Access address configuration method, device, electronic device and storage medium

Abstract

The present invention discloses an access address configuration method, apparatus, electronic device, and storage medium. The method comprises: obtaining the resource address of at least one network resource to be allocated; encapsulating the resource address into a callback address according to a preset encapsulation rule; and registering the callback address with a preset access source. Embodiments of the present invention achieve unified access management for different network resources through the use of preset access sources, reducing the difficulty of network resource management and improving the utilization efficiency of network resources.

Description

Technical Field

[0001] The present invention relates to the field of computer application technology, and in particular to an access address configuration method, device, electronic device and storage medium. Background Art

[0002] With the development of internet technology, it has gradually become a key development direction in the new round of industrial restructuring upgrades. Digitalization and intelligentization have profoundly impacted enterprises' R&D, sales, operations, and maintenance. While the internet brings productivity to enterprises, it also brings management challenges. Different departments in an enterprise have varying needs for network resources, making it difficult to manage them with a one-size-fits-all approach. Existing network resource allocation methods are often rigid. For example, a department may use a specific website or official account. However, over time, the development direction of internal departments often changes, and network resources cannot be effectively adjusted to accommodate these changes. This often leads to redundant network resources for some websites or official accounts. To address this situation, the industry currently needs an efficient method for allocating network resource access addresses to achieve unified management of network resources, reduce the difficulty of changing network resources, and thus improve the efficiency of enterprise network resource utilization. Summary of the Invention

[0003] The present invention provides an access address configuration method, device, electronic device and storage medium to achieve unified allocation of network resource access addresses, reduce the difficulty of network resource access management, and improve the utilization rate of network resources.

[0004] According to one aspect of the present invention, a method for configuring an access address is provided, wherein the method comprises:

[0005] Obtaining a resource address of at least one network resource to be allocated;

[0006] Encapsulating the resource address into a callback address according to a preset encapsulation rule;

[0007] Register the callback address at a preset access source.

[0008] According to another aspect of the present invention, there is provided an access address configuration device, wherein the device comprises:

[0009] A resource address module, configured to obtain a resource address of at least one network resource to be allocated;

[0010] An address encapsulation module, configured to encapsulate the resource address into a callback address according to a preset encapsulation rule;

[0011] The address registration module is used to register the callback address in a preset access source.

[0012] According to another aspect of the present invention, an electronic device is provided, comprising:

[0013] at least one processor; and

[0014] a memory communicatively connected to the at least one processor; wherein,

[0015] The memory stores a computer program executable by the at least one processor. The computer program is executed by the at least one processor so that the at least one processor can perform the access address configuration method described in any embodiment of the present invention.

[0016] According to another aspect of the present invention, a computer-readable storage medium is provided, wherein the computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a processor to implement the access address configuration method described in any embodiment of the present invention when executed.

[0017] The technical solution of the embodiment of the present invention obtains the resource address of the network resource to be allocated, encapsulates the resource address into a callback address according to a preset encapsulation rule, registers the callback address to a preset access source, and realizes unified access management of different network resources through the preset access source, thereby reducing the difficulty of network resource management and improving the utilization efficiency of network resources.

[0018] It should be understood that the content described in this section is not intended to identify the key or important features of the embodiments of the present invention, nor is it intended to limit the scope of the present invention. Other features of the present invention will become readily understood through the following description. BRIEF DESCRIPTION OF THE DRAWINGS

[0019] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0020] Figure 1 This is a flowchart of an access address configuration method provided in accordance with the first embodiment of the present invention;

[0021] Figure 2 is a flowchart of another access address configuration method provided in accordance with the second embodiment of the present invention;

[0022] Figure 3 This is an example diagram of an access address configuration method provided in Embodiment 3 of the present invention;

[0023] Figure 4This is a structural diagram of an access address configuration device provided according to a fourth embodiment of the present invention;

[0024] Figure 5 It is a structural diagram of an electronic device for implementing the access address configuration method according to an embodiment of the present invention. DETAILED DESCRIPTION

[0025] In order to enable those skilled in the art to better understand the solutions of the present invention, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the embodiments described are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without making creative efforts should fall within the scope of protection of the present invention.

