, virtual system, or other device. Various generic systems can also be used with the teachings based on this. The structure required to construct such a system is apparent from the above description. Furthermore, the present invention is not specific to any particular programming language. It should be understood that various programming languages can be used to implement the content of the present invention described herein, and the above description of specific languages is for disclosing the best mode of the present invention.

In the description provided herein, numerous specific details are set forth. However, it is understood that embodiments of the invention may be practiced without these specific details. In some instances, well-known methods, structures and techniques have not been shown in detail in order not to obscure the understanding of this description.

Similarly, it should be appreciated that in the foregoing description of exemplary embodiments of the invention, in order to streamline this disclosure and to facilitate an understanding of one or more of the various inventive aspects, various features of the invention are sometimes grouped together in a single embodiment, figure, or its description. This method of disclosure, however, is not to be interpreted as reflecting an intention that the claimed invention requires more features than are expressly recited in each claim. Rather, as the following claims reflect, inventive aspects lie in less than all features of a single foregoing disclosed embodiment. Thus, the claims following the Detailed Description are hereby expressly incorporated into this Detailed Description, with each claim standing on its own as a separate embodiment of this invention.

Those skilled in the art can understand that the modules in the device in the embodiment can be adaptively changed and arranged in one or more devices different from the embodiment. Modules or units or components in the embodiments may be combined into one module or unit or component, and furthermore may be divided into a plurality of sub-modules or sub-units or sub-assemblies. All features disclosed in this specification (including accompanying claims, abstract and drawings) and any method or method so disclosed may be used in any combination, except that at least some of such features and/or processes or units are mutually exclusive. All processes or units of equipment are combined. Each feature disclosed in this specification (including accompanying claims, abstract and drawings) may be replaced by alternative features serving the same, equivalent or similar purpose, unless expressly stated otherwise.

Furthermore, those skilled in the art will understand that although some embodiments described herein include some features included in other embodiments but not others, combinations of features from different embodiments are meant to be within the scope of the invention. and form different embodiments. For example, in the following claims, any of the claimed embodiments may be used in any combination.

The various component embodiments of the present invention may be implemented in hardware, or in software modules running on one or more processors, or in a combination thereof. Those skilled in the art should understand that a microprocessor or a digital signal processor (DSP) may be used in practice to implement some or all functions of some or all components in the rights management system according to the embodiments of the present invention. The present invention can also be implemented as an apparatus or an apparatus program (for example, a computer program and a computer program product) for performing a part or all of the methods described herein. Such a program for realizing the present invention may be stored on a computer-readable medium, or may be in the form of one or more signals. Such a signal may be downloaded from an Internet site, or provided on a carrier signal, or provided in any other form.

It should be noted that the above-mentioned embodiments illustrate rather than limit the invention, and that those skilled in the art will be able to design alternative embodiments without departing from the scope of the appended claims. In the claims, any reference signs placed between parentheses shall not be construed as limiting the claim. The word "comprising" does not exclude the presence of elements or steps not listed in a claim. The word "a" or "an" preceding an element does not exclude the presence of a plurality of such elements. The invention can be implemented by means of hardware comprising several distinct elements, and by means of a suitably programmed computer. In a unit claim enumerating several means, several of these means can be embodied by one and the same item of hardware. The use of the words first, second, and third, etc. does not indicate any order. These words can be interpreted as names.

The present invention also discloses: A1. A rights management method, comprising:

Store the rights configuration information corresponding to each application server in the rights management database;

When receiving the rights management request from the application server, obtain the rights keyword included in the rights management request;

determining the authority query result corresponding to the authority keyword according to the authority configuration information stored in the authority management database;

Returning a response message corresponding to the rights management request to the application server according to the rights query result.

A2. The method according to A1, wherein, before the step of storing the rights configuration information corresponding to each application server in the rights management database, further comprising:

Receive in advance the permission configuration information sent by each application server through the preset permission configuration entry;

Wherein, the permission configuration entry includes at least one of the following: an application permission configuration entry, a resource permission configuration entry, an authorized terminal configuration entry, and an authorized operation configuration entry.

