Access processing methods, systems, computing devices, and computer storage media

Abstract

This application provides an access processing method, system, computing device, and computer storage medium. The access processing method includes: acquiring access operation data of a client accessing a cloud server; acquiring configuration information pre-configured by the client, the configuration information including storage configuration information; and sending the access operation data to a storage system indicated by the storage configuration information, so that the storage system stores the access operation data. The technical solution provided by this invention achieves persistent storage of access operation data. When a user needs to review the access process between the client and the cloud server, they can log in to the storage system and obtain the access operation data to determine the access process between the client and the cloud server.

Description

Technical Field

[0001] The embodiments of the present invention relate to the field of cloud computing technology, and in particular to an access processing method, an access processing system, a computing device, and a computer storage medium. Background Technology

[0002] A cloud server, also known as a cloud computing server or cloud host, uses cloud computing technology and integrates the three core elements of a data center: computing, networking, and storage. Based on cluster server technology, a virtualization technology, cloud servers virtualize multiple components similar to independent servers, offering advantages such as high flexibility, strong performance, and elastic deployment.

[0003] Because of the advantages mentioned above, more and more users are starting to use cloud servers. When using a cloud server, users typically establish a network connection with the cloud server using a client, and then initiate access to the cloud server based on that network connection.

[0004] In the process of realizing the concept of this invention, the inventors discovered that in related technologies, users are unaware of the access process between the client and the cloud server and cannot know the access process between the client and the cloud server. Therefore, after the user completes the access to the cloud server using the client, it is impossible to determine the security and reliability of the access process by determining the access process between the client and the cloud server. Summary of the Invention

[0005] This invention provides an access processing method, apparatus, system, computing device, and computer storage medium.

[0006] In a first aspect, embodiments of the present invention provide an access processing method, including:

[0007] Obtain access operation data of the client to the cloud server;

[0008] Obtain the configuration information pre-configured by the client, the configuration information including stored configuration information;

[0009] The access operation data is sent to the storage system indicated by the storage configuration information so that the storage system stores the access operation data.

[0010] Secondly, this invention provides an access processing method, including:

[0011] The server obtains access operation data sent by the server. The access operation data is sent by the server to the storage system indicated by the storage configuration information after obtaining the access operation data and configuration information including storage configuration information. The access operation data is generated after the client accesses the cloud server, and the configuration information is generated in advance by the client by accessing the server.

[0012] The access operation data is stored.

[0013] Thirdly, this embodiment of the invention provides an access processing method, including:

[0014] Provide configuration information to the server, the configuration information including stored configuration information;

[0015] Send an access request to the cloud server to the server so that the server forwards the access request to the cloud server, obtains the access operation data generated by the client and the cloud server, and stores the access operation data in the storage system indicated by the storage configuration information.

[0016] Send a data retrieval request to the storage system;

[0017] Receive the access operation data sent by the storage system in response to the data acquisition request.

[0018] Fourthly, embodiments of the present invention provide an access processing system, comprising:

[0019] The client is used to send access requests for the cloud server to the server so that the server forwards the access requests to the cloud server and receives the response results forwarded by the server.

[0020] The cloud server is used to obtain access requests from clients forwarded by the server, process the access requests, and send the processed access requests to the server.

[0021] The server is used to forward the client's access request to the cloud server and forward the response result sent by the cloud server to the client, as well as to obtain the client's pre-generated configuration information, use the access request and the response result as access operation data, and send the access operation data packet to the storage system indicated by the storage configuration information.

[0022] A storage system is used to receive the access data packets sent by the server and store the access data packets.

[0023] Fifthly, embodiments of the present invention provide an access processing apparatus, comprising:

[0024] The first acquisition module is used to acquire access operation data of the client accessing the cloud server;

[0025] The second acquisition module is used to acquire the configuration information pre-configured and generated by the client, the configuration information including stored configuration information;

[0026] The sending module allows the user to send the access operation data to the storage system indicated by the storage configuration information, so that the storage system can store the access operation data.

[0027] Sixthly, an access processing apparatus is provided in this embodiment of the invention, comprising:

[0028] The third acquisition module is used to acquire access operation data sent by the server. The access operation data is sent by the server to the storage system indicated by the storage configuration information after acquiring the access operation data and configuration information including storage configuration information. The access operation data is generated after the client accesses the cloud server, and the configuration information is generated in advance by the client by accessing the server.

[0029] The first storage module is used to store the access operation data.

[0030] In a seventh aspect, an access processing apparatus is provided in this embodiment of the invention, comprising:

[0031] An information providing module is used to provide configuration information to the server, the configuration information including stored configuration information for the purpose of...

[0032] The access module is used to send an access request to the cloud server to the server so that the server forwards the access request to the cloud server, obtains the access operation data generated by the client and the cloud server, and stores the access operation data in the storage system indicated by the storage configuration information.

[0033] The data acquisition module is used to send a data acquisition request to the storage system;

[0034] A data receiving module is used to receive the access operation data sent by the storage system in response to the data acquisition request.

