CN111833066A - A method, device and system for account authorization - Google Patents

Abstract

The invention discloses a method, device and system for account authorization, and relates to the technical field of computers. A specific implementation of the method includes: acquiring an authorization request initiated by a first account, where the authorization request indicates account information of a second account, and the types of the first account and the second account are different; account information of the second account, determine the management platform corresponding to the second account, and send the authorization request to the management platform, so that the management platform generates the authorization certificate corresponding to the second account; according to the An authorization credential, which authorizes the first account to use the right to use the second account. This embodiment implements online authorization between different accounts, improves account authorization efficiency, and improves user experience.

Description

A method, device and system for account authorization

technical field

The present invention relates to the field of computer technologies, and in particular, to a method, device and system for account authorization.

Background technique

With the development of the global economy, different users may have multiple financial accounts registered in different regions/institutions.

The currency and transaction authority of different financial accounts may be different. In order to realize the common use of financial accounts in different regions/institutions, users need to go to the offline counters of financial institutions for authorization between financial accounts. That is to say, whenever a user has an account authorization requirement, they need to go to the offline counter of the region and institution to which the account belongs. This increases the workload of the counter staff and reduces the account authorization efficiency. Degraded user experience.

SUMMARY OF THE INVENTION

In view of this, the embodiments of the present invention provide an account authorization method, device and system, which realizes online authorization between different accounts without requiring the user to go to the offline counter to handle the account authorization business, thereby improving the efficiency of account authorization, And improve the user experience. In addition, the information management of multiple accounts of different affiliations/organizations is also realized through the online system, thereby facilitating the unified management of multiple accounts, thereby improving the management efficiency of the accounts.

To achieve the above object, according to an aspect of the embodiments of the present invention, a method for account authorization is provided.

An account authorization method according to an embodiment of the present invention includes: acquiring an authorization request initiated by a first account, where the authorization request indicates account information of a second account, and the types of the first account and the second account are different;

According to the account information of the second account, determine the management platform corresponding to the second account, and send the authorization request to the management platform, so that the management platform can generate the authorization certificate corresponding to the second account ;

According to the authorization credential, the first account is authorized to use the authorization for the second account.

Optionally, the authorization request further indicates account information of the first account;

According to the account information of the first account and the account information of the second account, determine whether the first account has an associated relationship with the second account;

When the first account has an associated relationship with the second account, the authorization request is sent to the management platform.

Optionally, when the first account and the second account correspond to the same account management tree, it is determined that the first account and the second account have an associated relationship; the account management tree includes multiple accounts The corresponding nodes respectively, the users corresponding to the multiple accounts belong to the same enterprise or have a legal relationship.

Optionally, also include:

According to the account information of the first account, the validity of the first account is verified, and when the first account is valid, it is determined whether the first account has an associated relationship with the second account.

Optionally, also include:

The account information of the first account is sent to the management platform, so that the management platform correspondingly stores the account information of the first account and the authorization certificate.

Optionally, the authorization certificate is generated by the management platform when it is determined that the second account is in a normal transaction state.

Optionally, the first account is a domestic account, and the second account is an overseas account;

Optionally, the first account is an overseas account, and the second account is a domestic account.

To achieve the above object, according to another aspect of the embodiments of the present invention, an account authorization device is provided.

An account authorization device according to an embodiment of the present invention includes: a request acquisition module, a determination module, and an authorization module; wherein,

The request obtaining module is configured to obtain an authorization request initiated by a first account, where the authorization request indicates account information of a second account, and the types of the first account and the second account are different;

The determining module determines the management platform corresponding to the second account according to the account information of the second account, and sends the authorization request to the management platform, so that the management platform generates the second account. The authorization certificate corresponding to the account;

The authorization module is configured to authorize the first account with the use right of the second account according to the authorization certificate.

To achieve the above object, according to another aspect of the embodiments of the present invention, an account authorization system is provided.

