Business processing method and apparatus, operation and maintenance management platform, and electronic device

By unifying the management of credentials and key pairs through a credential management system, the high learning cost and low stability issues caused by inconsistent credential management in existing technologies are resolved, enabling efficient business processing.

CN116527354BActive Publication Date: 2026-03-17INDUSTRIAL AND COMMERCIAL BANK OF CHINA
View PDF 1 Cites 0 Cited by

Patent Information

Application Number
CN202310450122.X
Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Filing Date
2023-04-24
Publication Date
2026-03-17
Estimated Expiration
2043-04-24

AI Technical Summary

Technical Problem

The lack of a unified approach to credential management in existing technologies leads to high learning costs for users and low system stability, impacting business processing efficiency.

Method used

The credential management system centrally manages user credentials and key pairs, automates credential generation and deployment, including simulated login, credential storage and detection, and ensures the proper use of credentials.

Benefits of technology

It reduces the time users spend learning credentials, improves business processing efficiency and system stability, and lowers the barrier to entry for using the operation and maintenance management platform.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN116527354B_ABST
    Figure CN116527354B_ABST
Patent Text Reader

Abstract

The application discloses a business processing method and device, an operation and maintenance management platform and electronic equipment. It relates to the field of cloud computing, and the method comprises the following steps: receiving a business processing request initiated by a target user, obtaining a first credential and a target key pair of the target user from a credential management system; calling a target logical interface in a source code management platform based on the first credential and the interface permission of the target user, and deploying the public key of the target key pair to the source code management platform through the target logical interface; obtaining a second credential from the credential management system, and initiating a target source code calling request to the source code management platform by the pipeline scheduling platform according to the second credential; obtaining the private key of the target key pair, and obtaining the target source code from the source code management platform based on the private key and the target source code calling request; and processing the business in the business processing request through the target source code by the pipeline scheduling platform. Through the application, the problem of low business processing efficiency caused by the lack of credential management in the related art is solved.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] This application relates to the field of cloud computing, and more specifically, to a business processing method, apparatus, operation and maintenance management platform, and electronic device. Background Technology

[0002] DevOps (a combination of Development and Operations, referring to an integrated R&D and operations platform) is a platform designed to improve efficiency across all stages of software development. It integrates various software development-related platforms and tools, with source code management (a source code management platform) and Jenkins (a pipeline scheduling platform) being two representative and important platforms. The integrated R&D and operations platform needs to access the source code management platform through a logical interface to achieve functionalities such as integration between application management and source code management project management, integration between iterations and source code management branches, and integration between source code and requirements. To implement these functionalities, the DevOps platform needs to possess access tokens, one of which is generated for each user and corresponds to the user's permissions within source code management.

[0003] Operations such as code inspection, compilation, packaging, and deployment of project source code all require pulling the project source code from the source code management system. This necessitates the use of SSH key (key pair) credentials. Jenkins, as the pipeline scheduling center, needs to perform source code retrieval operations to run subsequent pipeline operations. Before these operations, credentials need to be configured in Jenkins. The integrated operations and maintenance platform records the credential ID for pipeline task template creation. All tools are uniformly scheduled and managed through the DevOps platform. During scheduling, each tool needs to perform credential authentication to ensure authorized operations.

[0004] However, in related technologies, various credentials are not uniformly managed. Users need to manually maintain credentials for each tool before entering them into the DevOps platform, resulting in high usage costs. Firstly, the learning curve is steep. Before using the DevOps platform, users need to learn the various tools integrated into the DevOps backend, understand their operating mechanisms, and generate and enter various credentials into the DevOps system. This increases the learning curve and impacts development efficiency. Secondly, the system suffers from low stability. Because users can directly access the tools integrated into the DevOps platform, and the tools are not closed, DevOps operations may conflict with manual user operations, introducing instability into the system.

[0005] There is currently no effective solution to the problem of low business processing efficiency caused by the lack of credential management in related technologies. Summary of the Invention

[0006] The main purpose of this application is to provide a business processing method, apparatus, operation and maintenance management platform, and electronic device to solve the problem of low business processing efficiency caused by the lack of credential management in related technologies.

[0007] To achieve the above objectives, according to one aspect of this application, a business processing method is provided. The method includes: receiving a business processing request initiated by a target user; obtaining a first credential and a target key pair from a credential management system, wherein the credential management system manages credentials for multiple users; invoking a target logic interface in a source code management platform based on the first credential and the target user's interface permissions, and deploying the public key of the target key pair to the source code management platform through the target logic interface, wherein the target key pair is used to invoke target source code; obtaining a second credential from the credential management system, and controlling a pipeline scheduling platform to initiate a target source code invocation request to the source code management platform based on the second credential; obtaining the private key of the target key pair, and obtaining the target source code from the source code management platform based on the private key and the target source code invocation request; and controlling the pipeline scheduling platform to process the business in the business processing request through the target source code.

[0008] Optionally, before obtaining the target user's first credentials and target key pair from the credential management system, the method further includes: obtaining the target user's first login page information before logging into the source code management platform; simulating login to the source code management platform based on the first login page information, and obtaining the target user's second login page information after simulating login to the source code management platform; creating the first credential based on the second login page information, and storing the first credential in the storage module associated with the target user in the credential management system.

