CN110795720A - Information processing method, system, electronic device and computer readable medium - Google Patents

Abstract

The present disclosure provides an information processing method, including receiving an access request for accessing a second system, determining a login credential based on user information of the first system in the access request, and sending the login credential to the second system system, causing the second system to authenticate the user identity according to the login credentials. The present disclosure also provides an information processing system, an electronic device, and a computer-readable medium.

Description

Information processing method, system, electronic device and computer readable medium

technical field

The present disclosure relates to/in the field of Internet technology, and more particularly, to an information processing method, system, electronic device and computer-readable medium.

Background technique

Usually, a single software information system is difficult to meet the needs of enterprises and other social organizations. It is necessary to integrate multiple different software information systems together to form a software system with richer functions to serve enterprises and other social organizations. In the process of integrating multiple different software information systems, a difficult problem is how to integrate the user identity authentication modules in the respective software information systems. In the existing integration method, the user identity authentication module of one software information system is weakened into the proxy of the user identity authentication module of the other software information system.

In the process of realizing the concept of the present disclosure, the inventor found that the prior art has at least the following problems: the user identity authentication module in the existing integrated software information system needs a complicated transformation process.

SUMMARY OF THE INVENTION

In view of this, the present disclosure provides an information processing method, system, electronic device, and computer-readable medium.

One aspect of the present disclosure provides an information processing method, including receiving an access request for accessing a second system, determining a login credential based on user information of the first system in the access request, and sending the login credential to all the second system, so that the second system authenticates the user identity according to the login credential.

According to an embodiment of the present disclosure, the method further includes receiving a user identity authentication success message sent by the second system, and sending a redirection instruction to the second system to the client, so that the client obtains all the information. Describe the content of the second system.

According to an embodiment of the present disclosure, determining a login credential based on the user information of the first system in the access request includes determining that the current user has permission based on the user information of the first system in the access request In the case of , the login credentials are determined based on the user information.

According to an embodiment of the present disclosure, the method further includes that the user information of the first system in the access request is empty, or based on the user information of the first system in the access request, determining to log in In the case that the credential has expired, send an instruction redirected to the authentication module of the first system to the client, so that the first system can obtain user information, and authenticate the user identity according to the user information. The first system acquires the user information when the user identity authentication is successful, and generates a login credential based on the user information.

According to an embodiment of the present disclosure, the method further includes configuring a mapping table of user information of the first system and user information of the second system, wherein the first system based on the access request and determining the login credential includes determining the login credential according to the mapping table and the user information of the first system in the access request.

Another aspect of the present disclosure provides an information processing system, comprising a first receiving module configured to receive an access request for accessing a second system, and a determination module configured to, based on user information of the first system in the access request, A login credential is determined, and a first sending module is configured to send the login credential to the second system, so that the second system authenticates the user identity according to the login credential.

According to an embodiment of the present disclosure, the method further includes a second receiving module, configured to receive a user identity authentication success message sent by the second system, and a second sending module, configured to send a redirection to the client The instruction of the second system is used to enable the client to obtain the content of the second system.

According to an embodiment of the present disclosure, the determining module includes a first determining subunit, configured to, in the case where it is determined based on the user information of the first system in the access request that the current user has the authority, determine based on the user information , determine the login credentials.

According to an embodiment of the present disclosure, the system further includes a third sending module, used for the user information of the first system in the access request is empty, or based on the first system in the access request When the determined login credential has expired, send an instruction redirecting to the authentication module of the first system to the client, so that the first system can obtain the user information, and according to the user information A user identity is authenticated, and an acquisition module is used to acquire the user information when the first system successfully authenticates the user identity, and a generation module is used to generate a login credential based on the user information.

According to an embodiment of the present disclosure, the system further includes a configuration module for configuring a mapping table of user information of the first system and user information of the second system, wherein the determination module includes a second determination sub The unit is configured to determine the login credential according to the mapping table and the user information of the first system in the access request.

Another aspect of the present disclosure provides an electronic device including one or more processors and a storage device for storing one or more programs, wherein when the one or more programs are executed by the one or more programs When executed by the processor, the one or more processors are caused to perform the method as described above.

Another aspect of the present disclosure provides a non-volatile storage medium storing computer-executable instructions, which when executed, are used to implement the method as described above.

Another aspect of the present disclosure provides a computer program comprising computer-executable instructions, which when executed, are used to implement the method as described above.

