Asynchronous scheduling method, system, apparatus, device, and medium
By using public-key encryption and private-key decryption during asynchronous scheduling, the real-time updating of access signaling is ensured, which solves the security problem caused by using the same signaling for a long time and improves the security of the system.
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- CHINA TELECOM DIGITAL INTELLIGENCE TECH CO LTD
- Filing Date
- 2022-10-31
- Publication Date
- 2026-06-09
AI Technical Summary
During asynchronous scheduling, using the same authentication signaling for an extended period of time can reduce the security of the authentication signaling, resulting in lower system security.
By obtaining the user's access information, the login information and access request are encrypted using a pre-stored public key to generate access signaling, which is then decrypted by the access container using a pre-stored private key to ensure consistency between the first and second time points and generate response information.
This system automatically updates access signaling each time a user logs in, avoiding security issues caused by prolonged periods without updates and improving system security.
Smart Images
Figure CN115720156B_ABST
Abstract
Description
Technical Field
[0001] This disclosure relates to the field of computer technology, and in particular to an asynchronous scheduling method, system, apparatus, device, and medium. Background Technology
[0002] With the increasing number of applications, it is necessary to load them into containers for better management. However, some calls require asynchronous calls to applications in multiple containers, and these calls require caller authentication. Authentication requires corresponding authentication signaling, and using the same authentication signaling for a long time will reduce the security of the authentication signaling. Summary of the Invention
[0003] This disclosure provides an asynchronous scheduling method, system, device, equipment, and medium, which at least to some extent overcomes the problem of low security in the current asynchronous scheduling process.
[0004] Other features and advantages of this disclosure will become apparent from the following detailed description, or may be learned in part from practice of this disclosure.
[0005] According to one aspect of this disclosure, an asynchronous scheduling method is provided, comprising:
[0006] Obtain user access information, including user login information and access requests;
[0007] When user access information is obtained, the first time point of user access will be sent to the access container;
[0008] The login information, access request, and the second time point of receiving access information sent by the user are encrypted using a pre-stored public key to obtain the access signaling.
[0009] The access signaling is sent to the access container, which then decrypts the public key using the pre-stored private key to obtain the second time point in the access signaling. If the first time point and the second time point are consistent, the response information is determined according to the access request and sent to the login container.
[0010] Receive response information.
[0011] In one embodiment of this disclosure, before obtaining the user's access information, which includes the user's login information and access request, the method further includes:
[0012] In response to a user login request, obtain the user's login information;
[0013] Verify the user's login information;
[0014] Obtain user access information, including:
[0015] If the user's login information is verified, the user's access information is obtained.
[0016] In one embodiment of this disclosure, before sending the first time point of user access to the access container after obtaining user access information, the method further includes:
[0017] Send the private key to the access container.
[0018] In one embodiment of this disclosure, upon obtaining user access information, the first time point of obtaining user access is sent to the access container, including:
[0019] When obtaining user access information, record the first time point at which the user access was obtained;
[0020] The first time point is encrypted using the public key to obtain the encrypted first time point.
[0021] Send the encrypted first time point to the access container.
[0022] According to another aspect of this disclosure, an asynchronous scheduling method is provided for accessing a container, the method comprising:
[0023] The first point in time to receive the login container;
[0024] Receive the public-key-encrypted access signal sent by the login container;
[0025] The access signaling encrypted with the public key is decrypted using the pre-stored private key to obtain the login information, access request, and the second time point at which the user sends access information.
[0026] If the first time point and the second time point are consistent, the response information is determined based on the access request;
[0027] Send the response information to the login container.
[0028] According to another aspect of this disclosure, an asynchronous scheduling system is provided, including a login container and an access container;
[0029] The login container is used to obtain the user's access information, including the user's login information and access request. When the user's access information is obtained, the first time point of obtaining the user's access is sent to the access container. The login information, access request and the second time point of receiving the user's access information are encrypted according to the pre-stored public key to obtain the access signaling, and the access signaling is sent to the access container.
[0030] The access container is used to receive the first time point sent by the login container, receive the access signaling encrypted with the public key sent by the login container, decrypt the access signaling encrypted with the public key according to the pre-stored private key, and obtain the login information, access request, and the second time point of receiving the access information sent by the user. If the first time point and the second time point are consistent, the response information is determined according to the access request and the response information is sent to the login container.
[0031] According to another aspect of this disclosure, an asynchronous scheduling apparatus is provided for use in a login container, the apparatus comprising:
[0032] The first acquisition module is used to acquire the user's access information, which includes the user's login information and access request.