[0009] Optionally, before obtaining the target user's first credentials and target key pair from the credential management system, the method further includes: generating a target key pair through a preset script and matching the target key pair with the target user; and storing the target key pair in the storage module associated with the target user in the credential management system.

[0010] Optionally, before obtaining the second credential from the credential management system, the method further includes: determining whether the public key of the target key pair has been configured in the source code management platform; if the public key has been configured in the source code management platform, controlling the pipeline scheduling platform to generate the second credential based on the private key of the target key pair, the business information in the business processing request, and the credential number, and storing the second credential in the storage module associated with the target user in the credential management system.

[0011] Optionally, before invoking the target logical interface in the source code management platform based on the first credential and the target user's interface permissions, the method further includes: controlling the credential management system to access the first credential detection interface through the first credential, and determining whether the credential management system has received a preset status code; if the preset status code is received, controlling the credential management system to issue a first prompt message, wherein the first prompt message is used to indicate that the first credential is abnormal; controlling the credential management system to obtain the target user's key pair list, and determining whether the target key pair is in the key pair list; if the target key pair does not exist in the key pair list, controlling the credential management system to issue a second prompt message, wherein the second prompt message is used to indicate that the target key pair is abnormal; before initiating a target source code invocation request to the source code management platform based on the second credential, the method further includes: controlling the credential management system to query whether the credential information of the second credential exists through a preset code; if the credential information of the second credential does not exist, controlling the credential management system to issue a third prompt message, wherein the third prompt message is used to indicate that the second credential is abnormal.

[0012] Optionally, after determining whether the credential management system has received a preset status code, the method further includes: if the preset status code is received, recreating the first credential and updating the first credential in the credential management system; after determining whether the target key pair is in the key pair list, the method further includes: if the target key pair does not exist in the key pair list, regenerating the target key pair, deploying the public key in the regenerated target key pair to the source code management platform, and updating the target key pair in the credential management system; after controlling the credential management system to query whether the credential information of the second credential exists through a preset code, the method further includes: if the credential information of the second credential does not exist, regenerating the second credential and updating the second credential in the credential management system.

[0013] Optionally, when the business processing request is a record query request, after obtaining the first credential and target key pair of the target user from the credential management system, the method further includes: calling other logical interfaces in the source code management platform based on the first credential and the target user's interface permissions, wherein the other logical interfaces are interfaces in the source code management platform other than the target logical interface used for record query; and controlling the source code management platform to execute the record query business through the other logical interfaces.

[0014] To achieve the above objectives, according to another aspect of this application, an operation and maintenance management platform is provided. This platform includes: a credential management system for managing a target user's first credential, a target key pair, and a second credential; a source code management platform containing multiple logical interfaces for obtaining the public key of the first credential and the target key pair from the credential management system, connecting to the target logical interface based on the first credential, and deploying the public key based on the target logical interface; the source code management platform also stores the target source code; and a pipeline scheduling platform for obtaining the private key of the second credential and the target key pair from the credential management system, calling the target source code from the source code management platform based on the second credential and the private key, and processing business based on the target source code.

[0015] To achieve the above objectives, according to another aspect of this application, a business processing apparatus is provided. The apparatus includes: a receiving unit, configured to receive a business processing request initiated by a target user, and obtain a first credential and a target key pair from a credential management system, wherein the credential management system manages credentials for multiple users; a calling unit, configured to call a target logic interface in a source code management platform based on the first credential and the target user's interface permissions, and deploy the public key of the target key pair to the source code management platform through the target logic interface, wherein the target key pair is used to call target source code; a first obtaining unit, configured to obtain a second credential from the credential management system, and control a pipeline scheduling platform to initiate a target source code calling request to the source code management platform based on the second credential; a second obtaining unit, configured to obtain the private key of the target key pair, and obtain the target source code from the source code management platform based on the private key and the target source code calling request; and a control unit, configured to control the pipeline scheduling platform to process the business in the business processing request through the target source code.

[0016] This application employs the following steps: receiving a business processing request initiated by a target user; obtaining the target user's first credential and target key pair from a credential management system (the credential management system manages credentials for multiple users); calling a target logic interface in a source code management platform based on the first credential and the target user's interface permissions; deploying the public key of the target key pair to the source code management platform through the target logic interface; the target key pair being used to call target source code; obtaining a second credential from the credential management system; controlling the pipeline scheduling platform to initiate a target source code call request to the source code management platform based on the second credential; obtaining the private key of the target key pair; obtaining the target source code from the source code management platform based on the private key and the target source code call request; and controlling the pipeline scheduling platform to process the business in the business processing request using the target source code. This solves the problem of low business processing efficiency caused by the lack of credential management in related technologies. By setting up a credential management system to uniformly manage all credentials required by users when processing business, it saves time spent logging into various platforms using credentials and reduces the time users spend learning to use various credentials, thereby improving business processing efficiency. Attached Figure Description

