Data access management method and system

Abstract

The present disclosure discloses a data access management method and system. The data access management method includes: a request acquisition step, in which a first server acquires a user request and user permission information and performs authentication; a data acquisition step, in which a second server acquires first data from a database based on the user request and the authentication result; a data processing step, in which the second server processes the first data to obtain second data; and a data publishing step, in which the first server publishes the second data, thereby implementing secure management and control over data access and preventing data leakage.

Description

Technical Field

[0001] The present disclosure relates to the field of computer technology, and in particular to a data access management method and system. Background Art

[0002] On a data publishing platform like a cloud exhibition, users like exhibitors and buyers can query data information, such as statistical data. However, when users access this data, the platform uses traditional architectures like iframes, which pose a risk of data leakage. Summary of the Invention

[0003] In order to solve the problems in the related art, embodiments of the present disclosure provide a data access management method and system.

[0004] In a first aspect, an embodiment of the present disclosure provides a data access management method.

[0005] Specifically, the data access management method includes: a request acquisition step, obtaining a user request and user authority information through a first server and performing authentication;

[0006] a data acquisition step, acquiring the first data from the database according to the user request and the authentication result through the second server;

[0007] a data processing step of processing the first data by the second server to obtain second data;

[0008] A data publishing step is to publish the second data through the first server.

[0009] In combination with the first aspect, in a first implementation of the first aspect of the present disclosure,

[0010] The data processing step includes: providing a set of application program interfaces (APIs) to the first server through the second server, and assembling the first data into second data according to page format information, and sending the second data to the first server.

[0011] In combination with the first implementation of the first aspect, in the second implementation of the first aspect of the present disclosure,

[0012] The data publishing step includes: through the first server, according to the authentication result and preset publishing configuration information, using the application program interface API to send the user request and receive the second data queried according to the user request, and publishing the queried second data.

[0013] In combination with any one of the first aspect, the first implementation manner of the first aspect, and the second implementation manner of the first aspect, the third implementation manner of the first aspect of the present disclosure further includes:

[0014] A display step is performed to display the second data published by the first server according to the display configuration information.

[0015] In combination with the third implementation of the first aspect, in the fourth implementation of the first aspect of the present disclosure,

[0016] The display step includes: rendering the second data according to the display configuration information through a browser, and displaying the rendered second data.

[0017] In a second aspect, an embodiment of the present disclosure provides a data access management system.

[0018] Specifically, the data access management system includes: a first server, a second server and a database, wherein the first server obtains user requests and user authority information and performs authentication;

[0019] The second server obtains the first data from the database according to the user request and the authentication result;

[0020] The second server processes the first data to obtain second data;

[0021] The first server publishes the second data.

[0022] In conjunction with the second aspect, in a first implementation of the second aspect of the present disclosure,

[0023] The second server processes the first data to obtain second data, comprising:

[0024] The second server provides a set of application programming interfaces (APIs) to the first server, and assembles the first data into second data according to page format information, and sends the second data to the first server.

[0025] In combination with the first implementation of the second aspect, in the second implementation of the second aspect of the present disclosure,

[0026] Publishing the second data by the first server includes:

[0027] The first server sends the user request using the application program interface (API) according to the authentication result and preset publishing configuration information, receives the second data found according to the user request, and publishes the found second data.

[0028] In combination with the second aspect, the first implementation manner of the second aspect, and any one of the second implementation manners, the third implementation manner of the second aspect of the present disclosure further includes:

[0029] The display device is used to display the second data published by the first server according to the display configuration information.

[0030] In combination with the third implementation of the second aspect, in the fourth implementation of the second aspect of the present disclosure,

[0031] The display device is used to render the second data according to the display configuration information through a browser, and display the rendered second data.