[0033] The first sending module is used to send the first time point of obtaining the user's access information to the access container when the user's access information is obtained.
[0034] The first encryption module is used to encrypt the login information, access request, and the second time point of receiving access information sent by the user according to the pre-stored public key to obtain the access signaling.
[0035] The second sending module is used to send the access signaling to the access container, so that the access container decrypts the public key according to the pre-stored private key to obtain the second time point in the access signaling. If the first time point and the second time point are consistent, the response information is determined according to the access request and the response information is sent to the login container.
[0036] The first receiving module is used to receive response information.
[0037] In one embodiment of this disclosure, the asynchronous scheduling device further includes:
[0038] The second acquisition module is used to acquire the user's login information in response to the user's login request before acquiring the user's access information, which includes the user's login information and access request.
[0039] The verification module is used to verify the user's login information;
[0040] The first acquisition module includes:
[0041] The acquisition unit is used to acquire the user's access information after the user's login information has been verified.
[0042] In one embodiment of this disclosure, the asynchronous scheduling device further includes:
[0043] The fourth sending module, upon obtaining the user's access information, sends the private key to the access container before sending the first time point of the user's access to the access container.
[0044] The first sending module includes:
[0045] The recording unit is used to record the first time point when the user's access information is obtained;
[0046] The encryption unit is used to encrypt the first time point according to the public key to obtain the encrypted first time point;
[0047] The first sending unit is used to send the encrypted first time point to the access container.
[0048] According to another aspect of this disclosure, an asynchronous scheduling apparatus is provided for accessing a container, the apparatus comprising:
[0049] The second receiving module is used to receive the first time point sent by the login container;
[0050] The third receiving module is used to receive the public key encrypted access signal sent by the login container;
[0051] The decryption module is used to decrypt the access signaling encrypted with the public key based on the pre-stored private key, so as to obtain the login information, access request, and the second time point of receiving access information sent by the user.
[0052] The determination module is used to determine the response information based on the access request when the first time point and the second time point are consistent.
[0053] The third sending module is used to send response information to the login container.
[0054] According to another aspect of this disclosure, an electronic device is provided, comprising: a processor; and a memory for storing executable instructions of the processor; wherein the processor is configured to perform the above-described asynchronous scheduling method by executing the executable instructions.
[0055] According to another aspect of this disclosure, a computer-readable storage medium is provided having a computer program stored thereon, which, when executed by a processor, implements the asynchronous scheduling method described above.
[0056] The asynchronous scheduling method provided in this disclosure obtains user access information. Upon obtaining the user's access information, it sends the first time point of the user's access to the access container. Then, it encrypts the login information, access request, and the second time point of receiving the user's access information using a pre-derived public key to obtain access signaling. The access container is then accessed based on the access signaling, causing the access container to decrypt the public key using a pre-stored private key to obtain the second time point in the access signaling. If the first and second time points are consistent, a response is determined based on the access request and sent to the login container. Therefore, since the access signaling is generated based on the user's access information upon receipt, the access signaling is automatically updated each time the user logs in, avoiding the security issues caused by access signaling not being updated for a long time.
[0057] It should be understood that the above general description and the following detailed description are exemplary and explanatory only, and are not intended to limit this disclosure. Attached Figure Description
[0058] The accompanying drawings, which are incorporated in and form part of this specification, illustrate embodiments consistent with this disclosure and, together with the description, serve to explain the principles of this disclosure. It is obvious that the drawings described below are merely some embodiments of this disclosure, and those skilled in the art can obtain other drawings based on these drawings without any inventive effort.
[0059] Figure 1 This diagram illustrates an asynchronous scheduling system architecture according to an embodiment of the present disclosure.
[0060] Figure 2 This diagram illustrates an asynchronous scheduling method according to an embodiment of the present disclosure.
[0061] Figure 3 A flowchart of another asynchronous scheduling method in an embodiment of this disclosure is shown.
[0062] Figure 4 This diagram illustrates an asynchronous scheduling device according to an embodiment of the present disclosure.
[0063] Figure 5 This diagram illustrates another asynchronous scheduling device in an embodiment of the present disclosure;
[0064] Figure 6 A structural block diagram of an electronic device according to an embodiment of the present disclosure is shown. Detailed Implementation
[0065] Exemplary embodiments will now be described more fully with reference to the accompanying drawings. However, these exemplary embodiments can be implemented in many forms and should not be construed as limited to the examples set forth herein; rather, they are provided so that this disclosure will be more comprehensive and complete, and will fully convey the concept of the exemplary embodiments to those skilled in the art. The described features, structures, or characteristics may be combined in any suitable manner in one or more embodiments.
[0066] Furthermore, the accompanying drawings are merely illustrative of this disclosure and are not necessarily drawn to scale. The same reference numerals in the drawings denote the same or similar parts, and therefore repeated descriptions of them will be omitted. Some block diagrams shown in the drawings are functional entities and do not necessarily correspond to physically or logically independent entities. These functional entities may be implemented in software, in one or more hardware modules or integrated circuits, or in different network and / or processor devices and / or microcontroller devices.
[0067] It should be understood that the steps described in the method embodiments of this disclosure may be performed in different orders and / or in parallel. Furthermore, the method embodiments may include additional steps and / or omit the steps shown. The scope of this disclosure is not limited in this respect.
[0068] It should be noted that the concepts of "first" and "second" mentioned in this disclosure are used only to distinguish different devices, modules or units, and are not used to limit the order of functions performed by these devices, modules or units or their interdependencies.
[0069] It should be noted that the terms "a" and "a plurality of" used in this disclosure are illustrative rather than restrictive, and those skilled in the art should understand that, unless otherwise expressly indicated in the context, they should be understood as "one or more".
[0070] OpenStack is a distributed cloud computing management platform developed by NASA. Its biggest advantage is its ability to combine computing resources to provide service support for operators and customers. Skyline is a component of OpenStack, supported by Docker containers. The components are functionally independent but can communicate and collaborate with each other through network and API access, greatly increasing the efficiency of component operation.
[0071] However, OpenStack APIs typically require a token for access, and the overall design uses an asynchronous access architecture. Generally, an API token has a long validity period, but this poses a significant security challenge. In industrial-level use cases, system-level tokens have very strict validity requirements. In such cases, the API may become invalid.
[0072] To address the aforementioned issues, embodiments of this disclosure provide an asynchronous scheduling method, system, apparatus, device, and storage medium.
[0073] The asynchronous scheduling system provided in the embodiments of this disclosure will be described first.
[0074] Figure 1 A structural diagram of an asynchronous scheduling system according to an embodiment of this disclosure is shown.
[0075] like Figure 1 As shown, the asynchronous scheduling system 10 may include:
[0076] Log in to container 101 and access container 102;
[0077] Login container 101 is used to obtain user access information, including user login information and access request. When the user access information is obtained, the first time point of obtaining the user access is sent to access container 102. The login information, access request and the second time point of receiving the user access information are encrypted according to the pre-stored public key to obtain access signaling, and the access signaling is sent to access container 102.
[0078] Access container 102 is used to receive the first time point sent by login container 101, receive the access signaling encrypted with the public key sent by login container 101, decrypt the access signaling encrypted with the public key according to the pre-stored private key, and obtain login information, access request, and the second time point of receiving access information sent by the user. If the first time point and the second time point are consistent, the response information is determined according to the access request and the response information is sent to login container 101.
[0079] For example, both access container 102 and login container 101 can be configured on a terminal device or a server.
[0080] Terminal devices can be various electronic devices, including but not limited to smartphones, tablets, laptops, desktop computers, wearable devices, augmented reality devices, virtual reality devices, etc.
[0081] Optionally, the client for the application installed on different terminal devices can be the same, or the client for the same type of application based on different operating systems. Depending on the terminal platform, the specific form of the application client can also differ; for example, the application client can be a mobile client, a PC client, etc.
[0082] A server can be a server that provides various services, such as a backend management server that supports the devices operated by users through terminal devices. The backend management server can analyze and process received requests and other data, and then feed the processing results back to the terminal device.
[0083] Optionally, the server can be a standalone physical server, a server cluster or distributed system composed of multiple physical servers, or a cloud server providing basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communication, middleware services, domain name services, security services, CDN (Content Delivery Network), and big data and artificial intelligence platforms. The terminal can be a smartphone, tablet, laptop, desktop computer, smart speaker, smartwatch, etc., but is not limited to these. The terminal and server can be directly or indirectly connected via wired or wireless communication, which is not limited herein.
[0084] Those skilled in the art will understand that the number of terminal devices, networks, and servers described above is merely illustrative, and any number of terminal devices, networks, and servers can be used according to actual needs. This disclosure does not limit this.
