WO2016015366A1

WO2016015366A1 - Resource control architecture based on identity service identifier, and method using said architecture

Info

Publication number: WO2016015366A1
Application number: PCT/CN2014/084403
Authority: WO
Inventors: 沈玉将
Original assignee: 苏州阔地网络科技有限公司
Priority date: 2014-08-01
Filing date: 2014-08-14
Publication date: 2016-02-04
Also published as: WO2016015477A1; CN104243219A; CN104243219B

Abstract

The present invention provides an identity-based resource control architecture, and a method using said architecture. Comprised are a resource donor, a resource receptor, a resource management center, a resource control center, and an identity management center; the resource donor, resource receptor, and resource management center are all interconnected; the resource control center is separately connected to the resource donor, resource receptor, and resource management center; the identity management center is separately connected to the resource control center, the resource donor, and the resource receptor. In comparison with the prior art, the resource control architecture based on an identity service identifier, and method using said architecture, of the present invention effectuate detailed management of resources.

Description

Resource control architecture based on identity service identity and application method

Technical field

本发明属于资源控制领域，尤其涉及一种基于身份业务标识的资源控制架构及应用该架构方法。The present invention belongs to the field of resource control, and in particular, to a resource control architecture based on identity service identity and a method for applying the architecture.

Background technique

申请人华为技术有限公司于2007年06月02日申请了一篇：申请号码：200710111735.1，专利名称为业务与承载分离架构下资源控制方法及设备，在上述方案中，承载控制设备先获取承载设备所支持的资源管理规则，再根据资源管理规则下发资源操作命令。可以在审计能力命令请求中增加描述资源管理规则的属性，在审计能力命令响应中以对应属性的值表示承载设备所支持的资源管理规则。也可以将承载设备所支持的资源管理规则预配置在该承载控制设备，该承载控制设备从本设备内部获取该资源管理规则。如果承载设备所支持的资源管理规则有多种，则可以由承载控制设备从中选一种，指示该承载设备后续使用该资源管理规则。Applicant Huawei Technologies Co., Ltd. applied for an article on June 2, 2007: application number: 200710111735.1, the patent name is the resource control method and equipment under the service and bearer separation architecture. In the above solution, the bearer control device first acquires the bearer device. The resource management rules are supported, and the resource operation commands are issued according to the resource management rules. The attribute describing the resource management rule may be added to the audit capability command request, and the resource management rule supported by the bearer device is represented by the value of the corresponding attribute in the audit capability command response. The resource management rule supported by the bearer device may be pre-configured on the bearer control device, and the bearer control device obtains the resource management rule from the device. If there are multiple resource management rules supported by the bearer device, one of the bearer control devices may be selected to indicate that the bearer device subsequently uses the resource management rule.

申请人中兴通讯股份有限公司于2009年06月24日申请了一篇：申请号码为200910146754.7，专利名称为融合网络的策略控制架构及实现策略控制的方法，包括应用功能实体AF、固定网络策略决策实体及移动网络策略决策实体，其中：所述AF，用于向所述固定网络策略决策实体提供决策所需的业务信息，所述业务信息包括固定用户业务信息或移动用户业务信息；Applicant ZTE Corporation applied for an article on June 24, 2009: the application number is 200910146754.7, the patent name is the policy control architecture of the converged network and the method of implementing policy control, including application functional entity AF, fixed network policy decision An entity and a mobile network policy decision entity, wherein: the AF is configured to provide the fixed network policy decision entity with service information required for the decision, where the service information includes fixed user service information or mobile user service information;

所述固定网络策略决策实体，用于接收所述AF发送的业务信息，并对所述业务信息进行判断，若是固定用户业务信息，则根据所述固定用户业务信息制定固定网络资源控制策略；若是移动用户业务信息，则转发给移动网络策略决策实体；The fixed network policy decision entity is configured to receive service information sent by the AF, and determine the service information, and if it is fixed user service information, formulate a fixed network resource control policy according to the fixed user service information; Mobile user service information is forwarded to the mobile network policy decision entity;

所述移动网络策略决策实体，用于接收固定网络策略决策实体转发的移动用户业务信息，以及根据所述移动用户业务信息制定移动网络资源控制策略。 The mobile network policy decision entity is configured to receive mobile user service information forwarded by the fixed network policy decision entity, and formulate a mobile network resource control policy according to the mobile user service information.

上述方案并没有揭示资源提供者、资源接受者、资源管理者、资源控制者之间的关系，没有实现资源精细化管理。The above solution does not reveal the relationship between resource providers, resource recipients, resource managers, and resource controllers, and does not achieve refined management of resources.

发明内容Summary of the invention

本发明提供一种基于身份的资源控制架构及应用该架构的方法，以解决上述问题。The present invention provides an identity-based resource control architecture and a method of applying the architecture to solve the above problems.

本发明提供一种基于身份业务标识的资源控制架构。上述架构包括：资源供体、资源受体、资源管理中心、资源控制中心、标识管理中心；其中，资源供体、资源受体、资源管理中心之间两两相互连接；资源控制中心分别与资源供体、资源受体、资源管理中心连接；标识管理中心分别与资源控制中心、资源供体、资源受体连接。The invention provides a resource control architecture based on identity service identity. The above-mentioned architecture includes: resource donor, resource receptor, resource management center, resource control center, and identity management center; among them, resource donors, resource receptors, and resource management centers are connected to each other; resource control centers and resources respectively The donor, resource receptor, and resource management center are connected; the identity management center is connected to the resource control center, the resource donor, and the resource receptor.

本发明还提供一种应用上述的基于身份业务标识的资源控制架构方法。上述方法包括以下步骤：The present invention also provides a resource control architecture method using the above identity based service identity. The above method includes the following steps:

资源供体、资源受体预先从标识管理中心获取其对应的身份标识；同时，所述标识管理中心将所述资源供体、所述资源受体及其对应的身份标识同步至所述资源控制中心；The resource donor and the resource receiver obtain their corresponding identity identifiers from the identity management center in advance; meanwhile, the identity management center synchronizes the resource donors, the resource recipients, and their corresponding identity identifiers to the resource control center;

资源控制中心获取资源控制策略；The resource control center obtains the resource control strategy;

资源控制中心根据获取的资源控制策略，控制资源供体、资源受体、资源管理中心、标识管理中心之间资源的交互。The resource control center controls the interaction of resources between resource donors, resource recipients, resource management centers, and identity management centers according to the acquired resource control policies.

相较于先前技术，根据本发明提供的基于身份业务标识的资源控制架构及应用该架构方法，实现了资源的精细化管理。Compared with the prior art, the resource control architecture based on the identity service identity provided by the present invention and the application of the architecture method implement fine management of resources.

另外，方案中的资源供体、资源受体之间可以相互转化，使得方案的适用范围更广，增强了用户的体验。In addition, resource donors and resource receptors in the scheme can be mutually transformed, which makes the application of the scheme wider and enhances the user experience.

另外，方案中由资源管理中心控制授权凭证的发放及资源集中管理或者由资源控制中心控制授权凭证的发放及资源控制，而不是由单独的第三方实体管理授权凭证，大大减少了系统信令之间的交互，节约了系统资源，提高了系统的通信效率，大大增强了用户的体验。In addition, in the scheme, the resource management center controls the issuance of the authorization credential and the centralized management of the resources or the resource control center controls the issuance of the authorization credential and the resource control, instead of managing the authorization credential by a separate third party entity, which greatly reduces the system signaling. The interaction between the two saves system resources, improves the communication efficiency of the system, and greatly enhances the user experience.

另外，所述资源受体通过向所述资源管理中心支付一定的费用，获取所述授权凭证的方式，增了系统运营方的收入。In addition, the resource acceptor obtains the fee by paying a certain fee to the resource management center. The way in which the credentials are authorized increases the revenue of the system operator.

另外，通过资源受体管理器的设置，实现了对资源受体行为进行了一定的监控，避免了资源受体行为给资源受体管理方带来的损失。In addition, through the setting of the resource receptor manager, the resource receptor behavior is monitored to avoid the loss of resource receptor behavior to the resource receptor management.

另外，通过一定的策略，使得非目标资源受体获得新资源，大大增强了用户的体验。In addition, through certain strategies, non-target resource receptors acquire new resources, which greatly enhances the user experience.