[0035] This invention provides an access processing method that employs the following technical solution: "obtaining access operation data of a client accessing a cloud server; obtaining configuration information pre-configured by the client, the configuration information including storage configuration information; and sending the access operation data to a storage system indicated by the storage configuration information so that the storage system stores the access operation data." After the client accesses the cloud server and generates access operation data, the server obtains the access operation data and the pre-configured configuration information from the client, and then stores the access operation data in the storage system indicated by the storage configuration information. This achieves persistent storage of the access operation data. When a user needs to review the access process between the client and the cloud server, they can log in to the storage system and obtain the access operation data to determine the client's access process with the cloud server.

[0036] These or other aspects of the invention will become more apparent from the following description of the embodiments. Attached Figure Description

[0037] To more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0038] Figure 1 The flowchart illustrating an access processing method provided in one embodiment of the present invention is shown in the schematic diagram.

[0039] Figure 2 The diagram illustrates an access processing method provided in an embodiment of the present invention.

[0040] Figure 3 The diagram illustrates an access processing method provided in an embodiment of the present invention.

[0041] Figure 4 A flowchart illustrating an access processing method provided by another embodiment of the present invention is shown schematically;

[0042] Figure 5 A flowchart illustrating an access processing method provided by another embodiment of the present invention is shown schematically;

[0043] Figure 6 The schematic diagram illustrates an access processing system provided in one embodiment of the present invention;

[0044] Figure 7 The diagram schematically illustrates a block diagram of an access processing apparatus provided in one embodiment of the present invention;

[0045] Figure 8 The diagram schematically illustrates a block diagram of an access processing apparatus provided in one embodiment of the present invention;

[0046] Figure 9 The diagram schematically illustrates a block diagram of an access processing apparatus provided in one embodiment of the present invention;

[0047] Figure 10 The diagram illustrates a block diagram of a computing device according to one embodiment of the present invention. Detailed Implementation

[0048] To enable those skilled in the art to better understand the present invention, the technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings.

[0049] In some of the processes described in the specification, claims, and accompanying drawings of this invention, multiple operations appearing in a specific order are included. However, it should be clearly understood that these operations may not be executed in the order they appear herein, or may be executed in parallel. The operation numbers, such as 101, 102, etc., are merely used to distinguish different operations and do not represent any execution order. Furthermore, these processes may include more or fewer operations, and these operations may be executed sequentially or in parallel. It should be noted that the descriptions such as "first," "second," etc., in this document are used to distinguish different messages, devices, modules, etc., and do not represent a sequential order, nor do they limit "first" and "second" to different types.

[0050] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, data stored, data displayed, etc.) involved in this invention are all information and data authorized by the user or fully authorized by all parties. Furthermore, the collection, use and processing of related data must comply with the relevant laws, regulations and standards of the relevant countries and regions, and corresponding operation entry points are provided for users to choose to authorize or refuse.

[0051] A cloud server, also known as a cloud computing server or cloud host, uses cloud computing technology and integrates the three core elements of a data center: computing, networking, and storage. Based on cluster server technology, a virtualization technology, cloud servers virtualize multiple components similar to independent servers, offering advantages such as high flexibility, strong performance, and elastic deployment.

[0052] Because of the advantages mentioned above, more and more users are starting to use cloud servers. When using a cloud server, users typically establish a network connection with the cloud server using a client, and then initiate access to the cloud server based on that network connection.

[0053] In the process of realizing the concept of this invention, the inventors discovered that in related technologies, the access process between the client and the cloud server is usually not recorded and stored. Users cannot know the specific process of the interaction between the client and the cloud server, which raises doubts about the security and reliability of the cloud server. Furthermore, for example, when users discover an anomaly in the cloud server during operation and maintenance, they cannot review the visitors or access operation data of the cloud server to determine the cause of the anomaly.

[0054] To address the technical problems existing in related technologies, this invention provides an access processing method. By employing the technical solution of "obtaining access operation data from a client accessing a cloud server; obtaining pre-configured configuration information generated by the client, including storage configuration information; and sending the access operation data to the storage system indicated by the storage configuration information, so that the storage system can store the access operation data," after the client accesses the cloud server and generates access operation data, the server obtains the access operation data and the pre-configured configuration information generated by the client, and then stores the access operation data in the storage system indicated by the storage configuration information. This achieves persistent storage of the access operation data. When a user needs to review the access process between the client and the cloud server, they can log in to the storage system and obtain the access operation data to determine the access process between the client and the cloud server.

[0055] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0056] Figure 1 The schematic diagram illustrates a flowchart of an access processing method provided by an embodiment of the present invention. This access processing method can be executed by a server, such as... Figure 1 As shown, the access processing method may include the following steps:

[0057] 101. Obtain access operation data of the client accessing the cloud server;

[0058] 102. Obtain the configuration information generated by the client before configuration. The configuration information includes the stored configuration information.

[0059] 103. Send the access operation data to the storage system indicated by the storage configuration information so that the storage system can store the access operation data.

[0060] According to an embodiment of the present invention, the client can establish a remote connection with the cloud server in advance through the server.