An account authorization system according to an embodiment of the present invention includes: a management platform and any of the above account authorization devices;

The management platform is configured to verify the second account according to the authorization request sent by the account authorization device, and when the second account is in a normal state, generate an authorization credential corresponding to the second account, and assign the authorization certificate to the second account. The authorization credential is sent to the account authorization device.

Optionally, the management platform is configured to determine whether the second account is in a normal state according to historical transaction information of the second account.

To achieve the above object, according to another aspect of the embodiments of the present invention, an electronic device for account authorization is provided.

An electronic device for account authorization according to an embodiment of the present invention includes: one or more processors; and a storage device for storing one or more programs, when the one or more programs are executed by the one or more processors The execution causes the one or more processors to implement an account authorization method according to an embodiment of the present invention.

To achieve the above object, according to yet another aspect of the embodiments of the present invention, a computer-readable storage medium is provided.

A computer-readable storage medium according to an embodiment of the present invention stores a computer program thereon, and when the program is executed by a processor, an account authorization method according to an embodiment of the present invention is implemented.

One embodiment of the above invention has the following advantages or beneficial effects: after obtaining the authorization request initiated by the first account, the management platform corresponding to the second account is determined according to the account information of the second account indicated by the authorization request, and then the The authorization request is sent to the management platform, so that the management platform generates an authorization credential corresponding to the second account, and then authorizes the first account with the right to use the second account according to the authorization credential, thereby realizing the relationship between the first account and the second account. Online authorization between users without the need for users to go to the offline counter to handle the authorization business of the account, thereby improving the efficiency of account authorization and improving the user experience.

Further effects of the above non-conventional alternatives will be described below in conjunction with specific embodiments.

Description of drawings

The accompanying drawings are used for better understanding of the present invention and do not constitute an improper limitation of the present invention. in:

1 is a schematic diagram of main steps of a method for account authorization according to an embodiment of the present invention;

FIG. 2 is a schematic diagram of main steps of another account authorization method according to an embodiment of the present invention;

3 is a schematic diagram of main modules of an account authorization system according to an embodiment of the present invention;

4 is a schematic diagram of main modules of an account authorization device according to an embodiment of the present invention;

5 is a schematic diagram of the main modules of another account authorization system according to an embodiment of the present invention;

FIG. 6 is an exemplary system architecture diagram to which an embodiment of the present invention may be applied;

FIG. 7 is a schematic structural diagram of a computer system suitable for implementing a terminal device or a server according to an embodiment of the present invention.

Detailed ways

Exemplary embodiments of the present invention are described below with reference to the accompanying drawings, which include various details of the embodiments of the present invention to facilitate understanding and should be considered as exemplary only. Accordingly, those of ordinary skill in the art will recognize that various changes and modifications of the embodiments described herein can be made without departing from the scope and spirit of the invention. Also, descriptions of well-known functions and constructions are omitted from the following description for clarity and conciseness.

It should be pointed out that the embodiments of the present invention and the technical features in the embodiments may be combined with each other without conflict.

FIG. 1 is a schematic diagram of main steps of a method for account authorization according to an embodiment of the present invention.

As shown in FIG. 1, an account authorization method according to an embodiment of the present invention mainly includes the following steps:

Step S101: Acquire an authorization request initiated by a first account, where the authorization request indicates account information of a second account, and the types of the first account and the second account are different.

Step S102: Determine the management platform corresponding to the second account according to the account information of the second account, and send the authorization request to the management platform, so that the management platform generates the corresponding second account authorization credentials.

Step S103 : Authorize the first account with the use right of the second account according to the authorization certificate.

Wherein, when the location, institution, currency and/or transaction authority of the first account and the second account are different, it means that the types of the first account and the second account are different. For example, when the first account and the second account belong to the same financial institution, but the locations of the first account and the second account are different, it means that the types of the first account and the second account are different.