[0026] It should be noted that the terms "first", "second", etc. in the description and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that the numbers used in this way can be interchanged where appropriate, so that the embodiments of the present invention described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions. For example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0027] Example 1

[0028] Figure 1 This is a flow chart of an access address configuration method provided according to the first embodiment of the present invention. This embodiment is applicable to the configuration and management of access addresses of different network resources within an enterprise. The method can be executed by an access address configuration device, which can be implemented in the form of hardware and / or software. The access address configuration device can be configured in a server or server cluster. Figure 1 As shown, the method includes:

[0029] Step 110: Obtain a resource address of at least one network resource to be allocated.

[0030] The network resources to be allocated may be network resources that implement different business functions, and may be located in different departments or enterprises within an enterprise. In some embodiments, the network resources to be allocated may be official accounts, website homepages, storage resources, computing resources, etc. The resource address may be an address used to access the network resources to be allocated, and may include a physical address or a logical address of the network resources to be allocated. For example, the resource address may be a uniform resource locator or a hypertext transfer protocol address.

[0031] In the embodiment of the present invention, resource addresses of different to-be-allocated network resources may be acquired, and the acquisition may include resource addresses configured according to enterprise specifications, addresses of to-be-allocated network resources sent by a third party, and the like.

[0032] Step 120: Encapsulate the resource address into a callback address according to a preset encapsulation rule.

[0033] The preset encapsulation rule may be a specified rule for encapsulating a resource address into a callback address. The preset encapsulation rule may include information about fields included in the callback address, a correspondence between the resource address and fields within the callback address, etc. The callback address may be an address of the network resource to be allocated that provides an access path for external access when implementing a business application. The callback address may be a uniform resource locator that specifies a jump back to the network resource to be allocated.

[0034] In an embodiment of the present invention, a callback address may be generated according to a preset encapsulation rule, and relevant information about the resource address may be populated into a designated field of the callback address. In some embodiments, the callback address may be generated by concatenating the resource address and internal logical parameters of the access source. The internal logical parameters of the access source may be generated according to the preset encapsulation rule, and then the internal logical parameters are concatenated with the resource address to form the callback address.

[0035] Step 130: Register the callback address in the preset access source.

[0036] The preset access source may be an information source for accessing different network resources to be allocated, and the preset access source may include a public account, a website homepage, and the like.

[0037] In an embodiment of the present invention, a callback address can be registered with a preset access source, and external access can be used to log in to the allocated network resources through the callback address in the preset access source. In some embodiments, a configuration homepage for the preset access source can be launched according to a configuration command, and the callback address generated in the above steps can be added to the configuration item corresponding to the callback address in the configuration homepage.

[0038] In an embodiment of the present invention, the resource address of the network resource to be allocated is obtained, the resource address is encapsulated into a callback address according to a preset encapsulation rule, and the callback address is registered to a preset access source. The preset access source is used to implement unified access management of different network resources, thereby reducing the difficulty of network resource management and improving the utilization efficiency of network resources.

[0039] Example 2

[0040] Figure 2 This is a flowchart of another access address configuration method provided by embodiment 2 of the present invention. This embodiment of the present invention is a specific embodiment of the invention described above. Figure 2 The method provided in the embodiment of the present invention specifically includes the following steps:

[0041] Step 210: Obtain a resource address of at least one network resource to be allocated.

[0042] Step 220: Generate a random number and fill the random number as the domain name root path of the callback address.

[0043] The random number can be a randomly generated value that can be used to increase the randomness of the resource address and improve the security of the resource address. In some embodiments, the random number can be an integer value, and the length of the random number can be 9 bits. The domain name root path can be the path to the directory where the network resource corresponding to the domain name is located. The folder corresponding to the domain name root path can store the network resource.

[0044] In the embodiment of the present invention, when generating the callback address, a random number may be generated and used as the domain name root path of the callback address.

