Permission management and resource control

1. A computer-implemented method, comprising:

receiving, by a server, an association request initiated by a user of a private first account to associate the private first account with a second account;

identifying an account identifier of the second account based on the association request;

determining, by the server based upon the account identifier of the second account, that the second account is a public account accessible by other accounts;

in response to determining that the second account is a public account, associating the private first account with the second account based on the account identifier;

in response to associating the private first account with the second account, granting a partial permission to the private first account for accessing the second account;

receiving, by the server from the private first account, an operation request from the first account for the private first account to interact with the second account, the operation request comprises operation type information;

determining that the operation request corresponds to the partial permission granted to the private first account for accessing the second account and that the partial permission corresponds to the operation type information; and

performing, by the private first account via the server, an operation corresponding to the operation request to interact with the second account based upon the partial permission granted to the private first account for accessing the second account.

2. The computer-implemented method according to claim 1 , wherein the partial permission comprises at least one of:

permission to query resource information corresponding to the second account; and

permission to transfer a resource to the second account.

3. The computer-implemented method of claim 1 , comprising:

associating the private first account with a plurality of second accounts; or

associating the second account with a plurality of private first accounts.

4. The computer-implemented method of claim 2 , comprising:

wherein the private first account is interacting with the second account when the operation request is received.

5. A non-transitory, computer-readable medium storing one or more instructions executable by a computer system to perform operations comprising:

receiving, by a server, an association request initiated by a user of a private first account to associate the private first account with a second account;

identifying an account identifier of the second account based on the association request;

determining, by the server based upon the account identifier of the second account, that the second account is a public account accessible by other accounts;

in response to determining that the second account is a public account, associating the private first account with the second account based on the account identifier;

in response to associating the private first account with the second account, granting a partial permission to the private first account for accessing the second account;

receiving, by the server from the private first account, an operation request from the first account for the private first account to interact with the second account, the operation request comprises operation type information;

determining that the operation request corresponds to the partial permission granted to the private first account for accessing the second account and that the partial permission corresponds to the operation type information; and

performing, by the private first account via the server, an operation corresponding to the operation request to interact with the second account based upon the partial permission granted to the private first account for accessing the second account.

6. The non-transitory, computer-readable medium of claim 5 , wherein the partial permission comprises at least one of:

permission to query resource information corresponding to the second account; and

permission to transfer a resource to the second account.

7. The non-transitory, computer-readable medium of claim 5 , comprising:

associating the private first account with a plurality of second accounts; or

associating the second account with a plurality of private first accounts.

8. The non-transitory, computer-readable medium of claim 6 , comprising:

wherein the private first account is interacting with the second account when the operation request is received.

9. A computer-implemented system, comprising:

one or more computers; and

one or more computer memory devices interoperably coupled with the one or more computers and having tangible, non-transitory, machine-readable media storing one or more instructions that, when executed by the one or more computers, perform one or more operations comprising:

receiving, by a server, an association request initiated by a user of a private first account to associate the private first account with a second account;

identifying an account identifier of the second account based on the association request;

determining, by the server based upon the account identifier of the second account, that the second account is a public account accessible by other accounts;

in response to determining that the second account is a public account, associating the private first account with the second account based on the account identifier;

in response to associating the private first account with the second account, granting a partial permission to the private first account for accessing the second account;

receiving, by the server from the private first account, an operation request from the first account for the private first account to interact with the second account, the operation request comprises operation type information;

determining that the operation request corresponds to the partial permission granted to the private first account for accessing the second account and that the partial permission corresponds to the operation type information; and

performing, by the private first account via the server, an operation corresponding to the operation request to interact with the second account based upon the partial permission granted to the private first account for accessing the second account.

10. The computer-implemented system of claim 9 , wherein the partial permission comprises at least one of:

permission to query resource information corresponding to the second account; and

permission to transfer a resource to the second account.

11. The computer-implemented system of claim 9 , comprising:

associating the private first account with a plurality of second accounts; or

associating the second account with a plurality of private first accounts.

12. The computer-implemented system of claim 10 , comprising:

wherein the private first account is interacting with the second account when the operation request is received.