The first account and the second account may be corporate accounts or personal accounts. Under normal circumstances, the authorization of the account is the authorization between the public account and the public account, or the authorization between the personal account and the personal account. That is, the first account and the second account are both corporate accounts, or both the first account and the second account are personal accounts. It can be understood that the authorization process between the reconciliation accounts is the same as the authorization process of the personal account, and the difference is only the account information corresponding to the public account and the personal account respectively (such as the specific account number and the subscribed transaction items, etc.) different.

The following describes the account authorization method according to the embodiment of the present invention by taking as an example that both the first account and the second account are public accounts. Corporate accounts may involve a variety of businesses, such as collection and payment, bill pooling, cross-bank cash management business, and cross-border cash management business. When performing different businesses, authorization between different types of accounts will be involved, such as authorization between domestic accounts and overseas accounts, authorization between accounts of different affiliated institutions.

In one embodiment of the present invention, when the first account and the second account have an associated relationship, the first account is authorized to use the right to use the second account. Specifically, in this embodiment, the authorization request further indicates account information of the first account; the first account is determined according to the account information of the first account and the account information of the second account Whether there is an association relationship with the second account; when the first account has an association relationship with the second account, the authorization request is sent to the management platform.

After receiving the authorization request initiated by the first account, the account authorization device implementing the embodiment of the present invention determines the first account and the second account according to the account information of the first account and the account information of the second account indicated by the authorization request Is there a relationship.

Generally speaking, when the first account and the second account correspond to the same account management tree, it is determined that the first account and the second account have an associated relationship; the account management tree includes multiple accounts The corresponding nodes respectively, the users corresponding to the multiple accounts belong to the same enterprise or have a legal relationship.

In this embodiment of the present invention, in order to facilitate the management of accounts corresponding to multiple users with associated relationships that belong to the same enterprise or have a legal relationship, that is, to manage multiple accounts with associated relationships, the same account will be used. The management tree manages multiple accounts, and each account is a node in the management tree for this account. For example, when the first account is the corporate account corresponding to the head office and the second account is the corporate account corresponding to the subsidiary company, the first account is the root node in the account management tree, and the second account is in the account management tree. leaf node. Therefore, by managing the related first and second accounts through the same account management tree, the levels of the first and second accounts can be clarified, and the transaction information of the first and second accounts can be easily recorded, thereby Improve account management efficiency.

Then, since the same account management tree is used to manage the first account and the second account, the first account and the second account can be determined by determining whether the first account and the second account correspond to the same account management tree. Whether the account is linked. When it is determined that the first account and the second account are associated, the authorization request initiated by the first account is sent to the management platform corresponding to the second account. In this way, online authorization between accounts having an associated relationship is realized, thereby improving the security of account authorization.

In addition, in order to further improve the security of account authorization, in this embodiment of the present invention, before determining whether the first account has an associated relationship with the second account, it is also necessary to verify the first account according to the account information of the first account. The legitimacy of an account, when the first account is legitimate, it is determined whether the first account has an associated relationship with the second account.

For example, it may be determined whether the first account is illegally logged in according to the registration information of the first account, so as to determine whether the first account is legal. It can also be determined whether there is an abnormal transaction in the first account according to the historical transaction information corresponding to the first account, so as to determine whether the first account is legal. Whether the first account is legal can also be determined according to the transaction status of the first account. For example, when the first account is in a frozen or pledged state, it is determined that the first account is illegal, and the authorization request initiated by the first account is refused. And only when the first account is legal, it is further determined whether the first account and the second account have an associated relationship, so that account authorization is implemented only for the legal first account, thereby improving the security of account authorization.

It is worth mentioning that when the management platform of the second account generates the authorization certificate corresponding to the second account, it is also generated when the second account is in a normal transaction state. That is to say, when the management platform generates the authorization certificate corresponding to the second account, the second account is in a normal transaction state. Wherein, the management platform can determine whether the second account is in a normal transaction state according to the historical transaction information of the second account. For example, when it is determined according to the historical transaction information that the second account has abnormal deposit and loan records, or records such as unfinished pledges exist When it is determined that the second account is in an abnormal transaction state, the management platform will not generate an authorization certificate for the second account, so as to avoid the situation that the first account cannot use the second account even in the authorized state. In other words, when the second account is in a normal transaction state, the management platform generates the authorization certificate for the second account, so as to ensure the normal use of the authorized account and facilitate the normal transaction.

In another embodiment of the present invention, after receiving the authorization certificate about the second account sent by the management platform of the second account, the account information of the first account can also be sent to the management platform of the second account, so that all The management platform correspondingly stores the account information of the first account and the authorization certificate. Therefore, the account information of the first account and the authorization certificate of the second account can be stored correspondingly through the management platform corresponding to the second account, and the authorization object (the first account) of the second authorization can be correspondingly recorded, which is convenient for recording the first account and the second account. Transaction information corresponding to the accounts respectively, so as to facilitate the management of the first account and the second account.

In actual business scenarios, the mutual authorization of corporate accounts from overseas accounts and domestic accounts belonging to the same enterprise is a common authorization scenario. In the prior art, it is usually necessary for the staff of the enterprise to submit the corresponding information to the offline counter in order to realize the authorization between the overseas account and the domestic account. However, by using the account authorization method provided by the embodiment of the present invention, online authorization of domestic accounts and overseas accounts can be realized, thereby improving the efficiency and security of authorization. The following describes the account authorization method provided by the embodiment of the present invention by taking the authorization of an overseas account to be used by a domestic account, that is, the authorization of a domestic account to apply for an overseas account as an example. As shown in FIG. 2, in this scenario, the account authorization method provided by the embodiment of the present invention may include the following steps:

Step S201: The first account initiates an authorization request, the authorization request indicates account information of the first account and account information of the second account, and the types of the first account and the second account are different.

Here, the first account is a domestic account, and the second account is an overseas account. The locations of the first account and the second account are different, so the types of the first account and the second account are different. The user of the domestic account can initiate an authorization request through the front end of the account system or the terminal corresponding to the account system. When initiating the authorization request, the user of the domestic account can query the account information of the second account according to the global account registration form, so as to use the The account information of the second account is indicated in the authorization request. In addition, the institution to which the domestic account belongs can also be indicated in the authorization request, so that the authorization request can be routed to the background of the institution to which the domestic account belongs, so that the background of the institution to which the domestic account belongs can verify the legitimacy of the first account. It can be understood that, in this example, the account authorization device includes various forms such as the front end, the terminal, and the back end of the institution to which the domestic account belongs.

Step S202: Verify the legitimacy of the first account according to the account information of the first account. When the first account is legal, step S203 is executed, and when the first account is illegal, the current process is ended.

Step S203: According to the account information of the first account and the account information of the second account, determine whether the first account and the second account correspond to the same account management tree, when corresponding to the same account management tree, perform step S204; When the same account management tree is reached, the current process ends.

Step S204: It is determined that the first account and the second account have an associated relationship, and an authorization request is sent to the management platform corresponding to the second account.

Here, after determining that the first account and the second account have an associated relationship, the account authorization device may determine the management platform corresponding to the second account. Then, the message header corresponding to the authorization request initiated by the first account (the message header is the legal person ID of the first account) is replaced with the legal person ID of the second account to forward the authorization request to the management platform corresponding to the second account. When the institutions to which the first account and the second account belong are different, that is, when the background of the institution to which the first account belongs and the management platform corresponding to the second account are different background systems, the system corresponding to the institution to which the first account belongs and the system corresponding to the second account are different. The connection diagram of the management platform can be shown in Figure 3. The system corresponding to the institution to which the first account belongs is a part of the account management device, and the user of the first account can initiate an authorization request through the front end of the institution to which the first account belongs.

Step S205: Receive the authorization credential returned by the management platform, and authorize the first account with the right to use the second account according to the authorization credential.