According to the embodiments of the present disclosure, the problem that the user identity authentication module of at least one system needs to be modified when integrating different systems can be at least partially solved, and thus it can be realized that when integrating different systems, no user identity authentication is required. Modification of modules to improve the technical effect of system availability.

Description of drawings

The above and other objects, features and advantages of the present disclosure will become more apparent from the following description of embodiments of the present disclosure with reference to the accompanying drawings, in which:

1A and 1B schematically illustrate application scenarios according to an embodiment of the present disclosure;

1C schematically shows a method for integrating the first user identity authentication module and the second user identity authentication module in the prior art;

2A schematically shows a schematic diagram of a system architecture of an information processing method according to an embodiment of the present disclosure;

FIG. 2B schematically shows a flowchart of an information processing method according to an embodiment of the present disclosure;

FIG. 3 schematically shows a flowchart of an information processing method according to another embodiment of the present disclosure;

FIG. 4 schematically shows a flowchart of an information processing method according to another embodiment of the present disclosure;

FIG. 5 schematically shows a flowchart of an information processing method according to another embodiment of the present disclosure;

FIG. 6 schematically shows a flowchart of an information processing method according to another embodiment of the present disclosure;

7 schematically shows a block diagram of an information processing system according to an embodiment of the present disclosure;

8 schematically shows a block diagram of an information processing system according to another embodiment of the present disclosure;

9 schematically shows a block diagram of an information processing system according to another embodiment of the present disclosure;

10 schematically illustrates a block diagram of an information processing system according to another embodiment of the present disclosure; and

FIG. 11 schematically shows a block diagram of an electronic device according to an embodiment of the present disclosure.

Detailed ways

Hereinafter, embodiments of the present disclosure will be described with reference to the accompanying drawings. It should be understood, however, that these descriptions are exemplary only, and are not intended to limit the scope of the present disclosure. In the following detailed description, for convenience of explanation, numerous specific details are set forth in order to provide a thorough understanding of the embodiments of the present disclosure. It will be apparent, however, that one or more embodiments may be practiced without these specific details. Also, in the following description, descriptions of well-known structures and techniques are omitted to avoid unnecessarily obscuring the concepts of the present disclosure.

The terminology used herein is for the purpose of describing particular embodiments only and is not intended to limit the present disclosure. The terms "comprising", "comprising" and the like as used herein indicate the presence of stated features, steps, operations and/or components, but do not preclude the presence or addition of one or more other features, steps, operations or components.

All terms (including technical and scientific terms) used herein have the meaning as commonly understood by one of ordinary skill in the art, unless otherwise defined. It should be noted that terms used herein should be construed to have meanings consistent with the context of the present specification and should not be construed in an idealized or overly rigid manner.

Where expressions like "at least one of A, B, and C, etc.," are used, they should generally be interpreted in accordance with the meaning of the expression as commonly understood by those skilled in the art (eg, "has A, B, and C") At least one of the "systems" shall include, but not be limited to, systems with A alone, B alone, C alone, A and B, A and C, B and C, and/or A, B, C, etc. ). Where expressions like "at least one of A, B, or C, etc.," are used, they should generally be interpreted in accordance with the meaning of the expression as commonly understood by those skilled in the art (eg, "has A, B, or C, etc." At least one of the "systems" shall include, but not be limited to, systems with A alone, B alone, C alone, A and B, A and C, B and C, and/or A, B, C, etc. ). It will also be understood by those skilled in the art that substantially any inflection conjunction and/or phrase denoting two or more optional items, whether in the specification, claims or drawings, should be construed as giving the The possibility of one of the items, either of these items, or both items. For example, the phrase "A or B" should be understood to include the possibilities of "A" or "B", or "A and B".

An embodiment of the present disclosure provides an information processing method, which includes receiving an access request for accessing a second system, determining a login credential based on user information of the first system in the access request, and sending the login credential to all users. the second system, so that the second system authenticates the user identity according to the login credential.

1A and 1B schematically illustrate application scenarios according to an embodiment of the present disclosure. It should be noted that FIG. 1A and FIG. 1B are only examples of application scenarios to which the embodiments of the present disclosure can be applied, so as to help those skilled in the art to understand the technical content of the present disclosure, but it does not mean that the embodiments of the present disclosure cannot For use with other devices, systems, environments or scenarios.

As shown in FIG. 1A , the application scenario includes a client 100 , and the browser of the client 100 displays the user interface 110 of the first system.

The client 100 may be various electronic devices having a display screen and supporting web browsing, including but not limited to smart phones, tablet computers, laptop and desktop computers, and the like.