[0085] It should be noted that the access container 102 and the login container 101 can be connected via a wired network or a wireless network.
[0086] Optionally, the aforementioned wireless or wired networks use standard communication technologies and / or protocols. The network is typically the Internet, but can also be any network, including but not limited to Local Area Networks (LANs), Metropolitan Area Networks (MANs), Wide Area Networks (WANs), mobile, wired or wireless networks, private networks, or any combination of virtual private networks. In some embodiments, technologies and / or formats including Hyper Text Markup Language (HTML), Extensible Markup Language (XML), etc., are used to represent data exchanged over the network. Furthermore, conventional encryption technologies such as Secure Socket Layer (SSL), Transport Layer Security (TLS), Virtual Private Networks (VPNs), and Internet Protocol Security (IPsec) can be used to encrypt all or some links. In other embodiments, custom and / or dedicated data communication technologies can be used to replace or supplement the aforementioned data communication technologies.
[0087] In the asynchronous scheduling system provided by the embodiments of this disclosure, by acquiring user access information, upon acquiring the user's access information, a first time point of access is sent to the access container. Then, the login information, access request, and a second time point of receiving the user's access information are encrypted using a pre-derived public key to obtain access signaling. The access container is then accessed according to the access signaling, causing the access container to decrypt the public key using a pre-stored private key to obtain the second time point in the access signaling. If the first and second time points are consistent, a response is determined based on the access request and sent to the login container. Therefore, since the access signaling is generated based on the user's access information upon receipt, the access signaling is automatically updated each time the user logs in, avoiding the security issues caused by access signaling not being updated for a long time.
[0088] Figure 2 A flowchart of the asynchronous scheduling method in an embodiment of this disclosure is shown.
[0089] like Figure 2 As shown, the method may include:
[0090] S201, Obtain the user's access information, which includes the user's login information and access request.
[0091] It should be noted that the user's login information includes the user identifier and the corresponding password.
[0092] A user's access request may include the identifier of the access container the user needs to access, as well as the identifier of the information that needs to be scheduled.
[0093] S202, upon obtaining the user's access information, the first time point of obtaining the user's access is sent to the access container.
[0094] It should be noted that the first time point can be the time point at which the user's access information is obtained.
[0095] S203, encrypt the login information, access request, and the second time point of receiving access information sent by the user according to the pre-stored public key to obtain the access signaling.
[0096] It should be noted that the access signaling can be a Token.
[0097] Since the second time point corresponding to each access is different, the access signaling generated based on the second time point may also be different.
[0098] S204, send the access signaling to the access container so that the access container can decrypt the public key according to the pre-stored private key to obtain the second time point in the access signaling. If the first time point and the second time point are consistent, determine the response information according to the access request and send the response information to the login container.
[0099] It should be noted that the login container can determine the access container to be accessed based on the access container identifier in the access request.
[0100] The container can determine the response information based on the identifiers in the access request.
[0101] S205, Receive response information.
[0102] The asynchronous scheduling method provided in this disclosure obtains user access information. Upon obtaining the user's access information, it sends the first time point of the user's access to the access container. Then, it encrypts the login information, access request, and the second time point of receiving the user's access information using a pre-derived public key to obtain access signaling. The access container is then accessed based on the access signaling, causing the access container to decrypt the public key using a pre-stored private key to obtain the second time point in the access signaling. If the first and second time points are consistent, a response is determined based on the access request and sent to the login container. Therefore, since the access signaling is generated based on the user's access information upon receipt, the access signaling is automatically updated each time the user logs in, avoiding the security issues caused by access signaling not being updated for a long time.
[0103] In some embodiments, between S201, the asynchronous scheduling method may further include:
[0104] In response to a user login request, obtain the user's login information;
[0105] Verify the user's login information;
[0106] Obtain user access information, including:
[0107] If the user's login information is verified, the user's access information is obtained.
[0108] It should be noted that a login request may include the user entering login information.
[0109] Verifying a user's login information may involve comparing the current user's login information with pre-stored user login information, and determining that the user has passed verification if the comparison results match.
[0110] In some embodiments, S202 may include:
[0111] When obtaining user access information, record the first time point at which the user access was obtained;
[0112] The first time point is encrypted using the public key to obtain the encrypted first time point.
[0113] Send the encrypted first time point to the access container.
[0114] In this embodiment of the disclosure, by encrypting the first time point and then sending the encrypted first time point to the access container, the leakage of the first time point can be avoided.
