CN115515135A - Alliance communication method, system, device, equipment and storage medium - Google Patents

Abstract

The disclosure provides an alliance communication method, system, device, equipment and storage medium, and relates to the field of computer technology. The method includes acquiring a user's access request, where the access request includes user identity information and an access platform identifier, and determining a second platform corresponding to the access platform identifier according to the access platform identifier, the second platform includes platforms under other alliances other than the current alliance, according to the first The second platform and user identity information generate the target user identity information for accessing the second platform, and send the target user identity information to the second platform, so that the second platform can verify the target user identity information, and then verify the target user identity information on the second platform. If the identity information is verified successfully, a verification pass message is sent to the user, so that the user can access the second platform based on the identity information of the target user. Overcomes the current immature communication between multiple alliances.

Description

Alliance communication method, system, device, equipment and storage medium

technical field

The present disclosure relates to the field of computer technology, and in particular to an alliance communication method, system, device, equipment and storage medium.

Background technique

With the further deepening of the information society, the current business volume is gradually increasing. In order to process a large number of businesses, multi-platform collaborative services emerged as the times require.

In order to realize multi-platform collaborative services, trust needs to be established between multiple platforms. After multiple platforms have established trust, communication between multiple platforms takes place. However, the current communication is limited to the communication between multiple platforms in one alliance. How to communicate between multiple alliances is an urgent problem to be solved.

Contents of the invention

The present disclosure provides an alliance communication method, system, device, device, and storage medium, which overcomes the current problem of immature communication among multiple alliances at least to a certain extent.

Other features and advantages of the present disclosure will become apparent from the following detailed description, or in part, be learned by practice of the present disclosure.

According to one aspect of the present disclosure, there is provided a federation communication method applied to a first platform under the federation, the method comprising:

Obtain the user's access request, which includes user identity information and access platform identification;

Determine the second platform corresponding to the access platform identifier according to the access platform identifier, where the second platform includes platforms under other alliances other than the current alliance;

generating target user identity information for accessing the second platform according to the second platform and the user identity information;

Sending the target user identity information to the second platform, so that the second platform verifies the target user identity information;

When the second platform passes the verification of the target user's identity information, a verification pass message is sent to the user, so that the user can access the second platform based on the target user's identity information.

In an embodiment of the present disclosure, before generating target user identity information for accessing the second platform according to the second platform and the user identity information, the method further includes:

Generate identity conversion rules according to the mapping rules and smart contracts, wherein the mapping rules and smart contracts are negotiated and constructed by the first platform and the second platform;

Generate target user identity information for accessing the second platform according to the second platform and user identity information, including:

Generate target user identity information for accessing the second platform according to the second platform, user identity information, and identity conversion rules.

In one embodiment of the present disclosure, the smart contract includes: alliance platform identity metadata, alliance platform address, alliance public key, and alliance platform node generation rules.

In one embodiment of the present disclosure, user identity information includes:

The user's role information on the first platform, the user's attribute information on the first platform, and the user's identification on the first platform.

In an embodiment of the present disclosure, the target user identity information includes:

The user's role information on the second platform, the user's attribute information on the second platform, and the user's identification on the second platform.

In an embodiment of the present disclosure, before sending the target user identity information to the second platform, so that the second platform verifies the target user identity information, the method further includes:

Encrypt the identity information of the target user with a private key to obtain the encrypted identity information of the target user;

Sending the identity information of the target user to the second platform, so that the second platform can verify the identity information of the target user, including:

Send the encrypted target user identity information to the second platform, so that the second platform decrypts the encrypted target user identity information according to the public key and verifies the decrypted target user identity information.

According to another aspect of the present disclosure, an alliance communication system is provided. The system is applied to the first platform under the alliance. The system includes: an acquisition device, a sending device, and a plurality of alliance identity providing devices, and each alliance identity providing device corresponds to a platform ;

The obtaining device is used to obtain the user's access request. The access request includes user identity information and the access platform identifier, and determines the second platform corresponding to the access platform identifier according to the access platform identifier. The second platform includes platforms under other alliances outside the current alliance, determining the federated identity providing device corresponding to the second platform according to the second platform, and sending the user identity information to the federated identity providing device;

The alliance identity providing device is used to generate target user identity information for accessing the second platform according to the second platform and user identity information and send the target identity information to the sending device;

The sending device is used to send the target user identity information to the second platform, so that the second platform can verify the target user identity information, and when the second platform passes the verification of the target user identity information, send a verification message to A user, so that the user accesses the second platform based on the target user identity information.

