CN112929321B - Authentication method, device and terminal equipment - Google Patents

Abstract

The embodiment of the present invention provides an authentication method, device and terminal equipment. Wherein, the method includes: obtaining configuration parameters pre-configured for the authentication server, the configuration parameters being used to represent the authentication mode of the authentication server; when receiving a data acquisition request, according to the configuration parameters The authentication mode indicated, sends an authentication request conforming to the authentication mode to the authentication server; receives an authentication response returned by the authentication server in response to the authentication request, and the authentication response carry authentication information. The deployment of the authentication system can be completed without changing the underlying business logic of the terminal device, so the efficiency of deploying the authentication system in the CDN network can be improved, and the labor cost of deploying the authentication system can be reduced.

Description

An authentication method, device and terminal equipment

technical field

The present invention relates to the technical field of cloud storage, in particular to an authentication method, device and terminal equipment.

Background technique

The client device may send a data acquisition request to a terminal device in a CDN (Content Delivery Network, content distribution network), so as to acquire data in the CDN. For the sake of data security, after receiving the data request, the terminal device can send an authentication request for the client to the authentication server, and the authentication server returns an authentication response to the terminal device in response to the authentication request. In the authentication response, It carries authentication information, and the authentication information is used to indicate whether the client device has the authority to obtain the requested data. The terminal device obtains an authentication result by parsing the authentication information, and determines whether to feed back the requested data to the client device according to the authentication result.

Due to different application scenarios of different CDNs, the authentication methods of the authentication server may be different, so the format of the required authentication request and/or the format of the fed back authentication result may be different. In related technologies, developers can develop terminal devices with different business logics for different authentication servers, so that the terminal devices can send authentication requests that meet the requirements of the authentication server and accurately identify the authentication response returned by the authentication server.

However, when there are a large number of CDNs with different application scenarios, corresponding terminal devices need to be developed for the authentication servers in each CDN, resulting in low efficiency and high labor costs for deploying the authentication system in the CDN.

Contents of the invention

The purpose of the embodiments of the present invention is to provide an authentication method, device and terminal equipment, so as to improve the efficiency of deploying the authentication system in the CDN network and reduce the labor cost of deploying the authentication system. The specific technical scheme is as follows:

In the first aspect of the embodiments of the present invention, an authentication method is provided, which is applied to a terminal device in a content distribution network CDN, where the CDN also includes an authentication server, and the method includes:

Acquiring configuration parameters preconfigured for the authentication server, where the configuration parameters are used to represent the authentication mode of the authentication server;

When receiving a data acquisition request, according to the authentication method represented by the configuration parameter, send an authentication request conforming to the authentication method to the authentication server;

receiving an authentication response returned by the authentication server in response to the authentication request, where the authentication response carries authentication information.

In a possible embodiment, after receiving the authentication response returned by the authentication server for the authentication request, the method further includes:

According to the parsing conditions indicated by the configuration parameters, the authentication information is parsed to obtain an authentication result indicating pass or reject.

In a possible embodiment, the configuration parameters include a response mode parameter, and the response mode parameter is used to indicate that the element used to indicate the authentication result in the authentication information is a status code and/or an information body;

The said authentication information is parsed according to the parsing conditions indicated by the configuration parameters, and an authentication result indicating pass or rejection is obtained, including:

According to the element represented by the response mode parameter, read the element used to represent the authentication result from the authentication information;

If the read element complies with the authentication rules, determine that the authentication result is passed;

If the read element does not comply with the authentication rule, determine that the authentication result is rejection.

In a possible embodiment, the configuration parameters further include a judgment rule parameter, and the judgment rule parameter is used to represent an authentication rule.

In a possible embodiment, the configuration parameters include authentication path parameters, and the authentication path parameters are used to indicate one or more preset paths;

The method also includes:

When a data acquisition request is received, determine whether the path of the data requested by the data acquisition request belongs to the preset path;

If the path of the data requested by the data acquisition request does not belong to the preset path, terminate the authentication;

The sending an authentication request conforming to the authentication method to the authentication server includes:

If the path of the data requested by the data acquisition request belongs to the preset path, an authentication request conforming to the authentication mode is sent to the authentication server.