According to an embodiment of the present disclosure, the second system is integrated on the first system. As shown in FIG. 1A , the displayed content on the user interface 110 of the first system includes a hyperlink 120 of the second system. When the user clicks on the hyperlink 120, the browser of the client 100 can jump to the second system, so that the user can interact with the second system.

As shown in FIG. 1B , the first system 140 includes a first service module 141 and a first user identity authentication module 142 , and the second system 130 includes a second service module 131 and a second user identity authentication module 132 . In the process of integrating the second system 130 and the first system 140, in order to avoid the first system 140 and the second system 130 respectively performing user identity authentication on the user, the user identity authentication between the second system 130 and the first system 140 is usually performed. Module integration.

FIG. 1C schematically shows a method for integrating the first user identity authentication module and the second user identity authentication module in the prior art.

As shown in FIG. 1C , in the prior art, the second user identity authentication module 132 is usually transformed into an external user identity authentication agent 133 of the first user identity authentication module 142 . When the client sends an access request to the second service module 131, the external user identity authentication proxy 133 sends the user identity authentication request to the first user identity authentication module 142, and the first user identity authentication module 142 completes the user identity authentication, and the authentication The result is sent to the external user authentication proxy 133 . This method needs to modify the second user identity authentication module 132 of the second system 130 , which increases the dependence of the second system 130 on the first system 140 and reduces the availability of the second system 130 .

To solve the problems in the prior art, the present disclosure provides an information processing method.

FIG. 2A schematically shows a schematic diagram of a system architecture of an information processing method according to an embodiment of the present disclosure.

As shown in FIG. 2A , the system architecture includes a client 210 , a first system 220 , a second system 230 and a fusion system 240 .

The user can use the client 210 to interact with the first system 220, the second system 230 and the fusion system 240 through the network to receive or send messages and the like. Various communication client applications may be installed on the client 210, such as shopping applications, web browser applications, search applications, instant messaging tools, email clients, social platform software, etc. (only examples).

The first system 220 and the second system 230 may be servers that provide various services, for example, a background management server (just an example) that provides support for the website browsed by the user through the client 210 . The background management server can analyze and process the received user requests and other data, and feed back the processing results (such as web pages, information, or data obtained or generated according to user requests) to the client 210.

The fusion system 240 of the present disclosure can, for example, interact with the first system 220 and the second system 230 through the http interface, so as to realize the technical effect that the user identity authentication module does not need to be modified when integrating different systems.

It should be noted that the information processing method provided by the embodiments of the present disclosure may generally be executed by the fusion system 240 . Correspondingly, the information processing apparatus or system provided by the embodiments of the present disclosure may generally be provided in the fusion system 240 . The information processing method provided by the embodiment of the present disclosure may also be executed by a server or server cluster that is different from the fusion system 240 and can communicate with the client 210 , the first system 220 , and the second system 230 . Correspondingly, the information processing apparatus or system provided by the embodiments of the present disclosure may also be set in a server or server cluster that is different from the fusion system 240 and can communicate with the client 210 , the first system 220 , and the second system 230 .

FIG. 2B schematically shows a flowchart of an information processing method according to an embodiment of the present disclosure.

As shown in FIG. 2B , the information processing method includes operations S210˜S230.

In operation S210, an access request to access the second system is received.

In operation S220, a login credential is determined based on the user information of the first system in the access request.

In operation S230, the login credential is sent to the second system, so that the second system authenticates the user identity according to the login credential.

The method utilizes the fusion system to represent the user of the first system to complete the authentication with the second system, and achieves the technical effect of not needing to modify the user identity authentication module when integrating different systems, and improves the usability of the system. On the other hand, in the method shown in FIG. 1C , after completing the transformation of the second system 130 , the identity information of the users of the second system needs to be added to the first system 140 , and the first system 140 needs to restrict the new User's access rights, etc., the transformation process is complicated and tedious, the method of the present disclosure does not need to add the user's identity information of the second system to the user identity authentication module of the first system, which reduces the complexity of system integration. In addition, this method avoids information security and legal issues. Embodiments of operations S210 to S230 are described below with reference to FIG. 2A .

According to an embodiment of the present disclosure, in operation S210, for example, the fusion system 240 receives an access request sent by the client 210 to access the second system 230. For example, the access request may be generated by the user clicking a hyperlink of the second system 230 on the user interface of the first system 220, or the user may input the URL (Uniform) of the second system 230 in the browser of the client 210. Resource Locator, Uniform Resource Locator).

According to an embodiment of the present disclosure, in operation S220, for example, the fusion system 240 may check the cookie information carried in the access request, determine the user information of the first system, and determine the login credential according to the user information. The login credential may be generated, for example, by querying the mapping table between the user information of the first system and the user information of the second system in the fusion system server 240, and encrypting the query result.

According to an embodiment of the present disclosure, in operation S220, determining a login credential based on the user information of the first system in the access request includes determining the login credential based on the user information of the first system in the access request. In the case that the current user has the authority, the login credentials are determined based on the user information. The method can verify the authority of the user to access the second system, thereby improving the controllability of the second system being accessed by the user, thereby improving the security of the second system.

According to an embodiment of the present disclosure, in operation S230, for example, the fusion system server 240 may send the login credential to the second system 230, so that the second system 230 authenticates the user identity according to the login credential.

FIG. 3 schematically shows a flowchart of an information processing method according to another embodiment of the present disclosure.

As shown in FIG. 3 , the method further includes operation S310 and operation S320 on the basis of the foregoing embodiment.

In operation S310, a user identity authentication success message sent by the second system is received.

In operation S320, an instruction redirecting to the second system is sent to the client, so that the client acquires the content of the second system.

The method enables the client to obtain the content of the second system and enables the user to interact with the second system.

According to an embodiment of the present disclosure, in operation S310 , for example, in the scenario shown in FIG. 2A , the fusion system 240 receives a message that the user identity authentication is successful sent by the second system 230 .

According to an embodiment of the present disclosure, in operation S320 , such as the scenario shown in FIG. 2A , the fusion system 240 sends an instruction to redirect to the second system 230 to the client 210 . After receiving the instruction, the client sends an acquisition request to the second system 230 to acquire the content of the second system 230 .

FIG. 4 schematically shows a flowchart of an information processing method according to another embodiment of the present disclosure.

As shown in FIG. 4 , the method includes operations S210, S410-S430, and S230.

In operation S410, when the user information of the first system in the access request is empty, or based on the user information of the first system in the access request, it is determined that the login credential has expired. The client sends an instruction redirected to the authentication module of the first system, so that the first system acquires user information and authenticates the user identity according to the user information.

In operation S420, when the first system successfully authenticates the user identity, obtain the user information.

In operation S430, a login credential is generated based on the user information.

In the method, when the user does not log in to the first system, the client is redirected to the authentication module of the first system, so that the first system obtains the user information, thereby completing the authentication of the user identity. The user only needs to log in to the first system, and the user identity authentication of the second system is completed by the fusion system on behalf of the user, which improves the user experience.

According to an embodiment of the present disclosure, in operation S410, for example, the user does not log in to the first system, the user information carried in the access request is empty, and the fusion system cannot obtain the user information according to the access request, so that the credential cannot be determined. According to an embodiment of the present disclosure, the fusion system sends an instruction to the client to redirect to the authentication module of the first system when the user information cannot be obtained. As shown in FIG. 2A, the fusion system 240 sends an instruction to the client 210 to redirect to the authentication module of the first system. The client 210 sends a request for obtaining the login page to the first system 220 according to the instruction, and displays the login page sent by the first system 220 on the client 210, so that the user logs in to the first system 220, which is used to make the first system 220 Obtain user information, and authenticate the user identity according to the user information.

According to an embodiment of the present disclosure, in operation S410, if the user information of the first system is not empty, the fusion system determines the login credential according to the user information, but in the case that the login credential is expired, similarly, send a retry to the client The instruction directed to the authentication module of the first system is used to cause the first system to obtain user information and authenticate the user identity according to the user information. For example, if the user logs out of the first system, or the user logs in to the first system for too long, the generated login credentials are invalid credentials.

According to an embodiment of the present disclosure, in operation S410, if it is determined according to the user information that the user does not have the authority to access the second system, an instruction to redirect to the authentication module of the first system may be sent to the client, using to enable the first system to acquire user information, and to authenticate the user identity according to the user information.

According to an embodiment of the present disclosure, in operation S420, when the first system successfully authenticates the user's identity, the first system sends an instruction to redirect to the fusion system to the client, and the client sends the first to the fusion system according to the instruction System authentication success message and user information. The fusion system obtains the user information.

According to an embodiment of the present disclosure, in operation S430, for example, the fusion system may generate a login credential according to the user information.

FIG. 5 schematically shows a flowchart of an information processing method according to another embodiment of the present disclosure.