According to still another aspect of the present disclosure, an alliance communication device is provided, which is applied to a first platform under the alliance, and the device includes:

The obtaining module is used to obtain the user's access request, and the access request includes user identity information and access platform identification;

A determining module, configured to determine a second platform corresponding to the access platform identifier according to the access platform identifier, where the second platform includes platforms under other alliances other than the current alliance;

The first generation module is used to generate target user identity information for accessing the second platform according to the second platform and user identity information;

The first sending module is configured to send the target user identity information to the second platform, so that the second platform verifies the target user identity information;

The second sending module is configured to send a verification pass message to the user when the second platform passes the verification of the target user's identity information, so that the user can access the second platform based on the target user's identity information.

In an embodiment of the present disclosure, the alliance communication device further includes:

The second generation module is used to generate identity conversion rules according to mapping rules and smart contracts before generating target user identity information for accessing the second platform according to the second platform and user identity information, wherein the mapping rules and smart contracts are determined by The first platform and the second platform are negotiated and constructed;

The first build module, including:

The first generating unit is configured to generate target user identity information for accessing the second platform according to the second platform, user identity information, and identity conversion rules.

In one embodiment of the present disclosure, the smart contract includes: alliance platform identity metadata, alliance platform address, alliance public key, and alliance platform node generation rules.

In one embodiment of the present disclosure, user identity information includes:

The user's role information on the first platform, the user's attribute information on the first platform, and the user's identification on the first platform.

In an embodiment of the present disclosure, the target user identity information includes:

The user's role information on the second platform, the user's attribute information on the second platform, and the user's identification on the second platform.

In an embodiment of the present disclosure, the alliance communication device further includes:

An encryption module, used to encrypt the target user identity information with a private key before sending the target user identity information to the second platform so that the second platform verifies the target user identity information to obtain the encrypted target user Identity Information;

The third sending module is configured to send the target user identity information to the second platform, so that the second platform verifies the target user identity information, including:

The fourth sending module is used to send the encrypted target user identity information to the second platform, so that the second platform can decrypt the encrypted target user identity information according to the public key and perform decryption on the decrypted target user identity information. verify.

According to another aspect of the present disclosure, there is provided an electronic device, including: a processor; and a memory for storing executable instructions of the processor; wherein, the processor is configured to execute the above-mentioned alliance communication method by executing the executable instructions .

According to yet another aspect of the present disclosure, a computer-readable storage medium is provided, on which a computer program is stored, and when the computer program is executed by a processor, the above-mentioned alliance communication method is implemented.

The consortium communication method provided by the embodiments of the present disclosure is applied to the first platform under the consortium, by obtaining the user's access request, and then generating the access request for accessing the second platform according to the user identity information and the access platform identifier contained in the access request. Target user identity information, and then send the target user identity information to the second platform, so that the second platform can verify the target user identity information. Access, thus, enables users under the first platform to access the second platform, and opens up communication channels between different alliances. The technology to enable communication between different alliances has further matured.

It is to be understood that both the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the present disclosure.

Description of drawings

The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the disclosure and together with the description serve to explain the principles of the disclosure. Apparently, the drawings in the following description are only some embodiments of the present disclosure, and those skilled in the art can obtain other drawings according to these drawings without creative efforts.

FIG. 1 shows a schematic diagram of the structure of an alliance communication system in an embodiment of the present disclosure;

FIG. 2 shows a flow chart of an alliance communication method in an embodiment of the present disclosure;

FIG. 3 shows a flow chart of another alliance communication method in an embodiment of the present disclosure;

FIG. 4 shows a flow chart of yet another alliance communication method in an embodiment of the present disclosure;

FIG. 5 shows a flowchart of another alliance communication method in an embodiment of the present disclosure;

FIG. 6 shows a schematic diagram of an alliance communication device in an embodiment of the present disclosure; and

Fig. 7 shows a structural block diagram of an electronic device in an embodiment of the present disclosure.

detailed description

Example embodiments will now be described more fully with reference to the accompanying drawings. Example embodiments may, however, be embodied in many forms and should not be construed as limited to the examples set forth herein; rather, these embodiments are provided so that this disclosure will be thorough and complete and will fully convey the concept of example embodiments to those skilled in the art. The described features, structures, or characteristics may be combined in any suitable manner in one or more embodiments.

