Deployment method, system, storage medium and electronic device of version of application system

Abstract

The application discloses a deployment method and system of an application system version, a storage medium and an electronic device. Relates to the field of financial technology, the method comprises the following steps: obtaining the user password of the target application system from the storage system; sending the user password to the configuration center in the deployment system of the version of the application system, and obtaining the first key from the key management module in the deployment system of the version of the application system; encrypting the user password through the first key to obtain the first ciphertext, and sending the first ciphertext and the first key to the version deployment platform in the deployment system of the version of the application system; generating the configuration file corresponding to the target application system through the version deployment platform using the first ciphertext and the first key; and deploying the version of the target application system based on the configuration file. Through the application, the problem of security risk that the operation and maintenance personnel needs to manually input the user password when deploying the version of the application system in the related art is solved.

Description

Technical Field

[0001] This application relates to the field of financial technology, and more specifically, to a method for deploying an application system version, a system, a storage medium, and an electronic device. Background Technology

[0002] In related technologies, when deploying application system versions, application maintenance personnel need to manually enter the corresponding user passwords before deploying the application system to the server. However, the user passwords used by the application system are not changed for a long time. Even after the application maintenance personnel leave the company, they still have a large amount of user password information, posing a significant risk of password leakage. Furthermore, application maintenance personnel also need to use these passwords for routine maintenance of the application system, leading to a situation where the application system's passwords and the passwords used by the application maintenance personnel are mixed—a situation known as human-machine password mixing—which poses a risk of unauthorized operation by application maintenance personnel.

[0003] There is currently no effective solution to the security risk posed by requiring maintenance personnel to manually enter user passwords when deploying application system versions in related technologies. Summary of the Invention

[0004] The main purpose of this application is to provide a method, system, storage medium, and electronic device for deploying application system versions, so as to solve the security risk problem that requires maintenance personnel to manually enter user passwords when deploying application system versions in related technologies.

[0005] To achieve the above objectives, according to one aspect of this application, a method for deploying a version of an application system is provided. The method includes: obtaining user passwords for a target application system from a storage system, wherein the storage system stores user passwords for multiple application systems; sending the user passwords to a configuration center in a version deployment system of the application system, and obtaining a first key from a key management module in the version deployment system of the application system, wherein the key management module stores keys corresponding to each application system; encrypting the user passwords using the first key to obtain first ciphertext, and sending the first ciphertext and the first key to a version deployment platform in the version deployment system of the application system; generating a configuration file corresponding to the target application system using the first ciphertext and the first key through the version deployment platform; and deploying the version of the target application system based on the configuration file.

[0006] Optionally, deploying a version of the target application system based on a configuration file includes: transferring the configuration file to the server of the target application system and storing the configuration file in a target directory on the server.

[0007] Optionally, generating the configuration file corresponding to the target application system through the version deployment platform using the first ciphertext and the first key includes: obtaining a configuration parameter template and determining the first variable and the second variable in the parameter template, wherein the first variable is a password variable and the second variable is a key variable; replacing the first variable in the configuration parameter template with the first ciphertext and replacing the second variable in the configuration parameter template with the first key to obtain the configuration file.

[0008] Optionally, after obtaining the user password of the application system from the storage system, the method further includes: encrypting the user password with a second key to obtain a second ciphertext, wherein the second key is a communication key between the storage system and the deployment system of the application system version; sending the user password to the configuration center in the deployment system of the application system version includes: sending the second ciphertext to the configuration center; after sending the user password to the configuration center in the deployment system of the application system version, the method further includes: decrypting the second ciphertext through the configuration center to obtain the user password.

[0009] Optionally, generating the configuration file of the target application system using the first ciphertext and the first key through the version deployment platform includes: encrypting the first key with the third key to obtain the encrypted first key; and generating the configuration file of the target application system using the first ciphertext and the encrypted first key.

[0010] Optionally, after deploying the version of the target application system based on the configuration file, the method further includes: obtaining the first ciphertext and the encrypted first key from the configuration file; determining the third key through the decryption module in the deployment system of the application system version, and decrypting the encrypted first key with the third key to obtain the first key, wherein the decryption module is the decryption module corresponding to the key management module; decrypting the first ciphertext with the first key through the decryption module to obtain the user password; and logging into the target application system according to the user password.