另外，通过设置资源受体对资源的控制流程，避免了资源受体无序的修改，合理保护他人的版权。In addition, by setting the resource receptor control resource control process, the disorderly modification of resource receptors is avoided, and the copyright of others is reasonably protected.

DRAWINGS

此处所说明的附图用来提供对本发明的进一步理解，构成本申请的一部分，本发明的示意性实施例及其说明用于解释本发明，并不构成对本发明的不当限定。在附图中：The drawings described herein are intended to provide a further understanding of the invention, and are intended to be a part of the invention. In the drawing:

图1所示为本发明实施例1提供的基于身份业务标识的资源控制架构示意图；FIG. 1 is a schematic diagram of a resource control architecture based on an identity service identifier according to Embodiment 1 of the present invention;

图2所示为本发明实施例2提供的应用图1所示的基于身份业务标识的资源控制架构方法和流程示意图。FIG. 2 is a schematic diagram showing a method and a flow chart of applying a resource control architecture based on identity service identity shown in FIG. 1 according to Embodiment 2 of the present invention.

detailed description

下文中将参考附图并结合实施例来详细说明本发明。需要说明的是，在不冲突的情况下，本申请中的实施例及实施例中的特征可以相互组合。The invention will be described in detail below with reference to the drawings in conjunction with the embodiments. It should be noted that the embodiments in the present application and the features in the embodiments may be combined with each other without conflict.

图1所示为本发明实施例1提供的基于身份业务标识的资源控制架构示意图，包括：资源供体、资源受体、资源管理中心、资源控制中心、标识管理中心；其中，资源供体、资源受体、资源管理中心之间两两相互连接；资源控制中心分别与资源供体、资源受体、资源管理中心连接；标识管理中心分别与资源控制中心、资源供体、资源受体连接。1 is a schematic diagram of a resource control architecture based on an identity service identifier according to Embodiment 1 of the present invention, including: a resource donor, a resource acceptor, a resource management center, a resource control center, and an identity management center; wherein, a resource donor, Resource receptors and resource management centers are connected to each other; resource control centers are connected to resource donors, resource receptors, and resource management centers; and identity management centers are connected to resource control centers, resource donors, and resource recipients.

其中，资源供体为一个或多个；资源受体为一个或多个。Wherein, the resource donor is one or more; the resource acceptor is one or more.

其中，资源供体是指：资源提供者；资源受体为资源接受者；资源管理中心为管理资源的实体；资源控制中心为控制资源交互的实体。 Among them, the resource donor refers to: the resource provider; the resource receptor is the resource receiver; the resource management center is the entity that manages the resource; and the resource control center is the entity that controls the resource interaction.

其中，资源供体在一定条件下，可以成为资源受体；资源受体在一定条件下，可以成为资源供体。Among them, resource donors can become resource receptors under certain conditions; resource receptors can become resource donors under certain conditions.

其中，标识管理中心提供了资源供体、资源受体的身份标识以及业务标识。The identity management center provides a resource donor, a resource identifier, and a service identifier.

图2所示为本发明实施例2提供的应用图1所示的基于身份的资源控制架构方法和流程示意图，包括以下步骤：2 is a schematic diagram of a method and a flow chart of applying the identity-based resource control architecture shown in FIG. 1 according to Embodiment 2 of the present invention, including the following steps:

步骤201：资源供体、资源受体预先从标识管理中心获取其对应的身份标识；同时，所述标识管理中心将所述资源供体、所述资源受体及其对应的身份标识同步至所述资源控制中心；Step 201: The resource donor and the resource receiver obtain their corresponding identity identifiers from the identity management center in advance; at the same time, the identity management center synchronizes the resource donors, the resource recipients, and their corresponding identity identifiers to the Resource control center;

其中，资源供体、资源受体预先从标识管理中心获取其对应的身份标识的过程为：资源供体、资源受体分别向所述标识管理中心发送身份标识请求；所述标识管理中心反馈身份标识响应消息；其中，所述身份标识响应消息中携带所述资源供体或所述资源受体的身份标识信息。The process for the resource provider and the resource receiver to obtain the corresponding identity identifier from the identity management center in advance is: the resource donor and the resource receiver respectively send an identity identification request to the identity management center; the identity management center feeds the identity And identifying, by the identity response message, the identity identifier information of the resource donor or the resource identifier.

步骤202：资源控制中心获取资源控制策略；Step 202: The resource control center acquires a resource control policy.

资源控制中心获取资源控制策略的方式为：资源控制中心自身配置资源控制策略或者资源控制中心从第三方实体(例如：策略控制器)中获取资源控制策略。The resource control center obtains the resource control policy by the resource control center itself or the resource control center to obtain the resource control policy from a third-party entity (for example, a policy controller).

步骤203：资源控制中心根据获取的资源控制策略，控制资源供体、资源受体、资源管理中心、标识管理中心之间资源的交互。Step 203: The resource control center controls resource interaction between the resource donor, the resource acceptor, the resource management center, and the identity management center according to the acquired resource control policy.

其中，资源控制中心根据获取的资源控制策略，控制资源供体、资源受体、资源管理中心、标识管理中心之间资源的交互的过程为：The process of controlling the resource interaction between the resource donor, the resource receptor, the resource management center, and the identity management center according to the acquired resource control policy is:

资源供体更新已提供给资源受体的资源并将更新的资源放入资源管理中心后，触发资源控制中心向资源受体发送资源凭证请求；After the resource donor updates the resources that have been provided to the resource acceptor and puts the updated resources into the resource management center, the resource control center is triggered to send a resource credential request to the resource acceptor;

所述资源受体接收所述资源凭证请求后，从资源管理中心获取授权凭证并通知所述资源控制中心；After receiving the resource credential request, the resource acceptor obtains an authorization credential from the resource management center and notifies the resource control center;

所述资源控制中心接收所述通知后，指示所述资源管理中心向所述资源受体提供所述资源供体已更新的资源；After receiving the notification, the resource control center instructs the resource management center to provide the resource resource with the resource that the resource donor has updated;

若所述资源受体修改所述资源供体已更新的资源，则根据修改类型，从所述标识管理中心获取对应的修改类型标识并将所述修改类型标识携带在修改结果信息中发送给所述资源控制中心；And if the resource identifier modifies the resource that has been updated by the resource provider, acquiring a corresponding modification type identifier from the identifier management center according to the modification type, and carrying the modified type identifier in the modification node. The information is sent to the resource control center;

若所述修改类型标识为永久性标识，则所述资源控制中心将所述修改结果信息发送至所述资源供体；And if the modification type identifier is a permanent identifier, the resource control center sends the modification result information to the resource donor;

若所述资源供体同意修改结果，则向所述资源控制中心反馈修改结果响应消息。If the resource donor agrees to modify the result, the modification result response message is fed back to the resource control center.

其中，所述资源控制中心接收所述修改结果响应消息后，控制所述资源受体将所述修改结果上传至所述资源管理中心。After receiving the modification result response message, the resource control center controls the resource receiver to upload the modification result to the resource management center.

其中，所述修改类型包括：永久性修改、临时性修改；所述修改类型标识包括：永久性修改标识、临时性修改标识。The modification type includes: a permanent modification and a temporary modification; and the modification type identifier includes: a permanent modification identifier and a temporary modification identifier.

其中，若所述修改类型标识为临时性标识，则所述资源控制中心指示所述资源管理中心拒绝接收所述资源受体提供的所述修改结果。Wherein, if the modification type identifier is a temporary identifier, the resource control center instructs the resource management center to refuse to receive the modification result provided by the resource receiver.

其中，所述资源受体从资源管理中心获取授权凭证的途径为：通过向资源管理中心支付一定的费用，获取所述授权凭证。The method for obtaining the authorization credential from the resource management center by the resource acceptor is: obtaining the authorization credential by paying a certain fee to the resource management center.

其中，资源供体更新已提供给资源受体的资源并将更新的资源放入资源管理中心后，触发资源控制中心向资源受体发送资源凭证请求的过程为：After the resource donor updates the resources that have been provided to the resource acceptor and puts the updated resources into the resource management center, the process of triggering the resource control center to send the resource credential request to the resource acceptor is:

资源供体更新已提供给资源受体的资源并将更新的资源放入资源管理中心后，向所述资源控制中心发送资源凭证请求；After the resource donor updates the resource that has been provided to the resource acceptor and puts the updated resource into the resource management center, sends a resource credential request to the resource control center;

所述资源控制中心向所述资源受体发送所述资源凭证请求。The resource control center sends the resource credential request to the resource acceptor.

