Software system based on three-layer architecture and data requesting method of software system

Abstract

The invention reveals a software system based on three-layer architecture and a data requesting method of the software system. The software system comprises a script identification setting module, an access request module, an access violation judgment module, an access restriction module, and a result feedback module. The script identification setting module is used for setting the identification of a database SQL script. The access request module is used for transmitting the identification corresponding to an access request to an application server. The access violation judgment module is used for judging whether the access violation happens to a client or not. The access restriction module is used for automatically extracting the database SQL script corresponding to the identification according to the identification, obtaining the access authority according to the client of a current user, and automatically limiting the access of the user to a database. The result feedback module submits the final database SQL script to the database, and returns a result to a caller. The system can improve the safety, and prevent the access violation of data.

Description

technical field [0001] The invention belongs to the technical field of computer software, and relates to a software system, in particular to a software system based on a three-layer architecture; meanwhile, the invention also relates to a data request method based on a software system of a three-layer architecture. Background technique [0002] With the rise of the Internet, more and more software has begun to provide Internet-based access and applications. In this case, the generally adopted architecture is a three-tier architecture of "database server-application server-client application program or client browser". Wherein, the application server is open to the Internet for the client to access through the Internet. In this case, the client's call and data interaction with the application server must be safe and efficient. There are currently several methods for this call: [0003] (1) Website mode. The application server is a web server, and what is returned to the c...

AI Technical Summary

Problems solved by technology

[0007] (1) Insufficiency of the website mode: the application terminal of this mode must be a web browser, the functions of many application software will be limited by the type and version of the browser, and the adaptability is difficult

The characteristics of web browsers also greatly reduce the convenience of many operations for users, and the scalability of the client and other software and hardware interfaces.

[0008] (2) Insufficiency of API calls based on database scripts: Since the statements are directly submitted by the client program to the application server and the database server, it is difficult to implement fine-grained authority control, because the statements themselves are very complicated and involve multiple objects, and it is difficult for the server to Determine whether the currently requesting user has the right to operate these objects, and low-privileged accounts may also obtain unauthorized data access by simulating the client program

In addition, each call request is a complete database sql script, which increases the capacity of the request package and wastes bandwidth resources

[0009] (3) Insufficiency of API calls based on business types: the application server needs to perform a large number of parsing and calculations on the instructions before they can be converted into database SQL scripts and submitted to the database for execution, which is expensive and costly; It will involve the update of the application server, which is inconvenient to update

Images