[0011] Optionally, before retrieving the user password of the application system from the storage system, the method further includes: determining whether the account used to log in to the target application system has login permissions; and if the account has login permissions, adding the user password corresponding to the account to the storage system.

[0012] To achieve the above objectives, according to another aspect of this application, a version deployment system for an application system is provided. The system includes: a storage system for storing user passwords for multiple application systems; a configuration center for retrieving the user password corresponding to a target application system from the storage system, encrypting the user password using a first key, adding the first ciphertext and the first key to the configuration file of the target application system, and then sending the configuration file to a version deployment platform; a key management module, communicatively connected to the configuration center, for generating a first key corresponding to the target application system and sending the first key to the configuration center; and a version deployment platform, communicatively connected to the configuration center, for generating the configuration file of the target application system using the first ciphertext and the first key, and transmitting the configuration file to the server of the target application system to complete the version deployment of the application system.

[0013] This application employs the following steps: obtaining the user password of the target application system from a storage system, wherein the storage system stores user passwords for multiple application systems; sending the user password to the configuration center in the application system's version deployment system, and obtaining a first key from the key management module in the application system's version deployment system, wherein the key management module stores keys corresponding to each application system; encrypting the user password using the first key to obtain a first ciphertext, and sending the first ciphertext and the first key to the version deployment platform in the application system's version deployment system; generating a configuration file corresponding to the target application system using the first ciphertext and the first key through the version deployment platform; and deploying the version of the target application system based on the configuration file. This solves the security risk problem in related technologies where application system version deployment requires maintenance personnel to manually enter user passwords. By encrypting and transmitting user passwords in the application system's version deployment system, the deployment of the application system version can be completed through the application system's server without requiring application maintenance personnel to manually enter user passwords, thereby improving the security of application system version deployment. Attached Figure Description

[0014] The accompanying drawings, which form part of this application, are used to provide a further understanding of this application. The illustrative embodiments and descriptions of this application are used to explain this application and do not constitute an undue limitation of this application. In the drawings:

[0015] Figure 1 This is a flowchart of a deployment method for an application system version provided in the embodiments of this application;

[0016] Figure 2 This is a schematic diagram of the deployment system of the application system version provided in the embodiments of this application;

[0017] Figure 3This is a schematic diagram of a deployment device for an application system version provided in the embodiments of this application;

[0018] Figure 4 This is a schematic diagram of an electronic device provided according to an embodiment of this application. Detailed Implementation

[0019] It should be noted that, unless otherwise specified, the embodiments and features described in this application can be combined with each other. This application will now be described in detail with reference to the accompanying drawings and embodiments.

[0020] To enable those skilled in the art to better understand the present application, the technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present application, and not all embodiments. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art without creative effort should fall within the scope of protection of the present application.

[0021] It should be noted that the terms "first," "second," etc., in the specification, claims, and accompanying drawings of this application are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be interchanged where appropriate for the embodiments of this application described herein. Furthermore, the terms "comprising" and "having," and any variations thereof, are intended to cover non-exclusive inclusion; for example, a process, method, system, product, or apparatus that comprises a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to such processes, methods, products, or apparatus.

[0022] It should be noted that all information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for display, data used for analysis, etc.) involved in this disclosure are information and data authorized by the user or fully authorized by all parties. For example, this system has an interface with relevant users or organizations. Before obtaining relevant information, it is necessary to send an acquisition request to the aforementioned user or organization through the interface, and obtain the relevant information after receiving consent information from the aforementioned user or organization.

[0023] The present invention will now be described in conjunction with preferred implementation steps. Figure 1 This is a flowchart of a deployment method for an application system version provided in the embodiments of this application, such as... Figure 1 As shown, the method includes the following steps:

[0024] Step S101: Obtain the user password of the target application system from the storage system, wherein the storage system stores the user passwords of multiple application systems.

[0025] Specifically, the storage system can be a centralized user management system, which centrally manages the accounts and user passwords used to log in to various application systems. The target application system can be the business system of Bank A, and the user password is the password for logging into the business system of Bank A. When deploying a version of the business system of Bank A, the password of the business system of Bank A can be obtained from the centralized user management system first.

[0026] Step S102: Send the user password to the configuration center in the deployment system of the application system version, and obtain the first key from the key management module in the deployment system of the application system version. The key management module stores the keys corresponding to each application system.

