diff --git a/src/Upyun/Config.php b/src/Upyun/Config.php
index 1b99b6c..cf96439 100644
--- a/src/Upyun/Config.php
+++ b/src/Upyun/Config.php
@@ -1,4 +1,5 @@
 <?php
+
 namespace Upyun;
 
 /**
@@ -72,6 +73,17 @@ class Config
      */
     private $formApiKey;
 
+    /**
+     * @var string token防盗链使用的与CDN平台约定的签名密钥
+     * https://help.upyun.com/knowledge-base/cdn-token-limite
+     */
+    private $uptSecret;
+
+    /**
+     * @var string 防盗链绑定的过期时间
+     */
+    private $uptExpiration = 1800;
+
     /**
      * @var string rest api 和 form api 的接口地址
      */
@@ -159,4 +171,24 @@ public function setConcurrency($concurrency)
     {
         $this->concurrency = $concurrency;
     }
+
+    public function setUptSecret($secret)
+    {
+        $this->uptSecret = $secret;
+    }
+
+    public function getUptSecret()
+    {
+        return $this->uptSecret;
+    }
+
+    public function setUptExpiration($expiration)
+    {
+        $this->uptExpiration = $expiration;
+    }
+    
+    public function getUptExpiration()
+    {
+        return $this->uptExpiration;
+    }
 }
diff --git a/src/Upyun/Signature.php b/src/Upyun/Signature.php
index 0fb68fe..99a59ae 100644
--- a/src/Upyun/Signature.php
+++ b/src/Upyun/Signature.php
@@ -1,4 +1,5 @@
 <?php
+
 namespace Upyun;
 
 /**
@@ -95,4 +96,37 @@ public static function getBodySignature(Config $serviceConfig, $method, $uri, $d
         $signature = base64_encode(hash_hmac('sha1', implode('&', $data), $serviceConfig->operatorPassword, true));
         return 'UPYUN ' . $serviceConfig->operatorName . ':' . $signature;
     }
+
+    /**
+     * 获取防盗链token，前提是已开启token防盗链
+     * https://help.upyun.com/knowledge-base/cdn-token-limite
+     * 使用防盗链生成token时，需要提前设置secret
+     * Config.php里的setUptSecret()方法
+     * @param Config $serviceConfig
+     * @param $uri 请求路径
+     *
+     * @return string _upt参数的值
+     */
+    public static function getUptToken(Config $serviceConfig, $uri)
+    {
+        $etime = time() + $serviceConfig->getUptExpiration();
+        $sign = md5("{$serviceConfig->getUptSecret()}&{$etime}&{$uri}");
+        $upt = substr($sign, 12, 8) . $etime;
+        return $upt;
+    }
+
+    /**
+     * 根据传入的URL直接处理成携带upt参数的URL
+     * @param Config $serviceConfig
+     * @param $method 请求方法
+     * @param $url 访问URL
+     *
+     * @return string 携带upt参数的URL
+     */
+    public static function getUptUrl(Config $serviceConfig, $url)
+    {
+        $urlObj = parse_url($url);
+        $upt = self::getUptToken($serviceConfig, $urlObj['path']);
+        return $urlObj['scheme'] . $urlObj['host'] . '?_upt=' . $upt;
+    }
 }