资源供体更新已提供给资源受体的资源并将更新的资源放入资源管理中心后，触发资源控制中心向资源受体发送资源凭证请求的过程为：After the resource donor updates the resources that have been provided to the resource acceptor and puts the updated resources into the resource management center, the process of triggering the resource control center to send the resource credential request to the resource acceptor is:

资源供体更新已提供给资源受体的资源并将更新的资源放入资源管理中心后，所述资源管理中心向所述资源控制中心发送资源凭证请求；After the resource donor updates the resources that have been provided to the resource acceptor and puts the updated resources into the resource management center, the resource management center sends a resource credential request to the resource control center;

资源控制中心根据获取的资源控制策略，控制资源供体、资源受体、资源管理中心、标识管理中心之间资源的交互的过程为：According to the acquired resource control policy, the resource control center controls the interaction of resources between resource donors, resource receptors, resource management centers, and identity management centers as follows:

所述资源受体接收所述资源凭证请求后，向资源受体管理器发送所述资源凭证请求；After receiving the resource credential request, the resource acceptor sends the resource to a resource acceptor manager Voucher request

所述资源受体管理器接收所述资源凭证请求后，从资源管理中心获取授权凭证并通知所述资源控制中心；After receiving the resource credential request, the resource acceptor manager obtains an authorization credential from the resource management center and notifies the resource control center;

若所述资源受体修改所述资源供体已更新的资源，则根据修改类型，从所述标识管理中心获取对应的修改类型标识并将所述修改类型标识携带在修改结果信息中发送给所述资源控制中心；If the resource acceptor modifies the resource that has been updated by the resource provider, obtain the corresponding modification type identifier from the identifier management center according to the modification type, and carry the modified type identifier in the modification result information and send it to the Resource control center;

资源供体更新已提供给资源受体的资源后，直接触发资源控制中心向资源受体发送资源凭证请求；After the resource donor updates the resources that have been provided to the resource acceptor, the resource control center is directly triggered to send a resource credential request to the resource acceptor;

所述资源控制中心接收所述通知后，指示所述资源供体向所述资源受体提供所述资源供体已更新的资源；After receiving the notification, the resource control center instructs the resource donor to provide the resource resource with the resource that the resource donor has updated;

其中，所述资源供体向所述资源受体提供所述资源供体已更新的资源后，将已更新的资源提供给所述资源管理中心存储。After the resource donor provides the resource donor with the updated resource of the resource donor, the updated resource is provided to the resource management center for storage.

所述资源受体接收所述资源凭证请求后，向资源受体管理器发送所述资源凭证请求；After receiving the resource credential request, the resource acceptor sends the resource credential request to the resource acceptor manager;

若所述修改类型标识为永久性标识，则所述资源控制中心将所述修改结果信息发送至所述资源供体； And if the modification type identifier is a permanent identifier, the resource control center sends the modification result information to the resource donor;

所述资源供体提供新资源至所述资源管理中心后，触发所述资源管理中心根据获取的资源供体与资源受体对照表，确定目标资源受体并向所述目标资源受体发送所述新资源；After the resource provider provides new resources to the resource management center, triggering the resource management center to determine a target resource receptor and send the target resource to the target resource receptor according to the obtained resource donor and resource receptor comparison table. New resources;

若非目标资源受体向所述资源控制中心发送新资源请求；则所述资源控制中心指示所述非目标资源受体向所述资源管理中心发送资源凭证请求；And if the non-target resource acceptor sends a new resource request to the resource control center; the resource control center instructs the non-target resource acceptor to send a resource credential request to the resource management center;

所述资源管理中心接收所述资源凭证请求后，向所述非目标资源受体反馈资源凭证响应消息；其中，所述消息中携带了授权凭证信息。After receiving the resource credential request, the resource management center feeds back a resource credential response message to the non-target resource acceptor; wherein the message carries the authorization credential information.

所述非目标资源受体获取授权凭证后，通知所述资源控制中心；Notifying the resource control center after the non-target resource acceptor obtains the authorization credential;

所述资源控制中心指示所述资源管理中心向所述非目标资源受体提供所述新资源；The resource control center instructing the resource management center to provide the new resource to the non-target resource recipient;

若所述资源受体修改所述新资源，则根据修改类型，从所述标识管理中心获取对应的修改类型标识并将所述修改类型标识携带在修改结果信息中发送给所述资源控制中心；If the resource resource modifies the new resource, the corresponding modification type identifier is obtained from the identity management center according to the modification type, and the modified type identifier is carried in the modification result information and sent to the resource control center;

若所述资源供体同意修改结果，则向所述资源控制中心反馈修改结果响应消息。If the resource donor agrees to modify the result, feedback the modified result response to the resource control center Message.

其中，所述资源管理中心获取的资源供体与资源受体对照表的方式为：所述资源管理中心自身配置资源供体与资源受体对照表或者通过第三方实体(映射关系服务器)获取资源供体与资源受体对照表。The manner in which the resource management center obtains the resource donor and resource recipient comparison table is: the resource management center itself configures a resource donor and resource receptor comparison table or acquires resources through a third-party entity (map relationship server) Donor and resource receptor comparison table.

其中，所述资源管理中心获取的资源供体与资源受体对照表后向所述资源控制中心发送，进行实时或定时同步。The resource donor and resource recipient comparison table obtained by the resource management center is sent to the resource control center for real-time or timing synchronization.

所述资源供体获取新资源及资源供体与资源受体对照表后，确定目标资源受体并向所述目标资源受体发送所述新资源；After the resource donor obtains the new resource and the resource donor and resource receptor comparison table, the target resource receptor is determined and the new resource is sent to the target resource recipient;

所述资源控制中心指示所述资源供体向所述非目标资源受体提供所述新资源；The resource control center instructing the resource donor to provide the new resource to the non-target resource acceptor;

其中，所述资源供体向所述非目标资源受体提供所述新资源后，将所述新资源发送至所述资源管理中心并由所述资源管理中心进行存储。After the resource donor provides the new resource to the non-target resource receiver, the new resource is sent to the resource management center and stored by the resource management center.

其中，所述资源供体获取资源供体与资源受体对照表的方式为：所述资源供体从所述资源管理中心获取所述资源供体与资源受体对照表或者所述资源供体自身存储所述资源供体与资源受体对照表。The manner in which the resource donor obtains the resource donor and resource receptor comparison table is: the resource donor acquires the resource donor and resource receptor comparison table or the resource donor from the resource management center The resource donor and resource receptor comparison table is stored by itself.

其中，资源供体与资源受体对照表，如表1所示：Among them, the resource donor and resource receptor comparison table, as shown in Table 1:

资源供体Resource donor 目标资源受体Target resource receptor 资源供体1Resource donor 1 资源受体AResource receptor A 资源供体2Resource donor 2 资源受体BResource receptor B 资源供体3Resource donor 3 资源受体cResource receptor c ：: ：: 资源供体nResource donor n 资源受体ZResource receptor Z

若非目标资源受体获取所述新资源时，则向资源受体管理器发送新资源请求；所述资源受体管理器接收所述新资源请求后，向所述资源控制中心发送所述新资源请求；Sending a new resource request to the resource acceptor manager if the non-target resource acceptor acquires the new resource; and sending, by the resource acceptor manager, the new resource request to the resource control center New resource request;

所述资源控制中心指示所述资源受体管理器向所述资源管理中心发送资源凭证请求；The resource control center instructs the resource acceptor manager to send a resource credential request to the resource management center;

所述资源管理中心接收所述资源凭证请求后，向所述资源受体管理器反馈资源凭证响应消息；其中，所述消息中携带了授权凭证信息；After receiving the resource credential request, the resource management center feeds back a resource credential response message to the resource acceptor manager, where the message carries the credential credential information;

所述资源受体管理器获取授权凭证后，通知所述资源控制中心；After the resource receptor manager obtains the authorization credential, notifying the resource control center;

若非目标资源受体获取所述新资源时，则向资源受体管理器发送新资源请求；所述资源受体管理器接收所述新资源请求后，向所述资源控制中心发送所述新资源请求； Sending a new resource request to the resource acceptor manager if the non-target resource acceptor acquires the new resource; and sending, by the resource acceptor manager, the new resource to the resource control center after receiving the new resource request Request

其中，所述资源供体向所述非目标资源受体提供所述新资源后，将所述新资源发送至所述资源管理中心存储。After the resource donor provides the new resource to the non-target resource receiver, the new resource is sent to the resource management center for storage.