Furthermore, the drawings are merely schematic illustrations of the present disclosure and are not necessarily drawn to scale. The same reference numerals in the drawings denote the same or similar parts, and thus repeated descriptions thereof will be omitted. Some of the block diagrams shown in the drawings are functional entities and do not necessarily correspond to physically or logically separate entities. These functional entities may be implemented in software, or in one or more hardware modules or integrated circuits, or in different network and/or processor means and/or microcontroller means.

It should be understood that the various steps described in the method implementations of the present disclosure may be executed in different orders, and/or executed in parallel. Additionally, method embodiments may include additional steps and/or omit performing illustrated steps. The scope of the present disclosure is not limited in this regard.

It should be noted that concepts such as "first" and "second" mentioned in this disclosure are only used to distinguish different devices, modules or units, and are not used to limit the sequence of functions performed by these devices, modules or units or interdependence.

It should be noted that the modifications of "one" and "multiple" mentioned in the present disclosure are illustrative and not restrictive, and those skilled in the art should understand that unless the context clearly indicates otherwise, it should be understood as "one or more" multiple".

With the further deepening of the information society, the current business volume is gradually increasing. In order to process a large number of businesses, multi-platform collaborative services emerged as the times require.

In order to realize multi-platform collaborative services, the existing technology proposes a joint identity authentication scheme, which is an optional multi-platform collaborative identity authentication scheme, and administrators manually configure identity providers and identity providers in multiple platforms. The trusted identity provider list, the identity provider generates a security assertion on the user's identity, and the platform trusts the security assertion generated by the identity provider in the trusted identity provider list, so that the user only needs to use one account to log in to multiple accounts in the alliance. effect of the platform. However, this solution is more suitable for single-confederation scenarios. In multi-confederation coexistence scenarios, there are disadvantages such as complex identity configuration and high risk of single point of failure.

In order to solve the above problems, the embodiments of the present disclosure provide an alliance communication method, system, device, equipment and storage medium.

Fig. 1 shows a structural diagram of an alliance communication system in an embodiment of the present disclosure.

As shown in Figure 1, the alliance communication system is applied to the first platform under the alliance, and the alliance communication system may include:

The obtaining means 102, the sending means 104, and a plurality of federated identity providing means 106, each federated identity providing means 106 corresponds to a platform;

The obtaining means 102 is used to obtain the user's access request. The access request includes the user identity information and the access platform identification, and determines the second platform corresponding to the access platform identification according to the access platform identification. The second platform includes platforms under other alliances other than the current alliance. , determining the federated identity providing device corresponding to the second platform according to the second platform, and sending the user identity information to the federated identity providing device 106;

Alliance identity providing means 106, configured to generate target user identity information for accessing the second platform according to the second platform and user identity information and send the target identity information to the sending means 104;

The sending device 104 is configured to send the target user identity information to the second platform, so that the second platform verifies the target user identity information, and sends a verification pass message when the second platform passes the verification of the target user identity information to the user, so that the user can access the second platform based on the target user identity information.

It should be noted that among the plurality of federated identity providing devices 106, each federated identity providing device 106 may correspond to a platform.

It should be noted that the second platform and the first platform may be platforms under the same alliance, or may be platforms under different alliances.

It should be noted that the first platform, the obtaining means 102, the sending means 104 and the plurality of alliance identity providing means 106 can all be set on a server or a terminal device.

Terminal devices may be various electronic devices, including but not limited to smart phones, tablet computers, laptop computers, desktop computers, wearable devices, augmented reality devices, virtual reality devices, and the like.

Optionally, clients of application programs installed in different terminal devices are the same, or clients of the same type of application programs based on different operating systems. Based on different terminal platforms, the specific form of the client of the application program may also be different, for example, the client of the application program may be a mobile phone client, a PC client, and the like.

The server may be a server that provides various services, such as a background management server that provides support for devices operated by users using terminal equipment. The background management server can analyze and process the received data such as requests, and feed back the processing results to the terminal device.

Optionally, the server can be an independent physical server, or a server cluster or a distributed system composed of multiple physical servers, and can also provide cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, Cloud servers for basic cloud computing services such as cloud communications, middleware services, domain name services, security services, CDN (Content Delivery Network, content distribution network), and big data and artificial intelligence platforms. The terminal may be a smart phone, a tablet computer, a laptop computer, a desktop computer, a smart speaker, a smart watch, etc., but is not limited thereto. The terminal and the server may be connected directly or indirectly through wired or wireless communication, which is not limited in this application.