[0027] Specifically, the configuration center is used to encrypt user passwords, and the key management module is the password distribution module. It stores the keys corresponding to the user passwords of each application system, and is used to distribute keys to the user passwords to be encrypted, and to encrypt the user passwords using a symmetric encryption algorithm.

[0028] Step S103: Encrypt the user password with the first key to obtain the first ciphertext, and send the first ciphertext and the first key to the version deployment platform in the application system's version deployment system.

[0029] Specifically, the first key is a key determined based on the name of the target application system. The user password of the target application system is encrypted using the first key in the configuration center to obtain the first ciphertext, and the first ciphertext and the first key are sent to the version deployment platform.

[0030] Step S104: Generate the configuration file corresponding to the target application system using the first ciphertext and the first key through the version deployment platform.

[0031] Specifically, the version deployment platform is responsible for deploying the target application system to a version using configuration files. Before deploying the target application system to a version, the version deployment platform adds the first encrypted text and the first key sent by the configuration center to the configuration template to generate the configuration file corresponding to the target application system, thus laying the data foundation for version deployment.

[0032] Step S105: Deploy the version of the target application system based on the configuration file.

[0033] Optionally, in the method for deploying the version of the application system provided in this application embodiment, deploying the version of the target application system based on the configuration file includes: transmitting the configuration file to the server of the target application system and storing the configuration file in the target directory of the server.

[0034] Specifically, the version deployment platform downloads the configuration file to the version deployment agent, which then saves the configuration file to the local server, i.e., the server corresponding to the target application system. The version deployment of the target application system is completed by updating the configuration parameters on the server of the target application system.

[0035] The application system version deployment method provided in this application embodiment obtains the user password of the target application system from a storage system, wherein the storage system stores user passwords for multiple application systems; sends the user password to the configuration center in the application system version deployment system, and obtains a first key from the key management module in the application system version deployment system, wherein the key management module stores keys corresponding to each application system; encrypts the user password with the first key to obtain a first ciphertext, and sends the first ciphertext and the first key to the version deployment platform in the application system version deployment system; the version deployment platform generates a configuration file corresponding to the target application system using the first ciphertext and the first key; and deploys the version of the target application system based on the configuration file. This solves the security risk problem in related technologies where application system version deployment requires maintenance personnel to manually enter user passwords. By encrypting and transmitting user passwords in the application system version deployment system, the deployment of the application system version can be completed through the application system server without the need for application maintenance personnel to manually enter user passwords, thereby improving the security of application system version deployment.

[0036] Optionally, in the application system version deployment method provided in this application embodiment, generating the configuration file corresponding to the target application system through the version deployment platform using the first ciphertext and the first key includes: obtaining a configuration parameter template and determining the first variable and the second variable in the parameter template, wherein the first variable is a password variable and the second variable is a key variable; replacing the first variable in the configuration parameter template with the first ciphertext and replacing the second variable in the configuration parameter template with the first key to obtain the configuration file.

[0037] Specifically, the configuration parameter template can be applicable to multiple application systems. When distributing the configuration file corresponding to the target application system, it is only necessary to add the configuration parameter values ​​corresponding to the target application system to the configuration parameter template, such as adding the first ciphertext and the first key, thereby completing the configuration file setup. By designing a unified configuration parameter template, the workload during application system version deployment can be reduced, and work efficiency can be improved.

[0038] When retrieving the application password from the storage system, it is necessary to ensure the secure transmission of the user password. Optionally, in the application system version deployment method provided in this application embodiment, after retrieving the application system user password from the storage system, the method further includes: encrypting the user password with a second key to obtain a second ciphertext, wherein the second key is a communication key between the storage system and the application system version deployment system; sending the user password to the configuration center in the application system version deployment system includes: sending the second ciphertext to the configuration center; after sending the user password to the configuration center in the application system version deployment system, the method further includes: decrypting the second ciphertext through the configuration center to obtain the user password.

[0039] Specifically, the second key can be a communication key agreed upon by the storage system and the configuration center. The configuration center synchronizes the user password from the storage system, and this user password is transmitted using the communication key agreed upon by both parties. After arriving at the configuration center, the configuration center decrypts the second ciphertext according to the communication key to obtain the user password. By encrypting the transmission of the user password between the storage system and the configuration center, the secure transmission of the user password can be guaranteed.

