Software system based on three-tier architecture and its data request method

Abstract

The invention discloses a software system based on a three-layer architecture and a data request method thereof. The software system includes a script identification setting module, an access request module, an unauthorized access judgment module, an access restriction module, and a result feedback module. The script identification setting module is used to set the identification of the database SQL script; the access request module is used to send the identification corresponding to the access request to the application server; the unauthorized access judgment module is used to determine whether the corresponding client has unauthorized access; the access restriction module is used to Automatically call out the database SQL script corresponding to the identifier according to the identifier, obtain its access authority according to the current user client, and automatically limit the user's access to the database; the result feedback module submits the final database SQL script to the database for execution, and returns the result to caller. The invention can improve the security of the system and prevent unauthorized access to data.

Description

technical field [0001] The invention belongs to the technical field of computer software, and relates to a software system, in particular to a software system based on a three-layer architecture; meanwhile, the invention also relates to a data request method based on a software system of a three-layer architecture. Background technique [0002] With the rise of the Internet, more and more software has begun to provide Internet-based access and applications. In this case, the generally adopted architecture is a three-tier architecture of "database server-application server-client application program or client browser". Wherein, the application server is open to the Internet for the client to access through the Internet. In this case, the client's call and data interaction with the application server must be safe and efficient. There are currently several methods for this call: [0003] (1) Website mode. The application server is a web server, and what is returned to the c...

AI Technical Summary

Problems solved by technology

[0007] (1) Insufficiency of the website mode: the application terminal of this mode must be a web browser, the functions of many application software will be limited by the type and version of the browser, and the adaptability is difficult

The characteristics of web browsers also greatly reduce the convenience of many operations for users, and the scalability of the client and other software and hardware interfaces.

[0008] (2) Insufficiency of API calls based on database scripts: Since the statements are directly submitted by the client program to the application server and the database server, it is difficult to implement fine-grained authority control, because the statements themselves are very complicated and involve multiple objects, and it is difficult for the server to Determine whether the currently requesting user has the right to operate these objects, and low-privileged accounts may also obtain unauthorized data access by simulating the client program

In addition, each call request is a complete database sql script, which increases the capacity of the request package and wastes bandwidth resources

[0009] (3) Insufficiency of API calls based on business types: the application server needs to perform a large number of parsing and calculations on the instructions before they can be converted into database SQL scripts and submitted to the database for execution, which is expensive and costly; It will involve the update of the application server, which is inconvenient to update

Images