基于OAuth2.0的资源共享机制RSBO

The Resource Sharing Mechanism Based on OAuth2.0 (RSBO)

共享资源重要的问题就是安全,本文针对目前主流的资源共享机制存的安全问题,如身份认证授权安全问题、用户信息泄露等问题,同时当资源在不同用户不同平台间进行共享时,用户需对资源进行分散重复存储等,造成冗余存储及空间浪费。本文针这些问题,提出了一种基于OAuth2.0协议的资源共享机制RSBO(Resource Sharing based OAuth2.0)并对其进行阐述,RSBO利用OAuth2.0协议认证授权的访问令牌原理,为共享资源创建资源令牌,该机制解决了用户信息泄露及冗余存储等问题,一次授权,实现多用户跨平台的资源共享。

Safety is a key problem to resource sharing. This article analyses safety problems of popular resource sharing mechanisms. To solve these problems, such as identity authorization, account information leak （username and passwords）, and duplication of storage, this article brings forward a resource sharing mechanism named RSBO based on OAuth2.0 protocols, and defines the process of resource sharing. This new mechanism utilizes OAuth2.0 protocols＇ authentication-authorization access token mechanism to create resource token for sharing resource, which solves identity authentication, authorization （without users＇ personal information） and redundant storage problems, and realizes resources sharing among different users and systems without involving user＇s private information.