[0017] The accompanying drawings, which form part of this application, are used to provide a further understanding of this application. The illustrative embodiments and descriptions of this application are used to explain this application and do not constitute an undue limitation of this application. In the drawings:

[0018] Figure 1 This is a flowchart of a business processing method provided according to an embodiment of this application;

[0019] Figure 2 This is a flowchart of credential detection provided according to an embodiment of this application;

[0020] Figure 3 This is a schematic diagram of the operation and maintenance management platform provided according to the embodiments of this application;

[0021] Figure 4 This is a schematic diagram of a business processing apparatus provided according to an embodiment of this application;

[0022] Figure 5 This is a schematic diagram of an electronic device provided according to an embodiment of this application. Detailed Implementation

[0023] It should be noted that, unless otherwise specified, the embodiments and features described in this application can be combined with each other. This application will now be described in detail with reference to the accompanying drawings and embodiments.

[0024] To enable those skilled in the art to better understand the present application, the technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present application, and not all embodiments. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art without creative effort should fall within the scope of protection of the present application.

[0025] It should be noted that the terms "first," "second," etc., in the specification, claims, and accompanying drawings of this application are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be interchanged where appropriate for the embodiments of this application described herein. Furthermore, the terms "comprising" and "having," and any variations thereof, are intended to cover non-exclusive inclusion; for example, a process, method, system, product, or apparatus that comprises a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to such processes, methods, products, or apparatus.

[0026] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for display, data used for analysis, etc.) involved in this disclosure are all information and data authorized by the user or fully authorized by all parties.

[0027] The present invention will now be described in conjunction with preferred implementation steps. Figure 1 This is a flowchart of a business processing method provided according to an embodiment of this application, such as... Figure 1 As shown, the method includes the following steps:

[0028] Step S101: Receive a business processing request initiated by the target user, and obtain the target user's first credential and target key pair from the credential management system, wherein the credential management system is used to manage the credentials of multiple users.

[0029] Specifically, target users can be developers, operations and maintenance personnel, etc., and business processing requests can be operations such as code inspection, compilation, packaging, and deployment of project source code. The credential management system is used to manage the various credentials required by each user on the operations and maintenance management platform. The primary credential can be an access token, and the target key pair can be a public-private key pair generated locally by the user, such as an SSH key. When the operations and maintenance management platform receives a business processing request from a target user, it retrieves the primary credential and the target key pair from the credential management system.

[0030] It's important to note that an SSH key is a public-private key pair. Developers typically generate it locally and then manually enter the public key into the system via the source code management page. The private key is kept by the user. Users can use the private key to pull code from the repository in their development tools or directly access the source code through the system after entering it into the operations and maintenance management platform. An access token is a crucial credential for the operations and maintenance management platform's backend to access the source code management platform's logical interface. It's fundamental to the implementation of source code management-related functions on the operations and maintenance management platform and is generally generated by developers after logging into the source code management platform and then entering it into the operations and maintenance management platform.

[0031] Step S102: Based on the first credential and the target user's interface permissions, call the target logic interface in the source code management platform, and deploy the public key of the target key pair to the source code management platform through the target logic interface. The target key pair is used to call the target source code.

[0032] Specifically, different users on the source code management platform have different interface call permissions. After obtaining the first credential, they can access various interfaces on the source code management platform based on the first credential. The target logical interface is used to configure the target user's permissions to call code on the source code management platform. After connecting to the target logical interface, the public key of the target key pair is deployed to the source code management platform, so that the target user can use the private key of the target key pair to call source code from the source code management platform.

[0033] Step S103: Obtain the second credential from the credential management system, and control the pipeline scheduling platform to initiate a target source code call request to the source code management platform based on the second credential.

[0034] Specifically, the second credential can be a credential generated by the pipeline scheduling platform based on various pipeline services. After the public key is deployed, a request to call the target source code is initiated to the source code management platform based on the second credential obtained from the credential management system.

[0035] Step S104: Obtain the private key of the target key pair, and retrieve the target source code from the source code management platform based on the private key and the target source code call request.

[0036] Specifically, the private key of the target key pair is obtained from the credential management system. This private key is matched with the public key deployed on the source code management platform. If the match is successful, the target source code is invoked from the source code management platform based on the target source code invocation request.

[0037] Step S105: Control the pipeline scheduling platform to process the business in the business processing request through the target source code.

[0038] Specifically, after the target source code is invoked, the business logic in the business processing request is executed on the pipeline scheduling platform based on the target source code.

[0039] The business processing method provided in this application embodiment receives a business processing request initiated by a target user, obtains the target user's first credential and target key pair from a credential management system (the credential management system manages credentials for multiple users), calls a target logic interface in a source code management platform based on the first credential and the target user's interface permissions, and deploys the public key of the target key pair to the source code management platform through the target logic interface (the target key pair is used to call target source code), obtains a second credential from the credential management system, and controls a pipeline scheduling platform to initiate a target source code call request to the source code management platform based on the second credential, obtains the private key of the target key pair, and obtains the target source code from the source code management platform based on the private key and the target source code call request, and controls the pipeline scheduling platform to process the business in the business processing request through the target source code. This solves the problem of low business processing efficiency caused by the lack of credential management in related technologies. By setting up a credential management system to uniformly manage all credentials required by users when processing business, it saves the time of logging into various platforms using credentials and reduces the time users spend learning to use various credentials, thereby improving business processing efficiency.