As shown in FIG. 5 , the method includes operation S510 on the basis of the foregoing embodiment, wherein operation S220 includes operation S221.

In operation S510, a mapping table of user information of the first system and user information of the second system is configured.

In operation S221, the login credential is determined according to the mapping table and the user information of the first system in the access request.

The method can configure the mapping table of the user information of the first system and the user information of the second system in the fusion system, does not increase the difficulty of configuring the first system, and reduces the integration of the user authentication modules of the first system and the second system. difficulty.

According to an embodiment of the present disclosure, in operation S510, for example, the user information of the first system and the user information of the second system may be configured according to the user's operation of binding or associating the user information of the first system with the user information of the second system. The mapping table of user information of the second system. Or, the fusion system generates a mapping table between the user information of the first system and the user information of the second system according to the input information of the administrator.

According to an embodiment of the present disclosure, in operation S221, the second system user information is determined according to the first system user information, and the second system user information is encrypted to generate a login credential.

FIG. 6 schematically shows a flowchart of an information processing method according to another embodiment of the present disclosure.

As shown in FIG. 6 , the process for the user 610 to access the service module 670 of the second system includes operations S611 to S619 and operations S621 to S624.

In operation S611, for example, the user notifies the web browser 620 to access the service module of the second system by clicking a hyperlink of the second system. After receiving the operation, the web browser 620 performs operation S612.

In operation S612, the web browser 620 sends an access request to the fusion system 640 to access the service module 670 of the second system. The fusion system 640 receives the access request, and determines the login credentials according to the user information of the first system in the access request, which is similar to operations S210 and S220 described above. The fusion system 640 finds that the user information in the access request is empty, and performs operation S613.

In operation S613, the fusion system 640 sends an instruction to the web browser 620 to redirect to the user login page of the first system, similar to the operation S410 described above, causing the web browser 620 to interact with the first system user authentication module 630 to Get user information.

As shown in FIG. 6 , when the web browser 620 receives the redirection instruction, operation S614 is performed, and a request for obtaining the login page is sent to the user authentication module 630 of the first system. Upon receiving the acquisition request, the first system user authentication module 630 performs operation S615.

In operation S615, the first system user authentication module 630 returns a login page to the web browser 620. After the user performs operation S616 to submit the user information, the web browser 620 performs operation S617.

In operation S617, the web browser 620 sends the login user information to the first system user authentication module 630 and the verification is successful. In the case that the first system user authentication module 630 verifies that the user login is successful, operation S618 is performed.

In operation S618, the first system user authentication module 630 sends an instruction to redirect to the fusion system to the web browser 620. The web browser 620 receives the redirection instruction, and sends a login success message to the fusion system 640 . The fusion system 640 obtains the user information carried in the message, generates a login credential according to the user information, and sends the login credential to the second system user authentication module 650, similar to operations S420-S430 and S230 described above.

The second system user authentication module 650 verifies the user identity according to the credential. If the verification is successful, operation S622 is performed.

In operation S622, the second system user authentication module 650 sends a verification success message to the fusion system 640. When the fusion system 640 receives the success message, operation S623 is performed.

In operation S623, an instruction to redirect to the second system service module 670 is sent to the web browser 620.

The web browser 620 sends an acquisition request to the instruction of the second system service module 670 according to the instruction, so as to realize the interaction between the user and the second system service module 670 .

FIG. 7 schematically shows a block diagram of an information processing system 700 according to an embodiment of the present disclosure.

As shown in FIG. 7 , the information processing system 700 includes a first receiving module 710 , a determining module 720 and a first sending module 730 .

The first receiving module 710, for example, performs operation S210 described above with reference to FIG. 2B, for receiving an access request for accessing the second system.

The determining module 720, for example, performs operation S220 described above with reference to FIG. 2B, to determine the login credential based on the user information of the first system in the access request.

The first sending module 730, for example, performs operation S230 described above with reference to FIG. 2B, to send the login credential to the second system, so that the second system authenticates the user identity according to the login credential.

According to an embodiment of the present disclosure, the determining module includes a first determining subunit, configured to, in the case where it is determined based on the user information of the first system in the access request that the current user has the authority, determine based on the user information , determine the login credentials.

FIG. 8 schematically shows a block diagram of an information processing system 800 according to another embodiment of the present disclosure.

As shown in FIG. 8 , the information processing system 800 further includes a second receiving module 810 and a second sending module 820 on the basis of the foregoing embodiments.