In a possible embodiment, the configuration parameter includes an information modification parameter, and the information modification parameter is used to indicate a method of modifying the information in the data acquisition request;

The sending an authentication request conforming to the authentication method to the authentication server according to the authentication method represented by the configuration parameter includes:

Modifying the data acquisition request according to the modification method indicated by the information modification parameter to obtain an authentication request;

Send the authentication request to the authentication server.

In a possible embodiment, the method also includes:

determining whether the information body in the data acquisition request is not in a preset format;

The sending the authentication request to the authentication server includes:

If the information body in the data acquisition request is not in the preset format, sending the authentication request to the middleware, so that the middleware encapsulates the information body in the authentication request according to the preset format , and send the encapsulated authentication request to the authentication server.

In a second aspect of the present invention, an authentication device is provided, which is applied to a terminal device in a content distribution network CDN, the CDN also includes an authentication server, and the device includes:

A parameter acquisition module, configured to acquire configuration parameters preconfigured for the authentication server, where the configuration parameters are used to represent the authentication mode of the authentication server;

The request module is configured to, when receiving a data acquisition request, send an authentication request conforming to the authentication method to the authentication server according to the authentication method represented by the configuration parameter;

An authentication module, configured to receive an authentication response returned by the authentication server for the authentication request, where the authentication response carries authentication information;

In a possible embodiment, the device further includes an analysis module, configured to analyze the authentication information according to the analysis conditions indicated by the configuration parameters, and obtain an authentication result indicating pass or reject.

In a possible embodiment, the configuration parameters include a response mode parameter, and the response mode parameter is used to indicate that the element used to indicate the authentication result in the authentication information is a status code and/or an information body;

The parsing module is specifically configured to read elements used to represent authentication results from the authentication information according to the elements represented by the response mode parameters;

If the read element complies with the authentication rules, determine that the authentication result is passed;

If the read element does not comply with the authentication rule, determine that the authentication result is rejection.

In a possible embodiment, the configuration parameters further include a judgment rule parameter, and the judgment rule parameter is used to represent an authentication rule.

In a possible embodiment, the configuration parameters include authentication path parameters, and the authentication path parameters are used to indicate one or more preset paths;

The request module is further configured to, when receiving a data acquisition request, determine whether the path of the data requested by the data acquisition request belongs to the preset path;

If the path of the data requested by the data acquisition request does not belong to the preset path, terminate the authentication;

The request module is specifically configured to send an authentication request conforming to the authentication mode to the authentication server if the path of the data requested by the data acquisition request belongs to the preset path.

In a possible embodiment, the configuration parameter includes an information modification parameter, and the information modification parameter is used to indicate a method of modifying the information in the data acquisition request;

The request module is specifically configured to modify the data acquisition request according to the modification method indicated by the information modification parameter to obtain an authentication request;

Send the authentication request to the authentication server.

In a possible embodiment, the request module is further configured to determine whether the information body in the data acquisition request is not in a preset format;

The request module is specifically configured to send the authentication request to the middleware if the information body in the data acquisition request is not in the preset format, so that the middleware performs the authentication according to the preset format. Encapsulate the information body in the authorization request, and send the encapsulated authentication request to the authentication server.

In the third aspect of the embodiments of the present invention, a terminal device is provided, and the terminal device includes a processor, a communication interface, a memory, and a communication bus, wherein the processor, the communication interface, and the memory complete mutual communication through the communication bus ;

memory for storing computer programs;

The processor is configured to implement the method steps described in any one of the first aspect when executing the program stored in the memory.

In the fourth aspect of the IDE of the embodiment of the present invention, a computer-readable storage medium is provided, and a computer program is stored in the computer-readable storage medium, and when the computer program is executed by a processor, any one of the first aspect is implemented. method steps.

The authentication method, device, and terminal device provided by the embodiments of the present invention can enable the terminal device to send an authentication request in the format required by the authentication server by configuring parameters, without changing the underlying business logic of the terminal device. , to complete the deployment of the authentication system, so the efficiency of deploying the authentication system in the CDN network can be improved, and the labor cost of deploying the authentication system can be reduced. Of course, implementing any product or method of the present invention does not necessarily need to achieve all the above-mentioned advantages at the same time.