[0061] According to an embodiment of the present invention, the client can deploy cloud services on a cloud server, and the cloud services may include cloud storage services, cloud security services, cloud IoT services, etc.

[0062] According to an embodiment of the present invention, access operation data can be used to record interaction information between the client and the cloud server.

[0063] According to embodiments of the present invention, client access to a cloud server may include client access to the cloud server itself, and / or client access to cloud services deployed on the cloud server. For example, the client may send start commands, stop commands, restart commands, release commands, etc., to the cloud server through the server. As another example, the client may write data to be written to a cloud storage service deployed on the cloud server through the cloud server.

[0064] According to embodiments of the present invention, the client can pre-login to the server to configure access operation data management and generate configuration information. For example, when configuring access operation data management, the user can specify the identification information of the storage system used to store the access operation data, and the storage configuration information can include the identification information of the storage system specified by the user.

[0065] According to an embodiment of the present invention, when a client logs into the server for configuration, it can first enable the server's access operation data management function. After the client enables the server's access operation data management function, the server obtains the interaction information between the client and the cloud server.

[0066] According to an embodiment of the present invention, after the server obtains the access operation data of the client to the cloud server, it can first obtain the configuration information provided by the client in advance, so as to store the access operation data according to the configuration information provided by the client.

[0067] According to an embodiment of the present invention, the server can determine the storage system specified by the user through storage configuration information, and then send the access operation data to the storage system so as to persistently store the access operation data.

[0068] According to embodiments of the present invention, the storage system may include, for example, a file storage system, a database, a log storage system, etc. When configuring storage configuration information, the user may select at least one storage system from the list of candidate storage systems displayed by the server, or the user may customize the storage configuration information to specify the storage system used for storage access.

[0069] According to an embodiment of the present invention, since the storage system used to store access operation data is designated by the user, the user typically has access rights to the storage system. After the access operation data is stored in the storage system, when the user needs to audit or inspect the process of the client accessing the cloud service, they can access the storage system to retrieve the pre-stored access operation data from the storage system, and audit and trace the interaction process between the client and the cloud service based on the access operation data.

[0070] According to an embodiment of the present invention, obtaining access operation data of a client accessing a cloud server can be specifically implemented as follows:

[0071] Receive access requests from clients;

[0072] Forward the access request to the cloud server;

[0073] Receive the response result sent by the cloud server in response to the access request;

[0074] Forward the response result to the client;

[0075] The access request and response result are used as access operation data.

[0076] Figure 2 The diagram illustrates an access processing method provided in an embodiment of the present invention.

[0077] like Figure 2 As shown, 201 can represent the client, 202 can represent the server, and 203 can represent the cloud server.

[0078] Client 201 can establish a remote connection with cloud server 203 through server 202.

[0079] First, the user can operate client 201 to initiate a connection establishment request to server 202. After receiving the connection establishment request, server 202 can authenticate client 201. After successful authentication, it generates a URL for initiating the connection and an access token valid for a short period of time, such as 10 minutes or 20 minutes. Then, it sends the WebSocket URL and the access token to client 201.

[0080] After obtaining the WebSocket URL and access token sent by the server, the client 201 can establish a WebSocket connection with the cloud server 203 through the WebSocket URL and access token.

[0081] After the client 201 establishes a WebSocket connection with the cloud server 203, the user can send control commands to the cloud server 203 through the client. The control commands can be sent to the server 202 in a streaming manner, and then the server 202 forwards the control commands to the cloud server 203.

[0082] After receiving the control command, cloud server 203 can execute the control operation indicated by the control command and generate the execution result. After generating the execution result, cloud server 203 can send the execution result to server 202, which will then forward the execution result to client 201 for display.

[0083] According to embodiments of the present invention, the server can detect the interaction status between the client and the cloud server to record the complete interaction process between the client and the cloud server. The complete interaction process may include, for example, an access request sent by the client and a response result sent by the cloud server. For instance, after receiving an access request from the client, the server can record the access request when forwarding it to the cloud server. Then, after receiving a response result from the cloud server, the server can record the response result when sending it to the client. Upon detecting that an access request and its corresponding access result have been recorded, the server stores the access request and the access result as access operation data.

[0084] In practical applications, cloud servers can be shared by multiple users, each using a separate account to log in to the client and access the cloud server. For example, in an enterprise setting, multiple people in a project team can share a single cloud server, each with their own account. When they need to access the cloud server, each user can log in to the client with their own account and access the cloud server through the client.

[0085] Therefore, in order to record users accessing the cloud server, after obtaining the access request sent by the client, the access request can be parsed to obtain the user identifier carried in the access request, and the user identifier, access request, and response result can be used together as access operation data.

[0086] According to an embodiment of the present invention, by using user identifier, access request, and response result together as access operation data, when it is necessary to check the access process of the cloud server, not only can the access request to the cloud server and the access result generated by the cloud server be found, but the corresponding operator can also be found.

[0087] In a preferred embodiment of the present invention, in addition to recording the user identifier, access request, and response result, the access operation data may also record information such as the instance identifier of the instance in the cloud server accessed by the access request, and the channel identifier of the connection channel connecting the cloud server and the server.

