Api request data sharing method and apparatus, electronic device, and storage medium

Abstract

This invention provides an API request data sharing method, apparatus, electronic device, and storage medium. The method includes: calling a data exchange service to verify the API interface based on an application programming interface (API) request initiated by a data consumer; if the API interface verification is successful, obtaining target data from a data provider based on the API interface request; matching the target data with data on a first blockchain; and if the target data and the first blockchain data are successfully matched, feeding the target data back to the data consumer through a directory service. API interface verification facilitates subsequent accountability and improves the security of data sharing.

Description

Technical Field

[0001] This invention relates to the field of computer technology, and in particular to an API request data sharing method, apparatus, electronic device, and storage medium. Background Technology

[0002] The shared exchange platform layer is where the city's data sharing and exchange platform is located. It connects various applications and the information resources required by those applications, and organizes and integrates various types of data, components, and services.

[0003] The existing data sharing and exchange platform layer provides support services for the construction and operation of various application systems at the application layer, including directory service systems, exchange service systems, security service systems, and platform management systems. The exchange platform also provides a resource directory management system. The directory service mainly provides functions such as directory registration, directory publishing, directory querying, and directory maintenance, enabling the unified collection and management of various basic and shared resource directory information. The exchange service enables resource consumption by resource-demanding parties.

[0004] While existing solutions can handle data catalog publishing, data exchange, and user operation log storage, they still have the following problems: the current solutions use a centralized approach to unify the operation of underlying data, which is not suitable for systems with isolated subsystems; the current solutions use a log database to track data access, and if the system administrator has access to the log database, it will be impossible to trace user access records once the log database is deleted. Summary of the Invention

[0005] This invention provides an API request data sharing method, apparatus, electronic device, and storage medium to address the shortcomings of existing technologies that cannot trace user access records, thereby achieving secure data sharing.

[0006] This invention provides a method for sharing API request data, comprising:

[0007] Based on the API request initiated by the data consumer, the data exchange service is invoked to perform API verification.

[0008] If the API interface verification is successful, the target data is obtained from the data provider according to the API interface request.

[0009] The target data is matched with the data on the first chain. If the target data and the data on the first chain are successfully matched, the target data is fed back to the data consumer through the directory service.

[0010] According to the API request data sharing method provided by the present invention, the step of calling the data exchange service to perform API interface verification includes:

[0011] The data exchange service is invoked to determine whether the Uniform Resource Locator (URL) in the API request is a URL modified by the data exchange service.

[0012] According to the API request data sharing method provided by the present invention, if the API interface verification is successful, it further includes:

[0013] The API interface request is uploaded to the blockchain.

[0014] According to the API request data sharing method provided by the present invention, the step of obtaining target data from the data provider according to the API interface request includes:

[0015] Forward the API request to the data provider;

[0016] Receive response information sent by the data provider based on the API interface request;

[0017] Obtain the target data carried in the response information.

[0018] According to the API request data sharing method provided by the present invention, when the target data successfully matches the data on the first chain, it further includes:

[0019] The response information is uploaded to the blockchain according to the data response smart contract.

[0020] According to the API request data sharing method provided by the present invention, before invoking the data exchange service for API interface verification based on the application programming interface (API) request initiated by the data consumer, the method further includes:

[0021] Based on the API permission request initiated by the data consumer, generate application order information and store the application order information in the database;

[0022] The application is sent to the approver based on the application order information, and the approval process information of the approver is entered into the database;

[0023] Based on the API interface modification request initiated by the last approver among the approvers, the API interface is modified.

[0024] The modified API interface is associated with the data consumer to form association information, and the association information is stored in the database.

[0025] The API request data sharing method provided by the present invention is characterized in that it further includes:

[0026] Obtain sample data based on the API provided by the last approver among the approvers;

[0027] The sample data is uploaded to the blockchain to obtain the first blockchain data.

[0028] The present invention also provides an API request data sharing device, comprising:

[0029] The API interface verification module is used to call the data exchange service to verify the API interface based on the application programming interface (API) request initiated by the data consumer.

[0030] The target data acquisition module is used to obtain target data from the data provider according to the API interface request if the API interface verification is successful.

[0031] The target data feedback module is used to match the target data with the data on the first chain. If the target data and the data on the first chain are successfully matched, the target data is fed back to the data consumer through the directory service.

[0032] The present invention provides an electronic device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that the processor, when executing the program, implements the steps of the API request data sharing method.

[0033] The present invention provides a non-transitory computer-readable storage medium having a computer program stored thereon, wherein the computer program, when executed by a processor, implements the steps of the API request data sharing method.

[0034] The API request data sharing method, apparatus, electronic device, and storage medium provided by this invention facilitate subsequent accountability and improve the security of data sharing through API interface verification. Attached Figure Description

[0035] To more clearly illustrate the technical solutions in this invention or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are some embodiments of this invention. For those skilled in the art, other drawings can be obtained from these drawings without creative effort.

[0036] Figure 1 This is one of the flowcharts illustrating the API request data sharing method provided by the present invention;

[0037] Figure 2 This is an architecture diagram of the API request data sharing system provided by the present invention;

[0038] Figure 3 This is the second flowchart illustrating the API request data sharing method provided by the present invention.

[0039] Figure 4 This invention provides a flowchart for the consumer to obtain API interface permissions;

[0040] Figure 5 This is a schematic diagram of the structure of the API request data sharing device provided by the present invention;

[0041] Figure 6 This is a schematic diagram of the structure of the electronic device provided by the present invention. Detailed Implementation

[0042] To make the objectives, technical solutions, and advantages of this invention clearer, the technical solutions of this invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some, not all, of the embodiments of this invention. All other embodiments obtained by those skilled in the art based on the embodiments of this invention without creative effort are within the scope of protection of this invention.

[0043] Figure 1 This is one of the flowcharts illustrating the API request data sharing method provided in this embodiment of the invention, such as... Figure 1 As shown, it includes the following steps:

[0044] Step 100: Based on the API request initiated by the data consumer, call the data exchange service to perform API interface verification.

[0045] Specifically, the data consumer initiates an Application Programming Interface (API) request, and the directory service calls the data exchange service to verify the API based on the received API request.

[0046] Step 101: If the API interface verification is successful, obtain the target data from the data provider according to the API interface request.

[0047] Specifically, if API interface verification fails, the API interface request is rejected to ensure the traceability of user information. If API interface verification passes, the API interface request is forwarded to the data provider via routing to obtain the target data.

[0048] Step 102: Match the target data with the data on the first chain. If the target data and the data on the first chain are successfully matched, the target data is fed back to the data consumer through the directory service.

[0049] Specifically, the response data exchange service matches the target data with the data on the first chain. If the target data and the data on the first chain are successfully matched, the target data is fed back to the data consumer through the directory service.

[0050] In this embodiment of the invention, API interface verification is performed to ensure the traceability of user information and improve the security of data sharing. At the same time, the target data is matched with the data on the first chain to ensure the accuracy of the data.

[0051] In one embodiment, the API interface verification via the data exchange service includes:

[0052] The data exchange service is invoked to determine whether the Uniform Resource Locator (URL) in the API request is a URL modified by the data exchange service.

[0053] Specifically, the data exchange service is invoked to verify whether the Uniform Resource Locator (URL) in the API request is a URL modified by the data exchange service. If the URL in the API request is a URL modified by the data exchange service, it indicates that the API request can be traced for responsibility, and the verification is successful.

[0054] In this embodiment of the invention, by determining whether the URL in the API interface request is a URL modified by the data exchange service, the accuracy of API interface verification is improved, and the security of data sharing is enhanced.

[0055] In one embodiment, if the API interface verification passes, the following is also included:

[0056] The API interface request is uploaded to the blockchain.

[0057] Specifically, if the data exchange service verifies the API interface, it will upload the API interface request to the blockchain.