Optionally, the aforementioned wireless network or wired network uses standard communication technologies and/or protocols. The network is usually the Internet, but can be any network, including but not limited to Local Area Network (LAN), Metropolitan Area Network (MAN), Wide Area Network (WAN), mobile, wired or wireless network, private network, or any combination of virtual private networks). In some embodiments, data exchanged over a network is represented using technologies and/or formats including Hyper Text Mark-up Language (HTML), Extensible Markup Language (XML), and the like. In addition, conventional methods such as Secure Socket Layer (Secure Socket Layer, SSL), Transport Layer Security (Transport Layer Security, TLS), Virtual Private Network (Virtual Private Network, VPN), Internet Protocol Security (Internet Protocol Security, IPsec) can also be used. Encryption technology to encrypt all or some links. In some other embodiments, customized and/or dedicated data communication technologies may also be used to replace or supplement the above data communication technologies.

In the alliance communication system provided by the embodiment of the present disclosure, the access request of the user is obtained through the acquisition device, and then the target for accessing the second platform is generated by the alliance identity providing device according to the user identity information and the access platform identifier contained in the access request. User identity information, and then the sending device sends the target user identity information to the second platform, so that the second platform can verify the target user identity information. Platform access, thereby enabling users under the first platform to access the second platform, opening up communication channels between different alliances. The technology to enable communication between different alliances has further matured.

Based on the same inventive concept, an embodiment of the present disclosure also provides an alliance communication method. This method is applied to the first platform under the alliance.

Fig. 2 shows a flow chart of an alliance communication method in an embodiment of the present disclosure.

As shown in Figure 2, the method may include:

S202. Obtain an access request of the user, where the access request includes user identity information and an access platform identifier.

It should be noted that the user identity information may include the user's role information on the first platform, the user's attribute information on the first platform, and the user's identification on the first platform.

The access platform identifier may include the name, role, address and parameters of the platform to be accessed by the user, and the access platform identifier is an identifier that can distinguish the current platform from other platforms.

It can be understood that the platform to be accessed may be a platform under another federation, and in this case, the identifier of the accessed platform may include an identifier of the federation corresponding to the platform to be accessed.

S204. Determine a second platform corresponding to the access platform identifier according to the access platform identifier, where the second platform includes platforms under other alliances other than the current alliance.

It should be noted that the first platform may pre-store multiple correspondences between other platforms and identifiers between other platforms.

Then, the corresponding platform is determined through the above correspondence and the platform identifier.

S206. Generate target user identity information for accessing the second platform according to the second platform and the user identity information.

It should be noted that the target user identity information may be generated according to the second platform access rules and user identity information.

S208. Send the target user identity information to the second platform, so that the second platform verifies the target user identity information.

It should be noted that the verification of the target user identity information by the second platform may include that the second platform determines the user identity information according to the target user identity information, and then ranks the above-mentioned user identity information according to the pre-stored multiple user identity information in the first platform. The information is verified.

S210. When the second platform passes the verification of the target user's identity information, send a verification pass message to the user, so that the user accesses the second platform based on the target user's identity information.

It should be noted that the user identity information can only be used as a credential for accessing the first platform, while the target user identity information can be used as a credential for accessing the second platform.

The consortium communication method provided by the embodiments of the present disclosure is applied to the first platform under the consortium, by obtaining the user's access request, and then generating the access request for accessing the second platform according to the user identity information and the access platform identifier contained in the access request. Target user identity information, and then send the target user identity information to the second platform, so that the second platform can verify the target user identity information. Access, thus, enables users under the first platform to access the second platform, and opens up communication channels between different alliances. The technology to enable communication between different alliances has further matured.

Based on the same inventive concept, the embodiment of the present disclosure provides another alliance communication method.

Fig. 3 shows a flow chart of another alliance communication method in an embodiment of the present disclosure.

As shown in FIG. 3 , the difference between the alliance communication method in the embodiment of the present disclosure and the alliance communication method in the above embodiments is that, before S206, the alliance communication method in the embodiment of the disclosure may further include:

S302. Generate an identity conversion rule according to the mapping rule and the smart contract, wherein the mapping rule and the smart contract are negotiated and constructed by the first platform and the second platform.

