| 摘要 |
The present invention relates to an authorization method and device, disclosing: an authorization server receiving an authorization update request comprising a first identifier of an access device; sending, to the access device, an authorization update response comprising signature request information, wherein the signature request information instructs the access device to sign verification information; receiving a signature verification request sent by the access device, wherein the signature verification request comprises a first identifier, the verification information and a signature of the verification information, and the signature of the verification information is generated by the access device by signing the verification information; according to the verification information, acquiring a saved authorization relationship; determining that the signature of the verification information in the signature verification request is valid; and according to the first identifier, updating the authorization relationship. By means of the present invention, when an identifier of an access device in an M2M system changes, the M2M system may identify the identity of the access device by determining whether a signature of verification information is valid, so as to update an existing authorization relationship, so that the access device can continue to use the existing authorization relationship. |