[0058] This invention records access-related information by uploading API interface requests to the blockchain, utilizing the decentralized and tamper-proof mechanisms of blockchain to facilitate rapid tracing of the applicant in the event of a data security breach.

[0059] In one embodiment, requesting the data provider to obtain the target data according to the API interface includes:

[0060] Forward the API request to the data provider;

[0061] Receive response information sent by the data provider based on the API interface request;

[0062] Obtain the target data carried in the response information.

[0063] Specifically, by forwarding the API interface request to the data provider, a request is initiated to the data provider, and a response information sent by the data provider based on the API interface request is received. The response information includes the target data requested by the data consumer. The target data carried in the response information is obtained, and then the exchange service feeds back the target data to the data consumer through the directory service.

[0064] In this embodiment of the invention, the API interface request is forwarded to the data provider, and then the response information carrying the target data sent by the data provider is received, ensuring the accuracy of the data.

[0065] In one embodiment, if the target data successfully matches the data on the first chain, the method further includes:

[0066] The response information is uploaded to the blockchain according to the data response smart contract.

[0067] Specifically, if the target data matches the data on the first chain, the response information is uploaded to the chain according to the data response smart contract.

[0068] In this embodiment of the invention, by uploading the response information to the blockchain, the decentralized and tamper-proof mechanism of the blockchain is used to record access-related information, which facilitates the rapid tracking of the applicant in the event of a data security breach.

[0069] In one embodiment, before invoking the data exchange service for API verification based on the API request initiated by the data consumer, the method further includes:

[0070] Based on the API permission request initiated by the data consumer, generate application order information and store the application order information in the database;

[0071] The application is sent to the approver based on the application order information, and the approval process information of the approver is entered into the database;

[0072] Based on the API interface modification request initiated by the last approver among the approvers, the API interface is modified.

[0073] The modified API interface is associated with the data consumer to form association information, and the association information is stored in the database.

[0074] Specifically, the data consumer provides a description of the API interface, reviews the description, and applies for API permissions as needed. Based on the API permission request initiated by the data consumer, the directory service generates order information and stores it in the directory service repository.

[0075] Based on the API interface modification request initiated by the last approver among the approvers, the data exchange service performs API interface modification.

[0076] For example, adding matching rules for certain Uniform Resource Identifiers (URIs) to the API interface can demonstrate that the modified API interface can be routed and forwarded from the data exchange service.

[0077] The directory service associates the modified API interface with the data consumer to form association information, and stores the association information in the directory service library.

[0078] Optionally, the approver is the data provider.

[0079] In this embodiment of the invention, by adding an approval process and approval personnel during data sharing, the connectivity of the application data link and the verification of whether the data is required by the application are verified, thus ensuring the transparency of user information of the data provider to the data user.

[0080] In one embodiment, it also includes:

[0081] Obtain sample data based on the API provided by the last approver among the approvers;

[0082] The sample data is uploaded to the blockchain to obtain the first blockchain data.

[0083] Specifically, the approval service obtains sample data based on the API provided by the last approver among the approvers, and uploads the sample data to the blockchain to obtain the first on-chain data. This first on-chain data serves as a reference, allowing data consumers to match the data with the API to verify the accuracy of the data obtained by the data consumer.

[0084] In this embodiment of the invention, sample data is obtained based on the API provided by the last approver, and then the sample data is uploaded to the blockchain to obtain the first on-chain data, thus ensuring the accuracy of the data obtained by the data consumer.

[0085] Figure 2 This is an architecture diagram of the API request data sharing system provided in the embodiments of the present invention, such as... Figure 2 As shown, it includes the application layer, data sharing layer, and data storage layer.

[0086] The application layer includes: a first sub-application, a second sub-application, and a third sub-application;

[0087] The data sharing layer includes: directory service, approval service, and data exchange service;

[0088] The data storage layer includes: a directory service library, an approval service library, and a blockchain underlying platform.

[0089] It should be noted that the application layer includes multiple sub-applications. The number of sub-applications is not specifically limited. In this embodiment, three subsystems are used as an example for illustration.