It should be noted that the first platform and the second platform can negotiate the smart contract in advance, and store the smart contract respectively after the negotiation of the smart contract is completed.

Mapping rules can include identity information between different platforms.

It should be noted that the mapping rules may include mapping rules configured by users.

It should be noted that the smart contract includes: alliance platform identity metadata, alliance platform address, alliance public key, and alliance platform node generation rules.

Wherein, the alliance platform identity metadata may include platform roles, platform attributes, and platform identification data of multiple platforms corresponding to each alliance among multiple alliances.

It should be noted that multiple identity conversion rules can be stored in the same platform, and each identity conversion rule can correspond to any platform except the current platform.

Generate target user identity information for accessing the second platform according to the second platform and user identity information, including:

Generate target user identity information for accessing the second platform according to the second platform, user identity information, and identity conversion rules.

It should be noted that the target user identity information includes:

The user's role information on the second platform, the user's attribute information on the second platform, and the user's identification on the second platform.

Based on the same inventive concept, the embodiment of the present disclosure provides another alliance communication method.

Fig. 4 shows a flowchart of another federated communication method in an embodiment of the present disclosure.

As shown in FIG. 4 , the difference between the alliance communication method in the embodiment of the present disclosure and the alliance communication method in the foregoing embodiments is that, before S208, the alliance communication method in the embodiment of the disclosure may further include:

S402. Encrypt the identity information of the target user with a private key to obtain encrypted identity information of the target user.

It should be noted that the first platform under the alliance can encrypt the identity information of the target user according to the pre-stored private key or time stamp.

Exemplarily, the encrypted target user identity information may be sent to the second platform through a trusted channel.

Exemplarily, the second platform may decrypt the encrypted user identity information according to the public key to obtain the user identity information, and then verify the user identity information.

In the embodiment of the present disclosure, the first platform encrypts the user identity information, and then sends the encrypted user identity information to the second platform. Since the user identity information is encrypted and then sent to the second platform, it can be In the process of user identity information transmission, the user identity information is prevented from being stolen, and the security of information transmission is improved.

As a specific example, in this disclosure, federated identity providers can also be set on the first platform and the second platform respectively.

On the basis of setting federated identity providers, embodiments of the present disclosure may include:

S502. The first platform receives an access request from a user, where the access request includes a platform identifier.

S504. The first platform determines the second platform accessed by the user according to the platform identifier;

S506. The first platform sends the user's access request to the first federated identity provider corresponding to the second platform.

It should be noted that multiple first federated identity providers may be set on the first platform, and each first federated identity provider corresponds to a platform.

S508. After receiving the user's access request, the first federated identity provider generates identity information for accessing the second platform according to the user's access request.

S510, the first alliance identity provider sends the generated identity information to the first platform;

S512. The first platform sends the generated identity information to the second platform.

S514. The second platform sends the generated identity information to the second federated identity provider set on the second platform;

S516. After receiving the identity information, the second alliance identity provider verifies the identity information to obtain a verification result.

S518. The second federated identity provider sends the verification result to the first platform.

It should be noted that before the first platform receives the user's access request, the alliance identity provider can be generated in advance according to the smart contract.

Based on the same inventive concept, embodiments of the present disclosure also provide an alliance communication device, such as the following embodiments. Since the problem-solving principle of this device embodiment is similar to that of the above-mentioned method embodiment, the implementation of this device embodiment can refer to the implementation of the above-mentioned method embodiment, and repeated descriptions will not be repeated.

Fig. 6 shows a schematic diagram of an apparatus for providing a federated identity in an embodiment of the present disclosure. As shown in Fig. 6, the apparatus 600 includes:

An acquisition module 602, configured to acquire a user's access request, where the access request includes user identity information and an access platform identifier;

A determining module 604, configured to determine a second platform corresponding to the access platform identifier according to the access platform identifier, where the second platform includes platforms under other alliances other than the current alliance;

The first generating module 606 is configured to generate target user identity information for accessing the second platform according to the second platform and the user identity information;

The first sending module 608 is configured to send the target user identity information to the second platform, so that the second platform verifies the target user identity information;

The second sending module 610 is configured to send a verification pass message to the user when the second platform passes the verification of the target user's identity information, so that the user can access the second platform based on the target user's identity information.

