Movatterモバイル変換


[0]ホーム

URL:


CN108471409A - The application programming interfaces authentication configuration method and system of voice dialogue platform - Google Patents

The application programming interfaces authentication configuration method and system of voice dialogue platform
Download PDF

Info

Publication number
CN108471409A
CN108471409ACN201810212219.6ACN201810212219ACN108471409ACN 108471409 ACN108471409 ACN 108471409ACN 201810212219 ACN201810212219 ACN 201810212219ACN 108471409 ACN108471409 ACN 108471409A
Authority
CN
China
Prior art keywords
authentication
key
voice dialogue
dialogue platform
developer
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN201810212219.6A
Other languages
Chinese (zh)
Other versions
CN108471409B (en
Inventor
肖通
李波
欧天
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Sipic Technology Co Ltd
Original Assignee
AI Speech Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by AI Speech LtdfiledCriticalAI Speech Ltd
Priority to CN201810212219.6ApriorityCriticalpatent/CN108471409B/en
Publication of CN108471409ApublicationCriticalpatent/CN108471409A/en
Application grantedgrantedCritical
Publication of CN108471409BpublicationCriticalpatent/CN108471409B/en
Activelegal-statusCriticalCurrent
Anticipated expirationlegal-statusCritical

Links

Classifications

Landscapes

Abstract

Translated fromChinese

本发明实施例提供一种语音对话平台的应用程序接口鉴权配置方法。该方法包括:语音对话平台响应于开发者上传的应用程序接口授权申请,向开发者发送专属密钥,专属密钥与开发者的ID和应用程序接口的类型有关;语音对话平台提供对应于专属密钥的鉴权配置对话框,以为开发者提供鉴权限制的选项卡,其中,鉴权限制包括:域名网址、IP白名单、API key;语音对话平台响应于开发者基于鉴权限制的选项卡输入的至少一条鉴权限制信息,完成专属密钥的鉴权配置和授权。本发明实施例还提供了一种语音对话平台的应用程序接口鉴权配置系统。本发明实施例统一了应用程序接口的鉴权配置,简化了应用程序接口的访问授权。

An embodiment of the present invention provides an authentication configuration method for an API of a voice dialogue platform. The method includes: the voice dialogue platform sends an exclusive key to the developer in response to the application program interface authorization application uploaded by the developer, and the exclusive key is related to the developer's ID and the type of the application program interface; The key authentication configuration dialog box provides developers with a tab for authentication restrictions, where the authentication restrictions include: domain name URL, IP whitelist, API key; the voice dialogue platform responds to the developer's options based on authentication restrictions At least one piece of authentication restriction information input by the card to complete the authentication configuration and authorization of the exclusive key. The embodiment of the present invention also provides an authentication configuration system for an application programming interface of a speech dialogue platform. The embodiment of the present invention unifies the authentication configuration of the application program interface, and simplifies the access authorization of the application program interface.

Description

Translated fromChinese
语音对话平台的应用程序接口鉴权配置方法及系统Application programming interface authentication configuration method and system of voice dialogue platform

技术领域technical field

本发明涉及鉴权技术领域,尤其涉及一种语音对话平台的应用程序接口鉴权配置方法及系统。The invention relates to the technical field of authentication, in particular to an authentication configuration method and system for an application program interface of a voice dialogue platform.

背景技术Background technique

在互联网方面,如果没有鉴权功能,用户可以随意接入互联网平台中调用任意接口,使得平台的资源被大量占用,同时,如果用户调用的接口是具有收费性质的,平台的利益也无法得到保障。从而,通过鉴权功能对用户进行区分。鉴权(authentication)是指验证用户是否有访问系统的权利。一般的鉴权是通过密码来验证的。In terms of the Internet, if there is no authentication function, users can freely access the Internet platform and call any interface, which will occupy a large amount of platform resources. At the same time, if the interface called by the user is charged, the interests of the platform cannot be guaranteed. . Thus, users are differentiated through the authentication function. Authentication refers to verifying whether a user has the right to access the system. General authentication is verified by password.

鉴权验证方式的前提是,每个获得密码的用户都已经被授权。在建立用户时,就为此用户分配一个密码,用户的密码可以由管理员来指定,也可以由用户自行申请。例如用户希望可以接入互联网平台中调用接口,那么用户向平台申请调用后,平台就会为用户分配一个密码,平台通过此密码来识别用户的身份,从而进行鉴权。The premise of the authentication verification method is that each user who obtains a password has been authorized. When a user is created, a password is assigned to the user. The user's password can be specified by the administrator or applied by the user. For example, if a user wants to access the calling interface of the Internet platform, after the user applies to the platform for calling, the platform will assign a password to the user, and the platform will use this password to identify the user's identity and perform authentication.

但是这种方式的弱点十分明显,一旦密码被偷或是用户遗失密码,情况就会十分麻烦。需要管理员对用户密码进行重新修改,而修改密码之前还要人工验证用户的合法身份。But the weakness of this method is very obvious. Once the password is stolen or the user loses the password, the situation will be very troublesome. The administrator needs to re-modify the user's password, and manually verify the user's legal identity before changing the password.

为了克服单重密码不安全的缺陷,现有的一些平台,在使用密码鉴权的基础上,还会按照应用程序接口提供方的要求进行进一步鉴权。In order to overcome the insecure defect of a single password, some existing platforms, on the basis of using password authentication, will also perform further authentication according to the requirements of the application program interface provider.

在实现本发明过程中,发明人发现相关技术中至少存在如下问题:In the process of realizing the present invention, the inventors have found that there are at least the following problems in the related art:

由于各应用程序接口提供方要求的授权形式不统一,针对于不同的授权形式,平台都要针对不同的授权形式去鉴权,调用应用程序接口的用户信息。使得用户在调用不同的应用程序接口需要提供的验证信息十分混乱,平台在鉴权的过程中也要处理更多类型的数据,使得鉴权过程十分复杂。由于应用程序接口的授权形式不统一,使得有的授权方法在鉴权时容易被破解,具有安全隐患。Since the authorization forms required by each application program interface provider are not uniform, the platform must perform authentication for different authorization forms and call the user information of the application program interface. This makes the verification information that users need to provide when calling different APIs very confusing, and the platform also needs to process more types of data during the authentication process, making the authentication process very complicated. Since the authorization form of the application program interface is not uniform, some authorization methods are easy to be cracked during authentication, which poses a security risk.

发明内容Contents of the invention

为了至少解决现有技术中由于授权形式的不统一,在鉴权时产生的验证信息混乱、过程复杂、具有安全隐患问题。In order to at least solve the problems in the prior art that the verification information generated during the authentication is confused, the process is complicated, and there are potential safety hazards due to the inconsistency of the authorization form.

第一方面,本发明实施例提供一种语音对话平台的应用程序接口鉴权配置方法,包括:In a first aspect, an embodiment of the present invention provides an API authentication configuration method for a voice dialogue platform, including:

语音对话平台响应于开发者上传的应用程序接口授权申请,向所述开发者发送专属密钥,所述专属密钥与开发者的ID和应用程序接口的类型有关;The voice dialogue platform sends an exclusive key to the developer in response to the application program interface authorization application uploaded by the developer, and the exclusive key is related to the developer's ID and the type of the application program interface;

语音对话平台提供对应于所述专属密钥的鉴权配置对话框,以为所述开发者提供鉴权限制的选项卡,其中,所述鉴权限制包括:域名网址、IP白名单、API key;The voice dialogue platform provides an authentication configuration dialog box corresponding to the exclusive key to provide the developer with an authentication restriction tab, wherein the authentication restriction includes: domain name URL, IP whitelist, API key;

语音对话平台响应于开发者基于所述鉴权限制的选项卡输入的至少一条所述鉴权限制信息,完成所述专属密钥的鉴权配置和授权。The voice dialogue platform completes the authentication configuration and authorization of the exclusive key in response to at least one piece of authentication restriction information input by the developer based on the authentication restriction tab.

第二方面,本发明实施例提供一种语音对话平台的应用程序接口调用方法,包括:In a second aspect, an embodiment of the present invention provides a method for invoking an API of a voice dialogue platform, including:

语音对话平台响应于产品的应用程序接口的调用申请,获取所述产品的密钥;The voice dialogue platform obtains the key of the product in response to the call application of the product's API;

当语音对话平台验证所述密钥为已配发的专属密钥时,查询对应于所述专属密钥的鉴权配置,获取相应的鉴权限制信息,其中,所述鉴权限制包括:域名网址、IP白名单、APIkey;When the voice dialogue platform verifies that the key is an assigned exclusive key, query the authentication configuration corresponding to the exclusive key to obtain corresponding authentication restriction information, wherein the authentication restriction includes: domain name URL, IP whitelist, APIkey;

语音对话平台获取所述产品的域名网址信息、IP地址信息、API key中的至少一项信息,当所述至少一项信息中的其中一项信息通过所述鉴权配置的鉴权限制验证时,允许所述产品的应用程序接口的调用。The voice dialogue platform acquires at least one piece of information among the domain name URL information, IP address information, and API key of the product, and when one piece of information in the at least one piece of information passes the authentication restriction verification of the authentication configuration , allowing the invocation of the API of the product.