资源供体更新已提供给资源受体的资源并将更新的资源放入资源管理中心后，触发资源受体向资源控制中心发送资源凭证请求；After the resource donor updates the resources that have been provided to the resource acceptor and puts the updated resources into the resource management center, the resource acceptor is triggered to send a resource credential request to the resource control center;

所述资源控制中心反馈资源凭证响应消息给所述资源受体并同时指示所述资源管理中心向所述资源受体提供已更新的资源； The resource control center feeds back a resource credential response message to the resource acceptor and simultaneously instructs the resource management center to provide the updated resource to the resource acceptor;

其中，所述资源控制中心反馈资源凭证响应消息给所述资源受体之前，还包括：所述资源受体向所述资源控制中心支付一定的费用。Before the resource control center feeds back the resource credential response message to the resource acceptor, the method further includes: the resource acceptor paying a certain fee to the resource control center.

其中，所述资源凭证响应消息中携带授权凭证信息。The resource credential response message carries the authorization credential information.

其中，资源供体更新已提供给资源受体的资源并将更新的资源放入资源管理中心后，触发资源受体向资源控制中心发送资源凭证请求的过程为：After the resource donor updates the resource that has been provided to the resource acceptor and puts the updated resource into the resource management center, the process of triggering the resource acceptor to send the resource credential request to the resource control center is:

资源供体更新已提供给资源受体的资源并将更新的资源放入资源管理中心后，向所述资源受体发送资源凭证请求；After the resource donor updates the resource that has been provided to the resource acceptor and puts the updated resource into the resource management center, sends a resource credential request to the resource acceptor;

所述资源受体向所述资源控制中心发送所述资源凭证请求。The resource acceptor sends the resource credential request to the resource control center.

资源供体更新已提供给资源受体的资源并将更新的资源放入资源管理中心后，触发资源受体向资源受体管理器发送资源凭证请求；After the resource donor updates the resources that have been provided to the resource acceptor and puts the updated resources into the resource management center, the resource acceptor is triggered to send a resource credential request to the resource acceptor manager;

所述资源受体管理器向资源控制中心发送资源凭证请求；The resource acceptor manager sends a resource credential request to the resource control center;

所述资源控制中心反馈资源凭证响应消息给所述资源受体管理器并指示所述资源管理中心向所述资源受体提供已更新的资源；其中，所述资源凭证响应消息中携带授权凭证信息；The resource control center feeds back a resource credential response message to the resource acceptor manager and instructs the resource management center to provide the resource resource with updated resources; wherein the resource credential response The message carries the authorization credential information;

资源供体更新已提供给资源受体的资源后，触发资源受体向资源控制中心发送资源凭证请求；After the resource donor updates the resources that have been provided to the resource acceptor, the resource acceptor is triggered to send a resource credential request to the resource control center;

所述资源控制中心反馈资源凭证响应消息给所述资源受体并同时指示所述资源供体向所述资源受体提供已更新的资源；The resource control center feeds back a resource credential response message to the resource acceptor and simultaneously instructs the resource donor to provide the updated resource to the resource acceptor;

其中，所述资源控制中心接收所述修改结果响应消息后，控制所述资源受体将所述修改结果上传至所述资源管理中心。The resource control center controls the resource after receiving the modification result response message. Uploading the modified result to the resource management center.

资源供体更新已提供给资源受体的资源后，触发资源受体向资源受体管理器发送资源凭证请求；After the resource donor updates the resources that have been provided to the resource acceptor, triggering the resource acceptor to send a resource credential request to the resource acceptor manager;

所述资源控制中心反馈资源凭证响应消息给所述资源受体管理器并指示所述资源供体向所述资源受体提供已更新的资源；其中，所述资源凭证响应消息中携带授权凭证信息；The resource control center feeds back a resource credential response message to the resource acceptor manager and instructs the resource donor to provide the updated resource to the resource acceptor; wherein the resource credential response message carries the credential credential information ;

其中，若所述修改类型标识为临时性标识，则所述资源控制中心指示所述资源管理中心拒绝接收所述资源受体提供的所述修改结果。 Wherein, if the modification type identifier is a temporary identifier, the resource control center instructs the resource management center to refuse to receive the modification result provided by the resource receiver.

若非目标资源受体获取所述新资源之前，向资源控制中心发送资源凭证请求；Sending a resource credential request to the resource control center before the non-target resource acceptor acquires the new resource;

所述资源控制中心反馈资源凭证响应消息给所述非目标资源受体并指示所述资源管理中心向所述非目标资源受体提供所述新资源；The resource control center feeds back a resource credential response message to the non-target resource acceptor and instructs the resource management center to provide the new resource to the non-target resource acceptor;

所述资源供体获取新资源及资源供体与资源受体对照表后，确定目标资源受体并向所述目标资源受体发送所述新资源；After the resource donor obtains the new resource and the resource donor and resource receptor comparison table, the target resource is determined. Responding to the recipient and transmitting the new resource to the target resource receptor;

所述资源控制中心反馈资源凭证响应消息给所述非目标资源受体并指示所述资源供体向所述非目标资源受体提供所述新资源；The resource control center feeds back a resource credential response message to the non-target resource acceptor and instructs the resource donor to provide the new resource to the non-target resource acceptor;

若非目标资源受体获取所述新资源之前，向资源受体管理器发送资源凭证请求； Sending a resource credential request to the resource acceptor manager before the non-target resource acceptor acquires the new resource;

所述资源控制中心反馈资源凭证响应消息给所述资源受体管理器并指示所述资源管理中心向所述资源受体提供所述新资源；其中，所述资源凭证响应消息中携带授权凭证信息；The resource control center feeds back a resource credential response message to the resource acceptor manager and instructs the resource management center to provide the new resource to the resource acceptor; wherein the resource credential response message carries the credential credential information ;

若非目标资源受体获取所述新资源之前，向资源受体管理器发送资源凭证请求；Sending a resource credential request to the resource acceptor manager before the non-target resource acceptor acquires the new resource;

所述资源控制中心反馈资源凭证响应消息给所述资源受体管理器并指示所述资源供体向所述非目标资源受体提供所述新资源；其中，所述资源凭证响应消息中携带授权凭证信息；The resource control center feeds back a resource credential response message to the resource acceptor manager and instructs the resource donor to provide the new resource to the non-target resource acceptor; wherein the resource credential response message carries an authorization Voucher information;

若所述资源受体修改所述新资源，则根据修改类型，从所述标识管理中心获取对应的修改类型标识并将所述修改类型标识携带在修改结果信息中发送给所述资源控制中心；If the resource acceptor modifies the new resource, according to the modification type, from the identity management center Obtaining a corresponding modification type identifier, and carrying the modification type identifier in the modification result information, and sending the identifier to the resource control center;

下面进行举例进行详细说明：The following is an example to explain in detail:

例如：资源供体为教师、资源受体为学生、资源管理中心为教育资源管理平台、资源控制中心为教育资源控制器。当然，资源供体也可以是主课堂，资源受体也可以是辅课堂，这里不做限定，可以根据实际的情况而定。For example, resource donors are teachers, resource recipients are students, resource management centers are educational resource management platforms, and resource control centers are educational resource controllers. Of course, the resource donor can also be the main classroom, and the resource receptor can also be the auxiliary classroom. It is not limited here, and can be determined according to the actual situation.