The federated communication device provided by the embodiments of the present disclosure is applied to the first platform under the federation. By obtaining the user's access request, and then generating the access request to the second platform according to the user identity information and the access platform identifier included in the access request Target user identity information, and then send the target user identity information to the second platform, so that the second platform can verify the target user identity information. Access, thus, enables users under the first platform to access the second platform, and opens up communication channels between different alliances. The technology to enable communication between different alliances has further matured.

In an embodiment of the present disclosure, the alliance communication device further includes:

The second generation module 612 is used to generate an identity conversion rule according to the mapping rule and the smart contract before generating the target user identity information for accessing the second platform according to the second platform and the user identity information, wherein the mapping rule and the smart contract are It is negotiated and constructed by the first platform and the second platform;

The first generation module 606 includes:

The first generating unit is configured to generate target user identity information for accessing the second platform according to the second platform, user identity information, and identity conversion rules.

In one embodiment of the present disclosure, the smart contract includes: alliance platform identity metadata, alliance platform address, alliance public key, and alliance platform node generation rules.

In one embodiment of the present disclosure, user identity information includes:

The user's role information on the first platform, the user's attribute information on the first platform, and the user's identification on the first platform.

In an embodiment of the present disclosure, the target user identity information includes:

The user's role information on the second platform, the user's attribute information on the second platform, and the user's identification on the second platform.

In an embodiment of the present disclosure, the alliance communication device further includes:

The encryption module 614 is used to encrypt the target user identity information with a private key before sending the target user identity information to the second platform so that the second platform verifies the target user identity information to obtain the encrypted target user identity information. user identity information;

The third sending module 616 is configured to send the target user identity information to the second platform, so that the second platform verifies the target user identity information, including:

The fourth sending module 618 is configured to send the encrypted target user identity information to the second platform, so that the second platform can decrypt the encrypted target user identity information according to the public key and decrypt the decrypted target user identity information authenticating.

Those skilled in the art can understand that various aspects of the present disclosure can be implemented as a system, method or program product. Therefore, various aspects of the present disclosure can be embodied in the following forms, namely: a complete hardware implementation, a complete software implementation (including firmware, microcode, etc.), or a combination of hardware and software, which can be collectively referred to herein as "circuit", "module" or "system".

An electronic device 700 according to this embodiment of the present disclosure is described below with reference to FIG. 7 . The electronic device 700 shown in FIG. 7 is only an example, and should not limit the functions and scope of use of the embodiments of the present disclosure.

As shown in FIG. 7, electronic device 700 takes the form of a general-purpose computing device. Components of the electronic device 700 may include but not limited to: at least one processing unit 710 , at least one storage unit 720 , and a bus 730 connecting different system components (including the storage unit 720 and the processing unit 710 ).

Wherein, the storage unit stores program codes, and the program codes can be executed by the processing unit 710, so that the processing unit 710 executes the steps according to various exemplary embodiments of the present disclosure described in the “Exemplary Methods” section of this specification. For example, the processing unit 710 may perform the following steps in the foregoing method embodiments:

Obtain the user's access request, which includes user identity information and access platform identification;

Determine the second platform corresponding to the access platform identifier according to the access platform identifier, where the second platform includes platforms under other alliances other than the current alliance;

generating target user identity information for accessing the second platform according to the second platform and the user identity information;

Sending the target user identity information to the second platform, so that the second platform verifies the target user identity information;

When the second platform passes the verification of the target user's identity information, a verification pass message is sent to the user, so that the user can access the second platform based on the target user's identity information.

The storage unit 720 may include a readable medium in the form of a volatile storage unit, such as a random access storage unit (RAM) 7201 and/or a cache storage unit 7202 , and may further include a read-only storage unit (ROM) 7203 .

The storage unit 720 may also include a program/utility 7204 having a set (at least one) of program modules 7205, such program modules 7205 including but not limited to: an operating system, one or more application programs, other program modules, and program data, Implementations of networked environments may be included in each or some combination of these examples.

Bus 730 may represent one or more of several types of bus structures, including a memory cell bus or memory cell controller, a peripheral bus, an accelerated graphics port, a processing unit, or a local area using any of a variety of bus structures. bus.