[0088] According to an embodiment of the present invention, the access processing method further includes:

[0089] Obtain configuration information provided by the client;

[0090] Store the configuration information in the database;

[0091] The configuration information generated by the client's pre-configuration includes:

[0092] Retrieve configuration information from the database.

[0093] According to an embodiment of the present invention, after obtaining the configuration information provided by the client, the configuration information can be stored in the local database of the server, thereby improving the speed of configuration information acquisition.

[0094] According to an embodiment of the present invention, the server can provide a first interface, and the user can use the client to call the first interface to provide configuration information to the server.

[0095] According to an embodiment of the present invention, the first interface can be used to modify configuration information. Modifying configuration information may include, for example, changing configuration information, adding configuration information, or deleting configuration information.

[0096] According to an embodiment of the present invention, obtaining the configuration information provided by the client can be specifically implemented as follows:

[0097] Get the configuration request sent by the client;

[0098] In response to a configuration request, a configuration page is sent to the client so that the client can display the configuration page;

[0099] Obtain configuration information provided by the client based on the configuration page.

[0100] According to an embodiment of the present invention, a user can use a client to call a first interface to send a configuration request to the server.

[0101] According to an embodiment of the present invention, when the server receives a configuration request sent by the client, it can send configuration parameter information to the client, so that after the client obtains the configuration parameter information, it can render the configuration parameter information and generate a configuration page.

[0102] In embodiments of the present invention, configuration parameter information may include, for example, storage configuration parameters, encryption configuration parameters, path configuration parameters, etc.

[0103] The following table 1 provides an example of the configuration parameter information.

[0104] Table 1

[0105]

[0106] According to an embodiment of the present invention, the client obtains such as Figure 1 After viewing the configuration parameter information shown, the configuration parameter information can be rendered to generate a configuration page. The configuration page may include configuration items such as whether to enable the first storage system delivery function, whether to enable the second storage system delivery function, encryption method, and storage path. Users can configure at least one configuration item to generate corresponding configuration information.

[0107] According to an embodiment of the present invention, the server may also provide a second interface, which allows users to view the configured information by calling the second interface.

[0108] According to an embodiment of the present invention, the configuration information further includes encrypted configuration information:

[0109] According to an embodiment of the present invention, sending access operation data to the storage system indicated by the storage configuration information can be specifically implemented as follows:

[0110] The access operation data and encryption configuration information are sent to the storage system indicated by the storage configuration information, so that the storage system can encrypt the access operation data according to the encryption method indicated by the encryption configuration information, generate encrypted access operation data, and store the encrypted access operation data. When the storage system receives a data retrieval request, it decrypts the encrypted access operation data to generate access operation data.

[0111] According to an embodiment of the present invention, by configuring encryption configuration information, the access processing method can be provided with static data protection capability. That is, the storage system supports encrypting the received access operation data and then persistently saving the encrypted access operation data. When the client requests to download the access operation data, the storage system automatically decrypts the encrypted access operation data and returns it to the client, effectively preventing potential security risks of access operation data in the storage system.

[0112] According to embodiments of the present invention, the encryption configuration information may include, for example, an encryption type, which may include encryption via Key Management Service (KMS) or encryption using the encryption algorithm built into the storage system.

[0113] According to an embodiment of the present invention, sending access operation data to the storage system indicated by the storage configuration information can be specifically implemented as follows:

[0114] Based on storage configuration information, access operation data is packaged to generate an access data packet;

[0115] The access data packet is sent to the storage system.

[0116] According to an embodiment of the present invention, access operation data may include a simple record of the interaction information between the client and the cloud server by the server. However, the access types between the client and the cloud server are relatively complex. If the interaction records generated by the simple record are stored directly, they will be messy and inconvenient for subsequent management. Therefore, after obtaining the access operation data, the access operation data can be packaged into an access data package based on the configuration information specified by the user.

[0117] According to an embodiment of the present invention, the process of packaging access operation data and generating an access data packet based on storage configuration information can be specifically implemented as follows:

[0118] Determine the storage system indicated by the storage configuration information;

[0119] The access operation data is packaged according to the data storage format of the storage system to generate an access data packet that conforms to the storage format of the storage system.

[0120] According to an embodiment of the present invention, in practical applications, different storage systems have different format requirements for stored files. Therefore, before sending access operation data to the storage system, the access operation data can be packaged according to the storage format required by the storage system to generate an access data packet that meets the storage format requirements of the storage system, and the access data packet can be stored in the storage system.

[0121] According to an embodiment of the present invention, the configuration page includes permission configuration items;

[0122] According to an embodiment of the present invention, the access processing method further includes:

[0123] Obtain authorization information, which is generated by the client based on the permission configuration items;

[0124] In response to authorization information, a permission manager is created;

[0125] According to an embodiment of the present invention, sending access operation data to the storage system indicated by the storage configuration information can be specifically implemented as follows:

[0126] Retrieve the storage system login information from the permissions manager;

[0127] Access the storage system based on login information to store access data packets in the storage system.

