Patent ID: 10038685

Abstract:
Methods and apparatuses for service request authentication are disclosed to prevent a terminal or a first server that does not sign an agreement with a gateway from bypassing the gateway to directly access a second server. The method includes receiving a service request and determining a session in which the service request is located; determining whether a token corresponding to the session exists, the token corresponding to a session in which a service request from a gateway is located; if the token exists, determining that the authentication of the service request passes and proceeds to process a corresponding service; if the token does not exist, determining that the authentication of the service request fails and the processing of the corresponding service is refused. Thus, since only a session corresponding to service requests forwarded by the gateway can have a token, the authentication of each service request that belongs to such session will pass. The service request that does not belong to the session may be a service request which is directly transmitted by a merchant bypassing the gateway through the terminal or the first server which did not sign an agreement with a service interface of the second server, and the authentication fails.