The electronic device 700 can also communicate with one or more external devices 740 (such as keyboards, pointing devices, Bluetooth devices, etc.), and can also communicate with one or more devices that enable the user to interact with the electronic device 700, and/or communicate with Any device (eg, router, modem, etc.) that enables the electronic device 700 to communicate with one or more other computing devices. Such communication may occur through input/output (I/O) interface 750 . Moreover, the electronic device 700 can also communicate with one or more networks (such as a local area network (LAN), a wide area network (WAN) and/or a public network such as the Internet) through the network adapter 760 . As shown, the network adapter 760 communicates with other modules of the electronic device 700 through the bus 730 . It should be appreciated that although not shown, other hardware and/or software modules may be used in conjunction with electronic device 700, including but not limited to: microcode, device drivers, redundant processing units, external disk drive arrays, RAID systems, tape drives And data backup storage system, etc.

Through the description of the above implementations, those skilled in the art can easily understand that the example implementations described here can be implemented by software, or by combining software with necessary hardware. Therefore, the technical solutions according to the embodiments of the present disclosure can be embodied in the form of software products, and the software products can be stored in a non-volatile storage medium (which can be CD-ROM, U disk, mobile hard disk, etc.) or on the network , including several instructions to make a computing device (which may be a personal computer, a server, a terminal device, or a network device, etc.) execute the method according to the embodiments of the present disclosure.

In an exemplary embodiment of the present disclosure, a computer-readable storage medium is also provided, and the computer-readable storage medium may be a readable signal medium or a readable storage medium. A program product capable of realizing the above-mentioned methods of the present disclosure is stored thereon. In some possible implementations, various aspects of the present disclosure can also be implemented in the form of a program product, which includes program code. When the program product runs on the terminal device, the program code is used to make the terminal device execute the above-mentioned Steps according to various exemplary embodiments of the present disclosure described in the "Exemplary Methods" section.

More specific examples of computer-readable storage media in this disclosure may include, but are not limited to: electrical connections with one or more wires, portable computer disks, hard disks, random access memory (RAM), read only memory (ROM), Erasable programmable read-only memory (EPROM or flash memory), optical fiber, portable compact disk read-only memory (CD-ROM), optical storage device, magnetic storage device, or any suitable combination of the above.

In the present disclosure, a computer-readable storage medium may include a data signal carrying readable program code in baseband or as part of a carrier wave traveling as a data signal. Such propagated data signals may take many forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination of the foregoing. A readable signal medium may also be any readable medium other than a readable storage medium that can transmit, propagate, or transport a program for use by or in conjunction with an instruction execution system, apparatus, or device.

Alternatively, program code contained on a computer-readable storage medium may be transmitted using any appropriate medium, including but not limited to wireless, cable, optical cable, RF, etc., or any suitable combination of the above.

During specific implementation, the program code for performing the operations of the present disclosure can be written in any combination of one or more programming languages, and the programming language includes an object-oriented programming language—such as Java, C++, etc., and also includes conventional A procedural programming language—such as "C" or a similar programming language. The program code may execute entirely on the user's computing device, partly on the user's device, as a stand-alone software package, partly on the user's computing device and partly on a remote computing device, or entirely on the remote computing device or server to execute. In cases involving a remote computing device, the remote computing device may be connected to the user computing device through any kind of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computing device (e.g., using an Internet service provider). business to connect via the Internet).

It should be noted that although several modules or units of the device for action execution are mentioned in the above detailed description, this division is not mandatory. Actually, according to the embodiment of the present disclosure, the features and functions of two or more modules or units described above may be embodied in one module or unit. Conversely, the features and functions of one module or unit described above can be further divided to be embodied by a plurality of modules or units.

In addition, while the steps of the methods of the present disclosure are depicted in the drawings in a particular order, this does not require or imply that the steps must be performed in that particular order, or that all illustrated steps must be performed to achieve the desired result. Additionally or alternatively, certain steps may be omitted, multiple steps may be combined into one step for execution, and/or one step may be decomposed into multiple steps for execution, etc.

Through the description of the above embodiments, those skilled in the art can easily understand that the example embodiments described here can be implemented by software, or by combining software with necessary hardware. Therefore, the technical solutions according to the embodiments of the present disclosure can be embodied in the form of software products, and the software products can be stored in a non-volatile storage medium (which can be CD-ROM, U disk, mobile hard disk, etc.) or on the network , including several instructions to make a computing device (which may be a personal computer, a server, a mobile terminal, or a network device, etc.) execute the method according to the embodiments of the present disclosure.