The second receiving module 810 , for example, performs operation S310 described above with reference to FIG. 3 , and is configured to receive a user identity authentication success message sent by the second system.

The second sending module 820, for example, performs operation S320 described above with reference to FIG. 3, and is configured to send an instruction to redirect to the second system to the client, so that the client obtains the content of the second system.

FIG. 9 schematically shows a block diagram of an information processing system 900 according to another embodiment of the present disclosure.

As shown in FIG. 9 , the information processing system 900 further includes a third sending module 910 , an obtaining module 920 and a generating module 930 on the basis of the foregoing embodiments.

The third sending module 910, for example, performs the operation S410 described above with reference to FIG. 4, for the user information of the first system in the access request is empty, or based on the first system in the access request The user information of the system, in the case that the determined login credential has expired, send an instruction redirected to the authentication module of the first system to the client, so that the first system can obtain the user information, and according to the user information to authenticate the user's identity.

The obtaining module 920 , for example, performs operation S420 described above with reference to FIG. 4 , for obtaining the user information when the first system successfully authenticates the user identity.

The generating module 930, for example, performs operation S430 described above with reference to FIG. 4, to generate a login credential based on the user information.

FIG. 10 schematically shows a block diagram of an information processing system 1000 according to another embodiment of the present disclosure.

As shown in FIG. 10 , the information processing system 1000 further includes a configuration module 1010 based on the foregoing embodiment, wherein the determination module 720 includes a second determination subunit 721 .

The configuration module 1010, for example, performs operation S510 described above with reference to FIG. 5, for configuring the mapping table of the user information of the first system and the user information of the second system.

The second determination subunit 721 , for example, performs operation S221 described above with reference to FIG. 5 , to determine the login credential according to the mapping table and the user information of the first system in the access request.

Any of the modules, sub-modules, units, sub-units, or at least part of the functions of any of them according to embodiments of the present disclosure may be implemented in one module. Any one or more of the modules, sub-modules, units, and sub-units according to the embodiments of the present disclosure may be divided into multiple modules for implementation. Any one or more of the modules, sub-modules, units, sub-units according to embodiments of the present disclosure may be implemented at least in part as hardware circuits, such as field programmable gate arrays (FPGA), programmable logic arrays (PLA), A system on a chip, a system on a substrate, a system on a package, an application specific integrated circuit (ASIC), or any other reasonable means of hardware or firmware that integrates or packages circuits, or can be implemented in software, hardware, and firmware Any one of these implementations or an appropriate combination of any of them is implemented. Alternatively, one or more of the modules, sub-modules, units, and sub-units according to embodiments of the present disclosure may be implemented at least in part as computer program modules that, when executed, may perform corresponding functions.

For example, the first receiving module 710, the determining module 720, the first sending module 730, the second receiving module 810, the second sending module 820, the third sending module 910, the obtaining module 920, the generating module 930, the configuration module 1010 and the second Any number of the determination subunits 721 may be combined into one module for implementation, or any one of the modules may be split into multiple modules. Alternatively, at least part of the functionality of one or more of these modules may be combined with at least part of the functionality of other modules and implemented in one module. According to an embodiment of the present disclosure, the first receiving module 710, the determining module 720, the first sending module 730, the second receiving module 810, the second sending module 820, the third sending module 910, the obtaining module 920, the generating module 930, the configuration At least one of the module 1010 and the second determination subunit 721 may be implemented at least in part as a hardware circuit, such as a field programmable gate array (FPGA), a programmable logic array (PLA), a system on a chip, a system on a substrate, a package system, application specific integrated circuit (ASIC), or any other reasonable way of integrating or encapsulating the circuit, such as hardware or firmware, or in any one of software, hardware and firmware. A suitable combination of any of them can be implemented. Alternatively, the first receiving module 710, the determining module 720, the first sending module 730, the second receiving module 810, the second sending module 820, the third sending module 910, the obtaining module 920, the generating module 930, the configuration module 1010 and the second At least one of the determination subunits 721 may be implemented at least in part as a computer program module which, when executed, may perform a corresponding function.

FIG. 11 schematically shows a block diagram of an electronic device according to an embodiment of the present disclosure. The electronic device shown in FIG. 11 is only an example, and should not impose any limitation on the function and scope of use of the embodiments of the present disclosure.