[0045] Step 230: Use the resource address as the state parameter of the callback address.

[0046] The state parameter may be a field in the callback address used to carry data during the jump. The state parameter may carry the callback address, thereby enabling the jump of the preset access source to the to-be-allocated network resource.

[0047] In an embodiment of the present invention, the resource address may be filled into the state parameter field of the callback address. In some embodiments, the callback address may be composed of the state parameter field and the domain name root path field.

[0048] Step 240: Add the resource address in the callback address to the safe domain name whitelist.

[0049] The safe domain name whitelist may be a list for performing security control on network resources, and the safe domain name whitelist may include resource addresses of one or more network resources.

[0050] In an embodiment of the present invention, a callback address can be obtained, and a resource address can be extracted from the status parameters of the callback address, and the resource address can be added to a safe domain name whitelist, thereby implementing security management of the resource address based on the safe domain name whitelist and preventing users from accessing illegal network resources.

[0051] Step 250: Log in to the configuration page of the preset access source and register the callback address on the configuration page.

[0052] The configuration page may be a visual interface for managing and configuring the callback address, and the configuration page may be a configuration page for a public account or a configuration page for a website page.

[0053] In an embodiment of the present invention, a configuration page for a preset access source can be logged in, and a callback address can be registered according to the configuration rules of the configuration page, so that the preset access source can jump to the callback address to access the corresponding network resource. In some embodiments, the callback address can be registered on the configuration page by an administrator manually logging in to the configuration page and filling in the callback address on the configuration page. In other embodiments, the configuration page can be automatically accessed through a script file configured by the server, and the callback address can be filled in on the configuration page.

[0054] Step 260: Obtain a callback address from a preset access source according to the access request.

[0055] The access request may be a request for accessing a network resource, and the access request may correspond to a communication protocol of a preset access source.

[0056] In an embodiment of the present invention, a user can send an access request to a preset access source, which will uniformly process the access request to network resources. The preset access source can receive the access request and determine the corresponding callback address according to the network resource that the access request needs to access.

[0057] Step 270: Extract the status parameter from the callback address; and determine whether the status parameter exists according to the safe domain name whitelist.

[0058] In this embodiment of the present invention, the state parameter in the callback address can be extracted, and a search can be performed on the safe domain name whitelist to determine whether a resource address matching the state parameter exists. If so, the resource address in the state parameter is determined to be legitimate and safe to access. If a resource address matching the state parameter is not found in the safe domain name whitelist, the state parameter in the callback address cannot be used to jump to the network resource.

[0059] Step 280: Access the resource to be allocated according to the callback address.

[0060] In the embodiment of the present invention, the resource to be allocated may be accessed according to the callback address.

[0061] The embodiment of the present invention obtains the resource address of the network resource to be allocated, encapsulates a random number into the domain name root path of the callback address, uses the obtained resource address as the status parameter of the callback address, adds the callback address to the security domain name whitelist, registers the callback address on the configuration page of the preset access source, obtains the callback address at the preset access source according to the access request, uses the security domain name whitelist to determine the status parameter of the callback address, jumps to the resource to be allocated for access through the callback address, realizes unified access management of different network resources, reduces the difficulty of network resource management, and improves the utilization efficiency of network resources.

[0062] Furthermore, based on the above-mentioned embodiments of the invention, the preset access sources include at least one of the following: a public account, a portal website, and a short video homepage.

[0063] Example 3

[0064] Figure 3 This is an example diagram of an access address configuration method provided by Example 3 of the present invention. Taking the network resource management of WeChat public accounts as an example, third-party domain names are forwarded and security verified through a unified authorization callback distribution entrance. Figure 3 The access address configuration method provided by the embodiment of the present invention may include the following steps:

[0065] 1. Determine a unified authorization callback distribution domain name, which is used to redirect to third-party network resources.

[0066] 2. The authorized callback distribution domain name redirects to the third-party network resources according to preset rules.

