Intersystem single sign-on

1. A method comprising:

under control of one or more computing devices comprising one or more processors:

receiving a request for a first service, the request including user identifier (ID) information associated with a second service, the user ID information including authentication information of a user;

verifying the request based on the user ID information and user ID mapping data associated with the first service and the second service, the user ID mapping data including a user information attribute and a privilege attribute for the user, the user information attribute including account information associated with the first service and the second service, the privilege attribute indicating a first resource access privilege of the user for accessing the first service during a session that is established using user ID information associated with the first service of the user; and

in response to the verifying, establishing one session for a computing device associated with the user to access the first service based on a second resource access privilege assigned to the user for accessing the first service during the one session, the first resource access privilege being higher than the second resource access privilege, wherein user administration of the first service and the second service is maintained by a first server of the first service and a second server of the second service, and the second resource access privilege is assigned by the second service to restrict the user to perform a transaction related to the first service.

2. The method of claim 1 , wherein the user ID information is generated based on a user ID associated with the second service and the user ID mapping data.

3. The method of claim 1 , wherein the first service includes payment of a transaction, the second service includes a consumer-to-consumer (C2C) service of the transaction, and the second resource access privilege restricts the user to the payment of the transaction during the one session.

4. The method of claim 3 , wherein the enabling the user to access the first service comprises enabling the user to access one or more portions of the first service that are associated the transaction.

5. The method of claim 1 , wherein the request includes a signature that includes a timestamp.

6. The method of claim 5 , further comprising:

validating the signature by comparing the timestamp of the signature with a timestamp of a previous signature of the user; and

enabling a user associated with the user ID information to access the first service after the validating the signature.

7. The method of claim 1 , wherein the second resource access privilege is assigned to prevent the user from performing transactions related to a third service via the second service.

8. One or more non-transitory computer-readable media storing computer-executable instructions that, when executed by one or more processors, instruct the one or more processors to perform acts comprising:

receiving a request for a first service, the request including a signature and a user ID information associated with a second service, the first service and the second service having a partnership for electronic commerce, wherein user administration of the first service and the second service is maintained by a first server of the first service and a second server of the second service;

verifying the request based on the user ID information and user ID mapping data associated with the first service and the second service, the user ID mapping data including a privilege attribute indicating a first resource access privilege of a user associated with the user ID information for accessing the first service during a session that is established using user ID information associated with the first service;

validating the signature by comparing a timestamp of the signature with a timestamp of a previous signature of the user; and

establishing one session to allow the user associated with the user ID information to access the first service based on a second resource access privilege assigned to the user for accessing the first service during the one session, the first resource access privilege being higher than the second resource access privilege, the second resource access privilege is assigned by the second service to restrict the user to perform a transaction related to the first service.

9. The one or more non-transitory computer-readable media of claim 8 , wherein the user ID information is generated based on a user ID associated with the second service and the user ID mapping data.

10. The one or more non-transitory computer-readable media of claim 8 , wherein the resource access privilege is determined based on session information associated with the user that is recorded by the first service.

11. The one or more non-transitory computer-readable media of claim 8 , wherein the first service is associated with a payment of a transaction, and the second service is associated with a consumer-to-consumer (C2C) service of the transaction.

12. The one or more non-transitory computer-readable media of claim 11 , wherein the enabling the user to access the first service comprises enabling the user to access one or more portions of the first service that are associated the transaction.

13. A system comprising:

one or more processors; and

memory to maintain a plurality of components executable by the one or more processors, the plurality of components comprising:

an ID verification unit that:

receives a request for a first service, the request including a signature and a user ID information associated with a second service, the first service and the second service having a partnership for electronic commerce, wherein user administration of the first service and the second service is maintained by a first server of the first service and a second server of the second service, and

verifies the request based on the user ID information and user ID mapping data associated with the first service and the second service, the user ID mapping data including a privilege attribute indicating a first resource access privilege of a user associated with the user ID information for accessing the first service during a session that is established using user ID information associated with the first service,

a privilege controller that assigns a resource access privilege for accessing the first service based on the user ID information, and

an ID signature verifier that:

validates the signature by comparing a timestamp of the signature with a timestamp of a previous signature of the user, and

establishes one session to allow the user associated with the user ID information to access the first service based on a second resource access privilege assigned to the user for accessing the first service during the one session, the first resource access privilege being higher than the second resource access privilege, the second resource access privilege is assigned by the second service to restrict the user to perform a transaction related to the first service.

14. The system of claim 13 , wherein the user ID information is generated based on a user ID associated with the second service and the user ID mapping data.

15. The system of claim 13 , wherein the resource access privilege is determined based on session information associated with the user that is recorded by the first service.

16. The system of claim 13 , wherein the first service is associated with a payment of a transaction, and the second service is associated with a consumer-to-consumer (C2C) service of the transaction.

17. The system of claim 16 , wherein the enabling the user to access the first service comprises enabling the user to access one or more portions of the first service that are associated the transaction.