[0040] Before obtaining the target user's first credentials, it is necessary to generate the target user's first credentials on the source code management platform. Optionally, in the business processing method provided in this application embodiment, before obtaining the target user's first credentials and target key pair from the credential management system, the method further includes: obtaining the target user's first login page information before logging into the source code management platform; simulating login to the source code management platform based on the first login page information, and obtaining the target user's second login page information after simulating login to the source code management platform; creating the first credentials based on the second login page information, and storing the first credentials in the storage module associated with the target user in the credential management system.

[0041] Specifically, the first login page information can be the cookies and login form authentication token obtained before simulating the target user's login to the source code management platform. Cookies are page-related information, obtained by accessing the / users / sign_in login page of the source code management platform via a GET request. The cookies obtained after the simulated login (one of the second login page information) are then obtained. The username, password, and login form authentication token are sent to the / users / auth / ldapmain / callback path of the source code management platform via a POST request, using the cookies obtained before the simulated login to complete the simulated login operation, thus obtaining the cookies after the simulated login.

[0042] Accessing the source code management platform's ` / profile / personal_access_tokens` path via a GET message, using a cookie obtained after a simulated login, retrieves the access token creation page, and subsequently obtains the authenticity token for the creation page form (one of the second login page information). Sending the creation page form to the source code management platform's ` / profile / personal_access_tokens` path via a POST message, using a cookie obtained after a simulated login, the creation page form contains information such as the access token name and expiration time. Upon successful creation, a 302 return code message is returned. The access token content and number are then obtained. Accessing the source code management platform's ` / profile / personal_access_tokens` page via a GET message retrieves the access token and number, which are then stored by the credential management system. By pre-generating the first credential and storing it in the credential management system, target users can directly obtain the first credential from the credential system when needed, eliminating the need for users to learn and save it themselves, thus improving business processing efficiency and the stability of the operation and maintenance management platform.

[0043] Before obtaining the target key pair, the target user needs to store it in the credential management system. Optionally, in the business processing method provided in this application embodiment, before obtaining the target user's first credential and target key pair from the credential management system, the method further includes: generating the target key pair through a preset script and matching the target key pair with the target user; and storing the target key pair in the storage module associated with the target user in the credential management system.

[0044] Specifically, the target user generates a target key pair in the background using the `ssh-keygen` command in a shell script. After generation, the key pair is stored in the credential management system, and its ownership is recorded as belonging to the target user. A POST request message is sent through the ` / api / v4 / user / keys` interface provided by the source code management platform. This request message contains the access token, SSH key name, and SSH key public key. A new SSH key is added for the target user in the credential management system, and its status is recorded. This process stores the first credential and the target key pair in the credential management system.

[0045] Before obtaining the second credential, the second credential needs to be generated on the pipeline scheduling platform and stored in the credential management system. Optionally, in the business processing method provided in this application embodiment, before obtaining the second credential from the credential management system, the method further includes: determining whether the public key of the target key pair has been configured on the source code management platform; if the public key has been configured on the source code management platform, controlling the pipeline scheduling platform to generate the second credential based on the private key of the target key pair, the business information in the business processing request, and the credential number, and storing the second credential in the storage module associated with the target user in the credential management system.

[0046] Specifically, the pipeline scheduling platform can be the Jenkins platform. Jenkins has a dedicated credential management module used when calling various related systems, typically entered and managed by developers who log into the Jenkins platform. However, as the Jenkins platform is an integrated tool for operations and maintenance management, direct user access and management would expose the system backend, increasing user learning costs and introducing instability to system management. Therefore, storing credentials generated in the Jenkins platform in a credential management system allows users to manage credentials without logging into the Jenkins platform.

[0047] With the target user having already deployed the public key of the target key pair to the source code management platform, the source code management platform sends a POST message to the Jenkins platform via the path " / credentials / store / system / domain / _ / createCredentials" to send information such as the credential ID, description, and private key, thus completing the generation of the second credential. After the second credential is generated, both the second credential ID and the second credential are stored in the credential management system. By storing the second credential in the credential management system, the target user can directly access the credentials from the system without needing to learn them, improving business processing efficiency.

[0048] Credentials in a credential management system are susceptible to errors. Therefore, credentials need to be checked before being invoked. Optionally, in the business processing method provided in this application embodiment, before invoking the target logic interface in the source code management platform based on the first credential and the target user's interface permissions, the method further includes: controlling the credential management system to access the first credential detection interface through the first credential, and determining whether the credential management system has received a preset status code; if the preset status code is received, controlling the credential management system to issue a first prompt message, wherein the first prompt message is used to indicate that the first credential is abnormal; controlling the credential management system to obtain the target user's key pair list, and determining whether the target key pair is in the key pair list; if the target key pair does not exist in the key pair list, controlling the credential management system to issue a second prompt message, wherein the second prompt message is used to indicate that the target key pair is abnormal; before initiating a target source code invocation request to the source code management platform based on the second credential, the method further includes: controlling the credential management system to query whether the credential information of the second credential exists through a preset code; if the credential information of the second credential does not exist, controlling the credential management system to issue a third prompt message, wherein the third prompt message is used to indicate that the second credential is abnormal.