教师通过教师端更新已提供给学生的增值测试题答案并将其放入教育资源管理平台，触发教育资源控制器向学生发送资源凭证请求；学生支付一定的费用后，从教育资源管理平台获取授权凭证并通知教育资源控制器；教育资源控制器收到通知后，指示教育资源管理平台向学生提供所述增值测试题答案。该方案也可以教师通过教师端更新已提供给学生的增值测试题答案后，直接触发教育资源控制器向学生发送资源凭证请求；学生支付一定的费用后，从教育资源管理平台获取授权凭证并通知教育资源控制器；教育资源控制器收到通知后，指示教师向学生提供所述增值测试题答案。若学生修改老师提供的更新已提供给学生的增值测试题答案，则向教育资源控制器发送修改结果信息；若是永久性修改，则教育资源控制器向老师发送该修改结果信息；若老师同意修改结果，则向教育资源控制器反馈修改结果响应消息；所述教育资源控制器接收所述修改结果响应消息后，控制学生将修改结果上传至所述教育资源管理平台。若为临时性修改，则所述教育资源控制器指示所述教育资源管理平台拒绝接收学生提供的所述修改结果。The teacher updates the answers to the value-added test questions that have been provided to the students through the teacher and puts them into the educational resource management platform, triggering the educational resource controller to send the resource certificate request to the students; after the students pay a certain fee, the authorization is obtained from the educational resource management platform. The voucher is notified to the educational resource controller; after receiving the notification, the educational resource controller instructs the educational resource management platform to provide the student with the answer to the value-added test question. The program can also directly trigger the educational resource controller to send a resource credential request to the student through the teacher to update the answer of the value-added test question that has been provided to the student; after the student pays a certain fee, the authorization certificate is obtained from the educational resource management platform and notified. The educational resource controller; after receiving the notification, the educational resource controller instructs the teacher to provide the student with the answer to the value-added test question. If the student modifies the answer provided by the teacher to the student for the value-added test question, the modification result information is sent to the education resource controller; if the modification is permanent, the education resource controller sends the modification result information to the teacher; if the teacher agrees to modify As a result, the modification result response message is fed back to the educational resource controller; after receiving the modification result response message, the educational resource controller controls the student to upload the modification result to the educational resource management platform. If In a temporary modification, the educational resource controller instructs the educational resource management platform to refuse to receive the modified result provided by the student.

另外，教师通过教师端更新已提供给学生的增值测试题答案并将其放入教育资源管理平台，触发教育资源控制器向学生的家长客户端(资源受体管理器)发送资源凭证请求，在征得家长同意的情况下，家长通过资源受体管理器，从教育资源管理平台获取授权凭证并通知教育资源控制器；教育资源控制器接收所述通知后，指示教育资源管理平台向学生提供所述增值测试题答案。该方案也可以教师通过教师端更新已提供给学生的增值测试题答案后，触发教育资源控制器向学生的家长客户端(资源受体管理器)发送资源凭证请求，在征得家长同意的情况下，家长通过资源受体管理器，从教育资源管理平台获取授权凭证并通知教育资源控制器；教育资源控制器接收所述通知后，指示教师向学生提供所述增值测试题答案。若学生修改老师提供的更新已提供给学生的增值测试题答案，则向教育资源控制器发送修改结果信息；若是永久性修改，则教育资源控制器向老师发送该修改结果信息；若老师同意修改结果，则向教育资源控制器反馈修改结果响应消息；所述教育资源控制器接收所述修改结果响应消息后，控制学生将修改结果上传至所述教育资源管理平台。若为临时性修改，则所述教育资源控制器指示所述教育资源管理平台拒绝接收学生提供的所述修改结果。In addition, the teacher updates the answer to the value-added test questions that have been provided to the student through the teacher and puts it into the educational resource management platform, triggering the educational resource controller to send a resource credential request to the student's parent client (resource receptor manager). With the consent of the parents, the parent obtains the authorization certificate from the educational resource management platform and notifies the educational resource controller through the resource receptor manager; after receiving the notification, the educational resource controller instructs the educational resource management platform to provide the student with the student The answer to the value-added test questions. The program may also trigger the educational resource controller to send a resource credential request to the student's parent client (resource receptor manager) through the teacher to update the answer to the value-added test question that has been provided to the student, in the case of obtaining parental consent. The parent obtains the authorization credential from the educational resource management platform and notifies the educational resource controller through the resource receptor manager; after receiving the notification, the educational resource controller instructs the teacher to provide the student with the answer to the value-added test question. If the student modifies the answer provided by the teacher to the student for the value-added test question, the modification result information is sent to the education resource controller; if the modification is permanent, the education resource controller sends the modification result information to the teacher; if the teacher agrees to modify As a result, the modification result response message is fed back to the educational resource controller; after receiving the modification result response message, the educational resource controller controls the student to upload the modification result to the educational resource management platform. If it is a temporary modification, the educational resource controller instructs the educational resource management platform to refuse to receive the modified result provided by the student.

另外，若教师提供了一套全新的测验题及答案至教育资源管理平台后，教育资源管理平台根据获取的教师与学生对照表，确定属于本班学生，则向本班学生发送该套全新的测验题及答案。若非本班学生向教育资源控制器发送该套全新的测验题及答案请求，则教育资源控制器指示非本班学生向教育资源管理平台发送资源凭证请求；非本班学生支付一定的费用后，从教育资源管理平台获取授权凭证并通知教育资源控制器；教育资源控制器指示教育资源管理平台向非本班学生提供该套全新的测验题及答案。该方案也可以教师提供了一套全新的测验题及答案后，直接根据教师与学生对照表，确定属于本班学生，则向本班学生发送该套全新的测验题及答案。若非本班学生向教育资源控制器发送该套全新的测验题及答案请求，则教育资源控制器指示非本班学生向教育资源管理平台发送资源凭证请求；非本班学生支付一定的费用后，从教育资源管理平台获取授权凭证并通知教育资源控制器；教育资源控制器指示教师向非本班学生提供该套全新的测验题及答案。若学生修改老师提供的该套全新的测验题及答案，则向教育资源控制器发送修改结果信息；若是永久性修改，则教育资源控制器向老师发送该修改结果信息；若老师同意修改结果，则向教育资源控制器反馈修改结果响应消息；所述教育资源控制器接收所述修改结果响应消息后，控制学生将修改结果上传至所述教育资源管理平台。若为临时性修改，则所述教育资源控制器指示所述教育资源管理平台拒绝接收学生提供的所述修改结果。In addition, if the teacher provides a new set of test questions and answers to the educational resource management platform, the education resource management platform determines the students belonging to the class according to the obtained teacher and student comparison table, and sends the brand new to the class. Quiz questions and answers. If the non-class student sends the new test question and answer request to the education resource controller, the education resource controller instructs the non-class student to send the resource certificate request to the educational resource management platform; after the non-class student pays a certain fee, Obtain authorization credentials from the educational resource management platform and notify the educational resource controller; the educational resource controller instructs the educational resource management platform to provide the new quiz questions and answers to the non-class students. The program can also provide a set of new test questions and answers, and directly determine the students who belong to the class according to the teacher and student comparison table, then send the new test questions and answers to the students. If the non-class student sends the new test question and answer request to the education resource controller, the education resource controller instructs the non-class student to the educational resource. The management platform sends a resource certificate request; after the non-class student pays a certain fee, the authorization resource is obtained from the education resource management platform and the education resource controller is notified; the education resource controller instructs the teacher to provide the new test question to the non-class student. And the answer. If the student modifies the new test questions and answers provided by the teacher, the modified result information is sent to the educational resource controller; if it is a permanent modification, the educational resource controller sends the modified result information to the teacher; if the teacher agrees to modify the result, Then, the modification result response message is fed back to the educational resource controller; after receiving the modification result response message, the educational resource controller controls the student to upload the modification result to the educational resource management platform. If it is a temporary modification, the educational resource controller instructs the educational resource management platform to refuse to receive the modified result provided by the student.