[0032] According to the technical solution provided by the embodiment of the present disclosure, a data access management method includes: a request acquisition step, in which a user request and user authority information are obtained and authentication is performed through a first server; a data acquisition step, in which a second server obtains first data from a database based on the user request and the authentication result; a data processing step, in which the first data is processed through the second server to obtain second data; and a data publishing step, in which the second data is published through the first server, thereby performing security management and control on data access to prevent data leakage.

[0033] It is to be understood that the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the disclosure. BRIEF DESCRIPTION OF THE DRAWINGS

[0034] Other features, objectives and advantages of the present disclosure will become more apparent through the following detailed description of non-limiting embodiments in conjunction with the accompanying drawings. In the accompanying drawings:

[0035] Figure 1a An exemplary schematic diagram illustrating an implementation scenario of a traditional page publishing method according to an embodiment of the present disclosure;

[0036] Figure 1b An exemplary schematic diagram showing a display page of a traditional page publishing method according to an embodiment of the present disclosure;

[0037] Figure 2a An exemplary schematic diagram illustrating an implementation scenario of the data access management method according to an embodiment of the present disclosure;

[0038] Figure 2b An exemplary schematic diagram illustrating an implementation scenario of a data access management method according to another embodiment of the present disclosure;

[0039] Figure 2c An exemplary schematic diagram showing a display page of a data access management method according to an embodiment of the present disclosure;

[0040] Figure 3A flowchart showing a data access management method according to an embodiment of the present disclosure is shown;

[0041] Figure 4 A flowchart showing a data access management method according to another embodiment of the present disclosure is shown;

[0042] Figure 5 A structural block diagram of a data access management system according to an embodiment of the present disclosure is shown;

[0043] Figure 6 A structural block diagram of a data access management system according to another embodiment of the present disclosure is shown. DETAILED DESCRIPTION

[0044] Hereinafter, exemplary embodiments of the present disclosure will be described in detail with reference to the accompanying drawings so that those skilled in the art can easily implement them. In addition, for the sake of clarity, parts not related to the description of the exemplary embodiments are omitted in the accompanying drawings.

[0045] In the present disclosure, it should be understood that terms such as "include" or "have" are intended to indicate the presence of features, numbers, steps, actions, components, parts, or combinations thereof disclosed in the present specification, and are not intended to exclude the possibility that one or more other features, numbers, steps, actions, components, parts, or combinations thereof exist or are added.

[0046] It should also be noted that, in the absence of conflict, the embodiments and features of the embodiments of the present disclosure may be combined with each other. The present disclosure will be described in detail below with reference to the accompanying drawings and in combination with the embodiments.

[0047] In this disclosure, the acquisition of user information or user data is an operation authorized and confirmed by the user, or actively selected by the user.

[0048] Cloud-based exhibitions, such as the Food and Drinks Fair and Bridal Show, can help businesses and enterprises hold exhibitions online. On the data publishing platform for cloud-based exhibitions, users, such as exhibitors and buyers, can access data information, such as the number of web page views and page views. This data can be generated into statistical tables or graphs, which are displayed on the page for users to access information. Traditional data publishing platforms use architectures such as iframes, which pose a risk of data leakage.

[0049] Figure 1a An exemplary schematic diagram illustrating an implementation scenario of a traditional page publishing method according to an embodiment of the present disclosure.

[0050] It can be understood by those skilled in the art that Figure 1a The implementation scenario of the data access management method is exemplified and does not constitute a limitation to the present disclosure.

[0051] like Figure 1a As shown, in the implementation scenario of the traditional publishing page, an iframe architecture is adopted. When user 101 obtains data information, he accesses the publishing server 103, such as a Java server, through the browser 102. After the publishing server 103 authenticates the user 101, it sends the Uniform Resource Locator (URL) of the page server 104 to the browser 102. The browser 102 sends the user request to the page server 104, and the page server 104 queries the database 105 to obtain the data information required by the user. If the page server 104 does not authenticate, the URL of the page server 104 will be directly exposed to the browser 102, resulting in the risk of data leakage. If the page server 104 also authenticates, it will cause the publishing server 103 and the page server 104 to authenticate twice, increasing the user access delay and affecting the user experience.