[0049] Specifically, Figure 2 This is a flowchart of credential detection provided according to an embodiment of this application. For example... Figure 2 As shown, the system accesses the source code management platform's logical verification interface using the first credential, such as the " / api / v4 / projects" interface. If the first credential returns normally, it is considered valid. If a 401 status code is returned (the default status code), indicating that the credential is invalid, a first prompt message is issued, instructing the user to recreate the first credential and recording the exception. Based on the first credential, the system calls the " / api / v4 / user / keys" interface in the source code management platform to obtain the target user's SH key list and checks if the target key pair is in the list. If it exists, the system is considered valid. If it does not exist, a second prompt message is issued, the public / private key pair is regenerated, and the new credential is deployed to the source code management platform, while the system records the exception. The system then checks the existence of the second credential's information using " / credentials / store / system / domain / _ / credential / credentialid / api / json?depth=1" (the default code). If it exists, the second credential is considered valid. If it does not exist, a third prompt message is issued, the second credential is created, and the exception is recorded. By checking the credentials in the credential management system before calling each credential, the system ensures the normal execution of business operations.

[0050] In the event of an anomaly in the credentials management system, the credentials in the credentials management system need to be updated. Optionally, in the business processing method provided in this application embodiment, after determining whether the credentials management system has received a preset status code, the method further includes: if the preset status code is received, recreating the first credential and updating the first credential in the credentials management system; after determining whether the target key pair is in the key pair list, the method further includes: if the target key pair does not exist in the key pair list, regenerating the target key pair, deploying the public key in the regenerated target key pair to the source code management platform, and updating the target key pair in the credentials management system; after controlling the credentials management system to query whether the credentials information of the second credential exists through a preset code, the method further includes: if the credentials information of the second credential does not exist, regenerating the second credential and updating the second credential in the credentials management system.

[0051] Specifically, if a 401 status code is received (the default status code), it indicates that the first credential is abnormal. The first credential needs to be recreated on the source code management platform and updated in the credential management system. If the target key pair is not found in the key pair list, it indicates that the target key pair is abnormal. The target user needs to upload a new target key pair and update the target key pair in the credential management system. If the credential information for the second credential cannot be found by searching " / credentials / store / system / domain / _ / credential / credentialid / api / jsonPdepth=1" (default code), it indicates that the second credential is abnormal. The second credential needs to be regenerated on the pipeline scheduling platform and updated in the credential management system. By updating abnormal credentials in real time, the system ensures that credentials in the credential management system can be used normally.

[0052] Optionally, in the business processing method provided in the embodiments of this application, when the business processing request is a record query request, after obtaining the first credential and target key pair of the target user from the credential management system, the method further includes: calling other logical interfaces in the source code management platform based on the first credential and the interface permissions of the target user, wherein the other logical interfaces are interfaces in the source code management platform other than the target logical interface used for record query; and controlling the source code management platform to execute the record query business through the other logical interfaces.

[0053] Specifically, the first credential can access logical interfaces that the target user has permission to access in the source code management platform. For example, when the target user needs to query business records, they can access other logical interfaces based on the first credential to obtain the records required by the target user.

[0054] According to another embodiment of this application, an operation and maintenance management platform is provided. Figure 3 This is a schematic diagram of an operation and maintenance management platform provided according to an embodiment of this application. For example... Figure 3 As shown, the operation and maintenance management platform includes:

[0055] Credential management system 301 is used to manage the target user's first credentials, target key pair, and second credentials;

[0056] Specifically, the credential management system 301 manages the credentials of all users, and each user has their own credential storage module in the credential management system. The target user's first credential, target key pair, and second credential are also stored in the credential management system 301.

[0057] The source code management platform 302 includes multiple logical interfaces for obtaining the public key of the first credential and the target key pair from the credential management system 301, connecting to the target logical interface based on the first credential, and deploying the public key based on the target logical interface. The source code management platform 302 is also used to store the target source code.

[0058] Specifically, the source code management platform 302 includes logical interfaces for various applications. A first credential allows connection to a qualified target logical interface within the source code management platform 302. Upon successful connection, the public key of the target key pair can be deployed on the source code management platform 302 via the target logical interface. The source code management platform 302 also stores various types of source code.

[0059] The pipeline scheduling platform 303 is used to obtain the private key of the second credential and the target key pair from the credential management system 301, and to call the target source code from the source code management platform 302 based on the second credential and the private key, and to process business based on the target source code.

[0060] Specifically, the pipeline scheduling platform 303 handles various business processes. Some business processes require calling the target source code for processing. The target source code is called from the source code management platform 302 by obtaining the second credential and the private key of the target key pair from the credential management system 301, and the business is processed based on the target source code.

[0061] The operation and maintenance management platform provided in this application eliminates the learning curve for the various tools integrated into the platform's backend. Users do not need to learn how to use these tools, as the platform integrates all their functions. Credential management serves to connect with these tools. Ultimately, this significantly reduces user learning costs, improves platform stability, and enhances daily R&D efficiency.