[0115] Based on the same inventive concept, this disclosure also provides an asynchronous scheduling method, as shown in the following embodiments. Since the principle by which this method solves the problem is similar to that of the above-described method embodiments, the implementation of this method embodiment can refer to the implementation of the above-described method embodiments, and repeated details will not be elaborated further.
[0116] Figure 3 A flowchart of an asynchronous scheduling method according to an embodiment of this disclosure is shown.
[0117] like Figure 3 As shown, this method is applied to accessing a container, and the method includes:
[0118] S301, receive the first time point sent by the login container;
[0119] S302, Receive the public key encrypted access signal sent by the login container;
[0120] S303, decrypt the access signaling encrypted with the public key using the pre-stored private key to obtain login information, access request, and the second time point of receiving access information sent by the user;
[0121] S304, if the first time point and the second time point are consistent, determine the response information based on the access request;
[0122] S305, send the response information to the login container.
[0123] The asynchronous scheduling method provided in this disclosure obtains user access information. Upon obtaining the user's access information, it sends the first time point of the user's access to the access container. Then, it encrypts the login information, access request, and the second time point of receiving the user's access information using a pre-derived public key to obtain access signaling. The access container is then accessed based on the access signaling, causing the access container to decrypt the public key using a pre-stored private key to obtain the second time point in the access signaling. If the first and second time points are consistent, a response is determined based on the access request and sent to the login container. Therefore, since the access signaling is generated based on the user's access information upon receipt, the access signaling is automatically updated each time the user logs in, avoiding the security issues caused by access signaling not being updated for a long time.
[0124] Based on the same inventive concept, this disclosure also provides an asynchronous scheduling device, as shown in the following embodiment. Since the principle by which this device embodiment solves the problem is similar to that of the above-described method embodiment, the implementation of this device embodiment can refer to the implementation of the above-described method embodiment, and repeated details will not be elaborated further.
[0125] Figure 4A schematic diagram of an asynchronous scheduling device is shown in an embodiment of this disclosure.
[0126] like Figure 4 As shown, the device 400 is applied to a login container, and the device includes:
[0127] The first acquisition module 401 is used to acquire the user's access information, which includes the user's login information and access request.
[0128] The first sending module 402 is used to send the first time point of obtaining the user's access information to the access container when the user's access information is obtained.
[0129] The first encryption module 403 is used to encrypt the login information, access request, and the second time point of receiving access information sent by the user according to the pre-stored public key to obtain the access signaling.
[0130] The second sending module 404 is used to send the access signaling to the access container so that the access container decrypts the public key according to the pre-stored private key to obtain the second time point in the access signaling. If the first time point and the second time point are consistent, the response information is determined according to the access request and the response information is sent to the login container.
[0131] The first receiving module 405 is used to receive response information.
[0132] The asynchronous scheduling device provided in the embodiments of this disclosure acquires user access information. Upon acquiring the user's access information, it sends the first time point of the user's access to the access container. Then, it encrypts the login information, access request, and the second time point of receiving the user's access information using a pre-derived public key to obtain access signaling. It then accesses the access container based on the access signaling, causing the access container to decrypt the public key using a pre-stored private key to obtain the second time point in the access signaling. If the first and second time points are consistent, it determines the response information based on the access request and sends the response information to the login container. Therefore, since the access signaling is generated based on the user's access information upon receipt, the access signaling is automatically updated each time the user logs in, avoiding the security issues caused by the access signaling not being updated for a long time.
[0133] In one embodiment of this disclosure, the asynchronous scheduling device further includes:
[0134] The second acquisition module is used to acquire the user's login information in response to the user's login request before acquiring the user's access information, which includes the user's login information and access request.
[0135] The verification module is used to verify the user's login information;
[0136] The first acquisition module includes:
[0137] The acquisition unit is used to acquire the user's access information after the user's login information has been verified.
[0138] In one embodiment of this disclosure, the asynchronous scheduling device further includes:
[0139] The fourth sending module, upon obtaining the user's access information, sends the private key to the access container before sending the first time point of the user's access to the access container.
[0140] The first sending module includes:
[0141] The recording unit is used to record the first time point when the user's access information is obtained;
[0142] The encryption unit is used to encrypt the first time point according to the public key to obtain the encrypted first time point;
[0143] The first sending unit is used to send the encrypted first time point to the access container.