[0090] The functions of directory services include:

[0091] Provides descriptions of the data that can be exposed by each sub-application;

[0092] Data consumers can apply for data and view the approval history of their data applications through the directory service.

[0093] After the data consumer applies for data and the data owner approves it, the modified URL is provided to the data consumer.

[0094] The functions of the approval service include:

[0095] Provide approval processes for data providers in each sub-application.

[0096] The functions of the exchange service include:

[0097] Provides data routing services for accessing real data;

[0098] URL authentication is performed based on the modified URL.

[0099] The functions of the directory service repository include:

[0100] Store data description information provided by the data provider;

[0101] The storage data consumer initiates operations with API permissions that are logged.

[0102] Store the modified URL.

[0103] The functions of the approval service database include:

[0104] Storage data provider approval records

[0105] The roles of a blockchain underlying platform include:

[0106] Sample data of the actual data after approval by the last approver in the storage provider;

[0107] Store the behavioral operation information for each time the actual data is called.

[0108] Figure 3 This is a second flowchart illustrating the API request data sharing method provided in this embodiment of the invention, as shown below. Figure 3 As shown, it includes the following steps:

[0109] Step 300: The data consumer initiates an API interface request.

[0110] Step 301: The directory service calls the data exchange service.

[0111] Step 302: The data exchange service verifies whether the URL is a modified URL of the service. If it is, the request is routed to each sub-application; otherwise, the request is rejected directly.

[0112] Step 303: If the data exchange service verifies the URL, it will upload the API request information to the blockchain.

[0113] Step 304: Initiate data requests to the data provider, i.e., each sub-application.

[0114] Step 305: Each sub-application responds to the data exchange service and matches it with the data on the chain. If the match is successful, it proves that the data is valid. For example, the match can be made based on the data type of each field of the returned data.

[0115] Step 306: Matching successful. The request response information will be uploaded to the blockchain according to the data response smart contract.

[0116] Step 307: After the relevant information is uploaded to the blockchain, the exchange service feeds back the real data to the data consumer through the directory service.

[0117] In this embodiment of the invention, API interface verification is performed to verify whether the URL is a modified URL of the service, ensuring the traceability of user information and improving the security of data sharing. At the same time, the target data is matched with the data on the first chain to ensure the accuracy of the data.

[0118] Figure 4 This is a flowchart of a consumer obtaining API interface permissions provided in an embodiment of the present invention, such as... Figure 4 As shown, before the consumer initiates an API request, the following steps are also included:

[0119] Step 400: The data provider provides a description of the API interface.

[0120] Step 401: The data consumer views the API interface function description, applies for API interface permissions according to requirements, and stores the API interface function description and the actual API interface in the directory service library through the directory service. The actual API interface is the API interface before the modification.

[0121] Step 402: The data consumer initiates an API permission request.

[0122] Step 403: Apply for order information to be entered into the database and submit an application to the approver.

[0123] Step 404: The approving party conducts the approval process, and the approval process information is stored in the approval service database.

[0124] Step 405: The last approver in the approval service calls the real API of the data provider and uploads the obtained sample data to the blockchain. When the data consumer consumes the API, it matches the sample data to prove the authenticity of the data.

[0125] Step 406: The last approver initiates a request for API interface modification, and the data exchange service performs API interface modification.

[0126] For example, adding matching rules for certain URIs to the API interface can demonstrate that the modified API interface can be routed and forwarded from the data exchange service in this solution.

[0127] Step 407: After the data exchange service completes the API modification, notify the directory service.

[0128] Step 408: The directory service associates the data consumer with the application order initiated by the consumer and stores it in the directory service library.

[0129] Step 409: The data provider reviews the modified API interface.

[0130] In this embodiment of the invention, by adding an approval process and approvers during data sharing, the connectivity of the application data link and the verification of whether the data is required by the application are verified, ensuring the transparency of user information of the data user to the data provider. Sample data is obtained based on the API provided by the last approver, and then the sample data is uploaded to the blockchain to obtain the first on-chain data, ensuring the accuracy of the data obtained by the data consumer.