[0040] To avoid the leakage of user passwords in the configuration file, optionally, in the application system version deployment method provided in this application embodiment, generating the target application system configuration file by using the first ciphertext and the first key through the version deployment platform includes: encrypting the first key with the third key to obtain the encrypted first key; and generating the target application system configuration file using the first ciphertext and the encrypted first key.

[0041] Specifically, the third key can be a key provided by the key management system to encrypt the first key. The third key is used to prevent the configuration file from being parsed by others after it is lost, and to prevent the user's password from being obtained by directly decrypting the first ciphertext based on the first key, thus preventing the user's password from being leaked.

[0042] The target application system needs to obtain the user password during runtime. Optionally, in the deployment method of the application system version provided in this application embodiment, after deploying the version of the target application system based on the configuration file, the method further includes: obtaining a first ciphertext and an encrypted first key from the configuration file; determining a third key through the decryption module in the deployment system of the application system version, and decrypting the encrypted first key with the third key to obtain the first key, wherein the decryption module is the decryption module corresponding to the key management module; decrypting the first ciphertext with the first key through the decryption module to obtain the user password; and logging into the target application system according to the user password.

[0043] Specifically, the decryption module corresponds to the key management module and is responsible for decrypting the encrypted key in the version deployment platform. Specifically, it decrypts the first ciphertext to obtain the user password. Using a decryption template provided by the decryption module, it reads the first ciphertext and the encrypted first key from the configuration file. It then decrypts the encrypted first key using a third key to obtain the first key. The decryption module then uses the first key to decrypt the first ciphertext to obtain the plaintext user password, i.e., the user password. Users can then log in to the target application system and run it. By using the user password obtained after processing by the decryption module to log in to the target application system, the normal operation of the target application system after version deployment is achieved. The entire deployment process does not involve manually entering the user password, thus improving the security of the target application system's version deployment.

[0044] Maintenance personnel need to log in to the target application system for maintenance. Optionally, in the deployment method of the application system version provided in this application embodiment, before obtaining the user password of the application system from the storage system, the method further includes: determining whether the account used to log in to the target application system has login permissions; if the account has login permissions, adding the user password corresponding to the account to the storage system.

[0045] Specifically, the account used to log in to the target application system can be the account used by operations and maintenance personnel to access the target application system. When operations and maintenance personnel access the system, they need to switch the access storage system object of the current session. The user password corresponding to the operations and maintenance personnel's account can be added to the storage system to achieve human-machine separation between operations and maintenance personnel and the application system. This allows for the deployment of the target application system version without requiring operations and maintenance personnel to enter their user password.

[0046] Figure 2 This is a schematic diagram of the deployment system of the application system version provided in the embodiments of this application. For example... Figure 2 As shown, the system includes:

[0047] Storage system 201 is used to store user passwords for multiple application systems.

[0048] Specifically, the storage system can be a centralized management system for users, which centrally manages user passwords used to log in to various application systems.

[0049] Configuration center 202 is used to obtain the user password corresponding to the target application system from the storage system, encrypt the user password with the first key, and send the first ciphertext and the first key to the version deployment platform.

[0050] Specifically, the configuration center is used to encrypt user passwords and send the encrypted ciphertext and the key used for encryption to the version deployment platform.

[0051] The key management module 203 communicates with the configuration center and is used to generate the first key corresponding to the target application system and send the first key to the configuration center.

[0052] Specifically, the key management module is the password distribution module, which stores the keys corresponding to the user passwords of each application system. It is used to distribute keys to the user passwords to be encrypted and to encrypt the user passwords using a symmetric encryption algorithm. When the configuration center obtains the user password of the target application system, the key management module sends the first key that matches the target application system to the configuration center, laying the foundation for the configuration center to encrypt the user.

[0053] Version deployment platform 204 communicates with the configuration center and is used to receive the first ciphertext and the first key. The version deployment platform uses the first ciphertext and the first key to generate a configuration file for the target application system and transmits the configuration file to the server of the target application system to complete the version deployment of the application system.

[0054] Specifically, the version deployment platform adds the first encrypted text and the first key to the configuration template to obtain a configuration file. This configuration file is then downloaded to the version deployment agent, which saves it to its local server (the server corresponding to the target application system). The agent then updates the configuration parameter values ​​according to the configuration file to complete the version deployment of the target application system. Since operations and maintenance personnel do not need to enter user passwords, this achieves separation of human and machine interaction between the application system and operations and maintenance personnel, improving security during the deployment process and eliminating the risk of user password leakage.