[0144] Based on the same inventive concept, this disclosure also provides an asynchronous scheduling device, as shown in the following embodiment. Since the principle by which this device embodiment solves the problem is similar to that of the above-described method embodiment, the implementation of this device embodiment can refer to the implementation of the above-described method embodiment, and repeated details will not be elaborated further.
[0145] Figure 5 A schematic diagram of an asynchronous scheduling device is shown in an embodiment of this disclosure.
[0146] like Figure 5 As shown, the device 500 is used to access a container, and the device includes:
[0147] The second receiving module 501 is used to receive the first time point sent by the login container;
[0148] The third receiving module 502 is used to receive the access signaling encrypted with the public key sent by the login container;
[0149] The decryption module 503 is used to decrypt the access signaling encrypted with the public key based on the pre-stored private key, so as to obtain the login information, access request, and the second time point of receiving access information sent by the user.
[0150] The determination module 504 is used to determine the response information based on the access request if the first time point and the second time point are consistent.
[0151] The third sending module 505 is used to send response information to the login container.
[0152] The asynchronous scheduling device provided in the embodiments of this disclosure acquires user access information. Upon acquiring the user's access information, it sends the first time point of the user's access to the access container. Then, it encrypts the login information, access request, and the second time point of receiving the user's access information using a pre-derived public key to obtain access signaling. It then accesses the access container based on the access signaling, causing the access container to decrypt the public key using a pre-stored private key to obtain the second time point in the access signaling. If the first and second time points are consistent, it determines the response information based on the access request and sends the response information to the login container. Therefore, since the access signaling is generated based on the user's access information upon receipt, the access signaling is automatically updated each time the user logs in, avoiding the security issues caused by the access signaling not being updated for a long time.
[0153] Those skilled in the art will understand that various aspects of this disclosure can be implemented as a system, method, or program product. Therefore, various aspects of this disclosure can be specifically implemented in the following forms: a completely hardware implementation, a completely software implementation (including firmware, microcode, etc.), or a combination of hardware and software aspects, collectively referred to herein as a "circuit," "module," or "system."
[0154] The following reference Figure 6 To describe an electronic device 600 according to such an embodiment of the present disclosure. Figure 6 The electronic device 600 shown is merely an example and should not impose any limitation on the functionality and scope of use of the embodiments disclosed herein.
[0155] like Figure 6 As shown, the electronic device 600 is manifested in the form of a general-purpose computing device. The components of the electronic device 600 may include, but are not limited to: at least one processing unit 610, at least one storage unit 620, and a bus 630 connecting different system components (including storage unit 620 and processing unit 610).
[0156] The storage unit stores program code, which can be executed by the processing unit 610, causing the processing unit 610 to perform the steps described in the "Exemplary Methods" section of this specification according to various exemplary embodiments of this disclosure. For example, the processing unit 610 can perform the following steps of the above method embodiments:
[0157] Obtain user access information, including user login information and access requests;
[0158] When user access information is obtained, the first time point of user access will be sent to the access container;
[0159] The login information, access request, and the second time point of receiving access information sent by the user are encrypted using a pre-stored public key to obtain the access signaling.
[0160] The access signaling is sent to the access container, which then decrypts the public key using the pre-stored private key to obtain the second time point in the access signaling. If the first time point and the second time point are consistent, the response information is determined according to the access request and sent to the login container.
[0161] Receive response information.
[0162] Storage unit 620 may include a readable medium in the form of a volatile storage unit, such as random access memory (RAM) 6201 and / or cache memory 6202, and may further include a read-only memory (ROM) 6203.
[0163] Storage unit 620 may also include a program / utility 6206 having a set (at least one) of program modules 6205, such program modules 6205 including but not limited to: an operating system, one or more application programs, other program modules, and program data, each or some combination of these examples may include an implementation of a network environment.
[0164] Bus 630 can represent one or more of several types of bus structures, including a memory cell bus or memory cell controller, a peripheral bus, a graphics acceleration port, a processing unit, or a local bus using any of the various bus structures.
[0165] Electronic device 600 can also communicate with one or more external devices 660 (e.g., keyboard, pointing device, Bluetooth device, etc.), and with one or more devices that enable a user to interact with electronic device 600, and / or with any device that enables electronic device 600 to communicate with one or more other computing devices (e.g., router, modem, etc.). This communication can be performed via input / output (I / O) interface 650. Furthermore, electronic device 600 can also communicate with one or more networks (e.g., local area network (LAN), wide area network (WAN), and / or public networks, such as the Internet) via network adapter 660. As shown, network adapter 660 communicates with other modules of electronic device 600 via bus 630. It should be understood that, although not shown in the figures, other hardware and / or software modules can be used in conjunction with electronic device 600, including but not limited to: microcode, device drivers, redundant processing units, external disk drive arrays, RAID systems, tape drives, and data backup storage systems.