[0128] According to an embodiment of the present invention, login information may include, for example, a username and password, an access token, etc., and the login information can be used to log in and use the operating system.

[0129] According to an embodiment of the present invention, after obtaining the user's authorization information, a permission manager can be created. The permission manager can be used to receive access permissions to the storage system granted by the user. When the server needs to access the storage system to store access operation data, it can obtain access permissions to the storage system from the permission manager.

[0130] According to an embodiment of the present invention, since the storage system stores user data, users typically do not directly grant access permissions to the storage system to the server. The server can obtain temporary permissions to the storage system from the permission manager. For example, if the login information is a token, the token obtained by the server may have an expiration date or a number of available accesses. For instance, if the token's validity period is 5 minutes, the server can only access the storage system with the token within that 5-minute period. If the token has a number of available accesses, such as 2, the server can only use that token to access the storage system twice. After the token's validity period or the number of accesses expires, the server will lose its access permissions to the storage system.

[0131] According to an embodiment of the present invention, by having the user authorize access permissions of the storage system to the permission manager, and then having the permission manager generate login information with a short period or a limited number of times, the storage of access operation data can be made imperceptible to the user, without the user needing to perform additional authorization operations. On this basis, the data security of the storage system can also be guaranteed.

[0132] According to an embodiment of the present invention, the configuration information further includes a storage path;

[0133] According to an embodiment of the present invention, accessing the storage system based on login information can be specifically implemented as follows:

[0134] Access the storage space corresponding to the storage path in the storage system based on login information;

[0135] The access operation data is stored in the storage space.

[0136] According to an embodiment of the present invention, the storage path may include, for example, a path prefix entered by the user, an account UID, a region ID, interaction records, a cloud server instance ID, and a time.

[0137] In one embodiment of the present invention, the time path can be divided into independent paths for year, month, day, hour, minute, second, and millisecond. This makes the storage path division clear and facilitates the classification and querying of access operation data.

[0138] In another embodiment of the present invention, the year, month, day, minute, second, and millisecond can be divided into independent paths in the time path, which can reduce the storage layers of access operation data.

[0139] According to an embodiment of the present invention, after determining the storage path of the access operation data configured by the user through configuration information, the storage space corresponding to the storage path in the storage system can be determined. The storage system can have multiple storage spaces, each with a different encryption method. Therefore, when configuring encryption configuration information, the user can also configure the encryption method to inherit the encryption method of the storage space.

[0140] Figure 3 The diagram illustrates an access processing method provided in an embodiment of the present invention.

[0141] like Figure 3 The access processing process can include a configuration phase and an access processing phase.

[0142] During the configuration phase, the user can use client 301 to call the configuration interface pre-exposed by server 302 to send a configuration request to server 302. In response to the configuration request, server 302 can send the configuration page to client 301, so that client 301 can display the configuration page.

[0143] Client 301 can send a configuration view request to the server by calling the first interface 3021, or send a configuration update request to the server by calling the second interface 3022.

[0144] Both the first interface 3021 and the second interface 3022 can be connected to the database 3023. When the client 301 calls the first interface, the first interface 3021 can be used to obtain the configuration information of the client 301 from the database 3023 and send it to the client 301. When the client 301 calls the second interface 3022, the second interface 3022 can be used to obtain the configuration information sent by the user after generating it through the configuration page, and then store the configuration information in the database 3023.

[0145] After obtaining the configuration information of client 301, permission manager 3024 can be generated. Client 301 can grant access permissions to the specified storage system to permission controller 3024 through permission configuration information.

[0146] During the access processing phase, after client 301 generates access operation data by interacting with cloud server 303, server 302 can obtain the configuration information pre-configured by client 301 from database 3023. Through the storage configuration information in the configuration information, it determines the storage system specified by the user. Then, it can obtain the login information of the storage system 303 specified by the user through access permission manager 3024. On this basis, server 302 can also package the access operation data according to the storage format requirements of storage system 303 to generate access data packet. Then, it logs into the operating system with the login information obtained from access permission manager 3024 and stores the access data packet in storage system 303.

[0147] Furthermore, when client 301 needs to check the access process of the cloud server, it can log in to storage system 303 to obtain the access data packets between client 301 and the cloud server stored in storage system 303.

[0148] Figure 4 The schematic diagram illustrates a flowchart of an access processing method provided by another embodiment of the present invention, which can be executed by a storage system, such as... Figure 4 As shown, the access processing method may include the following steps:

[0149] 401. Obtain access operation data sent by the server. The access operation data is sent by the server to the storage system indicated by the storage configuration information after obtaining the access operation data and configuration information including storage configuration information. The access operation data is generated after the client accesses the cloud server, and the configuration information is generated in advance by the client by accessing the server.

[0150] 402, Store the access operation data.

[0151] According to an embodiment of the present invention, the configuration information further includes encrypted configuration information;

[0152] According to an embodiment of the present invention, the access processing method further includes:

[0153] The access operation data is encrypted according to the encryption method indicated in the encryption configuration information to generate encrypted access operation data;

[0154] Store encrypted access operation data.

