您的網路服務可以使用 Google 管理控制台中的「已驗證存取權」功能,與用戶端 Chrome 裝置和 Verified Access API 通訊。如此便可取得有關政策遵循的資訊,以及 (選擇性) Google 提供的用戶端裝置身分資訊。為了達成這個目的,Chrome 擴充功能必須在與 enterprise.platformKeys 擴充功能 API 互動的裝置上執行,且網路服務必須連線至 Verified Access API。
Chrome 已驗證存取權的運作方式
建議的導入方式如下:
建議的實作方式。
Chrome 擴充功能會與 Verified Access API 聯絡,建立驗證問題。
Chrome 擴充功能會呼叫 enterprise.platformKeys API 來產生挑戰回應,並將存取要求傳送至網路服務,包括要求中的挑戰回應。
[null,null,["上次更新時間:2025-07-25 (世界標準時間)。"],[[["\u003cp\u003eChrome Verified Access allows network services to verify device compliance and user identity, facilitating secure access control.\u003c/p\u003e\n"],["\u003cp\u003eA Chrome extension and communication with the Verified Access API are essential for leveraging this feature.\u003c/p\u003e\n"],["\u003cp\u003eThe process involves a challenge-response mechanism between the Chrome extension, network service, and the Verified Access API to confirm device legitimacy before granting access.\u003c/p\u003e\n"]]],[],null,["# Chrome Verified Access Overview\n\nAbout Chrome Verified Access\n----------------------------\n\nYour network service can use the Verified Access feature in the Google Admin\nconsole to communicate with both the client Chrome device and the Verified\nAccess API. Doing so gains information about the policy compliance\nand (optionally) the identity of the client device from Google. To that end,\na Chrome extension must be running on the device that interacts with the\nenterprise.platformKeys extension API, and the network service needs to talk to\nthe Verified Access API.\n\nHow Chrome Verified Access Works\n--------------------------------\n\nHere's the suggested implementation:\nSuggested implementation.\n\n\u003cbr /\u003e\n\n1. The Chrome extension contacts the Verified Access API to create a challenge.\n2. The Chrome extension calls the enterprise.platformKeys API to generate a challenge-response and sends the access request to the network service, including the challenge-response in the request.\n3. The network service contacts the Verified Access API to verify the challenge-response.\n4. In case of successful verification, the network service grants access to the device."]]