[0166] From the above description of the embodiments, those skilled in the art will readily understand that the exemplary embodiments described herein can be implemented by software or by combining software with necessary hardware. Therefore, the technical solutions according to the embodiments of this disclosure can be embodied in the form of a software product, which can be stored in a non-volatile storage medium (such as a CD-ROM, USB flash drive, external hard drive, etc.) or on a network, including several instructions to cause a computing device (such as a personal computer, server, terminal device, or network device, etc.) to execute the methods according to the embodiments of this disclosure.
[0167] In exemplary embodiments of this disclosure, a computer-readable storage medium is also provided, which may be a readable signal medium or a readable storage medium. A program product capable of implementing the methods described above is stored thereon. In some possible implementations, various aspects of this disclosure may also be implemented as a program product including program code, which, when run on a terminal device, causes the terminal device to perform the steps described in the "Exemplary Methods" section of this specification according to various exemplary embodiments of this disclosure.
[0168] More specific examples of computer-readable storage media in this disclosure may include, but are not limited to: electrical connections having one or more wires, portable computer disks, hard disks, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), optical fiber, portable compact disk read-only memory (CD-ROM), optical storage devices, magnetic storage devices, or any suitable combination of the foregoing.
[0169] In this disclosure, a computer-readable storage medium may include a data signal propagated in baseband or as part of a carrier wave, carrying readable program code. Such propagated data signals may take various forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination thereof. A readable signal medium may also be any readable medium other than a readable storage medium, capable of transmitting, propagating, or transmitting a program for use by or in connection with an instruction execution system, apparatus, or device.
[0170] Optionally, the program code contained on the computer-readable storage medium may be transmitted using any suitable medium, including but not limited to wireless, wired, optical fiber, RF, etc., or any suitable combination thereof.
[0171] In practical implementation, program code for performing the operations of this disclosure can be written in any combination of one or more programming languages, including object-oriented programming languages such as Java and C++, and conventional procedural programming languages such as C or similar languages. The program code can execute entirely on the user's computing device, partially on the user's computing device, as a standalone software package, partially on the user's computing device and partially on a remote computing device, or entirely on a remote computing device or server. In cases involving remote computing devices, the remote computing device can be connected to the user's computing device via any type of network, including a local area network (LAN) or a wide area network (WAN), or it can be connected to an external computing device (e.g., via the Internet using an Internet service provider).
[0172] It should be noted that although several modules or units for the device used to perform actions have been mentioned in the detailed description above, this division is not mandatory. In fact, according to embodiments of this disclosure, the features and functions of two or more modules or units described above can be embodied in one module or unit. Conversely, the features and functions of one module or unit described above can be further divided and embodied by multiple modules or units.
[0173] Furthermore, although the steps of the method in this disclosure are described in a specific order in the accompanying drawings, this does not require or imply that the steps must be performed in that specific order, or that all the steps shown must be performed to achieve the desired result. Additional or alternative steps may be omitted, multiple steps may be combined into one step, and / or a step may be broken down into multiple steps.
[0174] From the above description of the embodiments, those skilled in the art will readily understand that the exemplary embodiments described herein can be implemented by software or by combining software with necessary hardware. Therefore, the technical solutions according to the embodiments of this disclosure can be embodied in the form of a software product, which can be stored in a non-volatile storage medium (such as a CD-ROM, USB flash drive, external hard drive, etc.) or on a network, including several instructions to cause a computing device (such as a personal computer, server, mobile terminal, or network device, etc.) to execute the methods according to the embodiments of this disclosure.
[0175] Other embodiments of this disclosure will readily occur to those skilled in the art upon consideration of the specification and practice of the invention disclosed herein. This disclosure is intended to cover any variations, uses, or adaptations of this disclosure that follow the general principles of this disclosure and include common knowledge or customary techniques in the art not disclosed herein. The specification and examples are to be considered exemplary only, and the true scope and spirit of this disclosure are indicated by the appended claims.