[0052] Figure 1b An exemplary schematic diagram showing a display page of a traditional page publishing method according to an embodiment of the present disclosure.

[0053] It can be understood by those skilled in the art that Figure 1b This is a schematic diagram illustrating a display page of a traditional page publishing method, and does not constitute a limitation to the present disclosure.

[0054] like Figure 1b As shown, the number of visitors can be counted, such as the cumulative number of registered users, the number of registered users this week, the number of registered users last week, the number of visitors at multiple exhibitions, etc., but Figure 1a The architecture will lead to Figure 1b There is a data breach on the page shown.

[0055] Therefore, it is necessary to develop new solutions to ensure that users can efficiently access the database and obtain data while performing efficient authentication to prevent data leakage.

[0056] In order to solve the above problems, the present disclosure proposes a data access management method and system.

[0057] According to an embodiment of the present disclosure, a data access management method is provided, including: a request acquisition step, in which a user request and user authority information are acquired and authenticated through a first server; a data acquisition step, in which a second server acquires first data from a database based on the user request and the authentication result; a data processing step, in which the first data is processed through the second server to obtain second data; and a data publishing step, in which the second data is published through the first server, thereby performing security management and control on data access and preventing data leakage.

[0058] Figure 2a An exemplary schematic diagram illustrating an implementation scenario of the data access management method according to an embodiment of the present disclosure.

[0059] It can be understood by those skilled in the art that Figure 2a The implementation scenario of the data access management method is exemplified and does not constitute a limitation to the present disclosure.

[0060] like Figure 2a As shown, in an implementation scenario of a data access management method according to an embodiment of the present disclosure, user 201 sends a user request and user permission information to a first server 203, such as a Java server, via a browser 202. First server 203 receives the user request and user permission information and authenticates the user permission information. It then sends the user request information and authentication result to a page controller 2041 in second server 204 via a set of application programming interfaces (APIs) on second server 204. Based on the user request information and authentication result, page controller 2041 queries database 205 via API gateway 2042 to obtain first data. Page controller 2041 processes the first data based on page format information in page component 206, for example, by reorganizing and formatting the first data to obtain second data. The second data is then sent to first server 203 via the API of second server 204. Page component 206 can be part of second server 204 or independent of second server 204. The second data can also be obtained by selecting a portion of the first data based on the user request and then reorganizing and formatting it. First server 203 publishes the second data based on the authentication result and publishing configuration information, such as JS / CSS / HTML / API configuration information. The publishing configuration information can be used to configure the publishing method of the second data, such as using a table, a histogram, a pie chart, or other formats as needed. After receiving the second data from first server 203, browser 202 renders the data according to the display configuration information and displays the rendered page to user 201.

[0061] In the embodiments of the present disclosure, unlike the conventional architecture shown in FIG. 1 , in which browser 102 simultaneously accesses publishing server 103 and page server 104, potentially leading to data leakage on page server 104, browser 202 in FIG. 2 only accesses first server 203, such as a Java server, and first server 203 performs a single, efficient authentication. Second server 204, however, is located behind first server 203 and can only be accessed after authentication with first server 203. The URL of second server 204 is not directly exposed to browser 202. This approach simultaneously achieves data security and efficient processing using only a single authentication, improving data security while controlling user latency.

[0062] Those skilled in the art will appreciate that, in addition to being a Java server, the first server 203 may also be an Internet Information Server (IIS), Nginx, or other server for publishing web pages. The browser 202 may be an IE browser, a Chrome browser, or other browsers, and this disclosure does not limit this.

[0063] Figure 2b An exemplary schematic diagram illustrating an implementation scenario of a data access management method according to another embodiment of the present disclosure.

[0064] It can be understood by those skilled in the art that Figure 2b The implementation scenario of the data access management method is exemplified and does not constitute a limitation to the present disclosure.

