Abstract: A cross-realm access control method based on a cloud management platform including: For a plurality of realms included in an organization of the tenant, when the tenant needs to perform access control on a first cloud service included in a first realm among the plurality of realms, the tenant inputs, via an access control interface provided by the cloud management platform, an access control policy. The cloud management platform receives the access control policy via the access control interface. If the access control policy indicates that an access authorization scope of the first cloud service included in the first realm is a second cloud service included in the organization of the tenant, the cloud management platform allows a second cloud service included in any realm in the organization of the tenant to access the first cloud service included in the first realm.

Abstract: An access control method based on a cloud management platform, including: the first cloud instance sends a credential acquisition request to a cloud management platform, where the credential acquisition request carries an access control policy for the plurality of cloud instances, the access control policy is provided by the tenant for the first cloud instance, and the access control policy is used to indicate at least one cloud instance in the plurality of cloud instances that is allowed to obtain a credential. Then, the cloud management platform detect, based on the credential acquisition request, whether the first cloud instance is in the at least one cloud instance indicated by the access control policy. If the first cloud instance is in the at least one cloud instance indicated by the access control policy, the cloud management platform sends the credential of the tenant to the first cloud instance.

Abstract: A cloud computing technology-based access management method includes a cloud platform that receives a data boundary establishment request from a first tenant for a cloud service; the cloud platform establishes the data boundary for the cloud service; the cloud platform compares information carried in an access request, for the cloud service, that is received by the cloud service with the constraint condition in the data boundary; and the cloud platform allows the cloud service to respond to the access request when the information carried in the access request matches the constraint condition in the data boundary.

Abstract: A cloud computing technology-based access control method includes: The cloud management platform obtains and records a first access control policy configured by an administrator, where configuration of the first access control policy includes configuring at least one piece of first request attribute information, and the first request attribute information includes a first request attribute; the cloud management platform obtains a first access request triggered by a user, where the first access request carries a target request attribute; and the cloud management platform detects whether the target request attribute matches the first request attribute, to obtain a first matching result.

Abstract: A cloud computing technology-based access control method is provided, and includes: A request initiator deployed on a cloud sends an access request to a third-party service. The access request carries subject attribute information and environment attribute information of the request initiator, the subject attribute information indicates identity information of the request initiator on the cloud, and the environment attribute information indicates environment information of the request initiator on the cloud. The third-party service receives the access request. The third-party service extracts the subject attribute information and the environment attribute information from the access request, where the subject attribute information and the environment attribute information are used for calculation based on an access control policy, to determine that the third-party service allows or rejects the access request.

Abstract: A cloud resource access control method includes obtaining and recording a first resource control policy that is configured by an administrator of a target organization and that is for a target cloud resource in the target organization; obtaining a first resource access request that is triggered by the user outside the target organization and that is for the target cloud resource in the target organization; and allowing or denying, based on the first resource control policy, the first resource access request for accessing the target cloud resource.

Abstract: A vehicle location sharing method enables real-time location sharing of the vehicle that can improve the safety of a user driving the vehicle. A function interface is displayed that provides a location function. A trigger operation is received on the location sharing function, and a candidate account list is displayed based on the trigger application. The candidate account list includes a candidate account that has an association relationship with a first account. A selection operation is received on a second account and a a location sharing result is displayed in response to the selection operation. This provides a convenient operation to share location information without use of cumbersome operations, such as through the use of a mobile phone.