TWI768307B - Open source software integration approach - Google Patents

Abstract

The present invention relates to an open source software integration method. Logging in a first application program and a second application program on an integration platform, sending a first authentication message to a first authentication host and sending a second authentication message to a second authenticating the host; after verification, respectively sending the authentication token to the integration platform and integrating it into a total authentication token; sending the total authentication token to the first application or the second application on the integration platform; through the integration The platform retrieves the first service of the first application or the second service of the second application and displays the first service or the second service on the electronic device, so that the user can use the same account on a single platform Services provided by a variety of open source software without the need to log in to multiple software systems individually.

Description

Open source software integration approach

The present invention relates to an open source software integration method, especially an open source software integration method using an integration platform to integrate different authentication tokens.

With the development of network technology, electronic services are gradually popularized, and more and more application systems provide various services, which users can use through personal computers or mobile phones. Among them, open source software (OSS), also known as open source software, is a computer software whose source code can be accessed at will. The copyright holder of this software reserves some rights under the software agreement and allows users to Study, modify, and distribute the software to anyone for any purpose. Open source agreements generally meet the requirements of the definition of open source. Some open source software is released into the public domain. Open source software is often developed openly and collaboratively.

When open source software is developed into different application systems, each application system has its own authentication mechanism. When switching between different application systems to use their own services, it is often necessary to continuously authenticate and repeat the login steps. to use specific services through its application system. Among them, it brings great interference to users, including frequent use of account passwords, which increases the probability of account password leakage. Users need to memorize different account password combinations or change account passwords regularly, resulting in password fatigue. Internally, the number of calls to the service desk related to accounts and secrets has also increased, resulting in wasted traffic.

As mentioned above, due to the existence of the above problems, Single Sign On (SSO) came into being. Single Sign On is a software system that serves many interrelated application systems, but is independent of each other and provides storage. Get control properties. Using this property, users can obtain access permissions for all systems when they log in to their respective application systems, instead of logging in for a single application system one by one. Although Single Sign On (SSO) can provide authentication to other applications and systems with a centralized authentication server, without having to enter passwords frequently, there are still inconveniences when using the services of the above-mentioned applications and systems. question.

Therefore, how to integrate the accounts and secrets of different application programs into one, and at the same time enable each application program to provide services to users, is the research direction of the present invention.

One objective of the present invention is to provide an open source software integration method, which allows users to use services provided by multiple open source application programs through a single platform without the need to individually log in to multiple sets of application programs.

In order to achieve the above object, the present invention discloses a method for integrating open source software, which includes the following steps: logging into an integrated platform through an electronic device; executing a first application program and a second application program on the integrated platform, the first application The application sends a first authentication message to a first authentication service and the second application sends a second authentication message to a second authentication service; the first authentication service verifies the first authentication message and the second authentication service verifying the second authentication message, and respectively sending a first authentication token and a second authentication token to the integration platform; the integration platform integrates the first authentication token and the second authentication token into a total authentication a token; registering the first authentication service and the second authentication service on the integration platform according to the first application, the second application and the general authentication token, so as to obtain a first service of the first application Authorization with a second service of the first application; the first service and the second service are captured by the integration platform and the first service and the second service are integrated and displayed by the electronic device, allowing the user to You can use the services provided by a variety of open source software on a single platform through the same account, without the need to log in to multiple software systems individually.

In an embodiment of the present invention, it further discloses that a first account password and a second account password are input in a data table of the integration platform, wherein the first account password corresponds to the first application, the second account password The encrypted pair should be the second application.

In an embodiment of the present invention, it further discloses that a communication unit of the integration platform sends the first account key to the first application program and sends the second account key to the second application program.

In an embodiment of the present invention, it further discloses that a storage unit of the integrated platform stores the first account secret and the second account secret.

In an embodiment of the present invention, it is further disclosed that the integration platform stores and integrates the first authentication token and the second authentication token.

In an embodiment of the present invention, it is further disclosed that the integration platform uses a single record file to integrate the first authentication token and the second authentication token into the total authentication token.

In an embodiment of the present invention, it further discloses that the first authentication service supports the OpenID connect protocol.

In an embodiment of the present invention, it also discloses that the second authentication service supports the SAML2.0 protocol.

In order to make your examiners have a further understanding and understanding of the features of the present invention and the effects achieved, I would like to assist with the detailed descriptions of examples and cooperation, and the descriptions are as follows:

The present invention is an open source software integration method, which captures services of different application programs by integrating platforms, and displays the first service or the second service on the electronic device, so that users can use multiple open source software on a single platform through the same account The services provided by the software do not require individual login to multiple software systems.