[0065] exist Figure 2b In the implementation scenario of the data access management method shown, the developer sets the publishing configuration information 212 such as JS / CSS / html / API configuration information through the page development environment 211, and stores the publishing configuration information 212 in the publishing configuration storage 213. Figure 2a , the release configuration storage 213 may be located in the second server 204 ( Figure 2a (The publishing configuration storage 213 is not shown in the figure). After the first server 203, such as a Java server, obtains the publishing configuration information 212 from the publishing configuration storage 213, applies it to the second data, and publishes the second data. The browser 202 renders the second data in the renderer 2021 and displays it on the user page 2022.

[0066] In the embodiments of the present disclosure, Figure 2b The first server 203 and the browser 202 can respectively communicate with Figure 2a The first server 203 and the browser 202 are the same.

[0067] Figure 2c An exemplary schematic diagram showing a display page of a data access management method according to an embodiment of the present disclosure.

[0068] It can be understood by those skilled in the art that Figure 2c The display page of the data access management method is shown as an example, and does not constitute a limitation to the present disclosure.

[0069] like Figure 2c As shown, developers can use bar charts, line charts, etc. to set up pages, so as to conveniently display the second data. Figure 2a 、 Figure 2bThe architecture in the ,effectively avoids data leakage.

[0070] Figure 3 A flowchart of a data access management method according to an embodiment of the present disclosure is shown.

[0071] like Figure 3 As shown, the data access management method includes: steps S301, S302, S303, and S304.

[0072] In step S301, a user request and user authority information are obtained through a first server and authentication is performed.

[0073] In step S302, the first data is obtained from the database according to the user request and the authentication result through the second server.

[0074] In step S303, the first data is processed by the second server to obtain second data.

[0075] In step S304, the second data is published through the first server.

[0076] In the embodiment of the present disclosure, step S301 is a request acquisition step, step S302 is a data acquisition step, step S303 is a data processing step, and step S304 is a data publishing step.

[0077] In the embodiments of the present disclosure, Figure 2a As shown, after the first server 203 obtains the user request and user permission information and authenticates the user permission information, it sends the user request information and the authentication result to the page controller 2041 in the second server 204. The second server 204 queries the database 205 based on the user request information and the authentication result to obtain the first data. The second server 204 processes the first data to obtain the second data, and publishes the first data through the first server 203. In an embodiment of the present disclosure, the second server 204 processes the first data based on the page format information to obtain the second data, and publishes the first data through the first server 203. In an embodiment of the present disclosure, the page format information describes the page format of the second data that the second server will provide to the first server. The first server publishes the second data provided by the second server in the page format described in the page format information to the browser.

[0078] According to the implementation manner of the present disclosure, through the request acquisition step, the user request and user authority information are obtained and authentication is performed through the first server; the data acquisition step, the first data is obtained from the database according to the user request and the authentication result through the second server; the data processing step, the first data is processed by the second server to obtain the second data; the data publishing step, the second data is published by the first server, thereby performing security management and control on data access to prevent data leakage.

[0079] In an embodiment of the present disclosure, the data processing step includes: providing a set of application program interfaces (APIs) to the first server through the second server, and assembling the first data into second data according to the page format information, and sending the second data to the first server.

[0080] In the embodiment of the present disclosure, as described above, the second server 204 provides a set of application programming interfaces (APIs) to the first server. After assembling the first data into second data according to the page format information, the second server 204 can send the second data to the first server via the APIs.

[0081] According to an embodiment of the present disclosure, the processing steps include: providing a set of application programming interfaces (APIs) to the first server through the second server, and assembling the first data into second data according to the page format information, and sending it to the first server, thereby realizing the connection between the first server 203 and the second server 204 through a unified application programming interface (API), preventing the URL of the second server 204 from being directly exposed to the browser 202, and preventing data leakage.

[0082] In an embodiment of the present disclosure, the data publishing step includes: through the first server, based on the authentication result and preset publishing configuration information, using the application program interface API to send a user request and receive second data queried according to the user request, and publishing the queried second data.