Description of drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the following will briefly introduce the drawings that need to be used in the description of the embodiments or the prior art. Obviously, the accompanying drawings in the following description are only These are some embodiments of the present invention. Those skilled in the art can also obtain other drawings based on these drawings without creative work.

FIG. 1 is a schematic diagram of a possible application scenario of an authentication method provided by an embodiment of the present invention;

FIG. 2a is a schematic flowchart of an authentication method provided by an embodiment of the present invention;

Fig. 2b is another schematic flowchart of the authentication method provided by the embodiment of the present invention;

FIG. 3 is another schematic flowchart of an authentication method provided by an embodiment of the present invention;

FIG. 4 is a signaling interaction diagram of an authentication method provided by an embodiment of the present invention;

FIG. 5 is a schematic structural diagram of an authentication device provided by an embodiment of the present invention;

FIG. 6 is a schematic structural diagram of a terminal device provided by an embodiment of the present invention.

Detailed ways

The following will clearly and completely describe the technical solutions in the embodiments of the present invention with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only some, not all, embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without making creative efforts belong to the protection scope of the present invention.

For a clearer description of the authentication method provided by the embodiment of the present invention, please refer to FIG. 1, which is a schematic diagram of a possible application scenario of the authentication method provided by the embodiment of the present invention, including a client device 110, Terminal device 120 and authentication server 130.

When the client device 110 needs to obtain data in the CDN, it can send a data acquisition request to the terminal device 120. After receiving the data acquisition request, the terminal device 120 sends an authentication request to the authentication server 130 according to the received data acquisition request. rights request. The authentication server 130 feeds back authentication information to the terminal device 120 according to the authentication request, and the terminal device 120 parses the authentication information to obtain an authentication result. If the authentication result is passed, then the terminal device 120 can determine whether the data requested by the client device 110 is stored locally, and if the requested data is stored locally, the data is sent to the client device 110, if not stored locally The requested data is obtained from the upper node of the terminal device 120 in the CDN, and the obtained data is sent to the client device 110 . If the authentication result is rejection, the terminal device 120 terminates the current data acquisition.

Figure 1 shows only one possible application scenario of the authentication method provided by the embodiment of the present invention. The authentication method provided by the embodiment of the present invention can also be applied to other application scenarios, which is not limited in this embodiment. Referring to FIG. 2a, FIG. 2a is a schematic flow diagram of an authentication method provided by an embodiment of the present invention, which may include:

S201. Obtain configuration parameters pre-configured for the authentication server.

Wherein, the configuration parameter is used to indicate the authentication mode of the authentication server. It may be by reading the configuration file corresponding to the authentication server to obtain the configuration parameters corresponding to the authentication server. According to different application scenarios, the parameters included in the configuration parameters may be different, and the specific parameters included in the configuration parameters will be described in subsequent embodiments, and will not be repeated here.

S202. When receiving the data acquisition request, according to the authentication mode indicated by the configuration parameter, send an authentication request conforming to the authentication mode to the authentication server.

Since the configuration parameters can indicate the authentication mode of the authentication server, an authentication request conforming to the authentication mode of the authentication server can be obtained according to the configuration parameters, and the authentication server can correctly process the authentication request.

S203. Receive an authentication response returned by the authentication server for the authentication request, where the authentication response carries authentication information.

As analyzed above, since the authentication server can correctly process the authentication request, the authentication information fed back by the authentication server for the authentication request can be obtained. The authentication information can represent the authentication result, so the authentication of the client device can be realized.

By choosing this embodiment, the terminal device can send an authentication request in the format required by the authentication server by configuring parameters, and the deployment of the authentication system can be completed without changing the underlying business logic of the terminal device, so it can Improve the efficiency of deploying the authentication system in the CDN network and reduce the labor cost of deploying the authentication system.

In another possible embodiment, as shown in FIG. 2b, after S203, it may further include:

S204: Analyze the authentication information according to the analysis conditions indicated by the configuration parameters, and obtain an authentication result indicating pass or reject.