[0055] The application system version deployment system provided in this embodiment deploys application systems. A storage system 201 stores user passwords for multiple application systems. A configuration center 202 retrieves the user password corresponding to the target application system from the storage system, encrypts the password using a first key, adds the first ciphertext and the first key to the target application system's configuration file, and then sends the configuration file to the version deployment platform. A key management module 203, communicatively connected to the configuration center, generates the first key corresponding to the target application system and sends the first key to the configuration center. The version deployment platform 204, communicatively connected to the configuration center, receives the first ciphertext and the first key, generates the target application system's configuration file using the first ciphertext and the first key, and transmits the configuration file to the target application system's server to complete the application system version deployment. This solves the security risk problem in related technologies where application system version deployment requires manual input of user passwords by maintenance personnel. By encrypting and transmitting user passwords in the application system version deployment system, application system version deployment can be completed through the application system's server without requiring manual input of user passwords by application maintenance personnel, thereby improving the security of application system version deployment.

[0056] It should be noted that the steps shown in the flowchart in the accompanying drawings can be executed in a computer system such as a set of computer-executable instructions, and although a logical order is shown in the flowchart, in some cases the steps shown or described may be executed in a different order than that shown here.

[0057] This application also provides an application system version deployment apparatus. It should be noted that the application system version deployment apparatus of this application can be used to execute the application system version deployment method provided in this application. The application system version deployment apparatus provided in this application is described below.

[0058] Figure 3 This is a schematic diagram of a deployment apparatus for an application system version according to an embodiment of this application. For example... Figure 3 As shown, the device includes:

[0059] The first acquisition unit 301 is used to acquire the user password of the target application system from the storage system, wherein the storage system stores the user passwords of multiple application systems.

[0060] The second acquisition unit 302 is used to send the user password to the configuration center in the deployment system of the application system version, and to obtain the first key from the key management module in the deployment system of the application system version, wherein the key management module stores the keys corresponding to each application system.

[0061] The encryption unit 303 is used to encrypt the user password with the first key to obtain the first ciphertext, and send the first ciphertext and the first key to the version deployment platform in the version deployment system of the application system.

[0062] Configuration unit 304 is used to generate a configuration file corresponding to the target application system through the version deployment platform using the first ciphertext and the first key.

[0063] Deployment unit 305 is used to deploy the version of the target application system based on the configuration file.

[0064] The application system version deployment apparatus provided in this application embodiment obtains the user password of the target application system from a storage system through a first acquisition unit 301, wherein the storage system stores user passwords for multiple application systems; a second acquisition unit 302 sends the user password to the configuration center in the application system version deployment system and obtains a first key from the key management module in the application system version deployment system, wherein the key management module stores keys corresponding to each application system; an encryption unit 303 encrypts the user password using the first key to obtain a first ciphertext, and sends the first ciphertext and the first key to the version deployment platform in the application system version deployment system; a configuration unit 304 generates a configuration file corresponding to the target application system using the first ciphertext and the first key through the version deployment platform; and a deployment unit 305 deploys the version of the target application system based on the configuration file. This solves the security risk problem in related technologies where application system version deployment requires maintenance personnel to manually enter the user password. By encrypting and transmitting the user password in the application system version deployment system, the deployment of the application system version can be completed through the application system server without the need for application maintenance personnel to manually enter the user password, thereby improving the security of application system version deployment.

[0065] Optionally, in the deployment device for the version of the application system provided in this application embodiment, the deployment unit 305 includes: a deployment module, used to transmit the configuration file to the server of the target application system and store the configuration file in the target directory of the server.

[0066] Optionally, in the deployment device of the application system version provided in the embodiments of this application, the configuration unit 304 includes: an acquisition module, used to acquire a configuration parameter template and determine a first variable and a second variable in the parameter template, wherein the first variable is a password variable and the second variable is a key variable; and a replacement module, used to replace the first variable in the configuration parameter template with a first ciphertext and replace the second variable in the configuration parameter template with a first key to obtain a configuration file.

[0067] Optionally, in the application system version deployment device provided in the embodiments of this application, the device further includes: an encryption unit, used to encrypt the user password with a second key to obtain a second ciphertext, wherein the second key is a communication key between the storage system and the application system version deployment system; the second acquisition unit 302 includes: a sending module, used to send the second ciphertext to the configuration center; the device further includes: a first decryption unit, used to decrypt the second ciphertext through the configuration center to obtain the user password.