第三方面,本发明实施例提供一种语音对话平台的应用程序接口鉴权配置系统,包括:In a third aspect, an embodiment of the present invention provides an API authentication configuration system for a voice dialogue platform, including:

密钥配发程序模块,用于语音对话平台响应于开发者上传的应用程序接口授权申请,向所述开发者发送专属密钥,所述专属密钥与开发者的ID和应用程序接口的类型有关;The key distribution program module is used for the voice dialogue platform to send an exclusive key to the developer in response to the application program interface authorization application uploaded by the developer, and the exclusive key is related to the developer's ID and the type of the application program interface related;

鉴权配置接口程序模块,用于语音对话平台提供对应于所述专属密钥的鉴权配置对话框,以为所述开发者提供鉴权限制的选项卡,其中,所述鉴权限制包括:域名网址、IP白名单、API key;The authentication configuration interface program module is used for the voice dialogue platform to provide an authentication configuration dialog box corresponding to the exclusive key, so as to provide the developer with an authentication restriction tab, wherein the authentication restriction includes: domain name URL, IP whitelist, API key;

授权程序模块,用于语音对话平台响应于开发者基于所述鉴权限制的选项卡输入的至少一条所述鉴权限制信息,完成所述专属密钥的鉴权配置和授权。The authorization program module is used for the voice dialogue platform to complete the authentication configuration and authorization of the exclusive key in response to at least one piece of the authentication restriction information input by the developer based on the authentication restriction tab.

第四方面,本发明实施例提供一种语音对话平台的应用程序接口调用系统,包括:In a fourth aspect, an embodiment of the present invention provides an application programming interface calling system of a voice dialogue platform, including:

密钥获取程序模块,用于语音对话平台响应于产品的应用程序接口的调用申请,获取所述产品的密钥;The key acquisition program module is used for the voice dialogue platform to obtain the key of the product in response to the invocation application of the application program interface of the product;

鉴权配置获取程序模块,用于当语音对话平台验证所述密钥为已配发的专属密钥时,查询对应于所述专属密钥的鉴权配置,获取相应的鉴权限制信息,其中,所述鉴权限制包括:域名网址、IP白名单、API key;The authentication configuration acquisition program module is used to query the authentication configuration corresponding to the exclusive key when the voice dialogue platform verifies that the key is an assigned exclusive key, and obtain corresponding authentication restriction information, wherein , the authentication restrictions include: domain name URL, IP whitelist, API key;

调用程序模块,用于语音对话平台获取所述产品的域名网址信息、IP地址信息、API key中的至少一项信息,当所述至少一项信息中的其中一项信息通过所述鉴权配置的鉴权限制验证时,允许所述产品的应用程序接口的调用。The calling program module is used for the voice dialogue platform to obtain at least one piece of information in the domain name URL information, IP address information, and API key of the product. When one piece of information in the at least one piece of information passes the authentication configuration When the authentication restriction is verified, the call of the application program interface of the product is allowed.

第五方面,提供一种电子设备,其包括:至少一个处理器,以及与所述至少一个处理器通信连接的存储器,其中,所述存储器存储有可被所述至少一个处理器执行的指令,所述指令被所述至少一个处理器执行,以使所述至少一个处理器能够执行本发明任一实施例的方法的步骤。In a fifth aspect, an electronic device is provided, which includes: at least one processor, and a memory connected to the at least one processor in communication, wherein the memory stores instructions executable by the at least one processor, The instructions are executed by the at least one processor, so that the at least one processor can execute the steps of the method in any embodiment of the present invention.

第六方面,本发明实施例提供一种存储介质,其上存储有计算机程序,其特征在于,该程序被处理器执行时实现本发明任一实施例的方法的步骤。In a sixth aspect, an embodiment of the present invention provides a storage medium on which a computer program is stored, wherein when the program is executed by a processor, the steps of the method in any embodiment of the present invention are implemented.

本发明实施例实现了语音对话平台的应用程序接口鉴权配置,通过语音对话平台对不同的应用程序接口提供了可选的不同形式的鉴权配置方式,以用于授权验证,将鉴权配置交给开发者统一处理,使得开发者在开发产品中明确需要哪种验证信息,简化鉴权配置步骤,从而提高了开发者的开发效率,同时,语音对话平台处理有限的鉴权类型,加快了鉴权的效率,而语音开发平台所准备的鉴权限制的类型有限,避免了因鉴权限制不统一而带来的安全隐患。The embodiment of the present invention realizes the authentication configuration of the application program interface of the voice dialogue platform, and provides optional authentication configuration modes in different forms for different application program interfaces through the voice dialogue platform, so as to be used for authorization verification, and the authentication configuration It is handed over to the developer for unified processing, so that the developer can specify which authentication information is needed in the development of the product, and the authentication configuration steps are simplified, thereby improving the development efficiency of the developer. At the same time, the voice dialogue platform handles limited authentication types, which speeds up The efficiency of authentication, while the types of authentication restrictions prepared by the voice development platform are limited, which avoids the security risks caused by inconsistent authentication restrictions.

附图说明Description of drawings

为了更清楚地说明本发明实施例或现有技术中的技术方案,下面将对实施例或现有技术描述中所需要使用的附图作一简单地介绍,显而易见地,下面描述中的附图是本发明的一些实施例,对于本领域普通技术人员来讲,在不付出创造性劳动的前提下,还可以根据这些附图获得其他的附图。In order to more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the following will briefly introduce the drawings that need to be used in the description of the embodiments or the prior art. Obviously, the accompanying drawings in the following description These are some embodiments of the present invention. Those skilled in the art can also obtain other drawings based on these drawings without creative work.

图1是本发明一实施例提供的一种语音对话平台的应用程序接口鉴权配置方法的流程图;Fig. 1 is the flow chart of the API authentication configuration method of a kind of voice dialogue platform provided by an embodiment of the present invention;

图2是本发明一具体实施例提供的一种语音对话平台的应用程序接口鉴权配置方法的示意图;Fig. 2 is a schematic diagram of an API authentication configuration method of a voice dialogue platform provided by a specific embodiment of the present invention;

图3是本发明另一具体实施例提供的一种语音对话平台的应用程序接口鉴权配置方法的示意图;Fig. 3 is a schematic diagram of an API authentication configuration method of a voice dialogue platform provided by another specific embodiment of the present invention;

图4是本发明又一具体实施例提供的一种语音对话平台的应用程序接口鉴权配置方法的示意图;Fig. 4 is a schematic diagram of an API authentication configuration method of a voice dialogue platform provided by another specific embodiment of the present invention;

图5是本发明一实施例提供的一种语音对话平台的应用程序接口调用方法的流程图;Fig. 5 is a flow chart of an application programming interface calling method of a voice dialogue platform provided by an embodiment of the present invention;

图6是本发明一具体实施例提供的一种语音对话平台的应用程序接口调用方法的示意图;Fig. 6 is a schematic diagram of an application programming interface calling method of a voice dialogue platform provided by a specific embodiment of the present invention;

图7是本发明一实施例提供的一种语音对话平台的应用程序接口鉴权配置系统的结构示意图;Fig. 7 is a schematic structural diagram of an application programming interface authentication configuration system of a voice dialogue platform provided by an embodiment of the present invention;

图8是本发明一实施例提供的一种语音对话平台的应用程序接口调用系统的结构示意图。Fig. 8 is a schematic structural diagram of an application program interface calling system of a speech dialogue platform provided by an embodiment of the present invention.

具体实施方式Detailed ways

为使本发明实施例的目的、技术方案和优点更加清楚,下面将结合本发明实施例中的附图,对本发明实施例中的技术方案进行清楚、完整地描述,显然,所描述的实施例是本发明一部分实施例,而不是全部的实施例。基于本发明中的实施例,本领域普通技术人员在没有作出创造性劳动前提下所获得的所有其他实施例,都属于本发明保护的范围。In order to make the purpose, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments It is a part of embodiments of the present invention, but not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without creative efforts fall within the protection scope of the present invention.