[0083] In the embodiments of the present disclosure, Figure 2a and Figure 2b As shown, the first server 203, such as a Java server, uses the authentication result and the preset publishing configuration information 212 such as JS / CSS / html / API configuration information stored in the publishing configuration storage 213, uses the application program interface API to send the user request and receives the second data queried according to the user request, and publishes the queried second data.

[0084] According to the implementation manner of the present disclosure, the data publishing step includes: through the first server, based on the authentication result and the preset publishing configuration information, using the application program interface API to send the user request and receive the second data queried according to the user request, and publish the queried second data, so as to flexibly configure the publishing method of the second data and achieve a good visualization effect.

[0085] Figure 4 A flowchart of a data access management method according to another embodiment of the present disclosure is shown.

[0086] like Figure 4 As shown, the data access management method includes and Figure 3The same steps S301, S302, S303, S304 also include step S401.

[0087] In step S401, second data published by the first server is displayed according to the display configuration information.

[0088] Step S401 is a display step.

[0089] like Figure 2a and Figure 2b As shown, the second information is displayed to the user 201 via the browser 202 .

[0090] According to an embodiment of the present disclosure, through the display step, the second data published by the first server is displayed according to the display configuration information, thereby displaying the second information to the user in a visual manner.

[0091] In an embodiment of the present disclosure, the displaying step includes: rendering the second data according to the display configuration information through a browser, and displaying the rendered second data.

[0092] In the embodiments of the present disclosure, Figure 2b As shown, in the browser 202 , the second data is rendered by the renderer 2021 and displayed in the user interface 2022 .

[0093] According to an embodiment of the present disclosure, the display step includes: rendering the second data according to the display configuration information through a browser, and displaying the rendered second data, thereby obtaining a good visualization effect.

[0094] Figure 5 A structural block diagram of a data access management system according to an embodiment of the present disclosure is shown.

[0095] like Figure 5 As shown, the data access management system 500 includes: a first server 501 , a second server 502 , and a database 503 .

[0096] In an embodiment of the present disclosure, the first server 501 obtains a user request and user authority information and performs authentication; the second server 502 obtains first data from a database based on the user request and the authentication result; the second server 502 processes the first data to obtain second data; and the first server 501 publishes the second data.

[0097] According to an embodiment of the present disclosure, a data access management system is provided, including a first server, a second server and a database, wherein the first server obtains user requests and user authority information and performs authentication; the second server obtains first data from the database based on the user request and the authentication result; the second server processes the first data to obtain second data; and the first server publishes the second data, thereby performing security control on data access and preventing data leakage.

[0098] In an embodiment of the present disclosure, the second server processes the first data to obtain the second data, including: the second server provides a set of application program interfaces (APIs) to the first server, and assembles the first data into the second data according to the page format information, and sends the second data to the first server.

[0099] According to an embodiment of the present disclosure, processing the first data through the second server to obtain the second data includes: the second server provides a set of application program interfaces API to the first server, and assembles the first data into second data according to the page format information, and sends it to the first server, thereby realizing the connection between the first server and the second server through a unified application program interface API, preventing the URL of the second server from being directly exposed to the browser, and preventing data leakage.

[0100] In an embodiment of the present disclosure, the first server publishes the second data including: the first server sends a user request using an application programming interface (API) based on an authentication result and preset publishing configuration information, receives the second data queried according to the user request, and publishes the queried second data.

[0101] According to an embodiment of the present disclosure, publishing the second data through the first server includes: the first server uses the application program interface API to send a user request and receive the second data queried according to the user request based on the authentication result and preset publishing configuration information, and publishes the queried second data, thereby flexibly configuring the publishing method of the second data to achieve a good visualization effect.

[0102] Figure 6 A structural block diagram of a data access management system according to another embodiment of the present disclosure is shown.

[0103] like Figure 6 As shown, the data access management system 600 includes and Figure 5 The same first server 501, second server 502, database 503 as in the embodiment also include: a display device 601.