[0068] Optionally, in the deployment device of the application system version provided in the embodiments of this application, the configuration unit 304 includes: an encryption module, used to encrypt the first key with a third key to obtain the encrypted first key; and a generation module, used to generate a configuration file of the target application system using the first ciphertext and the encrypted first key.

[0069] Optionally, in the application system version deployment device provided in this application embodiment, the device further includes: a third acquisition unit, used to acquire a first ciphertext and an encrypted first key from a configuration file; a second decryption unit, used to determine a third key through a decryption module in the application system version deployment system, and decrypt the encrypted first key using the third key to obtain the first key, wherein the decryption module is the decryption module corresponding to the key management module; a third decryption unit, used to decrypt the first ciphertext using the first key through the decryption module to obtain a user password; and a login unit, used to log in to the target application system according to the user password.

[0070] Optionally, in the deployment device for the application system version provided in the embodiments of this application, the device further includes: a judging unit, used to judge whether the account used to log in to the target application system has login permissions; and an account adding unit, used to add the user password corresponding to the account to the storage system if the account has login permissions.

[0071] The deployment device for the version of the application system includes a processor and a memory. The first acquisition unit 301, the second acquisition unit 302, the encryption unit 303, the configuration unit 304, and the deployment unit 305 are all stored in the memory as program units. The processor executes the program units stored in the memory to implement the corresponding functions.

[0072] The processor contains a kernel, which retrieves the corresponding program units from memory. One or more kernels can be configured, and adjusting kernel parameters can improve the security of application system deployments.

[0073] The memory may include non-permanent memory in computer-readable media, such as random access memory (RAM) and / or non-volatile memory, such as read-only memory (ROM) or flash RAM, and the memory includes at least one memory chip.

[0074] This invention provides a computer-readable storage medium storing a program thereon, which, when executed by a processor, implements a method for deploying a version of the application system.

[0075] This invention provides a processor for running a program, wherein the program executes a deployment method for a version of the application system.

[0076] like Figure 4 As shown, this embodiment of the invention provides an electronic device, which includes a processor, a memory, and a program stored in the memory and executable on the processor. When the processor executes the program, it implements a method for deploying a version of an application system. The device in this document can be a server, PC, PAD, mobile phone, etc.

[0077] Those skilled in the art will understand that embodiments of this application can be provided as methods, systems, or computer program products. Therefore, this application can take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, this application can take the form of a computer program product embodied on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0078] This application is described with reference to flowchart illustrations and / or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of this application. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, generate instructions for implementing the flowchart... Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.

[0079] These computer program instructions may also be stored in a computer-readable storage medium that can direct a computer or other programmable data processing device to function in a particular manner, such that the instructions stored in the computer-readable storage medium produce an article of manufacture including instruction means, which are implemented in a process Figure 1One or more processes and / or boxes Figure 1 The function specified in one or more boxes.

[0080] These computer program instructions may also be loaded onto a computer or other programmable data processing equipment to cause a series of operational steps to be performed on the computer or other programmable equipment to produce a computer-implemented process, thereby providing instructions that execute on the computer or other programmable equipment for implementing the process. Figure 1 One or more processes and / or boxes Figure 1 The steps of the function specified in one or more boxes.

[0081] In a typical configuration, a computing device includes one or more processors (CPU), input / output interfaces, network interfaces, and memory.

[0082] Memory may include non-persistent memory in computer-readable media, such as random access memory (RAM) and / or non-volatile memory, such as read-only memory (ROM) or flash RAM. Memory is an example of computer-readable media.

[0083] Computer-readable media includes both permanent and non-permanent, removable and non-removable media that can store information using any method or technology. Information can be computer-readable instructions, data structures, modules of programs, or other data. Examples of computer storage media include, but are not limited to, phase-change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technologies, CD-ROM, digital versatile optical disc (DVD) or other optical storage, magnetic tape, magnetic magnetic disk storage or other magnetic storage devices, or any other non-transferable medium that can be used to store information accessible by a computing device. As defined herein, computer-readable media does not include transient computer-readable media, such as modulated data signals and carrier waves.

[0084] It should also be noted that the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such process, method, article, or apparatus. Unless otherwise specified, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes that element.

