Real-time interactive database change control method, device and system
By using SMS verification code verification and session control in the database change control method, the problems of high risk of database change operation and high operation and maintenance pressure are solved, and efficient and safe database change operation is achieved, which is suitable for technical operation and maintenance when the technical operation and maintenance are not on duty. Business requirements.
Patent Information
- Application Number
- CN202110631535.9
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2021-06-07
- Publication Date
- 2025-02-14
- Estimated Expiration
- 2041-06-07
AI Technical Summary
In the test system, the database change operation risk is high, and the technical operation and maintenance personnel are under great pressure. Business testers cannot perform the change operation when the technical operation and maintenance are not on duty, which affects the test progress.
It provides a real-time interactive database change control method, which generates SMS verification codes by receiving database change requests, analyzing environment information and change instructions, and binds them to session control. After the business personnel confirm, compare the SMS verification code to perform the database change operation.
On the basis of ensuring database security, the operation and maintenance pressure of technical operation and maintenance personnel is reduced, the timeliness of terminal users are improved, and the database change capability can still be provided when technical operation and maintenance is not on duty.
Smart Images

Figure CN113360510B_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the field of database maintenance, and can be applied to the financial field and other fields, and in particular to a real-time interactive database change control method, device and system. Background Art
[0002] In the test system, due to the high risk of database change operations, only technical operation and maintenance personnel are authorized to use it. Business testers are only authorized to query the database, but testers need to frequently modify business control parameters and user data and other information in simulated user operations. This frequent operation, firstly, increases the operation and maintenance pressure of technical operation and maintenance personnel, and secondly, when technical operation and maintenance personnel are not on duty, the change operations of business testers cannot be executed, which in turn affects the progress of the test.
[0003] To this end, the industry urgently needs a solution to overcome the above problems by taking into account database security while reducing the operation and maintenance pressure of operation and maintenance personnel and not affecting the testing progress of business testers. Summary of the invention
[0004] The purpose of the present invention is to provide a quasi-real-time interactive database change control method, device and system, which can take into account database security while reducing the operation and maintenance pressure of operation and maintenance personnel and not affecting the testing progress of business testers.
[0005] To achieve the above-mentioned purpose, the present invention provides a quasi-real-time interactive database change control method, which includes: receiving a database change request, analyzing and obtaining environmental information and change instructions according to the database change request, and generating a corresponding SMS verification code; binding the environmental information, change instructions and the SMS verification code and storing them in session control; providing the database change request and the SMS verification code to a predetermined location for confirmation by business personnel, and receiving an execution instruction and an SMS verification code, comparing the received SMS verification code with the SMS verification code in the session control; and calling the environmental information and the change instruction according to the comparison result to execute the corresponding database change operation.
[0006] In the above-mentioned real-time interactive database change control method, preferably, the method further comprises: obtaining identity information of the initiator of the database change request; comparing the identity information with a predetermined authorized identity, and establishing session control through the identity information according to the comparison result.
[0007] In the above-mentioned quasi-real-time interactive database change control method, preferably, the database change request includes environment information and change instructions, and the change instructions include application information, database information and SQL statements.
[0008] In the above-mentioned real-time interactive database change control method, preferably, comparing the received SMS verification code with the SMS verification code in the session control includes: comparing the communication number information providing the SMS verification code with the communication number information of the initiator of the database change request, and when the comparison is consistent, comparing the received SMS verification code with the SMS verification code in the session control.
[0009] In the above-mentioned real-time interactive database change control method, preferably, obtaining environmental information and change instructions according to the database change request analysis, and generating a corresponding SMS verification code also includes: analyzing the change instructions according to preset rules, and when the change instructions comply with the preset rules, generating a SMS verification code corresponding to the database change request through a verification code generation algorithm.
[0010] In the above-mentioned real-time interactive database change control method, preferably, providing the database change request and the SMS verification code to a predetermined location for confirmation by business personnel includes: retrieving a pre-stored application maintenance comparison table through the application information in the database change request; obtaining the communication number information of the business personnel according to the application maintenance comparison table, and providing the database change request and the SMS verification code to the business personnel for confirmation according to the communication number information.