[0131] Another embodiment of the present invention provides an API request data sharing device, such as... Figure 5 As shown, the device includes: an API interface verification module 510, a target data acquisition module 520, and a target data feedback module 530, wherein...

[0132] API interface verification module 510 is used to call the data exchange service to verify the API interface based on the application programming interface (API) request initiated by the data consumer.

[0133] The target data acquisition module 520 is used to acquire target data from the data provider according to the API interface request when the API interface verification is passed;

[0134] The target data feedback module 530 is used to match the target data with the data on the first chain. If the target data and the data on the first chain are successfully matched, the target data is fed back to the data consumer through the directory service.

[0135] Optionally, the API interface verification via the data exchange service includes:

[0136] The data exchange service is invoked to determine whether the Uniform Resource Locator (URL) in the API request is a URL modified by the data exchange service.

[0137] Optionally, if the API interface verification passes, it also includes:

[0138] The API interface request is uploaded to the blockchain.

[0139] Optionally, the step of requesting the target data from the data provider according to the API interface includes:

[0140] Forward the API request to the data provider;

[0141] Receive response information sent by the data provider based on the API interface request;

[0142] Obtain the target data carried in the response information.

[0143] Optionally, if the target data successfully matches the data on the first chain, the method further includes:

[0144] The response information is uploaded to the blockchain according to the data response smart contract.

[0145] Optionally, the API request data sharing device further includes an API interface modification module, used to generate application order information and store the application order information in a database based on the application programming interface (API) permission application initiated by the data consumer;

[0146] The application is sent to the approver based on the application order information, and the approval process information of the approver is entered into the database;

[0147] Based on the API interface modification request initiated by the last approver among the approvers, the API interface is modified.

[0148] The modified API interface is associated with the data consumer to form association information, and the association information is stored in the database.

[0149] Optionally, the API interface modification module is further used for:

[0150] Obtain sample data based on the API provided by the last approver among the approvers;

[0151] The sample data is uploaded to the blockchain to obtain the first blockchain data.

[0152] The API request data sharing device provided by this invention can achieve Figure 1 , Figure 3 and Figure 4 The various processes implemented in the method embodiments achieve the same technical effect, and will not be described again here to avoid repetition.

[0153] Figure 6 An example is a schematic diagram of the physical structure of an electronic device, such as... Figure 6 As shown, the electronic device may include: a processor 610, a communications interface 620, a memory 630, and a communication bus 640, wherein the processor 610, the communications interface 620, and the memory 630 communicate with each other via the communication bus 640. The processor 610 can call logical instructions in the memory 630 to execute API request data sharing methods, such as:

[0154] Based on the API request initiated by the data consumer, the data exchange service is invoked to perform API verification.

[0155] If the API interface verification is successful, the target data is obtained from the data provider according to the API interface request.

[0156] The target data is matched with the data on the first chain. If the target data and the data on the first chain are successfully matched, the target data is fed back to the data consumer through the directory service.

[0157] Furthermore, the logical instructions in the aforementioned memory 630 can be implemented as software functional units and, when sold or used as independent products, can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, essentially, or the part that contributes to the prior art, or a part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of the present invention. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.

[0158] On the other hand, the present invention also provides a computer program product, the computer program product comprising a computer program stored on a non-transitory computer-readable storage medium, the computer program comprising program instructions, which, when executed by a computer, enable the computer to execute the API request data sharing methods provided by the above methods, for example including:

[0159] Based on the API request initiated by the data consumer, the data exchange service is invoked to perform API verification.

[0160] If the API interface verification is successful, the target data is obtained from the data provider according to the API interface request.

[0161] The target data is matched with the data on the first chain. If the target data and the data on the first chain are successfully matched, the target data is fed back to the data consumer through the directory service.