另外，若教师提供了一套全新的测验题及答案至教育资源管理平台后，教育资源管理平台根据获取的教师与学生对照表，确定属于本班学生，则向本班学生发送该套全新的测验题及答案。若非本班学生获取该套全新的测验题及答案时，通过家长客户端先家长发送新资源请求，若家长同意并且支付了一定的费用从教育资源管理平台获取授权凭证后，通知教育资源控制器；教育资源控制器指示教育资源管理平台向非本班学生提供该套全新的测验题及答案。该方案也可以教师提供了一套全新的测验题及答案后，直接根据教师与学生对照表，确定属于本班学生，则向本班学生发送该套全新的测验题及答案。若非本班学生获取该套全新的测验题及答案时，通过家长客户端先家长发送新资源请求，若家长同意并且支付了一定的费用从教育资源管理平台获取授权凭证后，通知教育资源控制器；教育资源控制器指示教师向非本班学生提供该套全新的测验题及答案。若学生修改老师提供的该套全新的测验题及答案，则向教育资源控制器发送修改结果信息；若是永久性修改，则教育资源控制器向老师发送该修改结果信息；若老师同意修改结果，则向教育资源控制器反馈修改结果响应消息；所述教育资源控制器接收所述修改结果响应消息后，控制学生将修改结果上传至所述教育资源管理平台。若为临时性修改，则所述教育资源控制器指示所述教育资源管理平台拒绝接收学生提供的所述修改结果。In addition, if the teacher provides a new set of test questions and answers to the educational resource management platform, the education resource management platform determines the students belonging to the class according to the obtained teacher and student comparison table, and sends the brand new to the class. Quiz questions and answers. If the class does not receive the new test questions and answers, the parent client sends a new resource request through the parent client. If the parent agrees and pays a certain fee to obtain the authorization certificate from the education resource management platform, notify the education resource controller. The educational resource controller instructs the educational resource management platform to provide the new quiz questions and answers to non-class students. The program can also provide a set of new test questions and answers, and directly determine the students who belong to the class according to the teacher and student comparison table, then send the new test questions and answers to the students. If the class does not receive the new test questions and answers, the parent client sends a new resource request through the parent client. If the parent agrees and pays a certain fee to obtain the authorization certificate from the education resource management platform, notify the education resource controller. The educational resource controller instructs the teacher to provide the new quiz and answers to the non-class students. If the student modifies the new test questions and answers provided by the teacher, the modified result information is sent to the educational resource controller; if it is a permanent modification, the educational resource controller sends the modified result information to the teacher; if the teacher agrees to modify the result, Then, the modification result response message is fed back to the educational resource controller; after receiving the modification result response message, the educational resource controller controls the student to upload the modification result to the educational resource management platform. If it is a temporary modification, the educational resource controller instructs the educational resource management platform to refuse to receive the modified result provided by the student.

另外，若教师已更新提供给学生的增值测试题答案并上传至教育资源管理平台后，触发学生向教育资源控制器发送资源凭证请求，学生通过支付一定的费用，从教育资源控制器中获取授权凭证后，教育资源控制器指示教育资源管理平台向学生提供已更新增值测试题答案。该方案还可以为若教师已更新提供给学生的增值测试题答案并上传至教育资源管理平台后，触发学生通过家长客户端向家长发送资源凭证请求，在征得家长同意并且家长支付了一定费用的前提下，从教育资源控制器获取授权凭证；教育资源控制器指示教育资源管理平台向学生提供已更新增值测试题答案。若学生修改老师提供的更新已提供给学生的增值测试题答案，则向教育资源控制器发送修改结果信息；若是永久性修改，则教育资源控制器向老师发送该修改结果信息；若老师同意修改结果，则向教育资源控制器反馈修改结果响应消息；所述教育资源控制器接收所述修改结果响应消息后，控制学生将修改结果上传至所述教育资源管理平台。若为临时性修改，则所述教育资源控制器指示所述教育资源管理平台拒绝接收学生提供的所述修改结果In addition, if the teacher has updated the answer to the value-added test questions provided to the student and uploads it to the educational resource management platform, the student is triggered to send a resource certificate request to the educational resource controller, and the student pays a certain amount. Cost, after obtaining the authorization certificate from the educational resource controller, the education resource controller instructs the educational resource management platform to provide the student with the updated value-added test answer. The program may also trigger a student to send a resource credential request to the parent through the parent client if the teacher has updated the answer to the value-added test question provided to the student and uploads it to the educational resource management platform, and the parent agrees and the parent pays a fee. Under the premise, the authorization certificate is obtained from the educational resource controller; the educational resource controller instructs the educational resource management platform to provide the student with the updated value-added test answer. If the student modifies the answer provided by the teacher to the student for the value-added test question, the modification result information is sent to the education resource controller; if the modification is permanent, the education resource controller sends the modification result information to the teacher; if the teacher agrees to modify As a result, the modification result response message is fed back to the educational resource controller; after receiving the modification result response message, the educational resource controller controls the student to upload the modification result to the educational resource management platform. If it is a temporary modification, the educational resource controller instructs the educational resource management platform to refuse to receive the modified result provided by the student

另外，若教师已更新提供给学生的增值测试题答案后，触发学生向教育资源控制器发送资源凭证请求，学生通过支付一定的费用，从教育资源控制器中获取授权凭证后，教育资源控制器指示教师向学生提供已更新增值测试题答案。该方案还可以为若教师已更新提供给学生的增值测试题答案后，触发学生通过家长客户端向家长发送资源凭证请求，在征得家长同意并且家长支付了一定费用的前提下，从教育资源控制器获取授权凭证；教育资源控制器指示教师向学生提供已更新增值测试题答案。若学生修改老师提供的该套全新的测验题及答案，则向教育资源控制器发送修改结果信息；若是永久性修改，则教育资源控制器向老师发送该修改结果信息；若老师同意修改结果，则向教育资源控制器反馈修改结果响应消息；所述教育资源控制器接收所述修改结果响应消息后，控制学生将修改结果上传至所述教育资源管理平台。若为临时性修改，则所述教育资源控制器指示所述教育资源管理平台拒绝接收学生提供的所述修改结果。若学生修改老师提供的更新已提供给学生的增值测试题答案，则向教育资源控制器发送修改结果信息；若是永久性修改，则教育资源控制器向老师发送该修改结果信息；若老师同意修改结果，则向教育资源控制器反馈修改结果响应消息；所述教育资源控制器接收所述修改结果响应消息后，控制学生将修改结果上传至所述教育资源管理平台。若为临时性修改，则所述教育资源控制器指示所述教育资源管理平台拒绝接收学生提供的所述修改结果In addition, if the teacher has updated the answer to the value-added test questions provided to the student, the student is triggered to send a resource credential request to the educational resource controller, and the student obtains the authorization voucher from the educational resource controller by paying a certain fee, and the educational resource controller Instruct the teacher to provide the student with an updated value-added test answer. The program may also trigger a student to send a resource credential request to the parent through the parent client if the teacher has updated the answer to the value-added test question provided to the student, and obtain the parental consent and the parent pays a certain fee, from the educational resource. The controller obtains an authorization credential; the educational resource controller instructs the teacher to provide the student with an updated value-added test answer. If the student modifies the new test questions and answers provided by the teacher, the modified result information is sent to the educational resource controller; if it is a permanent modification, the educational resource controller sends the modified result information to the teacher; if the teacher agrees to modify the result, Then, the modification result response message is fed back to the educational resource controller; after receiving the modification result response message, the educational resource controller controls the student to upload the modification result to the educational resource management platform. If it is a temporary modification, the educational resource controller instructs the educational resource management platform to refuse to receive the modified result provided by the student. If the student modifies the answer provided by the teacher to the student for the value-added test question, the modification result information is sent to the education resource controller; if the modification is permanent, the education resource controller sends the modification result information to the teacher; if the teacher agrees to modify As a result, the modification result response message is fed back to the education resource controller; after the education resource controller receives the modification result response message, the control student will modify The results are uploaded to the educational resource management platform. If it is a temporary modification, the educational resource controller instructs the educational resource management platform to refuse to receive the modified result provided by the student