The management platform only generates a corresponding authorization certificate when the second account is in a normal transaction state. In addition, after the first account obtains the use authority authorized by the second account, the second account can be used to implement related transactions. In this example, the first account is a domestic account and the second account is an overseas account. After the first account authorizes the use rights of the second account, the domestic account can execute relevant overseas transactions according to the authorization of the overseas account.

Step S206: Send the account information of the first account to the management platform, so that the management platform correspondingly stores the account information of the first account and the authorization certificate.

After the second account is authorized to the first account, the account management device sends the account information of the first account to the management platform corresponding to the second account, so that the management platform can correspondingly store the account information and authorization certificate of the first account, so as to facilitate the second account Management of the first account and the second account. Specifically, the management platform can store the account information and authorization credentials of the first account in the form shown in Table 1 below:

Table 1

In addition, in the system corresponding to the first account, authorization information between the first account and the second account may also be recorded. It can record corresponding information in the form of Table 2 below. In addition to the information recorded in Table 2, the management platform can also record information such as the currency and transaction authority of the first account, so as to facilitate the management of the first account and the second account.

Table 2

Wherein, when the first account applies for the authorization of the second account, the first account is the authorized party, and the authorized party tree number in Table 2 is the number of the account management tree to which the first account belongs, and the authorized party node number It is the number of the first account in its account management tree. Correspondingly, if the second account is an authorizer, the authorizer tree number in Table 2 is the number of the account management tree to which the second account belongs, and the node number of the authorized party is the number of the second account in its account management tree. The account number in Table 2 is the account number of the first account, and the legal person row to which the account belongs is the ID of the legal person row to which the first account belongs. Therefore, in the management platform and the account management device, the information of the first account and the second account is correspondingly recorded in the form of a table, which facilitates operations such as query and update of the account information in the later stage, thereby facilitating the management of the first account and the second account. .

It can be understood that, in the above embodiment, the first account is a domestic account and the second account is an overseas account, and the authorization of the two can be realized through the account authorization method provided in the embodiment of the present invention. In another embodiment of the present invention, the first account may be an overseas account, and the second account may be a domestic account. In addition, the institutions to which the first account and the second account belong may be the same or different. In a word, different types of accounts can be authorized online through the account authorization method provided by the embodiment of the present invention.

According to an account authorization method according to an embodiment of the present invention, after obtaining the authorization request initiated by the first account, the management platform corresponding to the second account is determined according to the account information of the second account indicated by the authorization request, Then, the authorization request is sent to the management platform, so that the management platform generates an authorization certificate corresponding to the second account, and then authorizes the first account with the use authority of the second account according to the authorization certificate, thereby realizing the first account and the second account. Online authorization between accounts eliminates the need for users to go to offline counters for account authorization services, thereby improving account authorization efficiency and user experience.

FIG. 4 is a schematic diagram of main modules of an account authorization device according to an embodiment of the present invention.

As shown in FIG. 4 , an account authorization device 400 according to an embodiment of the present invention includes: a request acquisition module 401, a determination module 402, and an authorization module 403; wherein,

The request obtaining module 401 is configured to obtain an authorization request initiated by a first account, where the authorization request indicates account information of a second account, and the types of the first account and the second account are different;

The determining module 402 determines the management platform corresponding to the second account according to the account information of the second account, and sends the authorization request to the management platform, so that the management platform generates the first account. The authorization certificate corresponding to the second account;

The authorization module 403 is configured to authorize, according to the authorization credential, the use authority of the second account for the first account.

In an embodiment of the present invention, the authorization request further indicates account information of the first account; the determining module 402 is configured to, according to the account information of the first account and the account information of the second account , determine whether the first account has an associated relationship with the second account; when the first account has an associated relationship with the second account, send the authorization request to the management platform.

In an embodiment of the present invention, the determining module 402 is configured to, when the first account and the second account correspond to the same account management tree, determine that the first account and the second account have An association relationship; the account management tree includes nodes corresponding to multiple accounts respectively, and the users corresponding to the multiple accounts belong to the same enterprise or have a legal relationship.

