The system uses TokenID (Token identity) as the unique identifier of the application. The permission management service manages the AT (Access Token) information of the application through the TokenID of the application, including the application identity APP ID, sub-user ID, application clone index information, application APL, application permission authorization status, etc. When using resources, the system will obtain the permission authorization status information of the corresponding application through the TokenID as the unique identity identifier mapping, and perform authentication accordingly to control the resource access behavior of the application.

It should be noted that the system supports the multi-user feature and the application clone feature. The same application will have its own AT under different sub-users and different application clones, and the TokenIDs of these ATs are also different.