另外，若教师提供了一套全新的测验题及答案至教育资源管理平台后，教育资源管理平台根据获取的教师与学生对照表，确定属于本班学生，则向本班学生发送该套全新的测验题及答案。若非本班学生获取该套全新的测验题及答案时，向教育资源控制器发送资源凭证请求；所述非本班学生在支付了一定费用后，从教育资源控制器获取授权凭证；教育资源控制器指示教育资源管理平台向学生提供该套全新的测验题及答案。该方案还可以为：若教师提供了一套全新的测验题及答案并获取教师与学生对照表，确定属于本班学生，则向本班学生发送该套全新的测验题及答案。若非本班学生获取该套全新的测验题及答案时，向教育资源控制器发送资源凭证请求；所述非本班学生在支付了一定费用后，从教育资源控制器获取授权凭证；教育资源控制器指示教师向学生提供该套全新的测验题及答案。若学生修改老师提供的该套全新的测验题及答案，则向教育资源控制器发送修改结果信息；若是永久性修改，则教育资源控制器向老师发送该修改结果信息；若老师同意修改结果，则向教育资源控制器反馈修改结果响应消息；所述教育资源控制器接收所述修改结果响应消息后，控制学生将修改结果上传至所述教育资源管理平台。若为临时性修改，则所述教育资源控制器指示所述教育资源管理平台拒绝接收学生提供的所述修改结果。In addition, if the teacher provides a new set of test questions and answers to the educational resource management platform, the education resource management platform determines the students belonging to the class according to the obtained teacher and student comparison table, and sends the brand new to the class. Quiz questions and answers. If the non-class student obtains the new set of quiz questions and answers, the resource resource request is sent to the educational resource controller; the non-class student obtains the authorization voucher from the educational resource controller after paying a certain fee; the educational resource control Instructs the educational resource management platform to provide students with the new set of quizzes and answers. The program can also be: if the teacher provides a new set of test questions and answers and obtain a teacher-student comparison table to determine the students belonging to the class, then send the set of new test questions and answers to the class. If the non-class student obtains the new set of quiz questions and answers, the resource resource request is sent to the educational resource controller; the non-class student obtains the authorization voucher from the educational resource controller after paying a certain fee; the educational resource control The instructor instructs the teacher to provide the student with the new set of quizzes and answers. If the student modifies the new test questions and answers provided by the teacher, the modified result information is sent to the educational resource controller; if it is a permanent modification, the educational resource controller sends the modified result information to the teacher; if the teacher agrees to modify the result, Then, the modification result response message is fed back to the educational resource controller; after receiving the modification result response message, the educational resource controller controls the student to upload the modification result to the educational resource management platform. If it is a temporary modification, the educational resource controller instructs the educational resource management platform to refuse to receive the modified result provided by the student.

另外，若教师提供了一套全新的测验题及答案至教育资源管理平台后，教育资源管理平台根据获取的教师与学生对照表，确定属于本班学生，则向本班学生发送该套全新的测验题及答案。若非本班学生获取该套全新的测验题及答案时，则通过家长客户端向家长发送资源凭证请求，在征得家长同意并且家长支付了一定费用的前提下，从教育资源控制器获取授权凭证；教育资源控制器指示教育资源管理平台向学生提供该套全新的测验题及答案。另外，若教师提供了一套全新的测验题及答案并获取教师与学生对照表，确定属于本班学生，则向本班学生发送该套全新的测验题及答案。若非本班学生获取该套全新的测验题及答案时，则通过家长客户端向家长发送资源凭证请求，在征得家长同意并且家长支付了一定费用的前提下，从教育资源控制器获取授权凭证；教育资源控制器指示教师向学生提供该套全新的测验题及答案。若学生修改老师提供的该套全新的测验题及答案，则向教育资源控制器发送修改结果信息；若是永久性修改，则教育资源控制器向老师发送该修改结果信息；若老师同意修改结果，则向教育资源控制器反馈修改结果响应消息；所述教育资源控制器接收所述修改结果响应消息后，控制学生将修改结果上传至所述教育资源管理平台。若为临时性修改，则所述教育资源控制器指示所述教育资源管理平台拒绝接收学生提供的所述修改结果。In addition, if the teacher provides a new set of test questions and answers to the educational resource management platform, the education resource management platform determines the students belonging to the class according to the obtained teacher and student comparison table, and sends the brand new to the class. Quiz questions and answers. If the non-class students obtain the new test questions and answers, they will send a resource certificate request to the parents through the parent client, and obtain the authorization certificate from the education resource controller on the premise that the parents agree and the parents pay a certain fee. The educational resource controller instructs the educational resource management platform to provide the student with the new set of quizzes and answers. In addition, if the teacher provides a new set of quiz questions and answers and obtains a teacher-student comparison table to determine the students who belong to the class, send the new quiz questions and answers to the class. If the non-class students obtain the new test questions and answers, they will send a resource certificate request to the parents through the parent client, and obtain the authorization certificate from the education resource controller on the premise that the parents agree and the parents pay a certain fee. Education capital The source controller instructs the teacher to provide the student with the new set of quiz questions and answers. If the student modifies the new test questions and answers provided by the teacher, the modified result information is sent to the educational resource controller; if it is a permanent modification, the educational resource controller sends the modified result information to the teacher; if the teacher agrees to modify the result, Then, the modification result response message is fed back to the educational resource controller; after receiving the modification result response message, the educational resource controller controls the student to upload the modification result to the educational resource management platform. If it is a temporary modification, the educational resource controller instructs the educational resource management platform to refuse to receive the modified result provided by the student.

另外，所述资源受体通过向所述资源管理中心支付一定的费用，获取所述授权凭证的方式，增了系统运营方的收入。In addition, the resource receiver increases the revenue of the system operator by paying a certain fee to the resource management center and obtaining the authorization certificate.

以上所述仅为本发明的优选实施例而已，并不用于限制本发明，对于本领域的技术人员来说，本发明可以有各种更改和变化。凡在本发明的精神和原则之内，所作的任何修改、等同替换、改进等，均应包含在本发明的保护范围之内。 The above description is only the preferred embodiment of the present invention, and is not intended to limit the present invention, and various modifications and changes can be made to the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and scope of the present invention are intended to be included within the scope of the present invention.

Claims

A resource control architecture based on identity service identifiers, including: resource donors, resource receptors, resource management centers, resource control centers, and identity management centers; wherein resource donors, resource recipients, and resource management centers are in pairs Interconnected; resource control centers are connected to resource donors, resource receptors, and resource management centers; and the identity management centers are connected to resource control centers, resource donors, and resource recipients.

The architecture of claim 1 wherein the resource donors are one or more; the resource recipients are one or more.

The architecture according to claim 1, wherein the resource donor is a resource provider; the resource acceptor is a resource receiver; the resource management center is a management resource entity; and the resource control center is a control resource interaction entity; The physical and resource receptors can be mutually transformed; the identity management center provides the resource donor, the identity identifier of the resource receptor, and the service identifier.

A method for resource control architecture based on identity service identity according to any one of claims 1 to 3, characterized in that it comprises the following steps:

The resource donor and the resource receiver obtain their corresponding identity identifiers from the identity management center in advance; meanwhile, the identity management center synchronizes the resource donors, the resource recipients, and their corresponding identity identifiers to the resource control center;

The resource control center obtains the resource control strategy;

The resource control center controls the interaction of resources between resource donors, resource recipients, resource management centers, and identity management centers according to the acquired resource control policies.

The method according to claim 4, wherein the resource control center acquires the resource control policy by: the resource control center itself configuring a resource control policy or the resource control center acquiring the resource control policy from the policy controller.

The method according to claim 4, wherein the process of controlling resource interaction between the resource donor, the resource acceptor, the resource management center, and the identity management center according to the acquired resource control policy is:

After the resource donor updates the resources that have been provided to the resource acceptor and puts the updated resources into the resource management center, the resource control center is triggered to send a resource credential request to the resource acceptor;

After receiving the resource credential request, the resource acceptor obtains the authorization credential from the resource management center and Notifying the resource control center;

After receiving the notification, the resource control center instructs the resource management center to provide the resource resource with the resource that the resource donor has updated;

If the resource acceptor modifies the resource that has been updated by the resource provider, obtain the corresponding modification type identifier from the identifier management center according to the modification type, and carry the modified type identifier in the modification result information and send it to the Resource control center;

And if the modification type identifier is a permanent identifier, the resource control center sends the modification result information to the resource donor;

If the resource donor agrees to modify the result, the modification result response message is fed back to the resource control center.

The method according to claim 6, wherein the resource control center controls the resource receptor to upload the modification result to the resource management center after receiving the modification result response message.

The method according to claim 6, wherein the modification type comprises: permanent modification, temporary modification; and the modification type identifier comprises: a permanent modification identifier, and a temporary modification identifier.

The method according to claim 6, wherein if the modification type identifier is a temporary identifier, the resource control center instructs the resource management center to refuse to receive the modification result provided by the resource receptor.

The method according to claim 6, wherein the resource acceptor obtains the authorization credential from the resource management center by acquiring the authorization credential by paying a certain fee to the resource management center.