[0067] Specifically, it includes: 2.1. Determine the entry URL specification of the authorized callback distribution domain name. The domain name root path of the URL is a random number Random. The Random number of each access request can be different, and the Random number is a 9-digit integer to prevent malicious reporting and ban.

[0068] 2.2. The URL carries the State parameter, which is the URL address of a third-party network resource. The State parameter needs to be Base64 encrypted.

[0069] 2.3. The entry for the authorized callback distribution domain name needs to be security-verified. The URL address in the State parameter must be in the safe domain name whitelist. Otherwise, the jump to the third-party network resource will be redirected to an error page.

[0070] 2.4. Encapsulate the State parameter and the domain name root path into the callback address of the third-party network resource. During the encapsulation process, the internal logic parameters of the WeChat official account can also be spliced ​​with the State parameter.

[0071] 2.5. Redirect the third-party network resource to the URL in the State parameter within the authorization callback distribution domain name.

[0072] 3. Determine a unified WeChat official account and configure the message callback domain name, JS interface security domain name, and authorized callback distribution domain name in the background of the WeChat official account.

[0073] 4. Add the authorization callback distribution domain name used for third-party network resource jumps to the safe domain name whitelist.

[0074] 5. Construct the authorization callback address of the third-party network resource according to the rules of the authorization callback distribution domain name.

[0075] Example 4

[0076] Figure 4 Schematic diagram of the structure of an access address configuration device provided according to the fourth embodiment of the present invention. Figure 4 As shown, the device includes: a resource address module 301, an address encapsulation module 302 and an address registration module 303.

[0077] The resource address module 301 is configured to obtain a resource address of at least one network resource to be allocated.

[0078] The address encapsulation module 302 is configured to encapsulate the resource address into a callback address according to a preset encapsulation rule.

[0079] The address registration module 303 is configured to register the callback address in a preset access source.

[0080] In an embodiment of the present invention, a resource address module is used to obtain the resource address of the network resource to be allocated. The address encapsulation module encapsulates the resource address into a callback address according to a preset encapsulation rule, and registers the callback address to a preset access source. The address registration module implements unified access management of different network resources through the preset access source, thereby reducing the difficulty of network resource management and improving the utilization efficiency of network resources.

[0081] Based on the above embodiment of the invention, it further includes: an access module, configured to obtain the callback address from the preset access source according to an access request; and access the resource to be allocated according to the callback address.

[0082] Based on the above embodiments of the invention, the address encapsulation module 302 includes:

[0083] The root path unit is used to generate a random number and fill the random number as the domain name root path of the callback address.

[0084] The state parameter unit is configured to use the resource address as a state parameter of the callback address.

[0085] Based on the above embodiment of the invention, the address registration module 303 is specifically used to log in to the configuration page of the preset access source and register the callback address on the configuration page.

[0086] Based on the above embodiment of the invention, it further includes: a whitelist module, which is used to add the resource address in the callback address to a safe domain name whitelist.

[0087] Based on the above-mentioned embodiment of the invention, the device further includes: a parameter verification module, configured to extract a state parameter from the callback address; and determine the existence of the state parameter according to a safe domain name whitelist.

[0088] Based on the above-mentioned embodiment of the invention, the preset access source includes at least one of the following: a public account, a portal website, and a short video homepage.

[0089] The access address configuration device provided in the embodiment of the present invention can execute the access address configuration method provided in any embodiment of the present invention, and has the corresponding functional modules and beneficial effects of the execution method.

[0090] Example 5

[0091] Figure 5 A schematic diagram of the structure of an electronic device 10 that can be used to implement an embodiment of the present invention is shown. The electronic device is intended to represent various forms of digital computers, such as laptop computers, desktop computers, workstations, personal digital assistants, servers, blade servers, mainframe computers, and other suitable computers. The electronic device can also represent various forms of mobile devices, such as personal digital processing, cellular phones, smart phones, wearable devices (such as helmets, glasses, watches, etc.) and other similar computing devices. The components shown herein, their connections and relationships, and their functions are merely examples and are not intended to limit the implementation of the present invention described and / or claimed herein.