The authentication information can be used to represent the authentication result, but in the authentication responses returned by different authentication servers, the authentication information represents the authentication result in different ways. For example, in some application scenarios, the status in the authentication information can be For example, if the status code in the authentication information is 200, it means that the authentication result is passed; if it is not 200, it means that the authentication result is rejected. In other application scenarios, it can also be represented by the information body in the authentication information. For example, if the information body of the authentication information is false (false), it means that the authentication result is passed; if the information of the authentication information is True ( true), it means that the authentication result is rejected. In other application scenarios, it can also be represented by the status code in the authentication information and the information body. For example, if the status code in the authentication information is 200 and the information body is false, it means that the authentication result is passed. If the status If the code is not 200 or the message body is True, the authentication result is rejected.

Since the configuration parameters can indicate the authentication method of the authentication server, according to the configuration parameters, it can be determined how the authentication information fed back by the authentication server carries the authentication result, so according to the configuration parameters, the authentication information can be correctly parsed to obtain the authentication result.

By choosing this embodiment, the terminal device can send the authentication request in the format required by the authentication server by configuring parameters, and correctly parse the authentication information fed back by the authentication server, without changing the underlying business logic of the terminal device. Next, the deployment of the authentication system is completed, so the efficiency of deploying the authentication system in the CDN network can be improved, and the labor cost of deploying the authentication system can be reduced.

The parameters that may be included in the configuration parameters will be described separately below. According to different application scenarios, the configuration parameters may include some (one or more) parameters or all parameters in the multiple parameters described later, and may also include the subsequent description other than the multiple parameters of the .

In a possible embodiment, the configuration parameters may include a response mode parameter, and the response mode parameter is used to indicate that the element used to indicate the authentication result in the authentication information is a status code and/or an information body. As analyzed above, the authentication result can be represented by the status code in the authentication information, or by the information body in the authentication information, or by both the status code and the information body.

Therefore, if the authentication information needs to be parsed correctly to obtain the authentication result, it is necessary to determine which elements in the authentication information are used to represent the authentication result. In this embodiment, the element used to represent the authentication result may be read from the authentication information according to the response mode parameter, and the authentication result may be determined according to the read element. For example, assuming that the response mode parameter indicates that the element used to represent the authentication result in the authentication information is a status code, the status code is read from the authentication information, and the authentication result is determined according to the read status code.

In a possible embodiment, the configuration parameters may further include a judging rule parameter, and the judging rule parameter is used to represent an authentication rule. Exemplarily, the authentication rule may be equal to 200, or equal to 200 or 206, or less than 201, etc. In this embodiment, it may be determined whether the read element satisfies the authentication rule, if the read element satisfies the authentication rule, then it is determined that the authentication result is passed, and if the read element does not meet the authentication rule authorization rule, the authentication result is determined to be rejected. Exemplarily, assume that the response mode parameter indicates that the element of the authentication result is a status code, and the judgment rule parameter indicates that the authentication rule is equal to 200. If the read status code is 200, the authentication is determined because it complies with the authentication rule The result is passed. If the read status code is 198, it is determined that the authentication result is rejected because the authentication rule is not met.

Judgment rule parameters may include relationship sub-parameters and value sub-parameters, wherein the relationship sub-parameters are used to represent a relationship, for example, may represent any of the following 8 operators: greater than, less than, equal to, not equal to, greater than Equal to, less than or equal to, match, not match. The value sub-parameter is used to represent one or more values, and the preset rule represented by the judgment rule parameter is whether the read element and the value represented by the value sub-parameter conform to the relationship represented by the relation sub-parameter. Exemplarily, assuming that the relationship sub-parameter represents equal to, and the value sub-parameter represents 200 and 206, then the authentication rule is equal to 200 or 206.

In a possible embodiment, the configuration parameters may include authentication path parameters, and the authentication path parameters are used to indicate one or more preset paths. The authentication path parameter can represent one or more paths in the form of a string, such as "/urltoken/auth", or represent one or more paths in the form of a variable, for example, it can represent obtaining a preset from the variable token The path may also represent one or more paths in the form of a combination of character strings and variables, which is not limited in this embodiment.

This embodiment may be shown in FIG. 3, and FIG. 3 is another schematic flowchart of the authentication method provided by the embodiment of the present invention, which may include:

S301. Obtain configuration parameters preconfigured for the authentication server.

This step is the same as S201, and reference may be made to the foregoing description of S201, and details are not repeated here.

S302. When the data acquisition request is received, determine whether the path of the data requested by the data acquisition request belongs to the preset path. If the path of the data requested by the data acquisition request belongs to the preset path, execute S303. If the path of the data requested by the data acquisition request If the path of the data does not belong to the preset path, execute S306.

The path of the requested data belongs to the preset path, which means that there is at least one preset path that is the same as the path of the requested data.

S303. According to the authentication mode indicated by the configuration parameter, send an authentication request conforming to the authentication mode to the authentication server.

It can be understood that if the requested data belongs to the preset path, it can be considered that the data requested by the client device can only be obtained after the authentication is successful, so an authentication request needs to be sent to the authentication server.

S304. Receive an authentication response returned by the authentication server for the authentication request.

This step is the same as S203, and reference may be made to the foregoing description of S203, and details are not repeated here.

S305: Analyze the authentication information according to the analysis mode indicated by the configuration parameter, and obtain an authentication result.

This step is the same as S204, and reference may be made to the foregoing description of S204, which will not be repeated here.

S306. Terminate authentication.

It can be understood that if the requested data does not belong to the preset path, it can be considered that the data requested by the client device can be obtained without authentication, so the authentication can be terminated without sending an authentication request to the authentication server. right.

In a possible embodiment, the configuration parameters may include information modification parameters, and the information modification parameters are used to indicate a modification method for the information in the data acquisition request. In this embodiment, the data acquisition request may be modified according to the modification manner indicated by the information modification parameter to obtain the authentication request.

It may be to modify the request parameters in the data acquisition request, or to modify the request header of the data acquisition request, or to modify the request parameters and the request header in the data acquisition request. When modifying the request parameters, any of the following four modification methods can be adopted: ignore, retain, delete, and add. Among them, ignore refers to ignoring all request parameters, that is, the authentication request does not contain any request parameters, retaining refers to retaining some of the specified request parameters, that is, the authentication request contains some of the specified request parameters, and deleting refers to deleting the specified request parameters. Part of the request parameters, that is, the authentication request contains all the request parameters except the specified part of the request parameters, adding refers to adding other request parameters other than the original request parameters, that is, the authentication request contains other request parameters other than the original request parameters . The modification to the request header can be to add a custom request header. If the information modification parameter is empty in the configuration parameters, the information in the data acquisition request may not be modified, so as to retain all the information in the data acquisition request in the obtained authentication request (ie transparent transmission).

In some application scenarios, the authentication server may have requirements on the format of the information body in the authentication request, for example, the format of the information body in the authentication request is required to be in JSON format, and if the format of the information body in the data acquisition request is in other formats If the format is string, the information body in the authentication request obtained based on the data acquisition request is also in other formats.

Based on this, in a possible embodiment, it may be determined whether the information body in the data acquisition request is not in the preset format, and if the information body in the data acquisition request is not in the preset format, an authentication request is sent to the middleware, The middleware encapsulates the information body in the authentication request according to the preset format, and sends the encapsulated authentication request to the authentication server. In this embodiment, the signaling interaction in the authentication process can be referred to FIG. 4, which is a signaling interaction diagram of the authentication method provided by the embodiment of the present invention, including the client device 110 and the terminal device 120. , the authentication server 130, and the middleware 140.

Step 1. The client device sends a data acquisition request to the terminal device.

Step 2. The terminal device sends an authentication request to the local machine (127.0.0.1).

Step 3. The machine sends an authentication request to the internal network device of the CDN provider, and changes the requested host to the domain name of the internal network device.

Step 4. The internal network device sends an authentication request to the middleware.

Step 5: After the middleware is repackaged, it sends an authentication request to the authentication server, and modifies the request host to the address of the authentication server.

Step 6: The authentication server feeds back the authentication information to the middleware.

Step 7, the middleware feeds back the authentication information to the internal network device.

Step 8. The internal network device feeds back the authentication information to the local machine.

Step 9. The machine feeds back the authentication information to the terminal device.

Step 10, the terminal device gives feedback to the client device according to the authentication result carried in the authentication information

By choosing this embodiment, the information body can be packaged uniformly, so as to avoid the failure of normal authentication due to incorrect format of the information body.

Referring to FIG. 5, FIG. 5 is a schematic structural diagram of an authentication device provided by an embodiment of the present invention, which is applied to a terminal device in a content distribution network CDN. The CDN also includes an authentication server, and the device includes:

A parameter acquisition module 501, configured to acquire configuration parameters pre-configured for the authentication server, where the configuration parameters are used to indicate the authentication mode of the authentication server;

The request module 502 is configured to send an authentication request conforming to the authentication method to the authentication server according to the authentication method represented by the configuration parameter when the data acquisition request is received;

The authentication module 503 is configured to receive an authentication response returned by the authentication server for the authentication request, where the authentication response carries authentication information.

In a possible embodiment, the configuration parameter is also used to indicate the parsing method of the authentication information;

The device also includes an analysis module, which is used to analyze the authentication information according to the analysis conditions indicated by the configuration parameters, and obtain an authentication result indicating pass or reject.

The configuration parameters include response mode parameters, and the response mode parameters are used to indicate that the element used to indicate the authentication result in the authentication information is a status code and/or an information body;

The parsing module is specifically used to read the elements used to represent the authentication results from the authentication information according to the elements represented by the response mode parameters;

If the read element complies with the authentication rules, determine that the authentication result is passed;

If the read element does not comply with the authentication rule, determine that the authentication result is rejection.

In a possible embodiment, the configuration parameter further includes a judging rule parameter, and the judging rule parameter is used to represent an authentication rule.

In a possible embodiment, the configuration parameters include authentication path parameters, and the authentication path parameters are used to indicate one or more preset paths;

The request module 502 is further configured to determine whether the path of the data requested by the data acquisition request belongs to a preset path when the data acquisition request is received;

If the path of the data requested by the data acquisition request does not belong to the preset path, terminate the authentication;

The request module 502 is specifically configured to send an authentication request conforming to the authentication mode to the authentication server if the path of the data requested by the data acquisition request belongs to the preset path.

In a possible embodiment, the configuration parameter includes an information modification parameter, and the information modification parameter is used to indicate a method of modifying the information in the data acquisition request;

The request module 502 is specifically configured to modify the data acquisition request according to the modification method indicated by the information modification parameter, and obtain the authentication request;

Send an authentication request to the authentication server.

In a possible embodiment, the request module 502 is also used to determine whether the information body in the data acquisition request is not in a preset format;

The request module 502 is specifically configured to send an authentication request to the middleware if the information body in the data acquisition request is not in a preset format, so that the middleware encapsulates the information body in the authentication request according to a preset format, and The encapsulated authentication request is sent to the authentication server.

The embodiment of the present invention also provides a terminal device, as shown in FIG. complete the communication with each other,

Memory 603, for storing computer programs;

When the processor 601 is used to execute the program stored on the memory 603, the following steps are implemented:

Obtain the configuration parameters pre-configured for the authentication server, the configuration parameters are used to indicate the authentication mode of the authentication server;

When the data acquisition request is received, according to the authentication method indicated by the configuration parameter, send an authentication request conforming to the authentication method to the authentication server;

An authentication response returned by the authentication server for the authentication request is received, and the authentication response carries authentication information.

It can be understood that the foregoing terminal device may be an edge device.

In a possible embodiment, after receiving the authentication response returned by the authentication server for the authentication request, the method further includes:

According to the parsing conditions indicated by the configuration parameters, the authentication information is parsed, and the authentication result indicating pass or reject is obtained.

In a possible embodiment, the configuration parameters include a response mode parameter, and the response mode parameter is used to indicate that the element used to indicate the authentication result in the authentication information is a status code and/or an information body;

According to the parsing conditions indicated by the configuration parameters, the authentication information is parsed, and the authentication result indicating pass or reject is obtained, including:

According to the element represented by the response mode parameter, read the element used to represent the authentication result from the authentication information;

If the read element complies with the authentication rules, determine that the authentication result is passed;

If the read element does not comply with the authentication rule, determine that the authentication result is rejection.

In a possible embodiment, the configuration parameter further includes a judging rule parameter, and the judging rule parameter is used to represent an authentication rule.

In a possible embodiment, the configuration parameters include authentication path parameters, and the authentication path parameters are used to indicate one or more preset paths;

Methods also include:

When a data acquisition request is received, determine whether the path of the data requested by the data acquisition request belongs to a preset path;

If the path of the data requested by the data acquisition request does not belong to the preset path, terminate the authentication;

Send an authentication request conforming to the authentication method to the authentication server, including:

If the path of the data requested by the data acquisition request belongs to the preset path, an authentication request conforming to the authentication mode is sent to the authentication server.