如图1所示为本发明一实施例提供的一种语音对话平台的应用程序接口鉴权配置方法的流程图,包括如下步骤:As shown in Figure 1, it is a flowchart of an API authentication configuration method of a voice dialogue platform provided by an embodiment of the present invention, including the following steps:

S11:语音对话平台响应于开发者上传的应用程序接口授权申请,向所述开发者发送专属密钥,所述专属密钥与开发者的ID和应用程序接口的类型有关;S11: The voice dialogue platform sends an exclusive key to the developer in response to the API authorization application uploaded by the developer, and the exclusive key is related to the developer's ID and the type of the API;

S12:语音对话平台提供对应于所述专属密钥的鉴权配置对话框,以为所述开发者提供鉴权限制的选项卡,其中,所述鉴权限制包括:域名网址、IP白名单、API key;S12: The voice dialogue platform provides an authentication configuration dialog box corresponding to the exclusive key to provide the developer with an authentication restriction tab, wherein the authentication restriction includes: domain name URL, IP whitelist, API key;

S13:语音对话平台响应于开发者基于所述鉴权限制的选项卡输入的至少一条所述鉴权限制信息,完成所述专属密钥的鉴权配置和授权。S13: The voice dialogue platform completes the authentication configuration and authorization of the exclusive key in response to at least one piece of authentication restriction information input by the developer based on the authentication restriction tab.

在本实施方式中,该方法用于语音对话平台的应用程序接口鉴权配置,在语音对话平台创建技能时,通常为了所述技能的实现,会在所述技能中添加控件,以及调用功能性的应用程序接口。其中,控件的功能包括技能界面的美化;应用程序接口的功能是为所述技能提供相应的功能。In this embodiment, this method is used for the authentication configuration of the application program interface of the voice dialogue platform. When creating a skill on the voice dialogue platform, usually for the realization of the skill, controls will be added to the skill, and the functionality will be called application programming interface. Wherein, the function of the control includes the beautification of the skill interface; the function of the application program interface is to provide corresponding functions for the skill.

针对于不同的功能实现,可以选择不同功能的应用程序接口。例如,交通出行方面,可以调用的应用程序接口包括:火车票查询,地址解析、汽车票查询、周边搜索、酒店快捷查询、交通先行。生活服务方面,可以调用的应用程序接口包括:水电气查询、快递预约、天气查询、菜谱大全。在影视试听、社交分享、新闻、购物、游戏、教育等方面,都会有各种应用程序接口来调用。For different function realizations, application program interfaces with different functions can be selected. For example, in terms of transportation, the APIs that can be called include: train ticket query, address resolution, bus ticket query, surrounding search, hotel quick query, and traffic advance. In terms of life services, the APIs that can be called include: water and electricity inquiries, courier appointments, weather inquiries, and recipes. Various application programming interfaces will be called in aspects such as video audition, social sharing, news, shopping, games, and education.

而语音对话平台在为开发者提供了这些应用程序接口时,为了保障这些应用程序接口可以被开发者顺畅调用,而不是被恶意调用,就会对使用应用程序接口的开发者进行鉴权。验证开发者是否有资格调用。对于有资格的开发者给予应用程序接口的调用,而没有资格的开发者可以向平台申请应用程序接口的调用权。When the voice dialogue platform provides these APIs for developers, in order to ensure that these APIs can be called smoothly by developers instead of being called maliciously, the developers who use the APIs will be authenticated. Verify that the developer is eligible to call. Qualified developers are given the right to call the application programming interface, while unqualified developers can apply to the platform for the right to call the application programming interface.

对于步骤S11,语音对话平台响应于开发者上传的应用程序接口授权申请,向开发者发送专属密钥。其中,应用程序接口分为免费开放调用类型以及收费使用类型,针对于免费开放调用类型的应用程序接口,语音对话平台会向开发者发送授权免费开放调用类型应用程序接口的专属密钥,而收费使用类型的应用程序接口,在开发者支付使用费后,语音对话平台会向开发者发送授权收费使用类型的应用程序接口的专属密钥。同时,语音对话平台可以识别出专属密钥中的出开发者的身份ID以及应用程序接口的类型。For step S11, the voice dialogue platform sends an exclusive key to the developer in response to the API authorization application uploaded by the developer. Among them, the application program interface is divided into free and open call type and fee-based use type. For the free and open call type of application program interface, the voice dialogue platform will send the developer the exclusive key authorizing the free and open call type of API, and the fee For the application programming interface of the usage type, after the developer pays the usage fee, the voice dialogue platform will send the exclusive key of the API of the usage type of authorization fee to the developer. At the same time, the voice dialogue platform can identify the developer's ID and the type of API in the exclusive key.

对于步骤S12,在步骤S11中,语音对话平台向开发者发送了专属密钥后,同时为开发者提供了所述专属密钥的鉴权配置的对话框。其中,开发者在选择语音对话平台提供的鉴权限制的选项卡,进行选择与所述产品相适应的鉴权限制。其中,鉴权限制包括域名网址、IP白名单、API key。For step S12, in step S11, after the voice dialogue platform sends the exclusive key to the developer, it also provides the developer with a dialog box for the authentication configuration of the exclusive key. Wherein, the developer selects the authentication restriction suitable for the product when selecting the tab of the authentication restriction provided by the voice dialogue platform. Among them, authentication restrictions include domain name URL, IP whitelist, API key.

对于步骤S13,当开发者选择了鉴权限制选项卡中的任一选项,语音对话平台会响应于开发者的选择,生成与开发者所选择的鉴权限制相应的信息对话框,通过接收开发者在信息对话框中输入的限制信息,进行鉴权限制。For step S13, when the developer selects any option in the authentication restriction tab, the voice dialogue platform will respond to the developer's choice and generate an information dialog box corresponding to the authentication restriction selected by the developer. The restriction information entered by the user in the information dialog box is used for authentication restriction.

当语音对话平台响应于开发者选择的域名网址选项,生成域名网址限制信息对话框,如图2所示,其中,包括所使用的协议、域名以及请求Path信息,当开发者输入相应的信息后,点击确定,语音对话平台就会将域名网址信息接收,并作为鉴权限制信息,其中,开发者可以批量设置域名网址作为鉴权限制信息。When the voice dialogue platform responds to the domain name URL option selected by the developer, it generates a domain name URL restriction information dialog box, as shown in Figure 2, which includes the protocol used, domain name, and request Path information. After the developer enters the corresponding information , click OK, and the voice chat platform will receive the domain name URL information as authentication restriction information. Among them, developers can set domain name URLs in batches as authentication restriction information.

当语音对话平台响应于开发者选择的IP白名单选项,生成IP白名单限制信息对话框,如图3所示,其中,在开发者在IP地址文本框中输入IP地址后,点击“+”后,即可将所输入的IP地址预添加,同时,生成预添加IP地址文本框,所述预添加IP地址文本框用于显示开发者输入的IP地址,同时IP地址文本框中清空,供开发者输入下一IP地址,响应于开发者点击确定按钮,将预添加IP地址文本框内的IP地址作为鉴权限制信息。When the voice dialogue platform responds to the IP whitelist option selected by the developer, an IP whitelist restriction information dialog box is generated, as shown in Figure 3, in which, after the developer enters the IP address in the IP address text box, click "+" After that, the input IP address can be pre-added, and at the same time, a pre-added IP address text box is generated. The pre-added IP address text box is used to display the IP address input by the developer, and at the same time, the IP address text box is cleared for The developer inputs the next IP address, and in response to the developer clicking the OK button, the IP address in the pre-added IP address text box is used as the authentication restriction information.

当语音对话平台响应于开发者选择的API key选项,生成API key限制信息对话框,如图4所示,其中,在开发者在API key文本框中输入指定的API key,响应于开发者点击确定按钮,将API key作为鉴权限制信息,其中,开发者可以批量设置API key作为鉴权限制信息。语音对话平台接收开发者输入的至少一条鉴权限制信息,以完成所述专属密钥的鉴权配置和授权。When the voice dialogue platform responds to the API key option selected by the developer, an API key restriction information dialog box is generated, as shown in Figure 4, where the developer enters the specified API key in the API key text box, and in response to the developer clicking The OK button uses the API key as the authentication restriction information, where the developer can set the API key as the authentication restriction information in batches. The voice dialogue platform receives at least one piece of authentication restriction information input by the developer to complete the authentication configuration and authorization of the exclusive key.

通过该实施方法可以看出,该实施方法提供了一种语音对话平台的应用程序接口鉴权配置方法,所述语音对话平台对不同的应用程序接口提供了可选的不同形式的鉴权配置方式,以用于授权验证,同时,将鉴权配置交给开发者统一处理,使得开发者在开发产品中明确需要哪种验证信息,简化鉴权配置步骤,从而提高了开发者的开发效率,同时,语音对话平台处理有限的鉴权类型,加快了鉴权的效率,而语音开发平台所准备的鉴权限制的类型有限,避免了因鉴权限制不统一而带来的安全隐患。It can be seen from the implementation method that the implementation method provides an authentication configuration method for the application program interface of the voice dialogue platform, and the voice dialogue platform provides different forms of optional authentication configuration methods for different application program interfaces , for authorization verification. At the same time, the authentication configuration is handed over to the developer for unified processing, so that the developer can specify which verification information is needed in the development of the product, simplifying the authentication configuration steps, thereby improving the development efficiency of the developer, and at the same time , the voice dialogue platform handles limited types of authentication, which speeds up the efficiency of authentication, while the types of authentication restrictions prepared by the voice development platform are limited, which avoids potential safety hazards caused by inconsistent authentication restrictions.