[0085] Those skilled in the art will understand that embodiments of this application can be provided as methods, systems, or computer program products. Therefore, this application can take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, this application can take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0086] The above are merely embodiments of this application and are not intended to limit the scope of this application. Various modifications and variations can be made to this application by those skilled in the art. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of this application should be included within the scope of the claims of this application.

Claims

1. A method for deploying a version of an application system, characterized in that, include: Retrieve user passwords for target application systems from a storage system, wherein the storage system stores user passwords for multiple application systems; The user password is sent to the configuration center in the deployment system of the application system version, and the first key is obtained from the key management module in the deployment system of the application system version, wherein the key management module stores the key corresponding to each application system; The user password is encrypted using the first key to obtain the first ciphertext, and the first ciphertext and the first key are sent to the version deployment platform in the version deployment system of the application system. The version deployment platform generates a configuration file corresponding to the target application system using the first ciphertext and the first key, including: obtaining a configuration parameter template and determining a first variable and a second variable in the parameter template, wherein the first variable is a password variable and the second variable is a key variable; replacing the first variable in the configuration parameter template with the first ciphertext and replacing the second variable in the configuration parameter template with the first key to obtain the configuration file; The version of the target application system is deployed based on the configuration file.

2. The method according to claim 1, characterized in that, Deploying the version of the target application system based on the configuration file includes: The configuration file is transmitted to the server of the target application system and stored in the target directory of the server.

3. The method according to claim 1, characterized in that, After obtaining the application system's user password from the storage system, the method further includes: The user password is encrypted using a second key to obtain a second ciphertext, wherein the second key is a communication key between the storage system and the deployment system of the application system version; Sending the user password to the configuration center in the deployment system of the application system version includes: sending the second ciphertext to the configuration center; After sending the user password to the configuration center in the deployment system of the application system version, the method further includes: decrypting the second ciphertext through the configuration center to obtain the user password.

4. The method according to claim 2, characterized in that, The configuration file for the target application system generated by the version deployment platform using the first ciphertext and the first key includes: The first key is encrypted using the third key to obtain the encrypted first key; The configuration file of the target application system is generated using the first ciphertext and the encrypted first key.

5. The method according to claim 4, characterized in that, After deploying the version of the target application system based on the configuration file, the method further includes: Obtain the first ciphertext and the encrypted first key from the configuration file; The third key is determined by the decryption module in the deployment system of the application system version, and the encrypted first key is decrypted by the third key to obtain the first key, wherein the decryption module is the decryption module corresponding to the key management module; The user password is obtained by decrypting the first ciphertext using the first key through the decryption module. Log in to the target application system using the user password.

6. The method according to claim 1, characterized in that, Before retrieving the application system's user password from the storage system, the method further includes: Determine whether the account used to log in to the target application system has login privileges; If the account has the login permissions, the user password corresponding to the account is added to the storage system.

7. A deployment system for an application system version, characterized in that, A deployment method for a version of the application system according to any one of claims 1 to 6, comprising: A storage system used to store user passwords from multiple application systems; The configuration center is used to obtain the user password corresponding to the target application system from the storage system, encrypt the user password with the first key, and send the first ciphertext and the first key to the version deployment platform. The key management module is communicatively connected to the configuration center and is used to generate the first key corresponding to the target application system and send the first key to the configuration center. The version deployment platform is communicatively connected to the configuration center and is used to receive the first ciphertext and the first key, generate the configuration file of the target application system using the first ciphertext and the first key through the version deployment platform, and transmit the configuration file to the server of the target application system to complete the deployment of the version of the application system. The process of generating a configuration file for the target application system using the first ciphertext and the first key through the version deployment platform includes: obtaining a configuration parameter template and determining a first variable and a second variable in the parameter template, wherein the first variable is a password variable and the second variable is a key variable; replacing the first variable in the configuration parameter template with the first ciphertext and replacing the second variable in the configuration parameter template with the first key to obtain the configuration file.

8. A processor, characterized in that, The processor is used to run a program, wherein the program executes the deployment method of the application system version according to any one of claims 1 to 6.

9. An electronic device, characterized in that, It includes one or more processors and a memory, the memory being used to store one or more programs, wherein when the one or more programs are executed by the one or more processors, the one or more processors cause the one or more processors to implement a deployment method for a version of the application system according to any one of claims 1 to 6.

Images