In an embodiment of the present invention, the determining module 402 is configured to verify the legitimacy of the first account according to the account information of the first account, and when the first account is legit, determine the first account Whether the account has an associated relationship with the second account.

In an embodiment of the present invention, the authorization module 403 is configured to send the account information of the first account to the management platform, so that the management platform correspondingly stores the account information of the first account and the authorization certificate.

In an embodiment of the present invention, the authorization certificate is generated by the management platform when it is determined that the second account is in a normal transaction state.

FIG. 5 is a schematic diagram of main modules of an account authorization device according to an embodiment of the present invention.

As shown in FIG. 5 , an account authorization system 500 according to an embodiment of the present invention includes: a management platform 501 and an account authorization device 400 provided by any of the foregoing embodiments;

The management platform 501 is configured to verify the second account according to the authorization request sent by the account authorization device 400, and when the second account is in a normal state, generate an authorization certificate corresponding to the second account, and send the authorization credential to the account authorization device 400 .

In an embodiment of the present invention, the management platform 501 is configured to determine whether the second account is in a normal state according to historical transaction information of the second account.

According to an account authorization device and an account authorization system according to an embodiment of the present invention, it can be seen that, after obtaining the authorization request initiated by the first account, the second account is determined according to the account information of the second account indicated by the authorization request. The corresponding management platform, and then sends the authorization request to the management platform, so that the management platform generates the authorization certificate corresponding to the second account, and then authorizes the first account with the use authority of the second account according to the authorization certificate, thereby realizing the first account. The online authorization between the first account and the second account does not require the user to go to the offline counter to handle the account authorization business, thereby improving the account authorization efficiency and improving the user experience.

FIG. 6 shows an exemplary system architecture 600 of an account authorization method or an account authorization apparatus to which embodiments of the present invention may be applied.

As shown in FIG. 6 , the system architecture 600 may include terminal devices 601 , 602 , and 603 , a network 604 and a server 605 . The network 604 is a medium used to provide a communication link between the terminal devices 601 , 602 , 603 and the server 605 . Network 604 may include various connection types, such as wired, wireless communication links, or fiber optic cables, among others.

The user can use the terminal devices 601, 602, 603 to interact with the server 605 through the network 604 to receive or send messages and the like. Various communication client applications may be installed on the terminal devices 601 , 602 and 603 , such as shopping applications, web browser applications, search applications, instant messaging tools, email clients, social platform software, and the like.

The terminal devices 601, 602, 603 may be various electronic devices having a display screen and supporting web browsing, including but not limited to smart phones, tablet computers, laptop computers, desktop computers, and the like.

The server 605 may be a server that provides various services, for example, a background management server that provides support for shopping websites browsed by the terminal devices 601 , 602 , and 603 . The background management server can analyze and process the received product information query request and other data, and feed back the processing results (eg, target push information, product information) to the terminal device.

It should be noted that the account authorization method provided by the embodiment of the present invention is generally performed by the server 605 , and accordingly, the account authorization device is generally set in the server 605 .

It should be understood that the numbers of terminal devices, networks and servers in FIG. 6 are merely illustrative. There can be any number of terminal devices, networks and servers according to implementation needs.

Referring next to FIG. 7 , it shows a schematic structural diagram of a computer system 700 suitable for implementing a terminal device according to an embodiment of the present invention. The terminal device shown in FIG. 7 is only an example, and should not impose any limitations on the functions and scope of use of the embodiments of the present invention.

As shown in FIG. 7, a computer system 700 includes a central processing unit (CPU) 701 which can be loaded into a random access memory (RAM) 703 according to a program stored in a read only memory (ROM) 702 or a program from a storage section 708 Instead, various appropriate actions and processes are performed. In the RAM 703, various programs and data necessary for the operation of the system 700 are also stored. The CPU 701 , the ROM 702 , and the RAM 703 are connected to each other through a bus 704 . An input/output (I/O) interface 705 is also connected to bus 704 .