作为一种实施方式,所述API key与所述产品的软件操作系统相关,所述产品的软件操作系统包括:安卓、IOS、嵌入式系统。As an implementation manner, the API key is related to the software operating system of the product, and the software operating system of the product includes: Android, IOS, and embedded systems.

在本实施方式中,API key用于表述产品的运行系统,其中软件操作系统包括,安卓、IOS以及嵌入式,其中,安卓系统的API key可以通过Android Studio编辑器进行获取,根据所述Android Studio的Terminal工具,确定所述安卓产品的文件路径,从而获取相应的API key,其中所述API key包括通过使用sha256算法确定的值。IOS、嵌入式系统的APIkey也可以通过相应的软件获取,在此不再赘述。In this embodiment, the API key is used to describe the operating system of the product, wherein the software operating system includes Android, IOS and embedded, wherein the API key of the Android system can be obtained through the Android Studio editor, according to the Android Studio The Terminal tool of the Android product determines the file path of the Android product, thereby obtaining the corresponding API key, wherein the API key includes a value determined by using the sha256 algorithm. APIkeys of IOS and embedded systems can also be obtained through corresponding software, so I won’t repeat them here.

通过该实施方法可以看出,根据不同运行系统设定不同的API key,语音对话平台根据不同系统的API key,可以提供相应的应用程序接口。而API key使用sha256算法确定的值具有唯一性,且不易被破解,提高了API key的安全性。It can be seen from this implementation method that different API keys are set according to different operating systems, and the voice dialogue platform can provide corresponding application program interfaces according to the API keys of different systems. The value determined by the API key using the sha256 algorithm is unique and not easy to be cracked, which improves the security of the API key.

如图5所示为本发明一实施例提供的一种语音对话平台的应用程序接口调用方法的的流程图,包括如下步骤:As shown in Figure 5, it is a flow chart of an application programming interface calling method of a voice dialogue platform provided by an embodiment of the present invention, including the following steps:

S21:语音对话平台响应于产品的应用程序接口的调用申请,获取所述产品的密钥;S21: The voice dialogue platform obtains the key of the product in response to the application program interface call application of the product;

S22:当语音对话平台验证所述密钥为已配发的专属密钥时,查询对应于所述专属密钥的鉴权配置,获取相应的鉴权限制信息,其中,所述鉴权限制包括:域名网址、IP白名单、API key;S22: When the voice dialogue platform verifies that the key is an assigned dedicated key, query the authentication configuration corresponding to the dedicated key to obtain corresponding authentication restriction information, wherein the authentication restriction includes : domain name URL, IP whitelist, API key;

S23:语音对话平台获取所述产品的域名网址信息、IP地址信息、API key中的至少一项信息,当所述至少一项信息中的其中一项信息通过所述鉴权配置的鉴权限制验证时,允许所述产品的应用程序接口的调用。S23: The voice dialogue platform obtains at least one piece of information among the domain name URL information, IP address information, and API key of the product, when one piece of information in the at least one piece of information passes the authentication limit of the authentication configuration During verification, the invocation of the application program interface of the product is allowed.

在本实施方式中,开发者将在语音对话平台申请的专属密钥适配在开发者所开发的产品中,并且在所述产品中部署鉴权配置信息。其中,所述鉴权配置都由开发者自行在产品中部署。在部署完毕后,为了所述产品功能的实现,所述产品向语音对话平台请求应用程序接口的调用。In this embodiment, the developer adapts the exclusive key applied for on the voice dialogue platform to the product developed by the developer, and deploys the authentication configuration information in the product. Wherein, the authentication configurations are all deployed in the product by the developers themselves. After the deployment is completed, in order to realize the functions of the product, the product requests the call of the application program interface from the voice dialogue platform.

对于步骤S21,语音对话平台响应于产品的应用程序接口的调用申请,语音对话平台向所述产品获取所述产品的密钥。For step S21, the voice dialogue platform obtains the key of the product from the product in response to the invocation application of the application program interface of the product.

对于步骤S22,在语音对话平台获取到所述产品的专属密钥后,对其进行验证,当所述语音对话平台验证所述密钥为已配发的专属密钥时,通过内部数据库的记录来查询对应于所述专属密钥的鉴权配置,通过查询到专属密钥的鉴权配置,来获取相应的鉴权限制信息。其中鉴权限制包括域名网址、IP白名单以及API key。其中,鉴权限制可以仅为域名网址、IP白名单以及API key中任一项作为鉴权限制,也可以为其中任意两项作为鉴权限制,也可以为其中三项共同配置,作为鉴权配置。For step S22, after the voice dialogue platform obtains the exclusive key of the product, it is verified; to query the authentication configuration corresponding to the specific key, and obtain corresponding authentication restriction information by querying the authentication configuration of the specific key. The authentication restrictions include domain name URL, IP whitelist and API key. Among them, the authentication restriction can be only one of the domain name URL, IP whitelist, and API key as the authentication restriction, or any two of them can be used as the authentication restriction, or three of them can be configured together as the authentication restriction. configuration.

对于步骤S23,语音对话平台根据所述鉴权配置,向产品获取相应的鉴权限制信息,产品的域名网址信息、IP地址信息、API key中的至少一项信息。例如,所述语音对话平台中存储的鉴权配置为IP白名单以及API key,语音对话平台通过所述配置向所述产品获取相应的鉴权限制信息(产品的IP地址,产品的API key)。For step S23, the voice dialogue platform obtains corresponding authentication restriction information from the product, at least one item of product domain name URL information, IP address information, and API key according to the authentication configuration. For example, the authentication configuration stored in the voice dialogue platform is an IP whitelist and API key, and the voice dialogue platform obtains corresponding authentication restriction information (IP address of the product, API key of the product) from the product through the configuration .

例如,所述语音对话平台中存储的鉴权配置为IP白名单,语音对话平台通过所述配置向所述产品获取相应的鉴权限制信息(产品的IP地址)。For example, the authentication configuration stored in the voice dialogue platform is an IP whitelist, and the voice dialogue platform obtains corresponding authentication restriction information (IP address of the product) from the product through the configuration.

例如,所述语音对话平台中存储的鉴权配置为域名网址信息、IP白名单以及APIkey,语音对话平台通过所述配置向所述产品获取相应的鉴权限制信息(产品的域名网址、产品的IP地址,产品的API key)。For example, the authentication configuration stored in the voice dialogue platform is domain name URL information, IP whitelist and APIkey, and the voice dialogue platform obtains corresponding authentication restriction information (domain name URL of the product, product URL) from the product through the configuration. IP address, API key of the product).

在获取相应的鉴权限制信息后,对所述鉴权限制信息进行验证,当所述域名网址信息、所述IP地址信息、所述API key中的至少一项信息验证通过时,所述产品的鉴权限制信息的验证成功。例如语音对话平台中存储的鉴权配置为域名网址信息、IP白名单以及APIkey,而语音对话平台只获取到所述语音对话平台中存储的鉴权配置为域名网址信息、IP白名单以及产品API key,如果所述产品API key通过验证,而域名网址信息、IP白名单通过验证时,视为鉴权限制信息验证成功。允许所述产品的应用程序接口的调用。因为域名网址信息、IP白名单以及产品API key其中任一项信息都具有特殊性质,并且都是由开发者指定输入。很难由他人伪造。After obtaining the corresponding authentication restriction information, verify the authentication restriction information, and when at least one of the domain name URL information, the IP address information, and the API key is verified, the product The verification of the authentication restriction information is successful. For example, the authentication configuration stored in the voice dialogue platform is domain name URL information, IP whitelist and API key, while the voice dialogue platform only obtains the authentication configuration stored in the voice dialogue platform as domain name URL information, IP whitelist and product API key, if the product API key passes the verification, and the domain name URL information and IP whitelist pass the verification, it is deemed that the verification of the authentication restriction information is successful. Allows the invocation of the application program interface of the product. Because any of the domain name URL information, IP whitelist, and product API key information has special properties, and is specified and input by the developer. It is difficult to be faked by others.

在调用后,如图6所示,可以通过语音对话平台查询已经调动出去的应用程序接口。其中,可以查询到所述应用程序接口的功能、类型、调用时间、调用状态。根据所述调用列表,可以帮助开发者监控应用程序接口是否被调用。After invoking, as shown in FIG. 6, the application program interface that has been mobilized can be queried through the voice dialogue platform. Wherein, the function, type, calling time, and calling status of the API can be queried. According to the calling list, it can help the developer to monitor whether the API is called.