[0155] According to an embodiment of the present invention, the access processing method further includes:

[0156] Get the data retrieval request from the client;

[0157] In response to a data retrieval request, the encrypted access operation data is decrypted to generate access operation data;

[0158] Send access operation data to the client.

[0159] Figure 5 The schematic diagram illustrates a flowchart of an access processing method provided by another embodiment of the present invention, which can be executed by a client, such as... Figure 5 As shown, the access processing method may include the following steps:

[0160] 501, Provide configuration information to the server, the configuration information including stored configuration information;

[0161] 502, Send an access request for the cloud server to the server so that the server forwards the access request to the cloud server, obtains the access operation data generated by the client and the cloud server, and stores the access operation data in the storage system indicated by the storage configuration information;

[0162] 503, Send a data retrieval request to the storage system;

[0163] 504, Receive the access operation data sent by the storage system in response to the data acquisition request.

[0164] According to an embodiment of the present invention, providing configuration information to the server can specifically be implemented as follows:

[0165] Send a configuration request to the server;

[0166] Obtain the configuration page sent by the server in response to the configuration request;

[0167] Display the configuration page;

[0168] Generate configuration information based on the configuration page;

[0169] The configuration information is sent to the server.

[0170] Figure 6 The schematic diagram illustrates an access processing system according to an embodiment of the present invention, such as... Figure 6 As shown, the access processing system 600 may include:

[0171] Client 601 is used to send access requests for cloud server 602 to server 603, so that server 603 forwards the access requests to cloud server 602 and receives the response results forwarded by server 603.

[0172] Cloud server 602 is used to obtain access requests from client 601 forwarded by server 603, process the access requests, and send the processed access requests to server 603.

[0173] Server 603 is used to forward the access request from client 601 to cloud server 602 and the response result sent by cloud server 602 to client 601, as well as to obtain the pre-generated configuration information of client 601, use the access request and response result as access operation data, and send the access operation data packet to the storage system 604 indicated by the storage configuration information.

[0174] Storage system 604 is used to receive access data packets sent by server 603 and store the access data packets.

[0175] Figure 7 The schematic diagram illustrates a block diagram of an access processing apparatus provided in one embodiment of the present invention, such as... Figure 7 As shown, the access processing device may include:

[0176] The first acquisition module 701 is used to acquire access operation data of the client accessing the cloud server;

[0177] The second acquisition module 702 is used to acquire configuration information pre-configured by the client, including stored configuration information.

[0178] The sending module 703 allows the user to send access operation data to the storage system indicated by the storage configuration information, so that the storage system can store the access operation data.

[0179] According to an embodiment of the present invention, the first acquisition module 701 includes:

[0180] The first receiving unit is used to receive access requests from clients;

[0181] The request forwarding unit is used to forward access requests to the cloud server;

[0182] The result receiving unit is used to receive the response result sent by the cloud server in response to the access request;

[0183] The result forwarding unit is used to forward the response result to the client;

[0184] The record generation unit is used to take access requests and response results as access operation data.

[0185] According to an embodiment of the present invention, the configuration information further includes encrypted configuration information:

[0186] According to an embodiment of the present invention, the sending module 703 includes:

[0187] The data sending unit is used to send access operation data and encryption configuration information to the storage system indicated by the storage configuration information, so that the storage system can encrypt the access operation data according to the encryption method indicated by the encryption configuration information, generate encrypted access operation data, and store the encrypted access operation data. When the storage system receives a data acquisition request, it can decrypt the encrypted access operation data to generate access operation data.

[0188] According to an embodiment of the present invention, the access processing apparatus further includes:

[0189] The configuration information acquisition module is used to acquire configuration information provided by the client;

[0190] The configuration information storage module is used to store configuration information in the database;

[0191] According to an embodiment of the present invention, the second acquisition module 702 includes:

[0192] The configuration information acquisition unit is used to retrieve configuration information from the database.

[0193] According to an embodiment of the present invention, the configuration information acquisition module includes:

[0194] The request retrieval unit is used to retrieve configuration requests sent by the client;

[0195] The page sending unit is used to respond to a configuration request and send a configuration page to the client so that the client can display the configuration page;

[0196] The configuration information acquisition unit is used to acquire configuration information provided by the client based on the configuration page.

[0197] According to an embodiment of the present invention, the sending module 703 includes:

[0198] The packaging unit is used to package access operation data based on storage configuration information to generate access data packets;

[0199] The data sending unit is used to send access data packets to the storage system.

[0200] According to an embodiment of the present invention, the packaging unit includes:

[0201] The first determining subunit is used to determine the storage system indicated by the storage configuration information;

[0202] The packaging subunit is used to package access operation data according to the data storage format of the storage system to generate access data packets that conform to the storage format of the storage system.

[0203] According to an embodiment of the present invention, the configuration page includes permission configuration items.