The following components are connected to the I/O interface 705: an input section 706 including a keyboard, a mouse, etc.; an output section 707 including a cathode ray tube (CRT), a liquid crystal display (LCD), etc., and a speaker, etc.; a storage section 708 including a hard disk, etc. ; and a communication section 709 including a network interface card such as a LAN card, a modem, and the like. The communication section 709 performs communication processing via a network such as the Internet. A drive 710 is also connected to the I/O interface 705 as needed. A removable medium 711, such as a magnetic disk, an optical disk, a magneto-optical disk, a semiconductor memory, etc., is mounted on the drive 710 as needed so that a computer program read therefrom is installed into the storage section 708 as needed.

In particular, the processes described above with reference to the flowcharts may be implemented as computer software programs in accordance with the disclosed embodiments of the present invention. For example, embodiments disclosed herein include a computer program product comprising a computer program carried on a computer-readable medium, the computer program containing program code for performing the method illustrated in the flowchart. In such an embodiment, the computer program may be downloaded and installed from the network via the communication portion 709 and/or installed from the removable medium 711 . When the computer program is executed by the central processing unit (CPU) 701, the above-described functions defined in the system of the present invention are executed.

It should be noted that the computer-readable medium shown in the present invention may be a computer-readable signal medium or a computer-readable storage medium, or any combination of the above two. The computer-readable storage medium can be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus or device, or a combination of any of the above. More specific examples of computer readable storage media may include, but are not limited to, electrical connections with one or more wires, portable computer disks, hard disks, random access memory (RAM), read only memory (ROM), erasable Programmable read only memory (EPROM or flash memory), fiber optics, portable compact disk read only memory (CD-ROM), optical storage devices, magnetic storage devices, or any suitable combination of the foregoing. In the present invention, a computer-readable storage medium may be any tangible medium that contains or stores a program that can be used by or in conjunction with an instruction execution system, apparatus, or device. In the present invention, however, a computer-readable signal medium may include a data signal propagated in baseband or as part of a carrier wave, carrying computer-readable program code therein. Such propagated data signals may take a variety of forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination of the foregoing. A computer-readable signal medium can also be any computer-readable medium other than a computer-readable storage medium that can transmit, propagate, or transport the program for use by or in connection with the instruction execution system, apparatus, or device . Program code embodied on a computer readable medium may be transmitted using any suitable medium including, but not limited to, wireless, wireline, optical fiber cable, RF, etc., or any suitable combination of the foregoing.

The flowchart and block diagrams in the Figures illustrate the architecture, functionality, and operation of possible implementations of systems, methods and computer program products according to various embodiments of the present invention. In this regard, each block in the flowchart or block diagrams may represent a module, segment, or portion of code that contains one or more logical functions for implementing the specified functions executable instructions. It should also be noted that, in some alternative implementations, the functions noted in the blocks may occur out of the order noted in the figures. For example, two blocks shown in succession may, in fact, be executed substantially concurrently, or the blocks may sometimes be executed in the reverse order, depending upon the functionality involved. It is also noted that each block of the block diagrams or flowchart illustrations, and combinations of blocks in the block diagrams or flowchart illustrations, can be implemented in special purpose hardware-based systems that perform the specified functions or operations, or can be implemented using A combination of dedicated hardware and computer instructions is implemented.

The modules involved in the embodiments of the present invention may be implemented in a software manner, and may also be implemented in a hardware manner. The described module can also be set in the processor, for example, it can be described as: a processor includes a request acquisition module, a determination module and an authorization module. Wherein, the names of these modules do not constitute a limitation on the module itself under certain circumstances. For example, the requesting module may also be described as "a module for obtaining an authorization request initiated by the first account".