通过该实施方法可以看出,该实施方法提供了一种语音对话平台的应用程序接口调用方法,通过接收产品的专属密钥,查询所述专属密钥对应的鉴权配置,从而验证产品的鉴权限制信息,当产品的鉴权限制信息验证成功时,允许所述产品的应用程序接口的调用通过专属密钥与鉴权限制信息双重验证,提高了调用的安全性能。It can be seen from this implementation method that this implementation method provides an application program interface calling method of a voice dialogue platform, by receiving the product's exclusive key, querying the authentication configuration corresponding to the exclusive key, thereby verifying the authentication of the product Authorization restriction information, when the authentication restriction information of the product is successfully verified, the call of the application program interface of the product is allowed to be double-verified by the exclusive key and the authentication restriction information, which improves the security performance of the call.

作为一种实施方式,当所述至少一项信息中没有任何一项信息通过所述鉴权配置的鉴权限制验证时,通知所述鉴权限制验证失败的对象,所述对象包括:域名网址和/或IP地址和/或API key。As an implementation manner, when none of the at least one piece of information passes the verification of the authentication restriction of the authentication configuration, the object whose verification of the authentication restriction fails is notified, and the object includes: a domain name URL and/or IP address and/or API key.

在本实施方式中,语音对话平台在验证所述产品的鉴权限制信息没有任何一项通过所述鉴权配置的鉴权限制验证时,向所述产品通知所述鉴权限制验证失败的对象。例如,在鉴权配置中,只配置了域名网址,在验证中,语音对话平台验证所述产品的域名网址信息,如果验证失败,则语音对话平台向产品发送域名网址验证失败的通知。In this embodiment, when the voice dialogue platform verifies that none of the authentication restriction information of the product passes the authentication restriction verification of the authentication configuration, it notifies the product of the object whose authentication restriction verification fails . For example, in the authentication configuration, only the domain name URL is configured, and in the verification, the voice dialogue platform verifies the domain name URL information of the product, and if the verification fails, the voice dialogue platform sends a notification of domain name URL verification failure to the product.

如果鉴权配置中,同时配置了域名网址以及IP白名单,在验证中,语音对话平台验证所述产品的域名网址信息以及产品的IP地址,如果所述产品的域名网址以及IP地址信息都验证不通过,则语音对话平台向产品发送域名网址验证失败以及IP地址未在白名单中的通知。If in the authentication configuration, the domain name URL and IP whitelist are configured at the same time, in the verification, the voice dialogue platform verifies the domain name URL information and the product IP address of the product, if the domain name URL and IP address information of the product are verified If it fails, the voice chat platform will send a notification to the product that the verification of the domain name URL has failed and that the IP address is not in the whitelist.

如果鉴权配置中,同时配置了域名网址、IP白名单以及API key,在验证中,语音对话平台验证所述产品的域名网址信息、产品的IP地址以及产品的API key,如果所述产品的域名网址、IP地址、API key都雅正不通过,则语音对话平台向产品发送域名网址验证失败、IP地址未在白名单中以及不存在此产品的API key的通知。If in the authentication configuration, the domain name URL, IP whitelist and API key are configured at the same time, in the verification, the voice dialogue platform verifies the domain name URL information of the product, the IP address of the product and the API key of the product, if the product’s If the domain name URL, IP address, and API key are all invalid, the voice chat platform will send a notification to the product that the verification of the domain name URL has failed, the IP address is not in the whitelist, and the API key for this product does not exist.

通过该实施方法可以看出,根据鉴权配置,验证不同的限制信息,将验证不通过的失败类型向产品反馈,开发者可以根据所述反馈信息来调整所述产品。便于开发者开发,提高开发效率。It can be seen from this implementation method that, according to the authentication configuration, different restriction information is verified, and the failure type that fails the verification is fed back to the product, and the developer can adjust the product according to the feedback information. It is convenient for developers to develop and improve development efficiency.

如图7所示为本发明一实施例提供的一种语音对话平台的应用程序接口鉴权配置系统的结构示意图,本实施例的技术方案可适用于对设备的语音对话平台的应用程序接口鉴权配置方法,该系统可执行上述任意实施例所述的语音对话平台的应用程序接口鉴权配置方法,并配置在终端中。As shown in Figure 7, it is a schematic structural diagram of an API authentication configuration system for a voice dialogue platform provided by an embodiment of the present invention. The system can implement the authentication configuration method of the application program interface of the voice dialogue platform described in any of the above embodiments, and configure it in the terminal.

本实施例提供的一种语音对话平台的应用程序接口鉴权配置系统包括:密钥配发程序模块11,鉴权配置接口程序模块12和授权程序模块13。An application program interface authentication configuration system of a voice dialogue platform provided in this embodiment includes: a key distribution program module 11 , an authentication configuration interface program module 12 and an authorization program module 13 .

其中,密钥配发程序模块11用于语音对话平台响应于开发者上传的应用程序接口授权申请,向所述开发者发送专属密钥,所述专属密钥与开发者的ID和应用程序接口的类型有关;鉴权配置接口程序模块12用于语音对话平台提供对应于所述专属密钥的鉴权配置对话框,以为所述开发者提供鉴权限制的选项卡,其中,所述鉴权限制包括:域名网址、IP白名单、API key;授权程序模块13用于语音对话平台响应于开发者基于所述鉴权限制的选项卡输入的至少一条所述鉴权限制信息,完成所述专属密钥的鉴权配置和授权。Among them, the key distribution program module 11 is used for the voice dialogue platform to respond to the application program interface authorization application uploaded by the developer, and send the exclusive key to the developer, and the exclusive key is related to the developer's ID and API related to the type; the authentication configuration interface program module 12 is used for the voice dialogue platform to provide an authentication configuration dialog box corresponding to the specific key, so as to provide the developer with an authentication-restricted tab, wherein the authentication The restrictions include: domain name URL, IP whitelist, API key; the authorization program module 13 is used for the voice dialogue platform to respond to at least one piece of the authentication restriction information input by the developer based on the authentication restriction tab to complete the exclusive Key authentication configuration and authorization.

进一步地,所述API key与所述产品的软件操作系统相关,所述产品的软件操作系统包括:安卓、IOS、嵌入式系统。Further, the API key is related to the software operating system of the product, and the software operating system of the product includes: Android, IOS, and embedded systems.

如图8所示为本发明一实施例提供的一种语音对话平台的应用程序接口调用系统的结构示意图,本实施例的技术方案可适用于对设备的语语音对话平台的应用程序接口调用方法,该系统可执行上述任意实施例所述的语音对话平台的应用程序接口调用方法,并配置在终端中。As shown in Figure 8, it is a schematic structural diagram of an application programming interface calling system of a speech dialogue platform provided by an embodiment of the present invention. The technical solution of this embodiment can be applied to the method of calling the application programming interface of the speech dialogue platform of the device , the system can execute the application programming interface calling method of the voice dialogue platform described in any of the above embodiments, and be configured in the terminal.

本实施例提供的一种语音对话平台的应用程序接口调用系统包括:密钥获取程序模块21,鉴权配置获取程序模块22和调用程序模块23。The API invoking system of a voice dialogue platform provided in this embodiment includes: a key acquisition program module 21 , an authentication configuration acquisition program module 22 and an invocation program module 23 .

其中,密钥获取程序模块21用于语音对话平台响应于产品的应用程序接口的调用申请,获取所述产品的密钥;鉴权配置获取程序模块22用于当语音对话平台验证所述密钥为已配发的专属密钥时,查询对应于所述专属密钥的鉴权配置,获取相应的鉴权限制信息,其中,所述鉴权限制包括:域名网址、IP白名单、API key;调用程序模块23用于语音对话平台获取所述产品的域名网址信息、IP地址信息、API key中的至少一项信息,当所述至少一项信息中的其中一项信息通过所述鉴权配置的鉴权限制验证时,允许所述产品的应用程序接口的调用。Wherein, the key acquisition program module 21 is used for the voice dialogue platform to obtain the key of the product in response to the call application of the application program interface of the product; the authentication configuration acquisition program module 22 is used for verifying the key when the voice dialogue platform When it is a distributed exclusive key, query the authentication configuration corresponding to the exclusive key to obtain corresponding authentication restriction information, wherein the authentication restriction includes: domain name URL, IP whitelist, API key; The calling program module 23 is used for the voice dialogue platform to obtain at least one piece of information in the domain name URL information, IP address information, and API key of the product. When one piece of information in the at least one piece of information passes the authentication configuration When the authentication restriction is verified, the call of the application program interface of the product is allowed.