[0011] In the above-mentioned real-time interactive database change control method, preferably, comparing the received SMS verification code with the SMS verification code in the session control also includes: comparing the environmental information and change information in the execution instruction with the environmental information and change instruction in the session control respectively; when the comparison is consistent, comparing the received SMS verification code with the SMS verification code in the session control.
[0012] The present invention also provides a quasi-real-time interactive database change control device, which includes a verification code generation module, a session control module, an analysis module and a processing module; the verification code generation module is used to receive a database change request, analyze the database change request to obtain environmental information and change instructions, and generate a corresponding SMS verification code; the session control module is used to bind the environmental information, change instructions and the SMS verification code and store them in the session control; the analysis module is used to provide the database change request and the SMS verification code to a predetermined location for confirmation by business personnel, and receive an execution instruction and an SMS verification code, and compare the received SMS verification code with the SMS verification code in the session control; the processing module is used to call the environmental information and the change instruction according to the comparison result to execute the corresponding database change operation.
[0013] In the above-mentioned real-time interactive database change control device, preferably, the device also includes an identity authentication module, which is used to obtain the identity information of the initiator of the database change request; compare the identity information with the predetermined authorized identity, and establish session control through the identity information according to the comparison result.
[0014] The present invention also provides a quasi-real-time interactive database change control system, the system comprising a mobile service end, a service maintenance end, a quasi-real-time interactive database change control device and a database; the mobile service end is used to receive database change information input by a user, generate a database change request according to the database change information, and provide the data interface change request to the quasi-real-time interactive database change control device; and bind the received SMS verification code and the execution instruction input by the user and provide them to the quasi-real-time interactive database change control device; the quasi-real-time interactive database change control device is used to analyze and obtain environmental information and change instructions according to the database change request, and generate corresponding SMS verification code; binding the environment information, change instruction and the SMS verification code and storing them in the session control; providing the database change request and the SMS verification code to the business maintenance end; and, receiving the execution instruction and SMS verification code provided by the mobile business end, comparing the received SMS verification code with the SMS verification code in the session control; calling the environment information and the change instruction according to the comparison result to perform the corresponding database change operation on the database; the business maintenance end is used to display the received database change request and the SMS verification code to the business maintenance personnel for confirmation; and, when the confirmation is passed, providing the SMS verification code to the mobile business end.
[0015] The present invention also provides an electronic device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the above method when executing the computer program.
[0016] The present invention also provides a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program for executing the above method.
[0017] The beneficial technical effects of the present invention are: on the basis of security and compliance, by controlling the input of verification codes, the approval and automatic submission of SQL are realized, which greatly improves the change efficiency of terminal users; it greatly reduces the work pressure of technical operation and maintenance personnel, and provides database change capabilities even when they are not on duty. BRIEF DESCRIPTION OF THE DRAWINGS
[0018] The drawings described herein are used to provide a further understanding of the present invention, constitute a part of the present application, and do not constitute a limitation of the present invention. In the drawings:
[0019] Figure 1 A flow chart of a quasi-real-time interactive database change control method provided by an embodiment of the present invention;
[0020] Figure 2 A schematic diagram of the identity authentication process provided by an embodiment of the present invention;
[0021] Figure 3 A schematic diagram of a verification code forwarding process provided by an embodiment of the present invention;
[0022] Figure 4 A schematic diagram of the structure of a quasi-real-time interactive database change control device provided by an embodiment of the present invention;
[0023] Figure 5 A schematic diagram of the structure of a quasi-real-time interactive database change control system provided by an embodiment of the present invention;
[0024] Figure 6 A schematic diagram of the interaction flow of a quasi-real-time interactive database change control system provided by an embodiment of the present invention;
[0025] Figure 7 A schematic diagram of the structure of an electronic device provided by an embodiment of the present invention. DETAILED DESCRIPTION
[0026] The following will describe the implementation methods of the present invention in detail with reference to the accompanying drawings and embodiments, so that the implementation process of how the present invention applies technical means to solve technical problems and achieve technical effects can be fully understood and implemented accordingly. It should be noted that as long as there is no conflict, the various embodiments of the present invention and the various features in the embodiments can be combined with each other, and the technical solutions formed are all within the protection scope of the present invention.
[0027] In addition, the steps shown in the flowcharts of the accompanying drawings can be executed in a computer system such as a set of computer-executable instructions, and although a logical order is shown in the flowcharts, in some cases, the steps shown or described can be performed in an order different from that shown here.
[0028] Please refer to Figure 1 As shown, the present invention provides a quasi-real-time interactive database change control method, the method comprising:
[0029] S101 receives a database change request, analyzes and obtains environment information and change instructions according to the database change request, and generates a corresponding SMS verification code;
[0030] S102: Binding the environment information, the change instruction and the SMS verification code and storing them in the session control;
[0031] S103 provides the database change request and the SMS verification code to a predetermined location for confirmation by a business person, and receives an execution instruction and the SMS verification code, and compares the received SMS verification code with the SMS verification code in the session control;
[0032] S104 calls the environment information and the change instruction to execute a corresponding database change operation according to the comparison result.
[0033] In the above embodiment, the database change request may include environmental information and change instructions, and the change instructions include application information, database information and SQL statements; thus, through SMS verification code verification, maintenance personnel can remotely complete change review and confirmation, and testers only need to provide change requests to complete database changes. While the overall process is relatively simple, it also ensures that database changes are reviewed by business maintenance personnel. Furthermore, while effectively maintaining the security of the database, it also improves the testing efficiency of testers and avoids business waiting when maintenance personnel are not on duty.
[0034] Please refer to Figure 2 As shown, in one embodiment of the present invention, the method may further include:
[0035] S201 obtains the identity information of the initiator of the database change request;
[0036] S202 compares the identity information with a predetermined authorized identity, and establishes session control through the identity information according to the comparison result.
[0037] In this embodiment, it is mainly used to compare the identities of business testers and filter out unauthorized operations of illegal users. In actual work, the existing login verification method or the preset personnel list can be used for list comparison. The present invention is not further limited here, and relevant technical personnel in this field can choose the settings according to actual needs.
[0038] In one embodiment of the present invention, comparing the received SMS verification code with the SMS verification code in the session control may include: comparing the communication number information of the SMS verification code provided with the communication number information of the initiator of the database change request, and comparing the received SMS verification code with the SMS verification code in the session control when the comparison is consistent. Thus, the uniqueness of the test user can be further identified by comparing the communication numbers, reducing the risk of database operation.
[0039] In one embodiment of the present invention, obtaining environmental information and change instructions according to the database change request analysis, and generating a corresponding SMS verification code also includes: analyzing the change instruction according to preset rules, and when the change instruction meets the preset rules, generating a SMS verification code corresponding to the database change request through a verification code generation algorithm. Specifically, in actual work, preset rules can be used to set the change scope of the change instruction, for example: the delete statement must carry a WHERE condition to prevent the entire table from being deleted; the UPDATE statement must carry a where condition to prevent the entire table from being updated; prohibiting the execution of DDL statement rules, including alter, drop or other custom rules; thereby reducing unnecessary losses to the database caused by erroneous operations.
[0040] Please refer to Figure 3 As shown, in one embodiment of the present invention, providing the database change request and the SMS verification code to a predetermined location for confirmation by a business person includes:
[0041] S301 retrieves a pre-stored application maintenance comparison table through the application information in the database change request;
[0042] S302 obtains the communication number information of the business personnel according to the application maintenance comparison table, and provides the database change request and the SMS verification code to the business personnel for confirmation according to the communication number information.
[0043] In this embodiment, the maintenance personnel of the corresponding application can be quickly known through the application maintenance comparison table, and the database change request can be provided to the maintenance personnel, thereby facilitating the corresponding personnel to perform detection and verification, and accurately completing the approval efficiency of the database change request. In another embodiment of the present invention, in order to prevent the tester from modifying the execution instruction again after the maintenance personnel pass the verification, the received SMS verification code is compared with the SMS verification code in the session control, which also includes: comparing the environmental information and change information in the execution instruction with the environmental information and change instruction in the session control respectively; when the comparison is consistent, the received SMS verification code is compared with the SMS verification code in the session control.
[0044] Please refer to Figure 4As shown, the present invention also provides a quasi-real-time interactive database change control device, which includes a verification code generation module, a session control module, an analysis module and a processing module; the verification code generation module is used to receive a database change request, analyze and obtain environmental information and change instructions according to the database change request, and generate a corresponding SMS verification code; the session control module is used to bind the environmental information, change instructions and the SMS verification code and store them in the session control; the analysis module is used to provide the database change request and the SMS verification code to a predetermined location for confirmation by business personnel, and receive an execution instruction and an SMS verification code, and compare the received SMS verification code with the SMS verification code in the session control; the processing module is used to call the environmental information and the change instruction according to the comparison result to execute the corresponding database change operation.
[0045] In the above embodiment, the device may further include an identity authentication module, which is used to obtain the identity information of the initiator of the database change request; compare the identity information with the predetermined authorized identity, and establish session control through the identity information according to the comparison result. The specific implementation principle of each module can be referred to the above embodiment, and will not be described in detail here.
[0046] Please refer to Figure 5 As shown, the present invention also provides a quasi-real-time interactive database change control system, the system comprising a mobile service end, a service maintenance end, a quasi-real-time interactive database change control device and a database; the mobile service end is used to receive database change information input by a user, generate a database change request according to the database change information, and provide the data interface change request to the quasi-real-time interactive database change control device; and bind the received SMS verification code and the execution instruction input by the user and provide them to the quasi-real-time interactive database change control device; the quasi-real-time interactive database change control device is used to analyze and obtain environmental information and change instructions according to the database change request, and generate a request for the database change interface change request. corresponding SMS verification code; binding the environment information, change instruction and the SMS verification code and storing them in the session control; providing the database change request and the SMS verification code to the business maintenance end; and, receiving the execution instruction and SMS verification code provided by the mobile business end, and comparing the received SMS verification code with the SMS verification code in the session control; calling the environment information and the change instruction according to the comparison result to perform the corresponding database change operation on the database; the business maintenance end is used to display the received database change request and the SMS verification code to the business maintenance personnel for confirmation; and, when the confirmation is passed, providing the SMS verification code to the mobile business end.
[0047] Specifically, in actual work, after the user logs in through the mobile service terminal, he enters the "SQL execution elements" through the mobile service terminal and clicks "Send verification code" (button). The real-time interactive database change control device verifies the legality of SQL, generates a 4-digit verification code, and sends the execution element SMS to the service maintenance terminal. The service maintenance terminal manually reviews the legality of SQL based on the content of the execution element SMS, and forwards the "execution element SMS" to the mobile service terminal (if it is illegal, it forwards the "execution application failure SMS"). The terminal user enters an additional 4-digit verification code and clicks "Execute SQL". The real-time interactive database change control device again determines whether the "execution element" is consistent with the SESSION (session control) storage information when "Send verification code". If it is consistent, the SQL execution module is called to execute SQL, and the log recording module is called to record the log recording information. Among them, the "execution element" includes environmental information, application information, database information, SQL. The "execution element SMS" includes environmental information, application information, database information, SQL, and a 4-digit verification code. The "execution application failure SMS" includes environmental information, application information, database information, SQL, and manual review prompts (such as syntax errors, WHERE conditions are too broad). "SESSION storage information" includes user code information, user phone number information, environment information, application information, database information, and SQL. "Log record information" includes user code information, user phone number information, environment information, application information, database information, and SQL.
[0048] Please refer to Figure 6 As shown, in one embodiment of the present invention, the real-time interactive database change control system can adopt the following time sequence process:
[0049] Step 1: The front desk staff (i.e., the business tester) enters the authorized user ID and password in the mobile business terminal to log in and enter the real-time interactive database change control device; after the user and password are verified, the user ID information and the terminal user's mobile phone number information are stored in the session. Among them, the enterprise generally has an identity authentication system that provides password verification services and mobile phone number acquisition services.
[0050] Step 2: The business staff enters the SQL execution elements, including environment information, application information, database information, and SQL, in the mobile business terminal, and clicks "Send SMS verification code". Furthermore, the front end echoes all the information entered by the terminal user, including environment information, application information, database information, and SQL.
[0051] Step 3: The quasi-real-time interactive database change control device accesses the knowledge base to determine the SQL security. For SQL identified as unsafe, the user is prompted to re-enter the SQL, otherwise, the process proceeds to step 4.
[0052] Further, specific rules of the knowledge base may include: the delete statement must carry a WHERE condition to prevent the entire table from being deleted; the UPDATE statement must carry a where condition to prevent the entire table from being updated; prohibition of executing DDL statement rules, including alter, drop; or other custom rules;
[0053] Step 4: The real-time interactive database change control device generates a 4-digit verification code, and comprehensively obtains the information of step 2 and stores it in SESSION. The SESSION storage information includes environment information, application information, database information, 4-digit verification code information and SQL, and assembles the "execution element SMS", and sends the SMS to the business maintenance end. Among them, the content of "execution element SMS" = environment information + application information + database information + SQL information + user number information + terminal user mobile phone number information + 4-digit SMS verification code. If the user clicks the send verification code button multiple times, the session information will only store the last uploaded information. The matching relationship between the application and the operation and maintenance mobile phone number is stored in the database (it can also be stored in a two-dimensional array). It is necessary to purchase and access a third-party SMS operator to send SMS, or to send SMS based on the SMS sending function within the enterprise test network. Regardless of the method of sending SMS, it is necessary to activate the mobile phone number whitelist authorization for SMS sending service in advance to realize SMS control in the production environment.
[0054] Step 5: After receiving the "Execution Element SMS", the business maintenance end will manually verify whether the SQL meets the security and compliance requirements based on the SQL security verification in step 3. If the manual review is passed, the "Execution Element SMS" containing the 4-digit verification code will be forwarded to the mobile business end (which can be obtained from the session). If the manual review fails, the technical operation and maintenance will forward an "Execution Application Failure SMS" to the mobile business end.
[0055] Step 6. After the mobile business terminal receives the "Execution Element SMS" in step 5, obtain the 4-digit verification code, re-enter the 4-digit verification code in the SMS verification code (input box) of the mobile business terminal, and then click "Execute SQL" (button).
[0056] Step seven, the real-time interactive database change control device determines whether the environmental information, application information, database information, 4-digit check code information, and SQL information submitted this time are equal to the environmental information, application information, database information, 4-digit check code information, and SQL information in the session storage. If they are equal, the execution module is called to run SQL, otherwise the execution failure message "Execution elements are inconsistent, please re-enter" is prompted on the mobile service end. It is necessary to judge here to prevent the user from modifying the execution elements, especially SQL, between clicking the "Send SMS Verification Code" button in step two and clicking the "Execute SQL" (button) in step six. This prevents the execution of unreviewed information, that is, ensures the consistency of execution elements of the entire link. Furthermore, the execution failure information can be refined to specific fields, such as "SQL is not equal, please re-enter", "4-digit check code is not equal, please re-enter".
[0057] Step 8. The log recording module 108 records "log recording information", which specifically includes user code information, user mobile phone number information, environment information, application information, database information, and SQL to the database to facilitate change tracking and change backtracking.
[0058] The beneficial technical effects of the present invention are: on the basis of security and compliance, by controlling the input of verification codes, the approval and automatic submission of SQL are realized, which greatly improves the change efficiency of terminal users; it greatly reduces the work pressure of technical operation and maintenance personnel, and provides database change capabilities even when they are not on duty.
[0059] The present invention also provides an electronic device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the above method when executing the computer program.
[0060] The present invention also provides a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program for executing the above method.
[0061] like Figure 7 As shown, the electronic device 600 may further include: a communication module 110, an input unit 120, an audio processing unit 130, a display 160, and a power supply 170. It is worth noting that the electronic device 600 does not necessarily have to include Figure 7 In addition, the electronic device 600 may also include Figure 7 For components not shown, reference may be made to the prior art.
[0062] like Figure 7As shown, the central processor 100 is sometimes also referred to as a controller or an operation control, and may include a microprocessor or other processor devices and / or logic devices. The central processor 100 receives inputs and controls the operations of various components of the electronic device 600.
[0063] The memory 140 may be, for example, one or more of a cache, a flash memory, a hard drive, a removable medium, a volatile memory, a non-volatile memory or other suitable devices. The above-mentioned information related to the failure may be stored, and a program for executing the relevant information may also be stored. The CPU 100 may execute the program stored in the memory 140 to implement information storage or processing.
[0064] The input unit 120 provides input to the CPU 100. The input unit 120 is, for example, a key or a touch input device. The power supply 170 is used to provide power to the electronic device 600. The display 160 is used to display display objects such as images and text. The display may be, for example, an LCD display, but is not limited thereto.
[0065] The memory 140 may be a solid-state memory, such as a read-only memory (ROM), a random access memory (RAM), a SIM card, etc. It may also be a memory that saves information even when the power is off, can be selectively erased, and is provided with more data, examples of which are sometimes referred to as EPROMs, etc. The memory 140 may also be some other type of device. The memory 140 includes a buffer memory 141 (sometimes referred to as a buffer). The memory 140 may include an application / function storage unit 142, which is used to store application programs and function programs or processes for executing the operation of the electronic device 600 through the central processor 100.
[0066] The memory 140 may also include a data storage unit 143 for storing data, such as contacts, digital data, pictures, sounds, and / or any other data used by the electronic device. The driver storage unit 144 of the memory 140 may include various drivers for communication functions of the electronic device and / or for executing other functions of the electronic device (such as messaging applications, address book applications, etc.).
[0067] The communication module 110 is a transmitter / receiver 110 that transmits and receives signals via an antenna 111. The communication module (transmitter / receiver) 110 is coupled to the central processor 100 to provide input signals and receive output signals, which may be the same as the case of a conventional mobile communication terminal.
[0068] Based on different communication technologies, multiple communication modules 110 may be provided in the same electronic device, such as a cellular network module, a Bluetooth module and / or a wireless LAN module. The communication module (transmitter / receiver) 110 is also coupled to a speaker 131 and a microphone 132 via an audio processor 130 to provide an audio output via the speaker 131 and receive an audio input from the microphone 132, thereby realizing a common telecommunication function. The audio processor 130 may include any suitable buffer, decoder, amplifier, etc. In addition, the audio processor 130 is also coupled to the central processor 100, so that the sound can be recorded on the local machine through the microphone 132, and the sound stored on the local machine can be played through the speaker 131.
[0069] Those skilled in the art will appreciate that embodiments of the present invention may be provided as methods, systems, or computer program products. Therefore, the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.
[0070] The present invention is described with reference to flowcharts and / or block diagrams of methods, devices (systems), and computer program products according to embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.
[0071] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.
[0072] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.
[0073] The specific embodiments described above further illustrate the objectives, technical solutions and beneficial effects of the present invention in detail. It should be understood that the above description is only a specific embodiment of the present invention and is not intended to limit the scope of protection of the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present invention should be included in the scope of protection of the present invention.
Claims
1. A quasi-real-time interactive database change control method, characterized in that: The method comprises: Receive a database change request, analyze and obtain environment information and change instructions according to the database change request, and generate a corresponding SMS verification code; Binding the environment information, the change instruction and the SMS verification code and storing them in the session control; Providing the database change request and the SMS verification code to a predetermined location for confirmation by a business person, and receiving an execution instruction and SMS verification code fed back by the business person, and comparing the SMS verification code fed back by the business person with the SMS verification code stored in the session control; The environment information and the change instruction are called according to the comparison result to execute the corresponding database change operation.
2. The quasi-real-time interactive database change control method according to claim 1, characterized in that: The method further comprises: Obtain the identity information of the initiator of the database change request; The identity information is compared with a predetermined authorized identity, and session control is established through the identity information according to the comparison result.
3. The quasi-real-time interactive database change control method according to claim 1, characterized in that: The database change request includes environment information and a change instruction, and the change instruction includes application information, database information and SQL statements.
4. The quasi-real-time interactive database change control method according to claim 1, characterized in that: Comparing the SMS verification code fed back by the business personnel with the SMS verification code stored in the session control includes: The communication number information in the SMS verification code fed back by the business personnel is compared with the communication number information of the initiator of the database change request. When the comparison is consistent, the SMS verification code fed back by the business personnel is compared with the SMS verification code stored in the session control.
5. The quasi-real-time interactive database change control method according to claim 1, characterized in that: Analyzing and obtaining environment information and change instructions according to the database change request, and generating a corresponding SMS verification code also includes: The change instruction is analyzed according to preset rules, and when the change instruction meets the preset rules, a text message verification code corresponding to the database change request is generated by a verification code generation algorithm.
6. The quasi-real-time interactive database change control method according to claim 3, characterized in that: Providing the database change request and the SMS verification code to a predetermined location for confirmation by a business person includes: Retrieving a pre-stored application maintenance comparison table through the application information in the database change request; The communication number information of the business personnel is obtained according to the application maintenance comparison table, and the database change request and the SMS verification code are provided to the business personnel for confirmation according to the communication number information.
7. The quasi-real-time interactive database change control method according to claim 1, characterized in that: Comparing the SMS verification code fed back by the business personnel with the SMS verification code stored in the session control further includes: comparing the environment information and the change information in the execution instruction with the environment information and the change instruction in the session control respectively; When they are consistent, the SMS verification code fed back by the business personnel is compared with the SMS verification code stored in the session control.
8. A quasi-real-time interactive database change control device, characterized in that: The device comprises a verification code generation module, a session control module, an analysis module and a processing module; The verification code generation module is used to receive a database change request, analyze and obtain environmental information and change instructions according to the database change request, and generate a corresponding SMS verification code; The session control module is used to bind the environment information, the change instruction and the SMS verification code and store them in the session control; The analysis module is used to provide the database change request and the SMS verification code to a predetermined location for confirmation by the business personnel, and to receive the execution instruction and SMS verification code fed back by the business personnel, and to compare the SMS verification code fed back by the business personnel with the SMS verification code stored in the session control; The processing module is used to call the environment information and the change instruction to execute the corresponding database change operation according to the comparison result.
9. The quasi-real-time interactive database change control device according to claim 8, characterized in that: The device also includes an identity authentication module, which is used to obtain the identity information of the initiator of the database change request; compare the identity information with a predetermined authorized identity, and establish session control through the identity information according to the comparison result.
10. A real-time interactive database change control system, characterized in that: The system comprises a mobile service terminal, a service maintenance terminal, a quasi-real-time interactive database change control device and a database; The mobile service terminal is used to receive database change information input by a service personnel, generate a database change request according to the database change information, and provide the database change request to the quasi-real-time interactive database change control device; And, the SMS verification code provided by the quasi-real-time interactive database change control device and the execution instruction input by the business personnel are bound and provided to the quasi-real-time interactive database change control device; The real-time interactive database change control device is used to obtain environmental information and change instructions according to the database change request analysis, and generate a corresponding SMS verification code; the environmental information, change instructions and SMS verification code are bound and stored in the session control; Providing the database change request and the SMS verification code to the business maintenance terminal; And, receiving the execution instruction and SMS verification code fed back by the business personnel provided by the mobile business terminal, and comparing the SMS verification code fed back by the business personnel with the SMS verification code in the session control; Calling the environment information and the change instruction according to the comparison result to perform a corresponding database change operation on the database; The business maintenance terminal is used to display the received database change request and the SMS verification code to the business maintenance personnel for confirmation; And, when the confirmation is passed, the SMS verification code is provided to the mobile service terminal.
11. An electronic device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the computer program, the method according to any one of claims 1 to 7 is implemented.
12. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program for causing a computer to execute the method according to any one of claims 1 to 7.
Citation Information
Patent Citations
Method and system for changing ordering relationship of multimedia broadcasting
CN102480683A
Structured query language (SQL) injection attacking protection method based on internal storage
CN103067376A