[0062] It should be noted that the steps shown in the flowchart in the accompanying drawings can be executed in a computer system such as a set of computer-executable instructions, and although a logical order is shown in the flowchart, in some cases the steps shown or described may be executed in a different order than that shown here.

[0063] This application also provides a business processing apparatus. It should be noted that the business processing apparatus of this application can be used to execute the business processing method provided in this application. The business processing apparatus provided in this application is described below.

[0064] Figure 4 This is a schematic diagram of a service processing apparatus provided according to an embodiment of this application. For example... Figure 4 As shown, the device includes:

[0065] The receiving unit 10 is used to receive a business processing request initiated by the target user and obtain the target user's first credential and target key pair from the credential management system, wherein the credential management system is used to manage the credentials of multiple users;

[0066] The first calling unit 20 is used to call the target logic interface in the source code management platform based on the first credential and the interface permissions of the target user, and to deploy the public key of the target key pair to the source code management platform through the target logic interface, wherein the target key pair is used to call the target source code;

[0067] The first acquisition unit 30 is used to acquire the second credential from the credential management system and control the pipeline scheduling platform to initiate a target source code call request to the source code management platform based on the second credential.

[0068] The second acquisition unit 40 is used to acquire the private key of the target key pair, and to acquire the target source code from the source code management platform based on the private key and the target source code call request;

[0069] The first control unit 50 is used to control the pipeline scheduling platform to process the business in the business processing request through the target source code.

[0070] The business processing apparatus provided in this application embodiment receives a business processing request initiated by a target user through a receiving unit 10, and obtains the target user's first credential and target key pair from a credential management system, wherein the credential management system is used to manage the credentials of multiple users; a first calling unit 20 calls a target logic interface in a source code management platform based on the first credential and the target user's interface permissions, and deploys the public key of the target key pair to the source code management platform through the target logic interface, wherein the target key pair is used to call the target source code; a first obtaining unit 30 obtains a second credential from the credential management system, and controls the pipeline scheduling platform to initiate a target source code call request to the source code management platform based on the second credential; a second obtaining unit 40 obtains the private key of the target key pair, and obtains the target source code from the source code management platform based on the private key and the target source code call request; a first control unit 50 controls the pipeline scheduling platform to process the business in the business processing request through the target source code. This solves the problem of low business processing efficiency caused by the lack of credential management in related technologies. By setting up a credential management system to uniformly manage all credentials required by users when processing business, it saves the time of logging into various platforms with credentials and reduces the time of users learning to use various credentials, thereby achieving the effect of improving business processing efficiency.

[0071] Optionally, in the business processing apparatus provided in the embodiments of this application, the apparatus further includes: a third acquisition unit, configured to acquire first login page information of the target user before logging into the source code management platform; a simulated login unit, configured to simulate logging into the source code management platform based on the first login page information, and acquire second login page information of the target user after simulating logging into the source code management platform; and a first creation unit, configured to create a first credential based on the second login page information, and store the first credential in the storage module associated with the target user in the credential management system.

[0072] Optionally, in the business processing apparatus provided in the embodiments of this application, the apparatus further includes: a first generation unit, used to generate a target key pair through a preset script and match the target key pair with a target user; and a storage unit, used to store the target key pair in a storage module associated with the target user in the credential management system.

[0073] Optionally, in the business processing apparatus provided in the embodiments of this application, the apparatus further includes: a judgment unit, used to judge whether the public key of the target key pair has been configured in the source code management platform; and a second control unit, used to control the pipeline scheduling platform to generate a second credential based on the private key of the target key pair, the business information in the business processing request and the credential number, and store the second credential in the storage module associated with the target user in the credential management system when the public key has been configured in the source code management platform.

[0074] Optionally, in the business processing apparatus provided in this application embodiment, the apparatus further includes: a third control unit, configured to control the credential management system to access the first credential detection interface through the first credential, and determine whether the credential management system has received a preset status code; a fourth control unit, configured to control the credential management system to issue a first prompt message when the preset status code is received, wherein the first prompt message is used to indicate that the first credential is abnormal; a fifth control unit, configured to control the credential management system to obtain the key pair list of the target user, and determine whether the target key pair is in the key pair list; a sixth control unit, configured to control the credential management system to issue a second prompt message when the target key pair does not exist in the key pair list, wherein the second prompt message is used to indicate that the target key pair is abnormal; the apparatus further includes: a seventh control unit, configured to control the credential management system to query whether the credential information of the second credential exists through a preset code; and an eighth control unit, configured to control the credential management system to issue a third prompt message when the credential information of the second credential does not exist, wherein the third prompt message is used to indicate that the second credential is abnormal.

[0075] Optionally, in the business processing apparatus provided in this application embodiment, the apparatus further includes: a second creation unit, configured to recreate the first credential and update the first credential in the credential management system upon receiving a preset status code; the apparatus further includes: a second generation unit, configured to regenerate the target key pair if the target key pair does not exist in the key pair list, deploy the public key in the regenerated target key pair to the source code management platform, and update the target key pair in the credential management system; the apparatus further includes: a third generation unit, configured to regenerate the second credential and update the second credential in the credential management system if the credential information of the second credential does not exist.

