Authority revoking method and device
AssigneeAlibaba Group Holding Limited
InventorDong CHEN
Life of this patent
Estimating the term…
Abstract
An authorizing party determines an authorization record set that needs to be revoked, where an authorization record included in the authorization record set corresponds to a token that is issued to an authorized party after the authorizing party grants access to the authorized party, and where each authorization record includes an authorization validation moment for a corresponding token. A time validity attribute of the authorization record set is configured. For a specific point-in-time, a value associated with the time validity attribute is set. A determination is performed as to whether the authorization record is revoked based on the authorization validation moment and the value associated with the time validity attribute
Claims20
A computer-implemented method, comprising:
- determining, by an authorizing party, an authorization record set that needs to be revoked, wherein an authorization record included in the authorization record set corresponds to a token that is issued to an authorized party after the authorizing party grants access to the authorized party, and wherein each authorization record includes an authorization validation moment for a corresponding token;
- configuring a time validity attribute of the authorization record set;
- setting, for a specific point-in-time, a value associated with the time validity attribute;
- and
- determining whether the authorization record is revoked based on the authorization validation moment and the value associated with the time validity attribute.
A non-transitory, computer-readable medium storing one or more instructions executable by a computer system to perform operations comprising:
- determining, by an authorizing party, an authorization record set that needs to be revoked, wherein an authorization record included in the authorization record set corresponds to a token that is issued to an authorized party after the authorizing party grants access to the authorized party, and wherein each authorization record includes an authorization validation moment for a corresponding token;
- configuring a time validity attribute of the authorization record set;
- setting, for a specific point-in-time, a value associated with the time validity attribute;
- and
- determining whether the authorization record is revoked based on the authorization validation moment and the value associated with the time validity attribute.
A computer-implemented system, comprising:
- one or more computers;
- and
- one or more computer memory devices interoperably coupled with the one or more computers and having tangible, non-transitory, machine-readable media storing one or more instructions that, when executed by the one or more computers, perform one or more operations comprising:
- determining, by an authorizing party, an authorization record set that needs to be revoked, wherein an authorization record included in the authorization record set corresponds to a token that is issued to an authorized party after the authorizing party grants access to the authorized party, and wherein each authorization record includes an authorization validation moment for a corresponding token;
- configuring a time validity attribute of the authorization record set;
- setting, for a specific point-in-time, a value associated with the time validity attribute;
- and
- determining whether the authorization record is revoked based on the authorization validation moment and the value associated with the time validity attribute.
Dependencies are inferred from the claim text.