Below, a kind of open source software integration method of the present invention will be further described:

Please refer to FIG. 1 and FIG. 2, which are flowcharts 1 and 2 of the open source software integration method of the present invention. As shown in the figures, an open source software integration method of the present invention includes steps:

S10: log in to the integrated platform through an electronic device;

S20: Execute the first application program and the second application program;

S30: Send the first authentication message and the second authentication message;

S40: Verify the first authentication message and the second authentication message;

S50: Send the first authentication token and the second authentication token;

S60: Integrate the first authentication token and the second authentication token into a total authentication token;

S70: Log in to the first authentication service and the second authentication service according to the first application, the second application and the general authenticator, so as to obtain the authorization of the first service of the first application and the second service of the first application;

S80: Retrieve the first service of the first application and the second service of the second application;

S90: Display the first service and the second service.

Next, in order to achieve an open source software integration method of the present invention, please continue to refer to FIG. 1, and also refer to FIGS. 2 and 3, which are schematic diagrams of the open source software integration method and a schematic diagram of the integration platform of the present invention. As shown in the figure, an open source software integration method of the present invention includes: an electronic device 10, an integration platform 20, a first application 30, and a second application 40. The integration platform 20 is provided with a data table 22, a The communication unit 24 , a storage unit 26 , and an integrated unit 28 , the electronic device 10 is used to log in the integrated platform 20 , and the integrated platform 20 is connected to the first application 30 and the second application 40 .

As shown in step S10 , an integrated platform 20 is logged in through an electronic device 10 . The electronic device 10 is a mobile phone, a tablet or a personal computer, and the user logs in to the integrated platform 20 through a display unit of the electronic device 10 , wherein the integrated platform 20 is provided with an operation interface, and the user enters a login on the operation interface. information. In this embodiment, it further includes the step of: inputting a first account password and a second account password in a data table 22 of the integration platform 20, the first account password corresponding to the first application, the second account password The encrypted pair should be the second application. A communication unit 24 of the integration platform 20 sends the first account key to the first application 30 and the second account key to the second application 40, respectively. And a storage unit 26 of the integration platform 20 stores the first account secret and the second account secret respectively.

As shown in step S20, a first application 30 and a second application 40 are executed. Wherein, after the user logs in the integrated platform 20 through the electronic device 10, the first application 30 and the second application 40 are executed on the integrated platform 20, and the first application 30 and the second application 40 are Open source software, where open source software is open source software, freely accessible computer software that retains some rights and allows users to learn, modify, and distribute the software to anyone for any purpose. For example, JBPM, Pentaho, etc. Among them, JBPM (Java Business Process Management) is business process management, specifically an open-source, flexible and easily extensible executable process language framework covering business process management, workflow, service collaboration and other fields. Pentaho is a business intelligence software, which takes workflow as the core and integrates data integration processing and analysis toolkit.

As shown in step S30, a first authentication message and a second authentication message are sent. Wherein, after the user successfully logs in the first application 30 and the second application 40 on the integration platform 20 for the first time, the first application 30 sends a first authentication message to a first authentication service 32 and the second application The application 40 sends a second authentication message to a second authentication service 42, wherein the first authentication service 32 supports the OpenID connect protocol, which is an authentication standard, which uses REST/JSON message flow and can be integrated, and OpenID supports account such as Google, Yahoo, PayPal, etc. The second authentication service 42 supports the SAML2.0 protocol, which is a markup language for security assertions. However, the first authentication service 32 and the second authentication service 42 can be converted to each other, and the protocol is not limited to the above-mentioned protocol. For example, the OAuth2 protocol can also be selected.

As shown in step S40, the first authentication message and the second authentication message are verified. The first authentication service 32 and the second authentication service 42 respectively verify the first authentication message and the second authentication message after receiving the second authentication message.

As shown in step S50, a first authentication token and a second authentication token are transmitted. The first authentication service 32 transmits a first authentication token to the integration platform 20 after verifying the first authentication message, and the second authentication service 42 transmits a second authentication token to the integration platform 20 after verifying the second authentication message. The integration platform 20 sends a failure message to the integration platform 20 respectively when the first authentication service 32 and the second authentication service 42 fail to authenticate. Wherein, the first authentication token and the second authentication token have the meaning of tokens in the computer identity authentication, and are generally used when inviting and logging in to the system.

As shown in step S60, the first authentication token and the second authentication token are integrated into a total authentication token. Wherein, after the communication unit 22 of the integration platform 20 receives the first authentication token and the second authentication token respectively, the communication unit 22 transmits them to the integration unit 28 of the integration platform 20, in this step Using a single sign-in (Single Sign On, SSO) centralized management through the authentication mechanism to help users manage the account and password of multiple application systems. In this embodiment, the integration platform 20 integrates the first authentication token and the second authentication token into the total authentication token using a single sign-in.

As shown in step S70, the total authentication token is sent to the first authentication service 32 and the second authentication service 42 corresponding to the first application and the second application. Wherein, the user logs in the first application 30 and the second application 40 for the first time, and has obtained the first authentication token and the second authentication token after being authenticated and integrated into the total authentication token, and then uses When the electronic device 10 logs into the integrated platform 20 again, the communication unit 24 of the integrated platform 20 sends the general authentication token to the first authentication service corresponding to the first application 30 or the second application 40 32 and the second authentication service 42, since the total authentication token is formed by integrating the first authentication token and the second authentication token, the first application 30 and the second application 40 can be directly logged in , the login of other applications can be completed by logging in to a single platform, and there is no need to repeatedly log in to a single application one by one, which reduces the working time and simplifies the login procedure.