As shown in FIG. 11 , an electronic device 1100 according to an embodiment of the present disclosure includes a processor 1101 that can be loaded into a random access memory (RAM) 1103 according to a program stored in a read only memory (ROM) 1102 or from a storage portion 1108 program to perform various appropriate actions and processes. The processor 1101 may include, for example, a general-purpose microprocessor (eg, a CPU), an instruction set processor and/or a related chipset, and/or a special-purpose microprocessor (eg, an application specific integrated circuit (ASIC)), among others. The processor 1101 may also include on-board memory for caching purposes. The processor 1101 may include a single processing unit or multiple processing units for performing different actions of the method flow according to an embodiment of the present disclosure.

In the RAM 1103, various programs and data necessary for the operation of the system 1100 are stored. The processor 1101 , the ROM 1102 , and the RAM 1103 are connected to each other through a bus 1104 . The processor 1101 performs various operations of the method flow according to the embodiment of the present disclosure by executing the programs in the ROM 1102 and/or the RAM 1103 . Note that the program may also be stored in one or more memories other than the ROM 1102 and the RAM 1103. The processor 1101 may also perform various operations of the method flow according to the embodiments of the present disclosure by executing programs stored in the one or more memories.

According to an embodiment of the present disclosure, the system 1100 may also include an input/output (I/O) interface 1105 that is also connected to the bus 1104 . System 1100 may also include one or more of the following components connected to I/O interface 1105: input portion 1106 including keyboard, mouse, etc.; including components such as cathode ray tube (CRT), liquid crystal display (LCD), etc., and speakers An output section 1107 including a hard disk, etc.; a storage section 1108 including a hard disk, etc.; and a communication section 1109 including a network interface card such as a LAN card, a modem, and the like. The communication section 1109 performs communication processing via a network such as the Internet. Driver 610 is also connected to I/O interface 1105 as needed. A removable medium 611, such as a magnetic disk, an optical disk, a magneto-optical disk, a semiconductor memory, etc., is mounted on the drive 610 as needed so that a computer program read therefrom is installed into the storage section 1108 as needed.

According to an embodiment of the present disclosure, the method flow according to an embodiment of the present disclosure may be implemented as a computer software program. For example, embodiments of the present disclosure include a computer program product comprising a computer program carried on a computer-readable medium, the computer program containing program code for performing the method illustrated in the flowchart. In such an embodiment, the computer program may be downloaded and installed from the network via the communication portion 1109, and/or installed from the removable medium 611. When the computer program is executed by the processor 1101, the above-described functions defined in the system of the embodiment of the present disclosure are performed. According to embodiments of the present disclosure, the above-described systems, apparatuses, apparatuses, modules, units, etc. can be implemented by computer program modules.

The present disclosure also provides a computer-readable medium. The computer-readable medium may be included in the device/device/system described in the above embodiments; it may also exist alone without being assembled into the device/device/system. in the system. The above-mentioned computer-readable medium carries one or more programs, and when the above-mentioned one or more programs are executed, implement the method according to the embodiment of the present disclosure.

According to an embodiment of the present disclosure, the computer-readable medium may be a computer-readable signal medium or a computer-readable storage medium, or any combination thereof. The computer-readable storage medium can be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus or device, or a combination of any of the above. More specific examples of computer readable storage media may include, but are not limited to, electrical connections with one or more wires, portable computer disks, hard disks, random access memory (RAM), read only memory (ROM), erasable Programmable read only memory (EPROM or flash memory), fiber optics, portable compact disk read only memory (CD-ROM), optical storage devices, magnetic storage devices, or any suitable combination of the foregoing. In this disclosure, a computer-readable storage medium may be any tangible medium that contains or stores a program that can be used by or in conjunction with an instruction execution system, apparatus, or device. In the present disclosure, however, a computer-readable signal medium may include a data signal propagated in baseband or as part of a carrier wave, carrying computer-readable program code therein. Such propagated data signals may take a variety of forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination of the foregoing. A computer-readable signal medium can also be any computer-readable medium other than a computer-readable storage medium that can transmit, propagate, or transport the program for use by or in connection with the instruction execution system, apparatus, or device . Program code embodied on a computer readable medium may be transmitted using any suitable medium including, but not limited to, wireless, wireline, optical fiber cable, radio frequency signals, etc., or any suitable combination of the foregoing.

For example, according to embodiments of the present disclosure, a computer-readable medium may include one or more memories other than ROM 1102 and/or RAM 1103 and/or ROM 1102 and RAM 1103 described above.