进一步地,当所述至少一项信息中没有任何一项信息通过所述鉴权配置的鉴权限制验证时,通知所述鉴权限制验证失败的对象,所述对象包括:域名网址和/或IP地址和/或API key。Further, when none of the at least one piece of information passes the verification of the authentication restriction of the authentication configuration, the object whose verification of the authentication restriction fails is notified, and the object includes: a domain name URL and/or IP address and/or API key.

进一步地,所述API key与所述产品的软件操作系统相关,所述产品的软件操作系统包括:安卓、IOS、嵌入式系统。Further, the API key is related to the software operating system of the product, and the software operating system of the product includes: Android, IOS, and embedded systems.

本发明实施例还提供了一种非易失性计算机存储介质,计算机存储介质存储有计算机可执行指令,该计算机可执行指令可执行上述任意方法实施例中的语音对话平台的应用程序接口鉴权配置方法;The embodiment of the present invention also provides a non-volatile computer storage medium. The computer storage medium stores computer-executable instructions, and the computer-executable instructions can execute the API authentication of the voice dialogue platform in any of the above-mentioned method embodiments. configuration method;

作为一种实施方式,本发明的非易失性计算机存储介质存储有计算机可执行指令,计算机可执行指令设置为:As an implementation mode, the non-volatile computer storage medium of the present invention stores computer-executable instructions, and the computer-executable instructions are set to:

语音对话平台响应于开发者上传的应用程序接口授权申请,向所述开发者发送专属密钥,所述专属密钥与开发者的ID和应用程序接口的类型有关;The voice dialogue platform sends an exclusive key to the developer in response to the application program interface authorization application uploaded by the developer, and the exclusive key is related to the developer's ID and the type of the application program interface;

语音对话平台提供对应于所述专属密钥的鉴权配置对话框,以为所述开发者提供鉴权限制的选项卡,其中,所述鉴权限制包括:域名网址、IP白名单、API key;The voice dialogue platform provides an authentication configuration dialog box corresponding to the exclusive key to provide the developer with an authentication restriction tab, wherein the authentication restriction includes: domain name URL, IP whitelist, API key;

语音对话平台响应于开发者基于所述鉴权限制的选项卡输入的至少一条所述鉴权限制信息,完成所述专属密钥的鉴权配置和授权。The voice dialogue platform completes the authentication configuration and authorization of the exclusive key in response to at least one piece of authentication restriction information input by the developer based on the authentication restriction tab.

本发明实施例还提供了一种非易失性计算机存储介质,计算机存储介质存储有计算机可执行指令,该计算机可执行指令可执行上述任意方法实施例中的语音对话平台的应用程序接口调用方法;The embodiment of the present invention also provides a non-volatile computer storage medium, the computer storage medium stores computer-executable instructions, and the computer-executable instructions can execute the application program interface calling method of the voice dialogue platform in any of the above-mentioned method embodiments ;

作为一种实施方式,本发明的非易失性计算机存储介质存储有计算机可执行指令,计算机可执行指令设置为:As an implementation mode, the non-volatile computer storage medium of the present invention stores computer-executable instructions, and the computer-executable instructions are set to:

语音对话平台响应于产品的应用程序接口的调用申请,获取所述产品的密钥;The voice dialogue platform obtains the key of the product in response to the call application of the product's API;

当语音对话平台验证所述密钥为已配发的专属密钥时,查询对应于所述专属密钥的鉴权配置,获取相应的鉴权限制信息,其中,所述鉴权限制包括:域名网址、IP白名单、APIkey;When the voice dialogue platform verifies that the key is an assigned exclusive key, query the authentication configuration corresponding to the exclusive key to obtain corresponding authentication restriction information, wherein the authentication restriction includes: domain name URL, IP whitelist, APIkey;

语音对话平台获取所述产品的域名网址信息、IP地址信息、API key中的至少一项信息,当所述至少一项信息中的其中一项信息通过所述鉴权配置的鉴权限制验证时,允许所述产品的应用程序接口的调用。The voice dialogue platform acquires at least one piece of information among the domain name URL information, IP address information, and API key of the product, and when one piece of information in the at least one piece of information passes the authentication restriction verification of the authentication configuration , allowing the invocation of the API of the product.

作为一种非易失性计算机可读存储介质,可用于存储非易失性软件程序、非易失性计算机可执行程序以及模块,如本发明实施例中的测试软件的方法对应的程序指令/模块。一个或者多个程序指令存储在非易失性计算机可读存储介质中,当被处理器执行时,执行上述任意方法实施例中的语音对话平台的应用程序接口鉴权配置方法以及语音对话平台的应用程序接口调用方法。As a non-volatile computer-readable storage medium, it can be used to store non-volatile software programs, non-volatile computer-executable programs and modules, such as program instructions/programs corresponding to the method of testing software in the embodiments of the present invention. module. One or more program instructions are stored in a non-volatile computer-readable storage medium, and when executed by a processor, the application program interface authentication configuration method of the voice dialogue platform and the voice dialogue platform in any of the above method embodiments are executed. API call method.

非易失性计算机可读存储介质可以包括存储程序区和存储数据区,其中,存储程序区可存储操作系统、至少一个功能所需要的应用程序;存储数据区可存储根据测试软件的装置的使用所创建的数据等。此外,非易失性计算机可读存储介质可以包括高速随机存取存储器,还可以包括非易失性存储器,例如至少一个磁盘存储器件、闪存器件、或其他非易失性固态存储器件。在一些实施例中,非易失性计算机可读存储介质可选包括相对于处理器远程设置的存储器,这些远程存储器可以通过网络连接至测试软件的装置。上述网络的实例包括但不限于互联网、企业内部网、局域网、移动通信网及其组合。The non-volatile computer-readable storage medium may include a storage program area and a storage data area, wherein the storage program area can store an operating system, an application program required by at least one function; the storage data area can store the usage of the device according to the test software created data, etc. In addition, the non-volatile computer-readable storage medium may include high-speed random access memory, and may also include non-volatile memory, such as at least one magnetic disk storage device, flash memory device, or other non-volatile solid-state storage devices. In some embodiments, the non-transitory computer-readable storage medium may optionally include memory located remotely from the processor, and these remote memories may be connected to the device for testing the software through a network. Examples of the aforementioned networks include, but are not limited to, the Internet, intranets, local area networks, mobile communication networks, and combinations thereof.

本发明实施例还提供一种电子设备,其包括:至少一个处理器,以及与所述至少一个处理器通信连接的存储器,其中,所述存储器存储有可被所述至少一个处理器执行的指令,所述指令被所述至少一个处理器执行,以使所述至少一个处理器能够执行本发明任一实施例的语音对话平台的应用程序接口鉴权配置方法以及语音对话平台的应用程序接口调用方法的步骤。An embodiment of the present invention also provides an electronic device, which includes: at least one processor, and a memory connected in communication with the at least one processor, wherein the memory stores instructions that can be executed by the at least one processor , the instructions are executed by the at least one processor, so that the at least one processor can execute the application program interface authentication configuration method of the voice dialogue platform and the application program interface call of the voice dialogue platform in any embodiment of the present invention method steps.

本申请实施例的客户端以多种形式存在,包括但不限于:The clients of the embodiments of the present application exist in various forms, including but not limited to:

(1)移动通信设备:这类设备的特点是具备移动通信功能,并且以提供话音、数据通信为主要目标。这类终端包括:智能手机(例如iPhone)、多媒体手机、功能性手机,以及低端手机等。(1) Mobile communication equipment: This type of equipment is characterized by mobile communication functions, and its main goal is to provide voice and data communication. Such terminals include: smart phones (such as iPhone), multimedia phones, feature phones, and low-end phones.

(2)超移动个人计算机设备:这类设备属于个人计算机的范畴,有计算和处理功能,一般也具备移动上网特性。这类终端包括:PDA、MID和UMPC设备等,例如iPad。(2) Ultra-mobile personal computer equipment: This type of equipment belongs to the category of personal computers, has computing and processing functions, and generally has the characteristics of mobile Internet access. Such terminals include: PDA, MID and UMPC equipment, such as iPad.

(3)便携式娱乐设备:这类设备可以显示和播放多媒体内容。该类设备包括:音频、视频播放器(例如iPod),掌上游戏机,电子书,以及智能玩具和便携式车载导航设备。(3) Portable entertainment equipment: This type of equipment can display and play multimedia content. Such devices include: audio and video players (such as iPod), handheld game consoles, e-books, as well as smart toys and portable car navigation devices.

(4)其他具有数据交互功能的电子装置。(4) Other electronic devices with data interaction functions.

在本文中,诸如第一和第二等之类的关系术语仅仅用来将一个实体或者操作与另一个实体或操作区分开来,而不一定要求或者暗示这些实体或操作之间存在任何这种实际的关系或者顺序。而且,术语“包括”、“包含”,不仅包括那些要素,而且还包括没有明确列出的其他要素,或者是还包括为这种过程、方法、物品或者设备所固有的要素。在没有更多限制的情况下,由语句“包括……”限定的要素,并不排除在包括所述要素的过程、方法、物品或者设备中还存在另外的相同要素。In this document, relational terms such as first and second etc. are used only to distinguish one entity or operation from another without necessarily requiring or implying any such relationship between these entities or operations. Actual relationship or sequence. Moreover, the terms "comprising" and "comprising" not only include those elements, but also include other elements not explicitly listed, or also include elements inherent in such a process, method, article, or device. Without further limitations, an element defined by the statement "comprising..." does not exclude the presence of additional same elements in the process, method, article or device comprising said element.

以上所描述的装置实施例仅仅是示意性的,其中所述作为分离部件说明的单元可以是或者也可以不是物理上分开的,作为单元显示的部件可以是或者也可以不是物理单元,即可以位于一个地方,或者也可以分布到多个网络单元上。可以根据实际的需要选择其中的部分或者全部模块来实现本实施例方案的目的。本领域普通技术人员在不付出创造性的劳动的情况下,即可以理解并实施。The device embodiments described above are only illustrative, and the units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in One place, or it can be distributed to multiple network elements. Part or all of the modules can be selected according to actual needs to achieve the purpose of the solution of this embodiment. It can be understood and implemented by those skilled in the art without any creative effort.

通过以上的实施方式的描述,本领域的技术人员可以清楚地了解到各实施方式可借助软件加必需的通用硬件平台的方式来实现,当然也可以通过硬件。基于这样的理解,上述技术方案本质上或者说对现有技术做出贡献的部分可以以软件产品的形式体现出来,该计算机软件产品可以存储在计算机可读存储介质中,如ROM/RAM、磁碟、光盘等,包括若干指令用以使得一台计算机设备(可以是个人计算机,服务器,或者网络设备等)执行各个实施例或者实施例的某些部分所述的方法。Through the above description of the implementations, those skilled in the art can clearly understand that each implementation can be implemented by means of software plus a necessary general hardware platform, and of course also by hardware. Based on this understanding, the essence of the above technical solution or the part that contributes to the prior art can be embodied in the form of software products, and the computer software products can be stored in computer-readable storage media, such as ROM/RAM, magnetic discs, optical discs, etc., including several instructions to make a computer device (which may be a personal computer, server, or network device, etc.) execute the methods described in various embodiments or some parts of the embodiments.

最后应说明的是:以上实施例仅用以说明本发明的技术方案,而非对其限制;尽管参照前述实施例对本发明进行了详细的说明,本领域的普通技术人员应当理解:其依然可以对前述各实施例所记载的技术方案进行修改,或者对其中部分技术特征进行等同替换;而这些修改或者替换,并不使相应技术方案的本质脱离本发明各实施例技术方案的精神和范围。Finally, it should be noted that: the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit them; although the present invention has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art should understand that: it can still be Modifications are made to the technical solutions described in the foregoing embodiments, or equivalent replacements are made to some of the technical features; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the spirit and scope of the technical solutions of the various embodiments of the present invention.

Claims (10)

Translated fromChinese
1.一种语音对话平台的应用程序接口鉴权配置方法,包括:1. An application programming interface authentication configuration method of a voice dialogue platform, comprising:语音对话平台响应于开发者上传的应用程序接口授权申请,向所述开发者发送专属密钥,所述专属密钥与开发者的ID和应用程序接口的类型有关;The voice dialogue platform sends an exclusive key to the developer in response to the application program interface authorization application uploaded by the developer, and the exclusive key is related to the developer's ID and the type of the application program interface;语音对话平台提供对应于所述专属密钥的鉴权配置对话框,以为所述开发者提供鉴权限制的选项卡,其中,所述鉴权限制包括:域名网址、IP白名单、API key;The voice dialogue platform provides an authentication configuration dialog box corresponding to the exclusive key to provide the developer with an authentication restriction tab, wherein the authentication restriction includes: domain name URL, IP whitelist, API key;语音对话平台响应于开发者基于所述鉴权限制的选项卡输入的至少一条所述鉴权限制信息,完成所述专属密钥的鉴权配置和授权。The voice dialogue platform completes the authentication configuration and authorization of the exclusive key in response to at least one piece of authentication restriction information input by the developer based on the authentication restriction tab.2.一种语音对话平台的应用程序接口调用方法,包括:2. A method for invoking an API of a voice dialogue platform, comprising:语音对话平台响应于产品的应用程序接口的调用申请,获取所述产品的密钥;The voice dialogue platform obtains the key of the product in response to the call application of the product's API;当语音对话平台验证所述密钥为已配发的专属密钥时,查询对应于所述专属密钥的鉴权配置,获取相应的鉴权限制信息,其中,所述鉴权限制包括:域名网址、IP白名单、APIkey;When the voice dialogue platform verifies that the key is an assigned exclusive key, query the authentication configuration corresponding to the exclusive key to obtain corresponding authentication restriction information, wherein the authentication restriction includes: domain name URL, IP whitelist, APIkey;语音对话平台获取所述产品的域名网址信息、IP地址信息、API key中的至少一项信息,当所述至少一项信息中的其中一项信息通过所述鉴权配置的鉴权限制验证时,允许所述产品的应用程序接口的调用。The voice dialogue platform obtains at least one piece of information among the domain name URL information, IP address information, and API key of the product, and when one of the pieces of information in the at least one piece of information passes the authentication restriction verification of the authentication configuration , allowing the invocation of the API of the product.3.根据权利要求2所述的方法,其中,当所述至少一项信息中没有任何一项信息通过所述鉴权配置的鉴权限制验证时,通知所述鉴权限制验证失败的对象,所述对象包括:域名网址和/或IP地址和/或API key。3. The method according to claim 2, wherein when none of the at least one item of information passes the verification of the authentication restriction of the authentication configuration, notify the object whose verification of the authentication restriction fails, The object includes: domain name URL and/or IP address and/or API key.4.根据权利要求1-3中任一项所述的方法,其中,所述API key与所述产品的软件操作系统相关,所述产品的软件操作系统包括:安卓、IOS、嵌入式系统。4. The method according to any one of claims 1-3, wherein the API key is related to the software operating system of the product, and the software operating system of the product includes: Android, IOS, and embedded systems.5.一种语音对话平台的应用程序接口鉴权配置系统,包括:5. An API authentication configuration system for a voice dialogue platform, comprising:密钥配发程序模块,用于语音对话平台响应于开发者上传的应用程序接口授权申请,向所述开发者发送专属密钥,所述专属密钥与开发者的ID和应用程序接口的类型有关;The key distribution program module is used for the voice dialogue platform to send an exclusive key to the developer in response to the application program interface authorization application uploaded by the developer, and the exclusive key is related to the developer's ID and the type of the application program interface related;鉴权配置接口程序模块,用于语音对话平台提供对应于所述专属密钥的鉴权配置对话框,以为所述开发者提供鉴权限制的选项卡,其中,所述鉴权限制包括:域名网址、IP白名单、API key;The authentication configuration interface program module is used for the voice dialogue platform to provide an authentication configuration dialog box corresponding to the exclusive key, so as to provide the developer with an authentication restriction tab, wherein the authentication restriction includes: domain name URL, IP whitelist, API key;授权程序模块,用于语音对话平台响应于开发者基于所述鉴权限制的选项卡输入的至少一条所述鉴权限制信息,完成所述专属密钥的鉴权配置和授权。The authorization program module is used for the voice dialogue platform to complete the authentication configuration and authorization of the exclusive key in response to at least one piece of the authentication restriction information input by the developer based on the authentication restriction tab.6.一种语音对话平台的应用程序接口调用系统,包括:6. An application programming interface calling system of a voice dialogue platform, comprising:密钥获取程序模块,用于语音对话平台响应于产品的应用程序接口的调用申请,获取所述产品的密钥;The key acquisition program module is used for the voice dialogue platform to obtain the key of the product in response to the invocation application of the application program interface of the product;鉴权配置获取程序模块,用于当语音对话平台验证所述密钥为已配发的专属密钥时,查询对应于所述专属密钥的鉴权配置,获取相应的鉴权限制信息,其中,所述鉴权限制包括:域名网址、IP白名单、API key;The authentication configuration acquisition program module is used to query the authentication configuration corresponding to the exclusive key when the voice dialogue platform verifies that the key is an assigned exclusive key, and obtain corresponding authentication restriction information, wherein , the authentication restrictions include: domain name URL, IP whitelist, API key;调用程序模块,用于语音对话平台获取所述产品的域名网址信息、IP地址信息、APIkey中的至少一项信息,当所述至少一项信息中的其中一项信息通过所述鉴权配置的鉴权限制验证时,允许所述产品的应用程序接口的调用。Calling the program module, used for the voice dialogue platform to obtain at least one piece of information in the domain name URL information, IP address information, and APIkey of the product, when one of the pieces of information in the at least one piece of information passes the authentication configuration When the authentication restriction is verified, the invocation of the application program interface of the product is allowed.7.根据权利要求6所述的系统,其中,当所述至少一项信息中没有任何一项信息通过所述鉴权配置的鉴权限制验证时,通知所述鉴权限制验证失败的对象,所述对象包括:域名网址和/或IP地址和/或API key。7. The system according to claim 6, wherein when none of the at least one item of information passes the verification of the authentication restriction of the authentication configuration, the object whose verification of the authentication restriction fails is notified, The object includes: domain name URL and/or IP address and/or API key.8.根据权利要求5-7中任一项所述的系统,其中,所述API key与所述产品的软件操作系统相关,所述产品的软件操作系统包括:安卓、IOS、嵌入式系统。8. The system according to any one of claims 5-7, wherein the API key is related to the software operating system of the product, and the software operating system of the product includes: Android, IOS, and embedded systems.9.一种电子设备,其包括:至少一个处理器,以及与所述至少一个处理器通信连接的存储器,其中,所述存储器存储有可被所述至少一个处理器执行的指令,所述指令被所述至少一个处理器执行,以使所述至少一个处理器能够执行权利要求1-4中任一项所述方法的步骤。9. An electronic device, comprising: at least one processor, and a memory connected in communication with the at least one processor, wherein the memory stores instructions executable by the at least one processor, the instructions Executed by the at least one processor, so that the at least one processor can perform the steps of the method according to any one of claims 1-4.10.一种存储介质,其上存储有计算机程序,其特征在于,该程序被处理器执行时实现权利要求1-4中任一项所述方法的步骤。10. A storage medium, on which a computer program is stored, wherein when the program is executed by a processor, the steps of the method according to any one of claims 1-4 are implemented.
CN201810212219.6A2018-03-152018-03-15 Application program interface authentication configuration method and system for voice dialogue platformActiveCN108471409B (en)