In a possible embodiment, the configuration parameter includes an information modification parameter, and the information modification parameter is used to indicate a method of modifying the information in the data acquisition request;

According to the authentication method indicated by the configuration parameters, send an authentication request that conforms to the authentication method to the authentication server, including:

According to the modification method indicated by the information modification parameter, the data acquisition request is modified to obtain the authentication request;

Send an authentication request to the authentication server.

In a possible embodiment, the method also includes:

Determine whether the information body in the data acquisition request is not in a preset format;

Send an authentication request to the authentication server, including:

If the information body in the data acquisition request is not in the preset format, send an authentication request to the middleware, so that the middleware can encapsulate the information body in the authentication request according to the preset format, and send the encapsulated authentication request to the authentication server.

The communication bus mentioned above for the terminal device may be a Peripheral Component Interconnect (PCI) bus or an Extended Industry Standard Architecture (Extended Industry Standard Architecture, EISA) bus or the like. The communication bus can be divided into an address bus, a data bus, a control bus, and the like. For ease of representation, only one thick line is used in the figure, but it does not mean that there is only one bus or one type of bus.

The communication interface is used for communication between the terminal equipment and other equipment.

The memory may include a random access memory (Random Access Memory, RAM), and may also include a non-volatile memory (Non-Volatile Memory, NVM), such as at least one disk memory. Optionally, the memory may also be at least one storage device located far away from the aforementioned processor.

Above-mentioned processor can be general-purpose processor, comprises central processing unit (Central Processing Unit, CPU), network processor (Network Processor, NP) etc.; Can also be Digital Signal Processor (Digital Signal Processing, DSP), ASIC (Application Specific Integrated Circuit, ASIC), Field-Programmable Gate Array (Field-Programmable Gate Array, FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components.

In yet another embodiment provided by the present invention, a computer-readable storage medium is also provided. Instructions are stored in the computer-readable storage medium. When the computer-readable storage medium is run on a computer, it causes the computer to execute any one of the above-mentioned embodiments. Authentication method.

In yet another embodiment provided by the present invention, a computer program product containing instructions is also provided, and when it is run on a computer, it causes the computer to execute any authentication method in the above embodiments.

In the above embodiments, all or part of them may be implemented by software, hardware, firmware or any combination thereof. When implemented using software, it may be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on the computer, the processes or functions according to the embodiments of the present invention will be generated in whole or in part. The computer can be a general purpose computer, a special purpose computer, a computer network, or other programmable devices. The computer instructions may be stored in or transmitted from one computer-readable storage medium to another computer-readable storage medium, for example, the computer instructions may be transmitted from a website, computer, server or data center Transmission to another website site, computer, server, or data center by wired (eg, coaxial cable, optical fiber, digital subscriber line (DSL)) or wireless (eg, infrared, wireless, microwave, etc.). The computer-readable storage medium may be any available medium that can be accessed by a computer, or a data storage device such as a server or a data center integrated with one or more available media. The available medium may be a magnetic medium (for example, a floppy disk, a hard disk, or a magnetic tape), an optical medium (for example, DVD), or a semiconductor medium (for example, a Solid State Disk (SSD)).

It should be noted that in this article, relational terms such as first and second are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply that there is a relationship between these entities or operations. There is no such actual relationship or order between them. Furthermore, the term "comprises", "comprises" or any other variation thereof is intended to cover a non-exclusive inclusion such that a process, method, article, or apparatus comprising a set of elements includes not only those elements, but also includes elements not expressly listed. other elements of or also include elements inherent in such a process, method, article, or apparatus. Without further limitations, an element defined by the phrase "comprising a ..." does not exclude the presence of additional identical elements in the process, method, article or apparatus comprising said element.

Each embodiment in this specification is described in a related manner, the same and similar parts of each embodiment can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the embodiments of the device, terminal equipment, computer-readable storage medium, and computer program product, since they are basically similar to the method embodiments, the description is relatively simple, and for relevant parts, please refer to the part of the description of the method embodiments. .

