Service interface permissions validation method and device

A technology of service interface and verification method, which is applied in the field of service interface authority verification method and device, and can solve complex and cumbersome problems.

Inactive Publication Date: 2015-01-21
北京思特奇信息技术股份有限公司
View PDF4 Cites 12 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

At present, there are many ways to verify service interface permissions, but most of the meth

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Service interface permissions validation method and device
  • Service interface permissions validation method and device
  • Service interface permissions validation method and device

Examples

Experimental program
Comparison scheme
Effect test

Example Embodiment

[0020] Embodiment 1, a service interface authority verification method. Combine below figure 1 The method provided by the invention is described in detail.

[0021] figure 1 In step S101, according to the function description information of several service interfaces included in the service interface set list, the client subscribes to the service interface that needs to be called.

[0022] Specifically, the service interface in this embodiment is a webservice-based service interface. When the client wishes to invoke the webservice service interface and then invoke the functions provided by the service interface, the service interface can be invoked only after the verification of the service interface.

[0023] Before the client needs to call the service interface, it can view the list of all service interfaces provided by the server through the visual system provided to the client. The interface set list includes all service interfaces provided by the server, as well as the...

Example Embodiment

[0035]Embodiment 2, a service interface authority verification method. Combine below Figure 2-Figure 3 The method provided in this embodiment is described in detail.

[0036] see image 3 , before the client applies to call the service interface, the server needs to write the webservice interface service. In this embodiment, the Axis+spring+java technology is mainly used for implementation, that is, the configuration file of the webservice service interface is published in services.xml through Axis, and the spring bean name configured as the service interface is configured, for example: spService publishes the id of the spring-configured bean corresponding to the Axis publishing service interface.

[0037] The service configuration file configuration of the specific service interface is as follows:

[0038]

[0039]

[0040] The authentication of the service interface is configured during the execution of the service interface bean (authenticationPlugin) as follows: ...

Example Embodiment

[0045] Embodiment 3, a service interface authority verification device. Combine below Figure 4 The device provided by this embodiment will be described in detail.

[0046] Figure 4 Among them, the apparatus provided in this embodiment includes a service interface customization module 401 , an identification incoming module 402 , a matching module 403 , a verification passing module 404 and a prompt information sending module 405 .

[0047] Wherein, the service interface customization module 401 is mainly used to call the client to customize the service interface to be called according to the function description information of several service interfaces included in the service interface set list.

[0048] Specifically, before the client needs to call the service interface, the client can view the list of all service interfaces provided by the server through the visual system provided to the client. For example, the client can directly log in through the browser to view the...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention discloses a service interface permissions validation method and device. The service interface permissions validation method comprises the steps that according to function description information of a plurality of service interfaces included in a service interface set list, a client side orders a service interface needed to be called; a client side identifier of the client side is transmitted into a server side; the server side enables the transmitted client side identifier and a method name of the service interface which is ordered by the client side and required to be called to be correspondingly matched with a pre-configured client side identifier and a method name of a pre-configured service interface; corresponding relations exist in the pre-configured client side identifier and the method name of the pre-configured service interface, and a corresponding relation list is formed; under the condition that the method name of the service interface which is ordered by the client side and required to be called is matched with the method name of the pre-configured service interface in the corresponding relation list, verification passes, and the client side is allowed to call the corresponding service interface.

Description

technical field [0001] The invention relates to the technical field of interface verification, in particular to a service interface authority verification method and device. Background technique [0002] Through the webservice service interface developed by Axis+spring+java, there is usually a situation where the client calls the webservice service interface. For the security of the service interface, for example, to prevent malicious clients from destroying the service of the interface or attacking the service interface, the verification of the service interface permission is generally set. When the client has the calling permission of the service interface, it can call the service interface and use the service interface. functions provided by the interface. At present, there are many ways of service interface permission verification, but most of the service interface permission verification methods are complicated and cumbersome. SUMMARY OF THE INVENTION [0003] The t...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
IPC IPC(8): H04L29/06H04L29/08
CPCH04L67/02H04L63/08H04L63/20
Inventor 马云波
Owner 北京思特奇信息技术股份有限公司
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap