A server and gis service access control method based on reverse proxy architecture

A service access and server technology, which is applied in the field of multi-source heterogeneous GIS service access control, can solve problems such as insufficient access performance and insufficient security, and achieve the effects of simplification of proxy addresses, reduction of consumption, and simple and clear proxy addresses

Active Publication Date: 2022-02-18
吉奥时空信息技术股份有限公司
View PDF0 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0005] The technical problem to be solved by the present invention is to provide a server and GIS service access control method based on reverse proxy architecture for the defects of insufficient access performance and insufficient security in the prior art

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • A server and gis service access control method based on reverse proxy architecture
  • A server and gis service access control method based on reverse proxy architecture
  • A server and gis service access control method based on reverse proxy architecture

Examples

Experimental program
Comparison scheme
Effect test

no. 1 example

[0032] Please refer to figure 1 , which is a system structure diagram of a server based on reverse proxy architecture provided by the present invention, the server is composed of the following parts:

[0033] Nginx service unit, Lua extension unit, Lua script service unit and response service unit.

[0034] The functions realized by each unit are:

[0035] The Nginx service unit is used to receive service access request information;

[0036] The Lua extension unit is used to obtain the service access request information, and forward the service access request information to the Lua script service unit;

[0037] Described Lua script service unit is used for carrying out GIS (Geographic Information System, Geographic Information System) kernel loading, the judgment of access authority judgment and the judgment of GIS service access authority, based on its executive function, described Lua script service unit is divided into following several subsections: module to perform the...

no. 2 example

[0055] In this embodiment, in order to alleviate the pressure brought by high concurrency on the server side, a queue management unit is set under the Lua script service unit (please refer to figure 2 ), the queue management unit executes a pre-defined Lua script and enters the authentication judgment processing unit when the concurrency / queue level is not reached by means of a queue; when the concurrency / queue level is reached, it proves that the current buffer size is too large, The server cannot perform data processing in real time, and currently transfers to the PHP queue to wait for the process, and when the queue waits for the process to end, then execute the predefined Lua script described in the current embodiment.

[0056] Therefore, in this embodiment, it is considered that in the case of high concurrency, the queue management unit is set to execute the PHP waiting process, so as to further alleviate the cache pressure of the server.

no. 3 example

[0058] In this embodiment, in order to strengthen the security of data transmission, in the case of successful authentication, rewrite the content of the response to the client, and combine Lua's efficient processing capabilities to write security processing scripts, such as filtering all requests involving Sql injection and Illegal parameter for Sql blind injection.

[0059] Specifically, during implementation, a rewriting unit is set under the matching unit of the attribute field (please refer to image 3 ), the rewriting unit is used to execute a security processing script written in Lua language to rewrite the authorized response content when the attribute field matches successfully, and feed back the rewritten response content to the response service unit , the response service unit feeds back the response content to the client; the specific response content after rewriting authorization includes request connection address rewriting, request header content rewriting and r...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention discloses a server and a GIS service access control method based on a reverse proxy architecture, uses the secondary development and expansion of Nginx to rebuild the reverse proxy system, and uses the reverse proxy mechanism to unify all request entries; at the same time, it combines GeoGlobe The GIS kernel realizes the access rights management in the process of service access by providing the spatial operation module; finally, combined with the efficient processing ability of Lua, the processing script is written to further cover all the services of the OGC standard protocol.

Description

technical field [0001] The invention belongs to the technical field of communications, and in particular relates to a server based on a reverse proxy architecture and a method for realizing multi-source heterogeneous GIS service access control based on the server. Background technique [0002] GIS (Geographic Information System) is a technology for acquiring, processing, managing and analyzing geospatial data. Any application related to spatial location can use GIS technology. [0003] In the construction process of the existing geographic information sharing service platform, ensuring the unified management of multi-source heterogeneous services and building an efficient and safe unified service system externally are the core and most basic capabilities of the platform. [0004] However, the traditional GIS service structure has the defects of diversity, insufficient access performance, and insufficient security, which is not conducive to business expansion and reuse of inf...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Patents(China)
IPC IPC(8): H04L9/40H04L67/1001H04L67/56G06F21/31G06F16/2455
CPCH04L63/10H04L63/08G06F21/31G06F16/24552H04L67/1001H04L67/56
Inventor 王守东李海源郑凯
Owner 吉奥时空信息技术股份有限公司
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap