A distributed cryptographic service full-link detection system and method

Abstract

The present application discloses a distributed full-link detection system and method for cryptographic services. The system includes a client request information generation module, a request processing module, an information monitoring module, a server response information generation module, and a response processing module; the client request information generation module is used to send the client's cryptographic service request information, the information monitoring module is used to monitor the path activity of the tracking information, and monitor whether there is abnormal behavior on the path activity, send monitoring data to the full-link detection system, and once abnormal behavior is found, feedback abnormal information to the business system related to the abnormal behavior; the server response information generation module is used to perform business processing according to the cryptographic service request information generated by the client and generate server cryptographic service response information.

Description

Technical Field

[0001] The present application relates to the field of information security technology, and in particular to a distributed cryptographic service full-link detection system and method. Background Art

[0002] Cryptography is the core technology and basic support for network security. It is the most effective, reliable and economical means to solve network and information security. Without cryptography, there is no network security. At present, the power information system and its access equipment are characterized by huge scale, wide application, diverse scenarios, a wide variety of equipment, and complex network heterogeneity. The risks of information network security are becoming increasingly severe, and the requirements for the quality and level of cryptographic services are also increasing. With the sharp increase in the demand for power cryptographic services, the performance of the traditional single deployment method of cryptographic service system can no longer meet the application scenarios of large-scale cryptographic service needs. Therefore, splitting the cryptographic service system vertically or horizontally and deploying the cryptographic service system in the form of a distributed architecture can effectively improve the concurrency and availability of the cryptographic service system.

[0003] Although the distributed architecture has greatly improved the concurrency and availability of the cryptographic service system, it has also brought about certain system operation and maintenance complexity. Currently, manually checking system logs, analyzing problems, and locking problems has problems such as heavy workload and heavy tasks. In view of this, how to quickly retrieve, analyze, and locate problems in the distributed cryptographic service system and achieve full-link detection and visual viewing of cryptographic service business requests has become a technical problem that needs to be solved urgently. Summary of the invention

[0004] The embodiments of the present disclosure provide a distributed cryptographic service full-link detection system and method to at least solve the technical problems existing in the prior art of how to quickly retrieve, analyze, and locate problems in a distributed cryptographic service system, and to achieve full-link detection and visual viewing of cryptographic service business requests.

[0005] According to one aspect of an embodiment of the present disclosure, a distributed cryptographic service full-link detection system is provided, including: the system includes a client request information generation module, a request processing module, an information monitoring module, a server response information generation module, and a response processing module; the client request information generation module is used to send the client-side cryptographic service request information, the client request information generation module is used to send the client-side cryptographic service request information, the cryptographic service request information arrives at the client business system boundary from the client through various communication modules and interfaces, and then is transmitted from the client business system boundary to the server-side cryptographic service system boundary, and then is sent from the server-side cryptographic service system boundary via various communication modules and interfaces to the client-side cryptographic service system boundary. Cryptographic server; the information monitoring module is used to monitor the path activity of the tracking information, and listen for any abnormal behavior on the path activity, send the monitoring data to the full-link detection system, and once abnormal behavior is found, feedback the abnormal information to the business system related to the abnormal behavior; the server response information generation module is used to perform business processing according to the cryptographic service request information generated by the client side and generate server cryptographic service response information; the cryptographic service response information is sent to the server cryptographic service system boundary through the cryptographic server via various communication modules and interfaces, and then transmitted from the server cryptographic service system boundary to the client business system boundary, and then transmitted from the client business system boundary to the client through various communication modules and interfaces.

[0006] According to another aspect of the embodiment of the present disclosure, a distributed cryptographic service full-link detection method is also provided, including: a client request information generation module sends cryptographic service request information to a server; a request information interception module intercepts the cryptographic service request information and sends the cryptographic service request information to a request information filtering module; the request information filtering module identifies the type of the cryptographic service information and generates corresponding tracking index links trace for different types; a detection point pre-embedding module determines a key communication interface of the tracking index link trace, pre-embedding a detection point span at a node of the key interface, and collecting system operation status information, wherein the system operation status information includes processing time, request success or failure, and whether there is abnormal information; an information tracking module generates a unique tracking index link identifier trace ID in a distributed system according to the tracking index link trace, and assembles the client cryptographic service request information, the cryptographic server information to be reached, the tracking index link trace, and the tracking index link identifier trace ID to generate a tracking information M 1 , and the tracking information M 1 Send to the server.

[0007] In the present invention, according to a distributed cryptographic service full-link detection system and method, detection points can be pre-embedded at key nodes of business processing. By collecting and analyzing the pre-embedded detection point logs, system failure problems can be quickly located, providing necessary technical support for system optimization and reducing the complexity of system operation and maintenance. BRIEF DESCRIPTION OF THE DRAWINGS

[0008] The drawings described herein are used to provide a further understanding of the present disclosure and constitute a part of the present application. The illustrative embodiments of the present disclosure and their descriptions are used to explain the present disclosure and do not constitute an improper limitation on the present disclosure. In the drawings:

[0009] Figure 1 It is a schematic diagram of a cryptographic service full-link detection system under a distributed framework according to an embodiment of the present disclosure;

[0010] Figure 2 It is a flow chart of a distributed cryptographic service full-link detection method according to an embodiment of the present disclosure;

[0011] Figure 3 It is a schematic diagram of a full-link detection method for cryptographic services under a distributed framework according to an embodiment of the present disclosure. DETAILED DESCRIPTION

[0012] Now, exemplary embodiments of the present invention are described with reference to the accompanying drawings. However, the present invention can be implemented in many different forms and is not limited to the embodiments described herein. These embodiments are provided to disclose the present invention in detail and completely and to fully convey the scope of the present invention to those skilled in the art. The terms used in the exemplary embodiments shown in the accompanying drawings are not intended to limit the present invention. In the accompanying drawings, the same units / elements are marked with the same reference numerals.

[0013] Unless otherwise specified, the terms (including technical terms) used herein have the commonly understood meanings to those skilled in the art. In addition, it is understood that the terms defined in commonly used dictionaries should be understood to have the same meanings as those in the context of the relevant fields, and should not be understood as idealized or overly formal meanings.

[0014] According to a first aspect of the present embodiment, a distributed cryptographic service full-link detection system is provided, the system comprising a client request information generation module, a request processing module, an information monitoring module, a server response information generation module, and a response processing module; the client request information generation module is used to send the client-side cryptographic service request information, the cryptographic service request information arrives at the client business system boundary from the client through various communication modules and interfaces, and then is transmitted from the client business system boundary to the server cryptographic service system boundary, and then is sent from the server cryptographic service system boundary to the cryptographic server through various communication modules and interfaces; the information monitoring module is used to monitor the path activity of the tracking information, and monitor whether there is abnormal behavior on the path activity, send monitoring data to the full-link detection system, and once abnormal behavior is found, feedback abnormal information to the business system related to the abnormal behavior; the server response information generation module is used to perform business processing according to the cryptographic service request information generated by the client side and generate server cryptographic service response information; the cryptographic service response information is sent to the server cryptographic service system boundary through the cryptographic server through various communication modules and interfaces, and then is transmitted from the server cryptographic service system boundary to the client business system boundary, and then is transmitted from the client business system boundary to the client through various communication modules and interfaces.

[0015] Specifically, refer to Figure 1 As shown in the figure, the full-link detection system of cryptographic services under the distributed framework is mainly composed of the client cryptographic service request information generation module, the request information processing module, the information monitoring module and the server response information generation module. The request information processing module mainly includes the request information interception module, the request information filtering module, the detection point pre-embedded module and the information tracking module. The server response processing module mainly includes the response information interception module, the response information filtering module, the tracking information combination module and the information response feedback module.

[0016] The client-side password service request information generation module mainly sends out client-side password service request information; the password service request information reaches the client business system boundary from the client through various communication modules and interfaces, and then is transmitted from the client business system boundary to the server-side password service system boundary, and then is sent from the server-side password service system boundary to the password server via various communication modules and interfaces.

[0017] The request information interception module in the request processing module is mainly used to intercept cryptographic service request information and prepare for request information tracking and processing.

[0018] The request information filtering module in the request processing module is mainly used to identify the type of cryptographic service request information (such as Http request, RPC request, etc.) and generate corresponding tracking index link trace for different request information.

[0019] The detection point pre-embedded module in the request processing module is mainly used to determine the communication interface that needs to be called for request information, and to pre-embed the detection point span at the key interface node to detect system operation status information such as information processing time, request success or failure, and whether there is abnormal information.

[0020] The information tracking module in the request processing module is mainly used to generate a unique tracking index link identifier trace ID in the distributed cryptographic service system based on the tracking index link trace, and assemble the client cryptographic service request information, the cryptographic service end information to be reached, the tracking index link trace and the tracking index link identifier trace ID to generate the cryptographic service request tracking information M. 1 .

[0021] The information monitoring module is mainly used to monitor all active paths of tracking information, listen for abnormal behavior on each path, and send monitoring data to the full-link detection system in a timely manner; once abnormal behavior is found, the abnormal information will be immediately fed back to the relevant business system.

[0022] Monitoring information needs to be added to tracking information in real time 1 Generate cryptographic service request tracking information M i ; The M i Request link tracking information for a cryptographic service that has added monitoring information for i times.

[0023] The server response information generation module mainly performs business processing based on the cryptographic service request information generated by the client side and generates server cryptographic service response information; the cryptographic service response information is sent to the server cryptographic service system boundary through the cryptographic server via various communication modules and interfaces, and then transmitted from the server cryptographic service system boundary to the client business system boundary, and then transmitted from the client business system boundary to the client through various communication modules and interfaces.

[0024] The response information interception module in the server-side response processing module is mainly used to intercept response information for tracking and processing of response information.

[0025] The response information filtering module in the server response processing module is mainly used to select useful information in the response information, such as the response status code, response data, etc.

[0026] The trace information combination module in the server response processing module is mainly used to find the request information trace index link trace according to the unique trace index link identifier trace ID, and merge the filtered useful response information into the previous request trace information M. i Generate complete tracking information M 2 .

[0027] The information response feedback module in the server response processing module is mainly used to transmit the complete tracking information M 2 Sent to the cryptographic service request client.

[0028] Therefore, based on a distributed cryptographic service full-link detection system, detection points can be embedded at key nodes of business processing. By collecting and analyzing the embedded detection point logs, system failure problems can be quickly located, providing necessary technical support for system optimization and reducing the complexity of system operation and maintenance.

[0029] Optionally, the request processing module includes a request information interception module, a request information filtering module, a detection point pre-embedded module and an information tracking module; the request information interception module is used to intercept the cryptographic service request information and prepare for the request information tracking processing; the request information filtering module is used to identify the type of the cryptographic service request information and generate corresponding tracking index link traces for different types of cryptographic service request information; the detection point pre-embedded module is used to determine the communication interface that needs to be called by the cryptographic service request information, and pre-embed the detection point span at the key interface node to detect the system operation status information of the information, and the system operation status information includes the processing time, whether the request is successful or not, and whether there is abnormal information; the information tracking module is used to generate a unique tracking index link identifier trace ID in the distributed cryptographic service system according to the tracking index link trace, and assemble the client cryptographic service request information, the cryptographic service end information to be reached, the tracking index link trace and the tracking index link identifier trace ID to generate the cryptographic service request tracking information M 1 .

[0030] Optionally, the information monitoring module is used to add monitoring information to the tracking information M in real time. 1 Generate cryptographic service request tracking information M i ; The cryptographic service request tracking information M i Request link tracking information for a cryptographic service that has added monitoring information for i times.

[0031] Optionally, the response processing module includes a response information interception module, a response information filtering module, a tracking information combination module and an information response feedback module; the response information interception module is used to intercept the response information for response information tracking processing; the response information filtering module is used to select useful information in the response information, and the useful information includes a response status code and response data; the tracking information combination module is used to determine the request information tracking index link trace according to the unique tracking index link identifier trace ID, and merge the filtered useful response information into the previous request tracking information Mi Generate complete tracking information M 2 The information response feedback module is used to transmit the tracking information M 2 Sent to the cryptographic service request client.

[0032] Therefore, according to a distributed full-link detection method for cryptographic services, detection points can be embedded in key nodes of business processing. By collecting and analyzing the embedded detection point logs, system failure problems can be quickly located, providing necessary technical support for system optimization and reducing the complexity of system operation and maintenance.

[0033] According to another aspect of the present application, a distributed cryptographic service full-link detection method is provided. Figure 2 As shown, the method includes:

[0034] S202: The client request information generation module sends a password service request information to the server;

[0035] S204: The request information interception module intercepts the password service request information and sends the password service request information to the request information filtering module;

[0036] S206: The request information filtering module identifies the type of the cryptographic service information and generates corresponding tracking index links for different types;

[0037] S208: The detection point pre-embedding module determines the key communication interface of the tracking index link trace, pre-embedding the detection point span at the node of the key interface, and collecting system operation status information, wherein the system operation status information includes processing time, request success or failure, and whether there is abnormal information;

[0038] S210: The information tracking module generates a unique tracking index link identifier trace ID in the distributed system according to the tracking index link trace, and assembles the client password service request information, the password service end information to be reached, the tracking index link trace and the tracking index link identifier trace ID to generate the tracking information M. 1 , and the tracking information M 1 Send to the server.

[0039] Specifically, refer to Figure 3 As shown, the full-link detection method for cryptographic services under the distributed framework mainly includes the steps of processing cryptographic service request data, building a cryptographic service information tracking link, pre-embedding monitoring points, collecting detection point information, analyzing, and displaying detection results. The above steps can be used to quickly locate faults in the cryptographic service business system. The method includes:

[0040] (1) The client password service request information generation module sends a password service request information to the server;

[0041] (2) the request information interception module intercepts the password service request information and sends it to the request information filtering module;

[0042] (3) The request information filtering module first identifies the type of cryptographic service information (such as Http request, RPC request, etc.), and generates corresponding tracking index link trace for different request types.

[0043] The tracking index link trace is the entire path of the cryptographic service request information from the client to the client business system boundary via various communication modules and interfaces, and then transmitted from the client business system boundary to the server cryptographic service system boundary, and then sent from the server cryptographic service system boundary to the cryptographic server via various communication modules and interfaces; the response information generated after information processing is sent from the cryptographic server to the server cryptographic service system boundary via various communication modules and interfaces, and then transmitted from the server cryptographic service system boundary to the client business system boundary, and then transmitted from the client business system boundary to the client via various communication modules and interfaces.

[0044] (4) The detection point pre-embedding module first determines the key communication interface of the tracking index link trace, and then pre-embeds the detection point span at the key interface node to collect system operation status information such as information processing time, request success or failure, and whether there is abnormal information.

[0045] (5) The information tracking module is mainly used to generate a unique tracking index link identifier trace ID in the distributed system based on the tracking index link trace, and assemble the client password service request information, the password server information to be reached, the tracking index link trace and the tracking index link identifier trace ID to generate the tracking information M1.

[0046] (6) When the request information arrives at the server, the server response information generation module performs business processing according to the cryptographic service request information generated by the client and generates server response information;

[0047] (7) The response information interception module intercepts the response information and sends it to the response information filtering module;

[0048] (8) The response information filtering module selects useful information in the response information, such as the response status code, response data, etc., and sends it to the tracking information combining module.

[0049] (9) During the transmission of request information and response information, the information monitoring module monitors all active paths of request information and response information, monitors the system or service for abnormal behavior based on the pre-buried detection points on each path, and sends the monitoring data to the full-link detection system in a timely manner. The monitoring information needs to be added to the tracking information M1 in real time to generate the cryptographic service request tracking information Mi; Mi is the cryptographic service request link tracking information with the i-th monitoring information added.

[0050] (10) The trace information combination module first finds the request information trace index link trace according to the unique trace index link identifier trace ID, merges the filtered useful response information into the previous request trace information Mi, and generates complete trace information M2.

[0051] The tracking information M2 mainly includes client request information, server information to be reached, tracking index link trace, tracking index link identifier trace ID and useful server response information.

[0052] (11) The information response feedback module sends the complete tracking information M2 to the cryptographic service client.

[0053] (12) The full-link detection system organizes and analyzes the collected monitoring data, and then displays the detection results to the business system users in tabular and graphical forms.

[0054] Optionally, the tracking index link trace is the entire path of the cryptographic service request information passing through the client via various communication modules and interfaces to the client business system boundary, then transmitted from the client business system boundary to the server cryptographic service system boundary, and then sent from the server cryptographic service system boundary to the cryptographic server via various communication modules and interfaces; the response information generated after information processing is sent to the server cryptographic service system boundary via various communication modules and interfaces through the cryptographic server, and then transmitted from the server cryptographic service system boundary to the client business system boundary, and then transmitted from the client business system boundary to the client via various communication modules and interfaces.

[0055] Optionally, it also includes: a server response information generation module performs business processing according to the client password service request information and generates a server response information; the response information interception module intercepts the server response information and sends the server response information to the response information filtering module; the response information filtering module selects useful information of the server response information and sends it to the tracking information combination module, the useful information includes the response status code and the response data; the tracking information combination module finds the request information tracking index link trace according to the unique tracking index link identifier trace ID, and merges the filtered useful information into the previous request tracking information M i Generate complete tracking information M 2 The information response feedback module will complete the tracking information M 2 Sent to the client.

[0056] Optionally, it also includes: during the transmission of request information and response information, the information monitoring module monitors all active paths of the request information and response information, monitors the system or service for abnormal behavior based on the pre-buried detection point on each path, and sends the monitoring data to the full-link detection system in a timely manner. The monitoring information needs to be added to the tracking information M in real time. 1 Generate cryptographic service request tracking information M i ; The cryptographic service request tracking information M i Request link tracking information for a cryptographic service that has added monitoring information for i times.

[0057] Optionally, the tracking information M is also included: 2 It includes client request information, server information to be reached, trace index link trace, trace index link identifier trace ID and useful server response information.

[0058] Optionally, the method further includes: collating and analyzing the monitoring data, determining detection results, and presenting the detection results to users of the business system in a tabular and graphical manner.

[0059] Those skilled in the art will appreciate that the embodiments of the present application can be provided as methods, systems, or computer program products. Therefore, the present application can adopt the form of complete hardware embodiments, complete software embodiments, or embodiments in combination with software and hardware. Moreover, the present application can adopt the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) that contain computer-usable program code. The scheme in the embodiments of the present application can be implemented in various computer languages, for example, object-oriented programming language Java and literal scripting language JavaScript, etc.

[0060] The present application is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0061] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0062] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process in the computer or other programmable device. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0063] Although the preferred embodiments of the present application have been described, those skilled in the art may make other changes and modifications to these embodiments once they have learned the basic creative concept. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and all changes and modifications falling within the scope of the present application.

[0064] Obviously, those skilled in the art can make various changes and modifications to the present application without departing from the spirit and scope of the present application. Thus, if these modifications and variations of the present application fall within the scope of the claims of the present application and their equivalents, the present application is also intended to include these modifications and variations.

Claims

1. A distributed cryptographic service full-link detection system, characterized in that: The system includes a client request information generation module, a request processing module, an information monitoring module, a server response information generation module, and a response processing module; The client request information generation module is used to send the client-side password service request information, which arrives at the client business system boundary from the client through various communication modules and interfaces, is transmitted from the client business system boundary to the server-side password service system boundary, and is sent from the server-side password service system boundary to the password service end via various communication modules and interfaces; The information monitoring module is used to monitor the path activity of the tracking information, monitor whether there is any abnormal behavior on the path activity, send the monitoring data to the full-link detection system, and once abnormal behavior is found, feedback the abnormal information to the business system related to the abnormal behavior; The server response information generation module is used to perform business processing according to the password service request information generated by the client side and generate server password service response information; The cryptographic service response information is sent to the server cryptographic service system boundary by the cryptographic service end through various communication modules and interfaces, transmitted from the server cryptographic service system boundary to the client business system boundary, and transmitted from the client business system boundary to the client through various communication modules and interfaces; The request processing module includes a request information interception module, a request information filtering module, a detection point pre-embedded module and an information tracking module; The request information interception module is used to intercept the cryptographic service request information and prepare for the request information tracking process; The request information filtering module is used to identify the type of cryptographic service request information and generate corresponding tracking index link traces for different types of cryptographic service request information; The detection point pre-embedded module is used to determine the communication interface that needs to be called by the cryptographic service request information, and pre-embed the detection point span at the key interface node to detect the system operation status information of the information, and the system operation status information includes processing time, request success or failure, and whether there is abnormal information; The information tracking module is used to generate a unique tracking index link identifier trace ID in the distributed cryptographic service system according to the tracking index link trace, and assemble the client cryptographic service request information, the cryptographic service end information to be reached, the tracking index link trace and the tracking index link identifier trace ID to generate the cryptographic service request tracking information M1; The information monitoring module is used to add the monitoring information to the tracking information M1 in real time to generate the cryptographic service request tracking information M i ; The cryptographic service request tracking information M i Request link tracking information for the cryptographic service that has added monitoring information for i times; The response processing module includes a response information interception module, a response information filtering module, a tracking information combination module and an information response feedback module; The response information interception module is used to intercept the response information so as to track and process the response information; The response information filtering module is used to select useful information in the response information, and the useful information includes a response status code and response data; The trace information combination module is used to determine the request information trace index link trace according to the unique trace index link identifier trace ID, and merge the filtered useful response information into the previous request trace information M. i On, generate complete tracking information M2; The information response feedback module is used to send the tracking information M2 to the cryptographic service request client.

2. A distributed cryptographic service full-link detection method, characterized in that: include: The client request information generation module sends a password service request information to the server; The request information interception module intercepts the password service request information and sends the password service request information to the request information filtering module; The request information filtering module identifies the type of the cryptographic service request information and generates corresponding tracking index links trace for different types; The detection point pre-embedding module determines the key communication interface of the tracking index link trace, pre-embedding the detection point span at the node of the key communication interface, and collects system operation status information, wherein the system operation status information includes processing time, request success or failure, and whether there is abnormal information; The information tracking module generates a unique tracking index link identifier trace ID in the distributed system according to the tracking index link trace, assembles the client password service request information, the password server information to be reached, the tracking index link trace and the tracking index link identifier trace ID to generate tracking information M1, and sends the tracking information M1 to the server; The tracking index link trace is the entire path of the cryptographic service request information from the client to the client business system boundary via various communication modules and interfaces, transmitted from the client business system boundary to the server cryptographic service system boundary, and sent from the server cryptographic service system boundary to the cryptographic server via various communication modules and interfaces; the response information generated after information processing is sent from the cryptographic server to the server cryptographic service system boundary via various communication modules and interfaces, transmitted from the server cryptographic service system boundary to the client business system boundary, and transmitted from the client business system boundary to the client via various communication modules and interfaces; The server response information generation module performs business processing according to the client password service request information and generates server response information; The response information interception module intercepts the server response information and sends the server response information to the response information filtering module; The response information filtering module selects useful information of the server response information and sends it to the tracking information combining module, wherein the useful information includes a response status code and response data; The trace information combination module finds the request information trace index link trace according to the unique trace index link identifier trace ID, and merges the filtered useful information into the last request trace information M i On, generate complete tracking information M2; The information response feedback module sends the complete tracking information M2 to the client; During the transmission of request information and response information, the information monitoring module monitors all active paths of request information and response information, monitors whether the system or service has abnormal behavior based on the pre-buried detection points on each path, and sends the monitoring data to the full-link detection system in a timely manner. The monitoring information needs to be added to the tracking information M1 in real time to generate the cryptographic service request tracking information M i ; The cryptographic service request tracking information M i Request link tracking information for the cryptographic service that has added monitoring information for i times; The tracking information M2 includes client request information, server information to be reached, tracking index link trace, tracking index link identifier trace ID and useful server response information.

3. The method according to claim 2, characterized in that Also includes: The monitoring data is collated and analyzed to determine the detection results, and the detection results are presented to the users of the business system in a tabular and graphical manner.

Images