Patent ID: 9178871
Filing Date: 2015-11-03
Classification: H04L

Abstract:
1. An authentication and authorization method, wherein the method is used in an authentication and authorization system, comprising: receiving, by an application programming interface (API) of a client, an authentication request transmitted from a first device; transmitting, by an authentication and authorization client subsystem, the authentication request to an authentication and authorization server subsystem; authenticating, by the authentication and authorization server subsystem, the authentication request, generating authentication information and storing the authentication information in a local temporary management subsystem; generating, by the authentication and authorization client subsystem, an authorization request used to request a second device for authorization according to the authentication information; authenticating, by the authentication and authorization server subsystem, the authorization request, generating an authorization information and transmitting the authorization information to the first device through the authentication and authorization client subsystem so that the first device communicates with the second device directly according to the authorization information; determining, by the authentication and authorization client subsystem, whether the local temporary management subsystem has the authentication information when the first device transmits the authentication request to the client; transmitting, by the authentication and authorization client subsystem, the authentication information to the first device when determining that the local temporary storage management subsystem stores the authentication information and the authentication information is available; and transmitting, by the authentication and authorization client subsystem, the authentication request to the authentication and authorization server subsystem to obtain an updated authentication information when determining that the local temporary storage management subsystem does not store the authentication information or the authentication information is unavailable.