[0162] In another aspect, the present invention also provides a non-transitory computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, is implemented to perform the API request data sharing methods provided above, including, for example:

[0163] Based on the API request initiated by the data consumer, the data exchange service is invoked to perform API verification.

[0164] If the API interface verification is successful, the target data is obtained from the data provider according to the API interface request.

[0165] The target data is matched with the data on the first chain. If the target data and the data on the first chain are successfully matched, the target data is fed back to the data consumer through the directory service.

[0166] The device embodiments described above are merely illustrative. The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the modules can be selected to achieve the purpose of this embodiment according to actual needs. Those skilled in the art can understand and implement this without any creative effort.

[0167] Through the above description of the embodiments, those skilled in the art can clearly understand that each embodiment can be implemented by means of software plus necessary general-purpose hardware platforms, and of course, it can also be implemented by hardware. Based on this understanding, the above technical solutions, in essence or the part that contributes to the prior art, can be embodied in the form of a software product. This computer software product can be stored in a computer-readable storage medium, such as ROM / RAM, magnetic disk, optical disk, etc., and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute the methods described in the various embodiments or some parts of the embodiments.

[0168] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, and not to limit them; although the present invention has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that modifications can still be made to the technical solutions described in the foregoing embodiments, or equivalent substitutions can be made to some of the technical features; and these modifications or substitutions do not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

1. A method for sharing data in API requests, characterized in that, include: Based on the API permission request initiated by the data consumer, generate application order information and store the application order information in the database; The application is sent to the approver based on the application order information, and the approval process information of the approver is entered into the database; Based on the API interface modification request initiated by the last approver among the approvers, the API interface is modified. The modified API interface is associated with the data consumer to form association information, and the association information is stored in the database; Based on the API interface request, call the data exchange service to perform API interface verification; The API interface verification via the data exchange service includes: The data exchange service is invoked to determine whether the Uniform Resource Locator (URL) in the API interface request is a URL modified by the data exchange service. If the API interface verification is successful, the target data is obtained from the data provider according to the API interface request. The target data is matched with the data on the first chain. If the target data and the data on the first chain are successfully matched, the target data is fed back to the data consumer through the directory service.

2. The API request data sharing method according to claim 1, characterized in that, If the API interface verification passes, it also includes: The API interface request is uploaded to the blockchain.

3. The API request data sharing method according to claim 1, characterized in that, The step of requesting the target data from the data provider according to the API interface includes: Forward the API request to the data provider; Receive response information sent by the data provider based on the API interface request; Obtain the target data carried in the response information.

4. The API request data sharing method according to claim 3, characterized in that, If the target data successfully matches the data on the first chain, the method further includes: The response information is uploaded to the blockchain according to the data response smart contract.

5. The API request data sharing method according to claim 1, characterized in that, Also includes: Obtain sample data based on the API provided by the last approver among the approvers; The sample data is uploaded to the blockchain to obtain the first blockchain data.

6. An API request data sharing device, characterized in that, include: The API interface modification module is used to: generate application order information based on the application programming interface (API) permission application initiated by the data consumer and store the application order information in the database; The application is sent to the approver based on the application order information, and the approval process information of the approver is entered into the database; Based on the API interface modification request initiated by the last approver among the approvers, the API interface is modified. The modified API interface is associated with the data consumer to form association information, and the association information is stored in the database; The API interface verification module is used to call the data exchange service to verify the API interface based on the API interface request. The API interface verification via the data exchange service includes: The data exchange service is invoked to determine whether the Uniform Resource Locator (URL) in the API interface request is a URL modified by the data exchange service. The target data acquisition module is used to obtain target data from the data provider according to the API interface request if the API interface verification is successful. The target data feedback module is used to match the target data with the data on the first chain. If the target data and the data on the first chain are successfully matched, the target data is fed back to the data consumer through the directory service.

7. An electronic device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that, When the processor executes the program, it implements the steps of the API request data sharing method as described in any one of claims 1 to 5.

8. A non-transitory computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by a processor, it implements the steps of the API request data sharing method as described in any one of claims 1 to 5.

Images