ELECTRONIC DEVICE AND METHOD FOR IDENTIFYING SERVICE ACCESS

1 . An electronic device comprising:

at least one processor; and

a storage device coupled to the at least one processor and storing instructions for execution by the at least one processor to cause the at least one processor to:

in response to a user's login request from a terminal device, receive login information of the user, and perform a first-stage identification on the login information based on a front-end identification mechanism;

in response that the login information is determined to be authenticated, generate a token corresponding to the login information, wherein the token provides a read permission of at least one second-stage credential;

transmit the at least one second-stage credential of the user to the terminal device according to the token and the login information;

perform a second-stage identification on at least one second-stage credential to be identified transmitted by the terminal device based on at least one back-end identification mechanism; and

in response that the at least one second-stage credential to be identified is determined to be authenticated, accept the user's request for accessing at least one platform service.

2 . The electronic device according to claim 1 , wherein the at least one processor is further caused to:

in response that the login information or the at least one second-stage credential to be identified is determined to be not authenticated, reject the user's request for accessing the at least one platform service.

3 . The electronic device according to claim 1 , wherein the at least one processor is further caused to:

in response to a user's registration request from the terminal device, receive registration information and platform service information transmitted by the terminal device, encrypt the registration information, and convert the registration information into a first-stage credential; and

generate the second-stage credential of the at least one platform service according to the platform service information, and establish a mapping relationship between the first-stage credentials and the second-stage credentials.

4 . The electronic device according to claim 3 , wherein the at least one processor is further caused to:

determine whether the login information matches the first-stage credential;

in response that the login information matches the first-stage credential, determine that the login information is authenticated; and

in response that the login information does not match the first-stage credential, determine that the login information is not authenticated.

5 . The electronic device according to claim 4 , wherein the at least one processor is further caused to:

in response that the login information is authenticated, acquire the at least one second-stage credential to be identified transmitted by the terminal device according to the login information, and the mapping relationship between the first-stage credentials and the second-stage credentials; and

identify the at least one second-stage credential through at least one identification mechanism of the at least one platform service.

6 . The electronic device according to claim 5 , wherein the at least one processor is further caused to:

generate second stage identification information; and

generate the second-stage credential of each of the platform services by encrypting the second stage identification information based on the identification mechanism of each of the platform services.

7 . The electronic device according to claim 3 , wherein the first stage credentials and the second stage credentials are identification information in logical groups of Lightweight Directory Access Protocol.

8 . The electronic device according to claim 1 , wherein the front-end identification mechanism is integrated in the electronic device in a form of key/value group, and the at least one back-end identification mechanism is identification service provided by the platform service, each of the at least one back-end identification mechanism is accessed to the electronic device in a form of configuration file.

9 . A method for identifying service access implemented in an electronic device comprising:

in response to a user's login request from a terminal device, receiving login information of the user, and performing a first-stage identification on the login information based on a front-end identification mechanism;

in response that the login information is determined to be authenticated, generating a token corresponding to the login information, wherein the token provides a read permission of at least one second-stage credential;

transmitting the at least one second-stage credential of the user to the terminal device according to the token and the login information;

performing a second-stage identification on the at least one second-stage credential to be identified transmitted by the terminal device based on at least one back-end identification mechanism; and

in response that the at least one second-stage credential to be identified transmitted by the terminal device is determined to be authenticated, accepting the user's request for accessing at least one platform service.

10 . The method according to claim 9 , further comprising:

in response that the login information or the at least one second-stage credential to be identified is determined to be not authenticated, rejecting the user's request for accessing the at least one platform service.

11 . The method according to claim 9 , further comprising:

in response to a user's registration request from the terminal device, receiving registration information and platform service information transmitted by the terminal device, encrypting the registration information, and converting the registration information into a first-stage credential; and

generating the second-stage credential of the at least one platform service according to the platform service information, and establishing a mapping relationship between the first-stage credentials and the second-stage credentials.

12 . The method according to claim 11 , wherein performing a first-stage identification on the login information based on a front-end identification mechanism comprises:

determining whether the login information matches the first-stage credential;

in response that the login information matches the first-stage credential, determining that the login information is authenticated; and

in response that the login information does not match the first-stage credential, determining that the login information is not authenticated.

13 . The method according to claim 12 , wherein performing a second-stage identification on at least one second-stage credential transmitted by the terminal device based on at least one back-end identification mechanism comprises:

in response that the login information is authenticated, acquiring the at least one second-stage credential to be identified transmitted by the terminal device according to the login information, and the mapping relationship between the first-stage credentials and the second-stage credentials; and

identifying the at least one second-stage credential through at least one identification mechanism of the at least one platform service.

14 . The method according to claim 13 , wherein generating the second-stage credential of the at least one platform service according to the platform service information comprises:

generating second stage identification information; and

generating the second-stage credential of each of the platform services by encrypting the second stage identification information based on the identification mechanism of each of the platform services.

15 . The method according to claim 11 , wherein the first stage credentials and the second stage credentials are identification information in logical groups of Lightweight Directory Access Protocol.

16 . The method according to claim 9 , wherein the front-end identification mechanism is integrated in the electronic device in a form of key/value group, and the at least one back-end identification mechanism is identification service provided by the platform service, each of the at least one back-end identification mechanism is accessed to the electronic device in a form of configuration file.