[0204] According to an embodiment of the present invention, the access processing apparatus further includes:

[0205] The authorization information acquisition module is used to acquire authorization information, which is generated by the client based on the operation of the permission configuration items;

[0206] The manager creation module is used to create a permission manager in response to authorization information;

[0207] According to an embodiment of the present invention, the sending module 703 includes:

[0208] The login information acquisition unit is used to obtain the login information of the storage system from the permission manager;

[0209] The storage system access unit is used to access the storage system based on login information, so as to store the access data packet in the storage system.

[0210] According to an embodiment of the present invention, the configuration information further includes a storage path;

[0211] According to an embodiment of the present invention, the storage system access unit includes:

[0212] The access subunit is used to access the storage space corresponding to the storage path in the storage system based on login information.

[0213] The storage sub-unit is used to store access operation data in the storage space.

[0214] Figure 7 The access processing device can perform Figure 1 The implementation principle and technical effects of the access processing method in the illustrated embodiment will not be repeated here. The specific methods by which each module and unit of the access processing device in the above embodiments performs its operations have been described in detail in the embodiments related to this method, and will not be elaborated upon here.

[0215] Figure 8 The schematic diagram illustrates a block diagram of an access processing apparatus provided in one embodiment of the present invention, such as... Figure 8 As shown, the access processing device may include:

[0216] The third acquisition module 801 is used to acquire access operation data sent by the server. The access operation data is sent by the server to the storage system indicated by the storage configuration information after acquiring the access operation data and configuration information including storage configuration information. The access operation data is generated after the client accesses the cloud server, and the configuration information is generated in advance by the client by accessing the server.

[0217] The first storage module 802 is used to store access operation data.

[0218] According to an embodiment of the present invention, the configuration information further includes encrypted configuration information;

[0219] According to an embodiment of the present invention, the access processing apparatus further includes:

[0220] An encryption module is used to encrypt the access operation data according to the encryption method indicated by the encryption configuration information, and generate encrypted access operation data;

[0221] An encrypted storage module is used to store the encrypted access operation data.

[0222] Figure 8 The access processing device can perform Figure 4 The implementation principle and technical effects of the access processing method in the illustrated embodiment will not be repeated here. The specific methods by which each module and unit of the access processing device in the above embodiments performs its operations have been described in detail in the embodiments related to this method, and will not be elaborated upon here.

[0223] Figure 9 The schematic diagram illustrates a block diagram of an access processing apparatus provided in one embodiment of the present invention, such as... Figure 9 As shown, the access processing device may include:

[0224] Information providing module 901 is used to provide configuration information to the server, the configuration information including stored configuration information, so that the server can provide configuration information for the purpose of providing ...

[0225] Access module 902 is used to send an access request for a cloud server to the server so that the server forwards the access request to the cloud server, obtains the access operation data generated by the client and the cloud server, and stores the access operation data in the storage system indicated by the storage configuration information.

[0226] Data acquisition module 903 is used to send a data acquisition request to the storage system;

[0227] The data receiving module 904 is used to receive the access operation data sent by the storage system in response to the data acquisition request.

[0228] According to an embodiment of the present invention, the information providing module 901 includes:

[0229] The first sending unit is used to send a configuration request to the server;

[0230] The page acquisition unit is used to acquire the configuration page sent by the server in response to the configuration request;

[0231] A page display unit is used to display the configuration page;

[0232] A configuration generation unit is used to generate configuration information based on the configuration page;

[0233] A configuration sending unit is used to send the configuration information to the server.

[0234] Figure 9 The access processing device can perform Figure 5 The implementation principle and technical effects of the access processing method described in the illustrated embodiments will not be repeated here. The specific methods by which each module and unit of the access processing device in the above embodiments performs its operations have been described in detail in the embodiments related to this method, and will not be elaborated upon here.

[0235] In one possible design, the access processing apparatus provided in the embodiments of the present invention can be implemented as a computing device, such as... Figure 10 As shown, the computing device may include a storage component 1001 and a processing component 1002;

[0236] Storage component 001 stores one or more computer instructions, wherein the one or more computer instructions are called and executed by processing component 1002 to implement the access processing method provided in the embodiments of the present invention.

[0237] Of course, computing devices may also include other components, such as input / output interfaces and communication components. Input / output interfaces provide an interface between processing components and peripheral interface modules, which can be output devices, input devices, etc. Communication components are configured to facilitate wired or wireless communication between the computing device and other devices.

[0238] The computing device can be a physical device or an elastic computing host provided by a cloud computing platform. In this case, the computing device can refer to a cloud server, and the aforementioned processing components, storage components, etc., can be basic server resources rented or purchased from the cloud computing platform.

[0239] When the computing device is a physical device, it can be implemented as a distributed cluster consisting of multiple servers or terminal devices, or as a single server or a single terminal device.

[0240] This invention also provides a computer-readable storage medium storing a computer program, which, when executed by a computer, can implement the access processing method provided in this invention.

[0241] This invention also provides a computer program product, including a computer program, which, when executed by a computer, can implement the access processing method provided in this invention.

[0242] The processing component in the corresponding embodiments described above may include one or more processors to execute computer instructions to complete all or part of the steps in the method described above. Alternatively, the processing component may be implemented as one or more application-specific integrated circuits (ASICs), digital signal processors (DSPs), digital signal processing devices (DSPDs), programmable logic devices (PLDs), field-programmable gate arrays (FPGAs), controllers, microcontrollers, microprocessors, or other electronic components to execute the method described above.