[0104] The display device 601 is used to display the second data published by the first server according to the display configuration information.

[0105] According to an embodiment of the present disclosure, a display device is used to display the second data published by the first server according to the display configuration information, thereby displaying the second information to the user in a visual manner.

[0106] In an embodiment of the present disclosure, the display device is configured to render the second data according to the display configuration information through a browser, and display the rendered second data.

[0107] According to an embodiment of the present disclosure, the display device is used to render the second data according to the display configuration information through a browser, and display the rendered second data, thereby obtaining a good visualization effect.

[0108] The flowcharts and block diagrams in the accompanying drawings illustrate the possible implementation architecture, functions and operations of the systems, methods and computer program products according to various embodiments of the present disclosure. In this regard, each box in the flowchart or block diagram can represent a module, program segment or part of code, and the module, program segment or part of code contains one or more executable instructions for implementing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the box can also occur in an order different from that marked in the accompanying drawings. For example, two boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram and / or flowchart, and the combination of boxes in the block diagram and / or flowchart, can be implemented using a dedicated hardware-based system that performs the specified function or operation, or can be implemented using a combination of dedicated hardware and computer instructions.

[0109] The units or modules involved in the embodiments described in this disclosure may be implemented by software or programmable hardware. The units or modules described may also be provided in a processor, and the names of these units or modules do not, in certain circumstances, constitute limitations on the units or modules themselves.

[0110] As another aspect, the present disclosure further provides a computer-readable storage medium. This computer-readable storage medium may be included in the electronic device or computer system described in the above embodiments, or may be a standalone computer-readable storage medium not incorporated into the device. The computer-readable storage medium stores one or more programs, which are used by one or more processors to execute the methods described in the present disclosure.

[0111] The above description is merely a preferred embodiment of the present disclosure and an illustration of the technical principles employed. Those skilled in the art should understand that the scope of the invention herein is not limited to the technical solutions formed by the specific combination of the above-mentioned technical features, but also encompasses other technical solutions formed by any combination of the above-mentioned technical features or their equivalents without departing from the inventive concept. For example, a technical solution formed by replacing the above-mentioned features with (but not limited to) technical features with similar functions disclosed in this disclosure.

Claims

1. A data access management method, comprising: A request obtaining step, obtaining the user request and user authority information through the first server, and performing authentication to obtain an authentication result; a data acquisition step of acquiring the first data from a database according to the user request and the authentication result through the second server; a data processing step, wherein the second server provides a set of application programming interfaces (APIs) to the first server, and reorganizes and formats the first data according to the page format information to obtain second data, and sends the second data to the first server; wherein the content and format of the second data can be directly used for display in the user interface; The data publishing step is to send the user request through the first server according to the authentication result and the preset publishing configuration information, use the application program interface API to receive the second data queried according to the user request, and publish the queried second data.

2. The method according to claim 1, wherein Also includes: A display step is performed to display the second data published by the first server according to the display configuration information.

3. The method according to claim 2, wherein: The display step includes: rendering the second data according to the display configuration information through a browser, and displaying the rendered second data.

4. A data access management system comprising a first server, a second server and a database, in, The first server obtains the user request and user authority information, and performs authentication to obtain an authentication result; The second server obtains the first data from the database according to the user request and the authentication result; The second server provides a set of application programming interfaces (APIs) to the first server, and reorganizes and formats the first data according to the page format information to obtain second data, and sends the second data to the first server; wherein the content and format of the second data can be directly used for display in the user interface; The first server sends the user request using the application program interface (API) according to the authentication result and preset publishing configuration information, receives the second data found according to the user request, and publishes the found second data.

5. The system according to claim 4, wherein: Also includes: The display device is used to display the second data published by the first server according to the display configuration information.

6. The system according to claim 5, wherein: The display device is used to render the second data according to the display configuration information through a browser, and display the rendered second data.

Images