[0076] Optionally, in the business processing apparatus provided in this application embodiment, when the business processing request is a record query request, the apparatus further includes: a second calling unit, used to call other logical interfaces in the source code management platform based on the first credentials and the interface permissions of the target user, wherein the other logical interfaces are interfaces in the source code management platform other than the target logical interface used for record query; and a ninth control unit, used to control the source code management platform to execute the record query business through the other logical interfaces.

[0077] The business processing device includes a processor and a memory. The aforementioned receiving unit 10, first calling unit 20, first acquiring unit 30, second acquiring unit 40, and first control unit 50 are all stored in the memory as program units. The processor executes the aforementioned program units stored in the memory to realize the corresponding functions.

[0078] The processor contains a kernel, which retrieves the corresponding program units from memory. One or more kernels can be configured, and processing efficiency can be improved by adjusting kernel parameters.

[0079] The memory may include non-permanent memory in computer-readable media, such as random access memory (RAM) and / or non-volatile memory, such as read-only memory (ROM) or flash RAM, and the memory includes at least one memory chip.

[0080] This invention provides a computer-readable storage medium storing a program thereon, which, when executed by a processor, implements a business processing method.

[0081] This invention provides a processor for running a program, wherein the program executes a business processing method during runtime.

[0082] Figure 5 This is a schematic diagram of an electronic device provided according to an embodiment of this application. For example... Figure 5 As shown, device 501 includes a processor, a memory, and a program stored in the memory and executable on the processor. When the processor executes the program, it implements the following steps: a business processing method. The device in this document can be a server, PC, PAD, mobile phone, etc.

[0083] This application also provides a computer program product that, when executed on a data processing device, is suitable for executing a program with the following initialization steps: a business processing method.

[0084] Those skilled in the art will understand that embodiments of this application can be provided as methods, systems, or computer program products. Therefore, this application can take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, this application can take the form of a computer program product embodied on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0085] This application is described with reference to flowchart illustrations and / or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of this application. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, generate instructions for implementing the flowchart... Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.

[0086] These computer program instructions may also be stored in a computer-readable storage medium that can direct a computer or other programmable data processing device to function in a particular manner, such that the instructions stored in the computer-readable storage medium produce an article of manufacture including instruction means, which are implemented in a process Figure 1 One or more processes and / or boxes Figure 1 The function specified in one or more boxes.

[0087] These computer program instructions may also be loaded onto a computer or other programmable data processing equipment to cause a series of operational steps to be performed on the computer or other programmable equipment to produce a computer-implemented process, thereby providing instructions that execute on the computer or other programmable equipment for implementing the process. Figure 1 One or more processes and / or boxes Figure 1 The steps of the function specified in one or more boxes.

[0088] In a typical configuration, a computing device includes one or more processors (CPU), input / output interfaces, network interfaces, and memory.

[0089] Memory may include non-persistent memory in computer-readable media, such as random access memory (RAM) and / or non-volatile memory, such as read-only memory (ROM) or flash RAM. Memory is an example of computer-readable media.

[0090] Computer-readable media includes both permanent and non-permanent, removable and non-removable media that can store information using any method or technology. Information can be computer-readable instructions, data structures, modules of programs, or other data. Examples of computer storage media include, but are not limited to, phase-change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technologies, CD-ROM, digital versatile optical disc (DVD) or other optical storage, magnetic tape, magnetic magnetic disk storage or other magnetic storage devices, or any other non-transferable medium that can be used to store information accessible by a computing device. As defined herein, computer-readable media does not include transient computer-readable media, such as modulated data signals and carrier waves.

[0091] It should also be noted that the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such process, method, article, or apparatus. Unless otherwise specified, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes that element.

[0092] Those skilled in the art will understand that embodiments of this application can be provided as methods, systems, or computer program products. Therefore, this application can take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, this application can take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0093] The above are merely embodiments of this application and are not intended to limit the scope of this application. Various modifications and variations can be made to this application by those skilled in the art. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of this application should be included within the scope of the claims of this application.

Claims

1. A service processing method characterized by, The method comprises the following steps: receiving a service processing request initiated by a target user, obtaining a first credential and a target key pair of the target user from a credential management system, wherein the credential management system is used to manage the credentials of multiple users, and the first credential is an access token used to access a logical interface of a source code management platform; calling a target logical interface in the source code management platform based on the first credential and the interface permission of the target user, and deploying the public key of the target key pair to the source code management platform through the target logical interface, wherein the target key pair is used to call a target source code; obtaining a second credential from the credential management system, and initiating a target source code calling request to the source code management platform by the pipeline scheduling platform according to the second credential, wherein the second credential is a credential generated by the pipeline scheduling platform based on a pipeline service; obtaining the private key of the target key pair, and obtaining the target source code from the source code management platform based on the private key and the target source code calling request; controlling the pipeline scheduling platform to process the service in the service processing request through the target source code.

2. The method of claim 1, wherein, Before obtaining the first credential and the target key pair of the target user from the credential management system, the method further comprises: obtaining first login page information before the target user logs in the source code management platform; based on the first login page information, simulating login to the source code management platform, and obtaining second login page information after the target user simulates login to the source code management platform; based on the second login page information, creating the first credential, and storing the first credential in a storage module associated with the target user in the credential management system.

3. The method of claim 1, wherein, Before obtaining the first credential and the target key pair of the target user from the credential management system, the method further comprises: generating the target key pair through a preset script, and matching the target key pair with the target user; storing the target key pair in a storage module associated with the target user in the credential management system.

4. The method of claim 1, wherein, Before obtaining the second credential from the credential management system, the method further comprises: determining whether the public key of the target key pair has been configured in the source code management platform; in the case that the public key has been configured in the source code management platform, controlling the pipeline scheduling platform to generate the second credential according to the private key of the target key pair, service information in the service processing request and a credential number, and storing the second credential in a storage module associated with the target user in the credential management system.

5. The method of claim 1, wherein, Before calling the target logical interface in the source code management platform based on the first credential and the interface permission of the target user, the method further comprises: controlling the credential management system to access a first credential detection interface through the first credential, and determining whether the credential management system receives a preset status code; in the case that the preset status code is received, controlling the credential management system to issue a first prompt information, wherein the first prompt information is used to represent that the first credential is abnormal. The credential management system is controlled to acquire a key pair list of the target user, and it is judged whether the target key pair is in the key pair list. In the case where the target key pair does not exist in the key pair list, the credential management system is controlled to issue second prompt information, wherein the second prompt information is used to represent that the target key pair is abnormal. Before the target source code calling request is initiated to the source code management platform according to the second credential, the method further comprises: controlling the credential management system to query whether the credential information of the second credential exists through preset code. In the case where the credential information of the second credential does not exist, the credential management system is controlled to issue third prompt information, wherein the third prompt information is used to represent that the second credential is abnormal.

6. The method of claim 5, wherein, After it is judged whether the preset status code is received by the credential management system, the method further comprises: In the case where the preset status code is received, the first credential is recreated, and the first credential in the credential management system is updated; After it is judged whether the target key pair is in the key pair list, the method further comprises: in the case where the target key pair does not exist in the key pair list, the target key pair is regenerated, the public key in the regenerated target key pair is deployed to the source code management platform, and the target key pair in the credential management system is updated; After the credential management system is controlled to query whether the credential information of the second credential exists through preset code, the method further comprises: in the case where the credential information of the second credential does not exist, the second credential is regenerated, and the second credential in the credential management system is updated.

7. The method of claim 1, wherein, In the case where the business processing request is a record query request, after the first credential and the target key pair of the target user are acquired from the credential management system, the method further comprises: Based on the first credential and the interface permission of the target user, other logical interfaces in the source code management platform are called, wherein the other logical interfaces are interfaces for record query in the source code management platform except the target logical interface; The source code management platform is controlled to execute record query business through the other logical interfaces.

8. An operation and maintenance management platform, characterized in that, Comprise: A credential management system is used to manage a first credential, a target key pair and a second credential of a target user, wherein the first credential is an access token for accessing a logical interface of a source code management platform, and the second credential is a credential generated by a pipeline scheduling platform based on pipeline business; A source code management platform comprises a plurality of logical interfaces, is used to acquire the first credential and a public key of the target key pair from the credential management system, connects a target logical interface according to the first credential, and deploys the public key based on the target logical interface, and the source code management platform is further used to store target source code; A pipeline scheduling platform is configured to obtain the second credential and a private key of the target key pair from the credential management system, invoke the target source code from the source code management platform based on the second credential and the private key, and process a service based on the target source code.

9. A service processing apparatus characterized by comprising: The method comprises the following steps: A receiving unit is configured to receive a service processing request initiated by a target user, and obtain a first credential of the target user and a target key pair from a credential management system, wherein the credential management system is configured to manage credentials of a plurality of users, and the first credential is an access token used to access a logical interface of a source code management platform. An invoking unit is configured to invoke a target logical interface in the source code management platform based on the first credential and interface permissions of the target user, and deploy a public key of the target key pair to the source code management platform through the target logical interface, wherein the target key pair is used to invoke target source code. A first obtaining unit is configured to obtain a second credential from the credential management system, and control a pipeline scheduling platform to initiate a target source code invocation request to the source code management platform based on the second credential, wherein the second credential is a credential generated by the pipeline scheduling platform based on a pipeline service. A second obtaining unit is configured to obtain a private key of the target key pair, and obtain target source code from the source code management platform based on the private key and the target source code invocation request. A control unit is configured to control the pipeline scheduling platform to process a service in the service processing request through the target source code.

10. An electronic device, comprising: The method comprises the following steps: One or more processors and a memory are included, and the memory is configured to store one or more programs, wherein when the one or more programs are executed by the one or more processors, the one or more processors are caused to implement the service processing method in any one of claims 1 to 7.

Citation Information

Patent Citations

  • Authentication hosting system, business processing method and system, storage medium and equipment

    CN114329370A