The method according to claim 6, wherein after the resource donor updates the resources that have been provided to the resource acceptor and puts the updated resources into the resource management center, the resource control center is triggered to send the resource credential request to the resource acceptor. The process is:

After the resource donor updates the resource that has been provided to the resource acceptor and puts the updated resource into the resource management center, sends a resource credential request to the resource control center;

The resource control center sends the resource credential request to the resource acceptor.

After the resource donor updates the resources that have been provided to the resource acceptor and puts the updated resources into the resource management center, the process of triggering the resource control center to send the resource credential request to the resource acceptor is:

After the resource donor updates the resources that have been provided to the resource acceptor and puts the updated resources into the resource management center, the resource management center sends a resource credential request to the resource control center;

After receiving the resource credential request, the resource acceptor sends the resource credential request to the resource acceptor manager;

After receiving the resource credential request, the resource acceptor manager obtains an authorization credential from the resource management center and notifies the resource control center;

The method of claim 4 wherein:

After the resource donor updates the resources that have been provided to the resource receptor, it directly triggers the resource control center to the resource. The recipient sends a resource credential request;

After receiving the resource credential request, the resource acceptor obtains an authorization credential from the resource management center and notifies the resource control center;

After receiving the notification, the resource control center instructs the resource donor to provide the resource resource with the resource that the resource donor has updated;

The method of claim 14 wherein:

After the resource donor provides the resource donor with the resource updated by the resource donor, the updated resource is provided to the resource management center for storage.

After the resource donor updates the resources that have been provided to the resource acceptor, the resource control center is directly triggered to send a resource credential request to the resource acceptor;

And if the resource identifier modifies the resource that has been updated by the resource provider, acquiring a corresponding modification type identifier from the identifier management center according to the modification type, and carrying the modified type identifier in the modification node. The information is sent to the resource control center;

The method of claim 16 wherein:

After the resource provider provides new resources to the resource management center, triggering the resource management center to determine a target resource receptor and send the target resource to the target resource receptor according to the obtained resource donor and resource receptor comparison table. New resources;

And if the non-target resource acceptor sends a new resource request to the resource control center; the resource control center instructs the non-target resource acceptor to send a resource credential request to the resource management center;

After receiving the resource credential request, the resource management center feeds back a resource credential response message to the non-target resource acceptor; wherein the message carries the authorization credential information.

Notifying the resource control center after the non-target resource acceptor obtains the authorization credential;

The resource control center instructing the resource management center to provide the new resource to the non-target resource recipient;

If the resource resource modifies the new resource, the corresponding modification type identifier is obtained from the identity management center according to the modification type, and the modified type identifier is carried in the modification result information and sent to the resource control center;

The method according to claim 18, wherein the resource provider and the resource recipient comparison table obtained by the resource management center are: the resource management center itself configures a resource donor and resource receptor comparison table or The resource donor and resource receptor comparison table is obtained by mapping the relational server.

The method according to claim 18, wherein the resource donor and resource recipient comparison table acquired by the resource management center is sent to the resource control center for real-time or timing synchronization.

After the resource donor obtains the new resource and the resource donor and resource receptor comparison table, the target resource receptor is determined and the new resource is sent to the target resource recipient;

After receiving the resource credential request, the resource management center feeds back a resource credential response message to the non-target resource receiver; wherein the message carries the authorization credential information;

The resource control center instructing the resource donor to provide the new resource to the non-target resource acceptor;

The method according to claim 21, wherein after the resource donor provides the new resource to the non-target resource acceptor, the new resource is sent to the resource management center and is used by the resource The management center stores.

The method of claim 21 wherein said resource donor obtains resources for The method for comparing the body and the resource receptor is: the resource donor obtains the resource donor and resource receptor comparison table from the resource management center, or the resource donor itself stores the resource donor and resource Body comparison table.

Sending a new resource request to the resource acceptor manager if the non-target resource acceptor acquires the new resource; and sending, by the resource acceptor manager, the new resource to the resource control center after receiving the new resource request request;

The resource control center instructs the resource acceptor manager to send a resource credential request to the resource management center;

After receiving the resource credential request, the resource management center feeds back a resource credential response message to the resource acceptor manager, where the message carries the credential credential information;

After the resource receptor manager obtains the authorization credential, notifying the resource control center;

The method according to claim 4, wherein the resource control center controls the resource donor, the resource acceptor, the resource management center, and the identification management center according to the acquired resource control policy. The process of resource interaction is:

The method according to claim 25, wherein after the resource donor provides the new resource to the non-target resource acceptor, the new resource is sent to the resource management center for storage.

After the resource donor updates the resources that have been provided to the resource acceptor and puts the updated resources into the resource management center, the resource acceptor is triggered to send a resource credential request to the resource control center;

The resource control center feeds back a resource credential response message to the resource acceptor and simultaneously indicates the The resource management center provides the updated resource to the resource receiver; wherein the resource credential response message carries the authorization credential information;

The method according to claim 27, wherein before the resource control center feeds back the resource credential response message to the resource acceptor, the method further comprises: the resource acceptor paying a certain fee to the resource control center.

The method according to claim 27, wherein the resource donor updates the resource that has been provided to the resource acceptor and puts the updated resource into the resource management center, triggering the resource acceptor to send the resource credential request to the resource control center. The process is:

After the resource donor updates the resource that has been provided to the resource acceptor and puts the updated resource into the resource management center, sends a resource credential request to the resource acceptor;

The resource acceptor sends the resource credential request to the resource control center.

After the resource donor updates the resources that have been provided to the resource acceptor and puts the updated resources into the resource management center, the resource acceptor is triggered to send a resource credential request to the resource acceptor manager;

The resource acceptor manager sends a resource credential request to the resource control center;

The resource control center feeds back a resource credential response message to the resource acceptor manager and instructs the resource management center to provide the resource resource with updated resources;

The method according to claim 30, wherein the resource credential response message carries authorization credential information.

After the resource donor updates the resources that have been provided to the resource acceptor, the resource acceptor is triggered to send a resource credential request to the resource control center;

The resource control center feeds back a resource credential response message to the resource acceptor and simultaneously instructs the resource donor to provide the updated resource to the resource acceptor;

The method of claim 32 wherein:

After the resource donor updates the resources that have been provided to the resource receptor, triggering the resource receptor to the resource receptor management Transmitting a resource credential request;

The resource control center feeds back a resource credential response message to the resource acceptor manager and instructs the resource donor to provide the updated resource to the resource acceptor; wherein the resource credential response message carries the credential credential information ;

The method of claim 34 wherein:

Sending a resource credential request to the resource control center before the non-target resource acceptor acquires the new resource;

The resource control center feeds back a resource credential response message to the non-target resource acceptor and instructs the resource management center to provide the new resource to the non-target resource acceptor; wherein the resource credential response message carries an authorization Voucher information;

If the resource resource modifies the new resource, the corresponding modification type identifier is obtained from the identity management center according to the modification type, and the modified type identifier is carried in the modification result information and sent to the The resource control center;

The method according to claim 4, wherein the process of controlling resource interaction between the resource donor, the resource receptor, and the resource management center according to the acquired resource control policy is:

The resource control center feeds back a resource credential response message to the non-target resource acceptor and instructs the resource donor to provide the new resource to the non-target resource acceptor; wherein the resource credential response message carries an authorization Voucher information;

The method of claim 36 wherein:

After the resource donor provides the new resource to the non-target resource receiver, the new resource is sent to the resource management center for storage.

The method according to claim 4, wherein the resource control center controls the interaction of resources between the resource donor, the resource acceptor, the resource management center, and the identity management center according to the acquired resource control policy:

Sending a resource credential request to the resource acceptor manager before the non-target resource acceptor acquires the new resource;

The resource control center feeds back a resource credential response message to the resource acceptor manager and instructs the resource management center to provide the new resource to the resource acceptor; wherein the resource credential response message carries the credential credential information ;

The resource control center feeds back a resource credential response message to the resource acceptor manager and instructs the resource donor to provide the new resource to the non-target resource acceptor; wherein the resource credential response message carries an authorization Voucher information;

If the resource acceptor modifies the new resource, according to the modification type, from the identity management center Obtaining a corresponding modification type identifier, and carrying the modification type identifier in the modification result information, and sending the identifier to the resource control center;

The method according to claim 39, wherein the resource control center controls the resource receptor to upload the modification result to the resource management center after receiving the modification result response message.