A3. The method according to A2, wherein, when the permission configuration entry includes an application permission configuration entry, the permission configuration information sent through the application permission configuration entry includes: the application identifier of the application whose permission is to be configured, and the App permission configuration information corresponding to the app identifier;

When the permission configuration entry includes a resource permission configuration entry, the permission configuration information sent through the resource permission configuration entry includes: the resource identifier of the resource whose permission is to be configured, and the resource permission configuration information corresponding to the resource identifier; wherein , the resource permission configuration information includes: authorized operation information corresponding to the resource identifier and/or authorized terminal information corresponding to the resource identifier;

When the authority configuration entry includes an authorized terminal configuration entry, the authority configuration information sent through the authorized terminal configuration entry includes: a terminal identifier of an authorized terminal, and terminal authority configuration information corresponding to the terminal identifier; wherein, the The terminal authority configuration information includes: authorized operation information corresponding to the terminal identifier and/or authorized resource information corresponding to the terminal identifier;

When the permission configuration entry includes an authorized operation configuration entry, the permission configuration information sent through the authorized operation configuration entry includes: an operation identifier of an authorized operation, and operation permission configuration information corresponding to the operation identifier; wherein, the The operation authority configuration information includes: authorized resource type information corresponding to the operation identifier and/or authorized terminal type information corresponding to the operation identifier.

A4. The method according to any one of A1-A3, wherein the permission key contained in the permission management request includes at least one of the following: an application key, a resource key, a terminal key, and an operation key.

A5. The method according to any one of A1-A4, wherein the step of receiving the rights management request from the application server specifically includes: receiving the operation request corresponding to the operation request generated by the application server according to the operation request sent by the user terminal Rights management requests;

Then the step of returning a response message corresponding to the permission management request to the application server according to the permission query result further includes the steps of:

The application server responds to the operation request sent by the user terminal according to the response message.

A6. The method according to A5, wherein the operation request sent by the user terminal includes at least one of the following information: application-type information, resource-type information, terminal-type information, and operation-type information.

B7. A rights management system, comprising:

A storage module, adapted to store the authority configuration information corresponding to each application server in the authority management database;

The obtaining module is adapted to obtain the permission keyword contained in the permission management request when receiving the permission management request from the application server;

A query module, adapted to determine the authority query result corresponding to the authority keyword according to the authority configuration information stored in the authority management database;

The response module is adapted to return a response message corresponding to the rights management request to the application server according to the rights query result.

B8. The system according to B7, wherein the system further comprises:

The receiving module receives in advance the permission configuration information sent by each application server through the preset permission configuration entry;

Wherein, the permission configuration entry includes at least one of the following: an application permission configuration entry, a resource permission configuration entry, an authorized terminal configuration entry, and an authorized operation configuration entry.

B9. The system according to B8, wherein, when the permission configuration entry includes an application permission configuration entry, the permission configuration information sent through the application permission configuration entry includes: the application identifier of the application whose permission is to be configured, and the App permission configuration information corresponding to the app identifier;

When the permission configuration entry includes a resource permission configuration entry, the permission configuration information sent through the resource permission configuration entry includes: the resource identifier of the resource whose permission is to be configured, and the resource permission configuration information corresponding to the resource identifier; wherein , the resource permission configuration information includes: authorized operation information corresponding to the resource identifier and/or authorized terminal information corresponding to the resource identifier;

When the authority configuration entry includes an authorized terminal configuration entry, the authority configuration information sent through the authorized terminal configuration entry includes: a terminal identifier of an authorized terminal, and terminal authority configuration information corresponding to the terminal identifier; wherein, the The terminal authority configuration information includes: authorized operation information corresponding to the terminal identifier and/or authorized resource information corresponding to the terminal identifier;

When the permission configuration entry includes an authorized operation configuration entry, the permission configuration information sent through the authorized operation configuration entry includes: an operation identifier of an authorized operation, and operation permission configuration information corresponding to the operation identifier; wherein, the The operation authority configuration information includes: authorized resource type information corresponding to the operation identifier and/or authorized terminal type information corresponding to the operation identifier.

B10. The system according to any one of B7-B9, wherein the permission key contained in the permission management request includes at least one of the following: an application key, a resource key, a terminal key, and an operation key.

B11. The system according to any one of B7-B10, wherein the receiving module is specifically adapted to: receive the rights management request corresponding to the operation request generated by the application server according to the operation request sent by the user terminal;

Then the response module is specifically adapted to: return a response message corresponding to the permission management request to the application server according to the permission query result, so that the application server can perform operations sent by the user terminal according to the response message. Request a response.

B12. The system according to B11, wherein the operation request sent by the user terminal includes at least one of the following information: application type information, resource type information, terminal type information, and operation type information.

C13. An electronic device, comprising: a processor, a memory, a communication interface, and a communication bus, and the processor, the memory, and the communication interface complete mutual communication through the communication bus;

The memory is used to store at least one executable instruction, and the executable instruction causes the processor to perform an operation corresponding to the rights management method described in any one of A1-A6.