[0092] like Figure 5As shown, the electronic device 10 includes at least one processor 11 and a memory, such as a read-only memory (ROM) 12, a random access memory (RAM) 13, etc., which is communicatively connected to the at least one processor 11. The memory stores a computer program that can be executed by the at least one processor. The processor 11 can perform various appropriate actions and processes according to the computer program stored in the read-only memory (ROM) 12 or the computer program loaded from the storage unit 18 into the random access memory (RAM) 13. Various programs and data required for the operation of the electronic device 10 can also be stored in the RAM 13. The processor 11, ROM 12, and RAM 13 are connected to each other via a bus 14. An input / output (I / O) interface 15 is also connected to the bus 14.

[0093] Multiple components in the electronic device 10 are connected to the I / O interface 15, including an input unit 16, such as a keyboard, a mouse, etc.; an output unit 17, such as various types of displays, speakers, etc.; a storage unit 18, such as a magnetic disk, an optical disk, etc.; and a communication unit 19, such as a network card, a modem, a wireless communication transceiver, etc. The communication unit 19 allows the electronic device 10 to exchange information / data with other devices via a computer network such as the Internet and / or various telecommunication networks.

[0094] The processor 11 may be any general-purpose and / or specialized processing component with processing and computing capabilities. Examples of the processor 11 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various specialized artificial intelligence (AI) computing chips, various processors running machine learning model algorithms, a digital signal processor (DSP), and any suitable processor, controller, microcontroller, etc. The processor 11 executes the various methods and processes described above, such as the access address configuration method.

[0095] In some embodiments, the access address configuration method can be implemented as a computer program, which is tangibly contained in a computer-readable storage medium, such as the storage unit 18. In some embodiments, part or all of the computer program can be loaded and / or installed on the electronic device 10 via the ROM 12 and / or the communication unit 19. When the computer program is loaded into the RAM 13 and executed by the processor 11, one or more steps of the access address configuration method described above can be performed. Alternatively, in other embodiments, the processor 11 can be configured to perform the access address configuration method in any other appropriate manner (for example, by means of firmware).

[0096] Various embodiments of the systems and techniques described herein can be implemented in digital electronic circuit systems, integrated circuit systems, field programmable gate arrays (FPGAs), application specific integrated circuits (ASICs), application specific standard products (ASSPs), system-on-chip systems (SOCs), programmable logic devices (CPLDs), computer hardware, firmware, software, and / or combinations thereof. These various embodiments can include being implemented in one or more computer programs that are executable and / or interpreted on a programmable system that includes at least one programmable processor, which can be a special purpose or general purpose programmable processor that can receive data and instructions from a storage system, at least one input device, and at least one output device, and transmit data and instructions to the storage system, the at least one input device, and the at least one output device.

[0097] Computer programs for implementing the methods of the present invention may be written in any combination of one or more programming languages. These computer programs may be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device, such that when the computer program is executed by the processor, the functions / operations specified in the flowcharts and / or block diagrams are implemented. The computer program may be executed entirely on the machine, partially on the machine, as a stand-alone software package, partially on the machine and partially on a remote machine, or entirely on a remote machine or server.

[0098] In the context of the present invention, computer-readable storage media can be tangible media that can contain or store a computer program for use with an instruction execution system, device or equipment or used in combination with an instruction execution system, device or equipment. Computer-readable storage media can include but are not limited to electronic, magnetic, optical, electromagnetic, infrared or semiconductor systems, devices or equipment, or any suitable combination of the foregoing. Alternatively, computer-readable storage media can be machine-readable signal media. More specific examples of machine-readable storage media can include electrical connections based on one or more lines, portable computer disks, hard disks, random access memories (RAM), read-only memories (ROM), erasable programmable read-only memories (EPROM or flash memory), optical fibers, portable compact disk read-only memories (CD-ROM), optical storage devices, magnetic storage devices, or any suitable combination of the foregoing.