The above descriptions are only preferred embodiments of the present invention, and are not intended to limit the protection scope of the present invention. Any modification, equivalent replacement, improvement, etc. made within the spirit and principles of the present invention are included in the protection scope of the present invention.

Claims (9)

1. An authentication method is applied to a terminal device in a Content Delivery Network (CDN), the CDN further includes an authentication server, and the method includes:

acquiring configuration parameters which are configured in advance for the authentication server, wherein the configuration parameters are used for representing the authentication mode of the authentication server; the configuration parameters comprise authentication path parameters, and the authentication path parameters are used for representing one or more preset paths;

when a data acquisition request is received, determining whether a path of data requested by the data acquisition request belongs to the preset path;

if the path of the data requested by the data acquisition request does not belong to the preset path, terminating authentication;

if the path of the data requested by the data acquisition request belongs to the preset path, sending an authentication request conforming to the authentication mode to the authentication server according to the authentication mode represented by the configuration parameters;

and receiving an authentication response returned by the authentication server aiming at the authentication request, wherein the authentication response carries authentication information.

2. The method of claim 1, wherein the configuration parameter is further used to indicate a parsing manner of the authentication information;

after the receiving of the authentication response returned by the authentication server for the authentication request, the method further comprises:

and analyzing the authentication information according to the analysis condition represented by the configuration parameter to obtain an authentication result representing passing or refusing.

3. The method according to claim 2, wherein the configuration parameter includes a response mode parameter, and the response mode parameter is used to indicate that an element in the authentication information used to indicate the authentication result is a status code and/or an information body;

the analyzing the authentication information according to the analysis condition represented by the configuration parameter to obtain an authentication result representing passing or refusing, including:

reading an element for representing an authentication result from the authentication information according to the element represented by the response mode parameter;

if the read element accords with the authentication rule, determining that the authentication result is passed;

and if the read element does not accord with the authentication rule, determining that the authentication result is refused.

4. The method of claim 3, wherein the configuration parameters further comprise a judgment rule parameter, and wherein the judgment rule parameter is used for representing an authentication rule.

5. The method according to claim 1, wherein the configuration parameters include an information modification parameter, and the information modification parameter is used for indicating a modification manner of information in the data acquisition request;

the sending an authentication request conforming to the authentication mode to the authentication server according to the authentication mode represented by the configuration parameters includes:

modifying the data acquisition request according to the modification mode represented by the information modification parameter to obtain an authentication request;

and sending the authentication request to the authentication server.

6. The method of claim 5, further comprising:

determining whether an information body in the data acquisition request is not in a preset format;

the sending the authentication request to the authentication server includes:

if the information body in the data acquisition request is not in a preset format, the authentication request is sent to the middleware, so that the middleware packages the information body in the authentication request according to the preset format, and sends the packaged authentication request to the authentication server.

7. An authentication apparatus, applied to a terminal device in a Content Delivery Network (CDN), the CDN further including an authentication server, the apparatus comprising:

a parameter obtaining module, configured to obtain a configuration parameter pre-configured for the authentication server, where the configuration parameter is used to indicate an authentication mode of the authentication server;

the request module is used for sending an authentication request conforming to the authentication mode to the authentication server according to the authentication mode represented by the configuration parameters when receiving a data acquisition request;

the authentication module is used for receiving an authentication response returned by the authentication server aiming at the authentication request, and the authentication response carries authentication information;

the configuration parameters comprise authentication path parameters, and the authentication path parameters are used for representing one or more preset paths;

the request module is further configured to determine whether a path of data requested by a data acquisition request belongs to the preset path when the data acquisition request is received;

if the path of the data requested by the data acquisition request does not belong to the preset path, terminating authentication;

the request module is specifically configured to send an authentication request conforming to the authentication mode to the authentication server if a path of the data requested by the data acquisition request belongs to the preset path.

8. The terminal equipment is characterized by comprising a processor, a communication interface, a memory and a communication bus, wherein the processor and the communication interface are used for realizing the communication between the processor and the memory through the communication bus;

a memory for storing a computer program;

a processor for implementing the method steps of any of claims 1-6 when executing a program stored in the memory.

9. A computer-readable storage medium, characterized in that a computer program is stored in the computer-readable storage medium, which computer program, when being executed by a processor, carries out the method steps of any one of claims 1 to 6.

Images