Other embodiments of the present disclosure will be readily apparent to those skilled in the art from consideration of the specification and practice of the invention disclosed herein. The present disclosure is intended to cover any modification, use or adaptation of the present disclosure. These modifications, uses or adaptations follow the general principles of the present disclosure and include common knowledge or conventional technical means in the technical field not disclosed in the present disclosure. . The specification and examples are to be considered exemplary only, with the true scope and spirit of the disclosure indicated by the appended claims.

Claims (10)

1. An alliance communication method, characterized in that it is applied to the first platform under the alliance, the method comprising: Obtain the user's access request, the access request including user identity information and access platform identification; Determine a second platform corresponding to the access platform identifier according to the access platform identifier, where the second platform includes platforms under other alliances other than the current alliance; generating target user identity information for accessing the second platform according to the second platform and the user identity information; sending the target user identity information to the second platform, so that the second platform verifies the target user identity information; If the second platform passes the verification of the target user identity information, a verification pass message is sent to the user, so that the user accesses the second platform based on the target user identity information. 2. The alliance communication method according to claim 1, wherein, before generating target user identity information for accessing the second platform according to the second platform and user identity information, the method further comprises: Generating identity conversion rules according to mapping rules and smart contracts, wherein the mapping rules and smart contracts are negotiated and constructed by the first platform and the second platform; Generating target user identity information for accessing the second platform according to the second platform and user identity information, including: Generating target user identity information for accessing the second platform according to the second platform, user identity information, and identity conversion rules. 3. The alliance communication method according to claim 2, wherein the smart contract includes: alliance platform identity metadata, alliance platform address, alliance public key, and alliance platform node generation rules. 4. The alliance communication method according to claim 2, wherein the user identity information includes: The user's role information on the first platform, the user's attribute information on the first platform, and the user's identification on the first platform. 5. The alliance communication method according to claim 2, wherein the target user identity information comprises: The user's role information on the second platform, the user's attribute information on the second platform, and the user's identification on the second platform. 6. The alliance communication method according to claim 1, characterized in that before sending the target user identity information to the second platform so that the second platform verifies the target user identity information , the method also includes: Encrypting the target user identity information with a private key to obtain encrypted target user identity information; Sending the target user identity information to the second platform, so that the second platform verifies the target user identity information, includes: sending the encrypted target user identity information to the second platform, so that the second platform decrypts the encrypted target user identity information according to the public key and verifies the decrypted target user identity information . 7. An alliance communication system, characterized in that the system is applied to the first platform under the alliance, and the system includes: an acquisition device, a sending device, and a plurality of alliance identity providing devices, each alliance identity providing device corresponds to a platform; The acquiring device is configured to acquire a user's access request, where the access request includes user identity information and an access platform identifier, and determines a second platform corresponding to the access platform identifier according to the access platform identifier, and the second platform includes In addition to the current alliance, platforms under other alliances determine the alliance identity providing device corresponding to the second platform according to the second platform, and send user identity information to the alliance identity providing device; The alliance identity providing means is used to generate target user identity information for accessing the second platform according to the second platform and user identity information and send the target identity information to the sending means; The sending device is configured to send the target user identity information to the second platform, so that the second platform can verify the target user identity information, and the target user can be verified on the second platform. If the identity information is verified successfully, a verification pass message is sent to the user, so that the user can access the second platform based on the identity information of the target user. 8. An alliance communication device, characterized in that it is applied to the first platform under the alliance, and the device includes: An acquisition module, configured to acquire a user's access request, where the access request includes user identity information and an access platform identifier; A determining module, configured to determine a second platform corresponding to the access platform identifier according to the access platform identifier, where the second platform includes platforms under other alliances other than the current alliance; A first generating module, configured to generate target user identity information for accessing the second platform according to the second platform and user identity information; A first sending module, configured to send the target user identity information to the second platform, so that the second platform can verify the target user identity information; The second sending module is configured to send a verification message to the user when the second platform passes the verification of the target user identity information, so that the user can send the verification message to the second platform based on the target user identity information to visit. 9. An electronic device, characterized in that it comprises: processor; and a memory for storing executable instructions of the processor; Wherein, the processor is configured to execute the alliance communication method according to any one of claims 1-6 by executing the executable instructions. 10. A computer-readable storage medium, on which a computer program is stored, wherein, when the computer program is executed by a processor, the resource communication method according to any one of claims 1-6 is implemented.

Images