[0099] To provide interaction with a user, the systems and techniques described herein can be implemented on an electronic device having: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to the user; and a keyboard and pointing device (e.g., a mouse or trackball) through which the user can provide input to the electronic device. Other types of devices can also be used to provide interaction with the user; for example, the feedback provided to the user can be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user can be received in any form (including acoustic input, voice input, or tactile input).

[0100] The systems and techniques described herein can be implemented in a computing system that includes back-end components (e.g., as a data server), or a computing system that includes middleware components (e.g., an application server), or a computing system that includes front-end components (e.g., a user computer with a graphical user interface or web browser through which a user can interact with implementations of the systems and techniques described herein), or a computing system that includes any combination of such back-end components, middleware components, or front-end components. The components of the system can be interconnected by any form or medium of digital data communication (e.g., a communication network). Examples of communication networks include: a local area network (LAN), a wide area network (WAN), a blockchain network, and the Internet.

[0101] A computing system may include clients and servers. The clients and servers are typically remote from each other and typically interact via a communication network. This client-server relationship arises through computer programs running on the respective computers, creating a client-server relationship. The server may be a cloud server, also known as a cloud computing server or cloud host. This server is a hosting product within the cloud computing service ecosystem that addresses the management difficulties and limited scalability of traditional physical hosting and VPS services.

[0102] It should be understood that the various forms of the processes shown above can be used to reorder, add, or delete steps. For example, the steps described in the present invention can be performed in parallel, sequentially, or in a different order, as long as the desired results of the technical solution of the present invention can be achieved. This is not limited herein.

[0103] The above specific embodiments do not limit the scope of protection of the present invention. Those skilled in the art will appreciate that various modifications, combinations, sub-combinations, and substitutions may be made based on design requirements and other factors. Any modifications, equivalent substitutions, and improvements made within the spirit and principles of the present invention are intended to be included within the scope of protection of the present invention.

Claims

1. A method for configuring an access address, characterized in that: The method comprises: Obtaining a resource address of at least one network resource to be allocated; Encapsulating the resource address into a callback address according to a preset encapsulation rule; Register the callback address in a preset access source; The network resources to be allocated are network resources for implementing different business functions; Encapsulating the resource address into a callback address according to a preset encapsulation rule includes: Generate a random number and fill the random number as the domain name root path of the callback address; The resource address is used as the state parameter of the callback address.

2. The method according to claim 1, characterized in that Also includes: Obtaining the callback address from the preset access source according to the access request; The network resource to be allocated is accessed according to the callback address.

3. The method according to claim 1, characterized in that Registering the callback address at the preset access source includes: Log in to the configuration page of the preset access source and register the callback address on the configuration page.

4. The method according to claim 1, characterized in that Also includes: Add the resource address in the callback address to the safe domain name whitelist.

5. The method according to claim 2, characterized in that: Before accessing the to-be-allocated network resource according to the callback address, the method further includes: Extracting state parameters at the callback address; The existence of the status parameter is determined according to the safe domain name whitelist.

6. The method according to claim 1, characterized in that The preset access source includes at least one of the following: a public account, a portal website, and a short video homepage.

7. An access address configuration device, characterized in that: The device comprises: A resource address module, configured to obtain a resource address of at least one network resource to be allocated; An address encapsulation module, configured to encapsulate the resource address into a callback address according to a preset encapsulation rule; An address registration module, configured to register the callback address at a preset access source; The network resources to be allocated are network resources for implementing different business functions; The address encapsulation module includes: A root path unit, configured to generate a random number and fill the random number as the domain name root path of the callback address; The state parameter unit is configured to use the resource address as a state parameter of the callback address.

8. An electronic device, characterized in that: The electronic device comprises: at least one processor; and a memory communicatively connected to the at least one processor; wherein, The memory stores a computer program executable by the at least one processor, and the computer program is executed by the at least one processor so that the at least one processor can execute the access address configuration method according to any one of claims 1 to 6.

9. A computer-readable storage medium, characterized in that The computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a processor to implement the access address configuration method according to any one of claims 1 to 6 when executed.

Images