As shown in step S80, a first service of the first application or a second service of the second application is retrieved. Wherein, after the communication unit 24 of the integration platform 20 sends the total authentication token to the first authentication service 32 and the second authentication service 42 corresponding to the first application 30 and the second application 40, the communication unit 24 Retrieve a first service of the first application 30 or retrieve a second service of the second application 40 to the integration platform 20 . In this embodiment, it may further include storing the first service and the second service in the storage unit 26 , that is, integrating different services of different application programs into the integration platform 20 . Simplified steps to log in individually.

As shown in step S90, the first service and the second service are displayed. The integration platform 20 displays the first service or the second service on the electronic device 10 after retrieving a first service of the first application 30 and a second service of the second application 40 , Provide users with different services for different programs. Users do not need to log in to multiple sets of applications individually to use the services provided by them, which saves users' time.

The first service of the first application 30, the second service of the second application 40, the first authentication service 32 and the second authentication service 42 are executed on the same or different cloud hosts, so Its usage is not limited, so the open source software integration method of the present invention is not limited by hardware devices.

To sum up, in an open source software integration method of the present invention, the first authentication token and the second authentication token corresponding to the first application and the second application are integrated by the integration platform 20 as the total The authentication token is stored in the storage unit 26 of the integrated platform, and the communication unit is used to extract the first service of the first application and the second service of the second application, so that the user does not need to separate Log in to the first authentication service and the second authentication service corresponding to the first application and the second application, and only log in to the integrated platform to use the first service of the first application and the second application The second service simplifies the login steps, saves time during login, and is more convenient to use.

Therefore, the present invention is indeed novel, progressive and available for industrial use, and it should meet the requirements of patent application in my country's patent law.

However, the above descriptions are only preferred embodiments of the present invention, and are not intended to limit the scope of implementation of the present invention. All changes and modifications made in accordance with the shape, structure, features and spirit described in the scope of the patent application of the present invention are equivalent. , shall be included in the scope of the patent application of the present invention.

10: Electronics 20: Integrate Platforms 22: Data Sheet 24: Communication unit 26: Storage unit 28: Integration Unit 30: First App 32: First Authentication Service 40: Second application 42: Second Authentication Service S10~S90: Steps

Figure 1: It is a flow chart of the open source software integration method of the present invention; Figure 2: It is a schematic diagram of the open source software integration method of the present invention; and Figure 3: It is a schematic diagram of the integration platform of the open source software integration method of the present invention.

10: Electronics

20: Integrate Platforms

30: First App

32: The first authentication host

40: Second application

42: Second authentication host

Claims (8)

An open source software integration method, the steps of which include: logging into an integration platform through an electronic device; executing a first application program and a second application program on the integration platform; the first application program sending a first authentication message to a first An authentication service and the second application send a second authentication message to a second authentication service; the first authentication service verifies the first authentication message and the second authentication service verifies the second authentication message, and respectively sends a A first authentication token and a second authentication token are sent to the integration platform; the integration platform integrates the first authentication token and the second authentication token into a total authentication token; the integration platform is based on the first authentication token The application, the second application and the master authenticator are registered to the first authentication service and the second authentication service to obtain a first service of the first application and a second service of the second application The integration platform retrieves the first service and the second service; and integrates and displays the first service and the second service on the electronic device. The open source software integration method as described in item 1 of the patent scope, wherein, in the step: executing a first application program and a second application program on the integration platform, further comprising the step of: creating a data table in the integration platform Input a first account password and a second account password in the , wherein, the first account password corresponds to the first application program, and the second account password corresponds to the second application program. The open source software integration method as described in item 2 of the patent scope, wherein after the step of: inputting a first account password and a second account password in a data table of the integration platform, further comprising the step of: the integration platform A communication unit sends the first account key to the first authentication service and sends the second account key to the second authentication service. The open source software integration method as described in item 3 of the patent scope, wherein, in the step: a communication unit of the integration platform sends the first account key to the first application and sends the second account key to the second application After the program steps, it further includes the step of: a storage unit of the integration platform stores the first account secret and the second account secret. The open source software integration method as described in the first item of the patent scope, wherein, after the step of: transmitting a first authentication token and a second authentication token to the integration platform, further comprising the step of: storing and integrating the integration platform The first authentication token and the second authentication token. The open source software integration method as described in claim 1 of the patent scope, wherein in the step of integrating the first authentication token and the second authentication token into a total authentication token by the integration platform, the integration platform uses a single record The file integrates the first authentication token and the second authentication token into the total authentication token. The open source software integration method as described in item 1 of the patent scope, wherein the first authentication service supports the OpenID connect protocol. The open-source software integration method as described in item 1 of the patent scope, wherein the second authentication service supports the SAML2.0 protocol.

Images