Priority Applications (1)

Application NumberPriority DateFiling DateTitle
CN201810212219.6ACN108471409B (en)2018-03-152018-03-15 Application program interface authentication configuration method and system for voice dialogue platform

Applications Claiming Priority (1)

Application NumberPriority DateFiling DateTitle
CN201810212219.6ACN108471409B (en)2018-03-152018-03-15 Application program interface authentication configuration method and system for voice dialogue platform

Publications (2)

Publication NumberPublication Date
CN108471409Atrue CN108471409A (en)2018-08-31
CN108471409B CN108471409B (en)2019-09-03

Family

ID=63264479

Family Applications (1)

Application NumberTitlePriority DateFiling Date
CN201810212219.6AActiveCN108471409B (en)2018-03-152018-03-15 Application program interface authentication configuration method and system for voice dialogue platform

Country Status (1)

CountryLink
CN (1)CN108471409B (en)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication numberPriority datePublication dateAssigneeTitle
CN108491232A (en)*2018-03-152018-09-04苏州思必驰信息科技有限公司The method and system of control are loaded in voice dialogue platform

Citations (8)

* Cited by examiner, † Cited by third party
Publication numberPriority datePublication dateAssigneeTitle
CN101562621A (en)*2009-05-252009-10-21阿里巴巴集团控股有限公司User authorization method and system and device thereof
CN102902907A (en)*2012-09-282013-01-30中兴通讯股份有限公司Configuration method, configuration device and electronic device
CN103078827A (en)*2011-10-252013-05-01腾讯数码(天津)有限公司Open platform system called by third-party applications and implementation method for open platform system
CN103593238A (en)*2012-08-162014-02-19腾讯科技(深圳)有限公司Method and device for controlling invocation of application programming interfaces
CN104717647A (en)*2013-12-132015-06-17中国电信股份有限公司Service capability authentication method, equipment and system
CN105447381A (en)*2014-09-182016-03-30三星电子株式会社Token-based scheme for granting permissions
CN107395648A (en)*2017-09-062017-11-24深圳峰创智诚科技有限公司Authority control method and service end
CN107465650A (en)*2016-06-062017-12-12阿里巴巴集团控股有限公司A kind of access control method and device

Patent Citations (8)

* Cited by examiner, † Cited by third party
Publication numberPriority datePublication dateAssigneeTitle
CN101562621A (en)*2009-05-252009-10-21阿里巴巴集团控股有限公司User authorization method and system and device thereof
CN103078827A (en)*2011-10-252013-05-01腾讯数码(天津)有限公司Open platform system called by third-party applications and implementation method for open platform system
CN103593238A (en)*2012-08-162014-02-19腾讯科技(深圳)有限公司Method and device for controlling invocation of application programming interfaces
CN102902907A (en)*2012-09-282013-01-30中兴通讯股份有限公司Configuration method, configuration device and electronic device
CN104717647A (en)*2013-12-132015-06-17中国电信股份有限公司Service capability authentication method, equipment and system
CN105447381A (en)*2014-09-182016-03-30三星电子株式会社Token-based scheme for granting permissions
CN107465650A (en)*2016-06-062017-12-12阿里巴巴集团控股有限公司A kind of access control method and device
CN107395648A (en)*2017-09-062017-11-24深圳峰创智诚科技有限公司Authority control method and service end

Cited By (1)

* Cited by examiner, † Cited by third party
Publication numberPriority datePublication dateAssigneeTitle
CN108491232A (en)*2018-03-152018-09-04苏州思必驰信息科技有限公司The method and system of control are loaded in voice dialogue platform

Also Published As

Publication numberPublication date
CN108471409B (en)2019-09-03

Similar Documents

PublicationPublication DateTitle
CN110351269B (en) How to log in to the open platform through a third-party server
US10715530B2 (en)Security and permission architecture
US10063537B2 (en)Permission architecture for remote management and capacity instances
KR102047902B1 (en) Message management methods, devices, and storage media
CN110351339B (en) Business processing method, device and server
KR102005458B1 (en)Shared item account selection
US11658963B2 (en)Cooperative communication validation
JP2014531650A (en) Group opt-in link
US11057219B2 (en)Timestamped license data structure
CN109614778B (en) Dynamic configuration method, gateway and system of user authority
CN110231965B (en) Cloud device, application processing method and electronic device
CN111355726A (en)Identity authorization login method and device, electronic equipment and storage medium
US9455972B1 (en)Provisioning a mobile device with a security application on the fly
US10547612B2 (en)System to resolve multiple identity crisis in indentity-as-a-service application environment
WO2020025056A1 (en)Method, device, system, and mobile terminal for security authorization
US11409847B2 (en)Source-based authentication for a license of a license data structure
US11244031B2 (en)License data structure including license aggregation
CN108471409B (en) Application program interface authentication configuration method and system for voice dialogue platform
CN107318100A (en) Method, device and system for binding mobile phone numbers
CN117459245A (en) Methods, devices and systems for accessing identity data
CN116886367A (en)Security authentication method, device, electronic equipment and storage medium
CN110601852A (en)Authentication and authorization method and system for electronic equipment of voice conversation platform
US20180260541A1 (en)License data structure including location-based application features
CN101385013B (en)Method and apparatus for roaming digital rights management content in a device
CN104683979A (en) An authentication method and device

Legal Events

DateCodeTitleDescription
PB01Publication
PB01Publication
SE01Entry into force of request for substantive examination
SE01Entry into force of request for substantive examination
GR01Patent grant
GR01Patent grant
CP01Change in the name or title of a patent holder
CP01Change in the name or title of a patent holder

Address after:215123 building 14, Tengfei Innovation Park, 388 Xinping street, Suzhou Industrial Park, Suzhou City, Jiangsu Province

Patentee after:Sipic Technology Co.,Ltd.

Address before:215123 building 14, Tengfei Innovation Park, 388 Xinping street, Suzhou Industrial Park, Suzhou City, Jiangsu Province

Patentee before:AI SPEECH Co.,Ltd.

PE01Entry into force of the registration of the contract for pledge of patent right
PE01Entry into force of the registration of the contract for pledge of patent right

Denomination of invention:Application Program Interface Authentication Configuration Method and System for Voice Dialogue Platform

Effective date of registration:20230726

Granted publication date:20190903

Pledgee:CITIC Bank Limited by Share Ltd. Suzhou branch

Pledgor:Sipic Technology Co.,Ltd.

Registration number:Y2023980049433

PC01Cancellation of the registration of the contract for pledge of patent right
PC01Cancellation of the registration of the contract for pledge of patent right

Granted publication date:20190903

Pledgee:CITIC Bank Limited by Share Ltd. Suzhou branch

Pledgor:Sipic Technology Co.,Ltd.

Registration number:Y2023980049433


[8]ページ先頭

©2009-2025 Movatter.jp