The flowchart and block diagrams in the Figures illustrate the architecture, functionality, and operation of possible implementations of systems, methods and computer program products according to various embodiments of the present disclosure. In this regard, each block in the flowchart or block diagrams may represent a module, segment, or portion of code that contains one or more logical functions for implementing the specified functions executable instructions. It should also be noted that, in some alternative implementations, the functions noted in the blocks may occur out of the order noted in the figures. For example, two blocks shown in succession may, in fact, be executed substantially concurrently, or the blocks may sometimes be executed in the reverse order, depending upon the functionality involved. It is also noted that each block of the block diagrams or flowchart illustrations, and combinations of blocks in the block diagrams or flowchart illustrations, can be implemented in special purpose hardware-based systems that perform the specified functions or operations, or can be implemented using A combination of dedicated hardware and computer instructions is implemented.

Those skilled in the art will appreciate that various combinations and/or combinations of features recited in various embodiments and/or claims of the present disclosure are possible, even if such combinations or combinations are not expressly recited in the present disclosure. In particular, various combinations and/or combinations of the features recited in the various embodiments of the present disclosure and/or in the claims may be made without departing from the spirit and teachings of the present disclosure. All such combinations and/or combinations fall within the scope of this disclosure.

Embodiments of the present disclosure have been described above. However, these examples are for illustrative purposes only, and are not intended to limit the scope of the present disclosure. Although the various embodiments are described above separately, this does not mean that the measures in the various embodiments cannot be used in combination to advantage. The scope of the present disclosure is defined by the appended claims and their equivalents. Without departing from the scope of the present disclosure, those skilled in the art can make various substitutions and modifications, and these substitutions and modifications should all fall within the scope of the present disclosure.

Claims (12)

1. An information processing method, comprising: receiving an access request to access the second system; determining login credentials based on the user information of the first system in the access request; and Sending the login credential to the second system, so that the second system authenticates the user identity according to the login credential. 2. The method of claim 1, further comprising: Receive a message that the user identity authentication is successful sent by the second system; and Sending an instruction to redirect to the second system to the client, so that the client obtains the content of the second system. 3. The method of claim 1, wherein the determining of login credentials based on the user information of the first system in the access request comprises: In a case where it is determined that the current user has authority based on the user information of the first system in the access request, a login credential is determined based on the user information. 4. The method of claim 1, further comprising: In the case that the user information of the first system in the access request is empty, or based on the user information of the first system in the access request, it is determined that the login credential has expired, sending a re-send to the client an instruction directed to the authentication module of the first system, used to enable the first system to acquire user information and authenticate user identity according to the user information; In the case that the first system successfully authenticates the user identity, acquiring the user information; and Based on the user information, a login credential is generated. 5. The method of claim 1, further comprising: configuring the mapping table of the user information of the first system and the user information of the second system, Wherein, determining the login credential based on the user information of the first system in the access request includes: The login credential is determined according to the mapping table and the user information of the first system in the access request. 6. An information processing system, comprising: a first receiving module, configured to receive an access request for accessing the second system; a determining module, configured to determine a login credential based on the user information of the first system in the access request; and The first sending module is configured to send the login credential to the second system, so that the second system authenticates the user identity according to the login credential. 7. The system of claim 6, further comprising: a second receiving module, configured to receive a user identity authentication success message sent by the second system; and The second sending module is configured to send an instruction to redirect to the second system to the client, so that the client obtains the content of the second system. 8. The system of claim 6, wherein the determining module comprises: A first determining subunit, configured to determine a login credential based on the user information when it is determined that the current user has permission based on the user information of the first system in the access request. 9. The system of claim 6, further comprising: The third sending module is used for the situation that the user information of the first system in the access request is empty, or the determined login credential has expired based on the user information of the first system in the access request Next, send an instruction redirected to the authentication module of the first system to the client, so that the first system obtains user information, and authenticates the user identity according to the user information; an obtaining module, configured to obtain the user information when the first system successfully authenticates the user identity; and A generating module is configured to generate a login credential based on the user information. 10. The system of claim 6, further comprising: a configuration module, configured to configure the mapping table of the user information of the first system and the user information of the second system, Wherein, the determining module includes: A second determining subunit, configured to determine the login credential according to the mapping table and the user information of the first system in the access request. 11. An electronic device comprising: one or more processors; storage means for storing one or more programs, Wherein, when the one or more programs are executed by the one or more processors, the one or more processors are caused to execute the method according to any one of claims 1-5. 12. A computer-readable medium having stored thereon executable instructions which, when executed by a processor, cause the processor to perform the method of any one of claims 1-5.

Images