Claims
1. An asynchronous scheduling method, characterized in that, include: The login container obtains the user's access information, which includes the user's login information and access request. The login container sends the private key to the access container; When the login container obtains the user's access information, it sends the first time point of the user's access to the access container. The access container receives the first time point sent by the login container; The login container encrypts the login information, access request, and the second time point of receiving access information sent by the user based on a pre-stored public key to obtain access signaling; The login container sends the access signaling to the access container; The access container receives the access signaling encrypted with the public key sent by the login container; The access container decrypts the access signaling encrypted with the public key using the pre-stored private key to obtain login information, access request, and a second time point in time when the user sends access information. If the access container is at the same time point as the first time point and the second time point, it determines the response information based on the access request. The access container sends the response information to the login container; The login container receives the response information; When the login container obtains the user's access information, it sends the first time point of the user's access to the access container, including: When obtaining user access information, record the first time point at which the user access was obtained; The first time point is encrypted using the public key to obtain the encrypted first time point; Send the encrypted first time point to the access container; The user's access request includes the identifier of the access container the user needs to access, and the identifier of the information to be scheduled; the login container determines the access container to be accessed based on the identifier of the access container in the access request; the access container determines the response information based on the identifier of the information in the access request.
2. The asynchronous scheduling method according to claim 1, characterized in that, Before obtaining the user's access information, including the user's login information and access request, the method further includes: In response to a user login request, obtain the user's login information; Verify the user's login information; Obtain user access information, including: If the user's login information is verified, the user's access information is obtained.
3. An asynchronous scheduling system, characterized in that, This includes the login container and the access container; The login container is used to obtain user access information, including user login information and access requests. A private key is sent to the access container. Upon obtaining user access information, a first time point of user access is sent to the access container. The login information, access request, and a second time point of receiving user access information are encrypted using a pre-stored public key to obtain access signaling, which is then sent to the access container. Specifically, when the login container obtains user access information, sending the first time point of user access to the access container includes: recording the first time point of user access; encrypting the first time point using the public key to obtain an encrypted first time point; and sending the encrypted first time point to the access container. The access container is used to receive a first time point sent by the login container, receive access signaling encrypted with the public key sent by the login container, decrypt the access signaling encrypted with the public key according to the pre-stored private key to obtain login information, access request and a second time point of receiving access information sent by the user, and determine response information according to the access request when the first time point and the second time point are consistent, and send the response information to the login container. The user's access request includes the identifier of the access container the user needs to access, and the identifier of the information to be scheduled; the login container determines the access container to be accessed based on the identifier of the access container in the access request; the access container determines the response information based on the identifier of the information in the access request.
4. An asynchronous scheduling device, characterized in that, Applied to the login container and the access container, wherein the apparatus applied to the login container includes: The first acquisition module is used to acquire the user's access information, which includes the user's login information and access request. The first sending module is used to send the first time point of obtaining the user's access information to the access container when the user's access information is obtained. The fourth sending module is used to send the private key to the access container before sending the first time point of obtaining the user's access information to the access container. The first encryption module is used to encrypt the login information, access request, and the second time point of receiving access information sent by the user according to the pre-stored public key to obtain the access signaling. The second sending module is used to send the access signaling to the access container, so that the access container decrypts the public key according to the pre-stored private key to obtain the second time point in the access signaling. If the first time point and the second time point are consistent, the response information is determined according to the access request and the response information is sent to the login container. The first receiving module is used to receive the response information; When the login container obtains the user's access information, it sends the first time point of the user's access to the access container, including: When obtaining user access information, record the first time point at which the user access was obtained; The first time point is encrypted using the public key to obtain the encrypted first time point; Send the encrypted first time point to the access container; The devices used for accessing containers include: The second receiving module is used to receive the first time point sent by the login container; The third receiving module is used to receive the public key encrypted access signal sent by the login container; The decryption module is used to decrypt the access signaling encrypted with the public key based on the pre-stored private key, so as to obtain the login information, access request, and the second time point of receiving access information sent by the user. The determination module is used to determine response information based on the access request when the first time point and the second time point are consistent. The third sending module is used to send the response information to the login container; The user's access request includes the identifier of the access container the user needs to access, and the identifier of the information to be scheduled; the login container determines the access container to be accessed based on the identifier of the access container in the access request; the access container determines the response information based on the identifier of the information in the access request.
5. An electronic device, characterized in that, include: processor; as well as Memory for storing the executable instructions of the processor; The processor is configured to execute the asynchronous scheduling method of any one of claims 1 to 2 by executing the executable instructions.
6. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by the processor, it implements the asynchronous scheduling method according to any one of claims 1 to 2.