As another aspect, the present invention also provides a computer-readable medium, which may be included in the device described in the above embodiments; or may exist alone without being assembled into the device. The above-mentioned computer-readable medium carries one or more programs, and when the above-mentioned one or more programs are executed by a device, the device includes: obtaining an authorization request initiated by the first account, the authorization request indicating the second account According to the account information of the second account, determine the management platform corresponding to the second account, and send the authorization request to the and a management platform, so that the management platform generates an authorization certificate corresponding to the second account; and according to the authorization certificate, authorizes the first account with the use right of the second account.

According to the technical solution of the embodiment of the present invention, after obtaining the authorization request initiated by the first account, the management platform corresponding to the second account is determined according to the account information of the second account indicated by the authorization request, and then the authorization request is sent to the management platform The platform enables the management platform to generate an authorization credential corresponding to the second account, and then authorizes the first account with the right to use the second account according to the authorization credential, thereby realizing the online authorization between the first account and the second account , without requiring the user to go to the offline counter to handle the account authorization business, thereby improving the account authorization efficiency and improving the user experience.

The above-mentioned specific embodiments do not constitute a limitation on the protection scope of the present invention. It should be understood by those skilled in the art that various modifications, combinations, sub-combinations and substitutions may occur depending on design requirements and other factors. Any modifications, equivalent replacements and improvements made within the spirit and principle of the present invention shall be included within the protection scope of the present invention.

Claims (12)

1. A method for account authorization, comprising: Obtaining an authorization request initiated by a first account, where the authorization request indicates account information of a second account, and the types of the first account and the second account are different; According to the account information of the second account, determine the management platform corresponding to the second account, and send the authorization request to the management platform, so that the management platform can generate the authorization certificate corresponding to the second account ; According to the authorization credential, the first account is authorized to use the authorization for the second account. 2. The method according to claim 1, wherein the authorization request further indicates account information of the first account; According to the account information of the first account and the account information of the second account, determine whether the first account has an associated relationship with the second account; When the first account has an associated relationship with the second account, the authorization request is sent to the management platform. 3. The method of claim 2, wherein When the first account and the second account correspond to the same account management tree, it is determined that the first account and the second account have an associated relationship; the account management tree includes nodes corresponding to multiple accounts respectively , the users corresponding to the multiple accounts belong to the same enterprise or have a legal relationship. 4. The method of claim 2, further comprising: According to the account information of the first account, the validity of the first account is verified, and when the first account is valid, it is determined whether the first account has an associated relationship with the second account. 5. The method of claim 1, further comprising: The account information of the first account is sent to the management platform, so that the management platform correspondingly stores the account information of the first account and the authorization certificate. 6. The method of claim 1, wherein The authorization certificate is generated when the management platform determines that the second account is in a normal transaction state. 7. The method according to any one of claims 1 to 7, wherein, The first account is a domestic account, and the second account is an overseas account; or, The first account is an overseas account, and the second account is a domestic account. 8. A device for account authorization, comprising: a request acquisition module, a determination module and an authorization module; wherein, The request obtaining module is configured to obtain an authorization request initiated by a first account, where the authorization request indicates account information of a second account, and the types of the first account and the second account are different; The determining module determines the management platform corresponding to the second account according to the account information of the second account, and sends the authorization request to the management platform, so that the management platform generates the second account. The authorization certificate corresponding to the account; The authorization module is configured to authorize the first account with the use right of the second account according to the authorization certificate. 9. An account authorization system, comprising: a management platform and the account authorization device of claim 8; The management platform is configured to verify the second account according to the authorization request sent by the account authorization device, and when the second account is in a normal state, generate an authorization credential corresponding to the second account, and assign the authorization certificate to the second account. The authorization credential is sent to the account authorization device. 10. The system of claim 9, wherein: The management platform is configured to determine whether the second account is in a normal state according to historical transaction information of the second account. 11. A server for account authorization, comprising: one or more processors; storage means for storing one or more programs, The one or more programs, when executed by the one or more processors, cause the one or more processors to implement the method of any of claims 1-7. 12. A computer-readable medium on which a computer program is stored, characterized in that, when the program is executed by a processor, the method according to any one of claims 1-7 is implemented.

Images