D14. A computer storage medium, at least one executable instruction is stored in the storage medium, and the executable instruction causes a processor to perform an operation corresponding to the rights management method described in any one of A1-A6.

Claims (10)

1. a kind of right management method, including：

Privileges configuration information corresponding with each application server is stored into rights management data library；

When receiving the request of the rights management from application server, obtain the permission included in the rights management request and close Key word；

Privileges configuration information according to being stored in the rights management data library determines and the corresponding power of permission keyword Limit query result；

It is returned to the application server according to the permission query result and disappeared with the corresponding response of rights management request Breath.

2. according to the method described in claim 1, wherein, it is described will be with the corresponding privileges configuration information of each application server Before storing the step in rights management data library, further comprise：

The privileges configuration information that each application server is sent by preset authority configuration entrance is received in advance；

Wherein, the authority configuration entrance includes at least one of the following：Application permission is with posting port, access authorization for resource with merging Mouth, authorization terminal match posting port with posting port and Authorized operation.

3. according to the method described in claim 2, wherein, when the authority configuration entrance, which includes application permission, matches posting port, Included by the application permission with the privileges configuration information that posting port is sent：The application identities of the application of permission to be configured, with And with the corresponding application permission configuration information of the application identities；

When the authority configuration entrance, which includes access authorization for resource, matches posting port, the power of posting port transmission is matched by the access authorization for resource Limit configuration information includes：The resource identification of the resource of permission to be configured and match with the corresponding access authorization for resource of the resource identification Confidence ceases；Wherein, the access authorization for resource configuration information includes：Authorized operation category information corresponding with the resource identification and/or With the corresponding authorization terminal category information of the resource identification；

When the authority configuration entrance, which includes authorization terminal, matches posting port, the power of posting port transmission is matched by the authorization terminal Limit configuration information includes：The terminal iidentification of authorization terminal and with the corresponding terminal authorization configuration information of the terminal iidentification；Its In, the terminal authorization configuration information includes：Authorized operation category information corresponding with the terminal iidentification and/or with the terminal mark Sensible corresponding authorization resources category information；

When the authority configuration entrance, which includes Authorized operation, matches posting port, the power of posting port transmission is matched by the Authorized operation Limit configuration information includes：The operation mark of Authorized operation and with the corresponding operating right configuration information of the operation mark；Its In, the operating right configuration information includes：Authorization resources category information corresponding with the operation mark and/or with the operation mark Sensible corresponding authorization terminal category information.

4. according to any methods of claim 1-3, wherein, the permission keyword packet included in the rights management request Include at least one of the following：Key application word, Resource Key, terminal key word and operation keyword.

5. according to any methods of claim 1-4, wherein, it is described receive the rights management from application server please The step of asking specifically includes：Receive the operation requests generation that application server is sent according to user terminal with the operation requests phase Corresponding rights management request；

It is then described corresponding to application server return and rights management request according to the permission query result The step of response message, further comprises step：

The application server is responded according to the operation requests that the response message sends user terminal.

6. according to the method described in claim 5, wherein, the operation requests that the user terminal is sent are included in following information It is at least one：Using category information, resource category information, terminal category information and operation category information.

7. a kind of Rights Management System, including：

Memory module, suitable for storing privileges configuration information corresponding with each application server to rights management data library In；

Acquisition module, suitable for when receiving the request of the rights management from application server, obtaining the rights management request In the permission keyword that includes；

Enquiry module, suitable for being determined according to the privileges configuration information stored in the rights management data library and permission key The corresponding permission query result of word；

Respond module asks phase suitable for being returned according to the permission query result to the application server with the rights management Corresponding response message.

8. system according to claim 7, wherein, the system further comprises：

Receiving module receives the privileges configuration information that each application server is sent by preset authority configuration entrance in advance；

Wherein, the authority configuration entrance includes at least one of the following：Application permission is with posting port, access authorization for resource with merging Mouth, authorization terminal match posting port with posting port and Authorized operation.

9. a kind of electronic equipment, including：Processor, memory, communication interface and communication bus, the processor, the storage Device and the communication interface complete mutual communication by the communication bus；

For the memory for storing an at least executable instruction, the executable instruction makes the processor perform right such as will Ask the corresponding operation of the right management method described in any one of 1-6.

10. a kind of computer storage media, an at least executable instruction, the executable instruction are stored in the storage medium Processor is made to perform the corresponding operation of right management method as described in any one of claim 1-6.