Request legality verification device and method and computer readable storage medium

Abstract

The invention discloses a request legality verification device. The request legality verification device comprises a storage and a processor, and a legality verification program capable of operating on the processor is stored on the storage. The program is executed by the processor to achieve the following steps that when an interface calling request sent by a server in a server group is received,host information of the server, requested interface information and registration certificate information are acquired from the interface calling request; the registration certificate information is subjected to decryption processing to acquire registration host information and registration interface information which are contained in the registration certificate information; and if the host information of the server is consistent with the registration host information and the requested interface information is consistent with the registration interface information, it is judged that the interface calling request is legal. The invention further provides a request legality verification method and a computer readable storage medium. Accordingly, the request legality verification process is simplified, and then the interface calling responding speed is increased.

Description

technical field [0001] The present invention relates to the technical field of data communication, in particular to a device, method and computer-readable storage medium for verifying the legitimacy of a request. Background technique [0002] In the server group of the business system, different servers provide different services for the operation of the business system. The servers in the group provide services by opening some interfaces, and other servers can realize corresponding functions by calling these interfaces. [0003] However, not every server has the authority to call these interfaces. In the prior art, an authentication server is generally set up to control the authority of each server, and each server is pre-configured to call the interfaces of other servers. Each time the server receives an interface call request sent by another server, it needs to send the request to the authentication server, and the authentication server will verify the requested permissio...

AI Technical Summary

Problems solved by technology

[0003] However, not every server has the authority to call these interfaces. In the prior art, an authentication server is generally set up to control the authority of each server, and each server is pre-configured to call the interfaces of other servers. Each time the server receives an interface call request sent by another server, it needs to send the request to the authentication server, and the authentication server will verify the requested permission according to the stored permission data, and send the request to the authentication server. The verification result is returned to the server, and the server responds to the interface call request according to the verification result. The verification process in this way is cumbersome, and each request sent by the server must be verified at the third-party authentication server, which not only causes The authentication server needs to maintain a large amount of rights management data, and because of the frequent interface calls between servers, the response speed to the interface call request is slow and the processing efficiency is low

Images