[0243] Storage components are configured to store various types of data to support operation within the device. Storage components can be implemented from any type of volatile or non-volatile storage device or a combination thereof, such as static random access memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic storage, flash memory, magnetic disk, or optical disk.

[0244] Those skilled in the art will clearly understand that, for the sake of convenience and brevity, the specific working processes of the systems, devices, and units described above can be referred to the corresponding processes in the foregoing method embodiments, and will not be repeated here.

[0245] The device embodiments described above are merely illustrative. The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the modules can be selected to achieve the purpose of this embodiment according to actual needs. Those skilled in the art can understand and implement this without any creative effort.

[0246] Through the above description of the embodiments, those skilled in the art can clearly understand that each embodiment can be implemented by means of software plus necessary general-purpose hardware platforms, and of course, it can also be implemented by hardware. Based on this understanding, the above technical solutions, in essence or the part that contributes to the prior art, can be embodied in the form of a software product. This computer software product can be stored in a computer-readable storage medium, such as ROM / RAM, magnetic disk, optical disk, etc., and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute the methods described in the various embodiments or some parts of the embodiments.

[0247] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, and not to limit them; although the present invention has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that modifications can still be made to the technical solutions described in the foregoing embodiments, or equivalent substitutions can be made to some of the technical features; and these modifications or substitutions do not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

1. An access processing method, characterized in that, include: Receive access requests from clients; The access request is forwarded to the cloud server; Receive the response result sent by the cloud server in response to the access request; The response result is forwarded to the client; Obtain access operation data of the client accessing the cloud server, wherein the access operation data is used to record the interaction information between the client and the cloud server; The process of obtaining access operation data of the client accessing the cloud server includes: using the access request and the response result as the access operation data; Obtain the configuration information pre-configured by the client, the configuration information including stored configuration information; The access operation data is sent to the storage system indicated by the storage configuration information so that the storage system stores the access operation data.

2. The method according to claim 1, characterized in that, The configuration information also includes encrypted configuration information: The step of sending the access operation data to the storage system indicated by the storage configuration information includes: The access operation data and the encryption configuration information are sent to the storage system indicated by the storage configuration information, so that the storage system encrypts the access operation data according to the encryption method indicated by the encryption configuration information, generates encrypted access operation data, and stores the encrypted access operation data. When the storage system receives a data acquisition request, it decrypts the encrypted access operation data to generate the access operation data.

3. The method according to claim 1, characterized in that, The method further includes: Obtain configuration information provided by the client; Store the configuration information in the database; The step of obtaining the configuration information pre-configured by the client includes: The configuration information is obtained from the database.

4. The method according to claim 3, characterized in that, The process of obtaining the configuration information provided by the client includes: Get the configuration request sent by the client; In response to the configuration request, a configuration page is sent to the client so that the client can display the configuration page; Obtain the configuration information provided by the client based on the configuration page; The step of sending the access operation data to the storage system indicated by the storage configuration information includes: Based on the storage configuration information, the access operation data is packaged to generate an access data packet; The access data packet is sent to the storage system.

5. The method according to claim 4, characterized in that, The step of packaging the access operation data based on the storage configuration information to generate an access data packet includes: Determine the storage system indicated by the storage configuration information; The access operation data is packaged according to the data storage format of the storage system to generate the access data packet that conforms to the storage format of the storage system.

6. The method according to claim 4, characterized in that, The configuration page includes permission configuration items; The method further includes: Obtain authorization information, which is generated by the client's operation on the permission configuration items; In response to the authorization information, a permission manager is created; The step of sending the access operation data to the storage system indicated by the storage configuration information includes: Obtain the login information of the storage system from the permission manager; Access the storage system based on the login information to store the access data packet in the storage system.

7. An access processing method, characterized in that, include: The server acquires access operation data sent by the client. This access operation data is generated by the client after it acquires access operation data and configuration information including storage configuration information, and then sends it to the storage system indicated by the storage configuration information. The access operation data is generated after the client accesses the cloud server, and the configuration information is generated in advance by the client through accessing the server. The access operation data is used to record the interaction information between the client and the cloud server. After receiving the client's access request, forwarding the access request to the cloud server, receiving the response result from the cloud server in response to the access request, and forwarding the response result to the client, the server uses the access request and the response result as the access operation data. The access operation data is stored.

8. The method according to claim 7, characterized in that, The configuration information also includes encrypted configuration information; The method further includes: The access operation data is encrypted according to the encryption method indicated by the encryption configuration information to generate encrypted access operation data; The encrypted access operation data is stored.

9. An access processing method, characterized in that, include: Provide configuration information to the server, the configuration information including stored configuration information; Send an access request to the cloud server to the server so that the server forwards the access request to the cloud server, obtains the access operation data generated between the client and the cloud server, and stores the access operation data in the storage system indicated by the storage configuration information. Send a data retrieval request to the storage system; The system receives access operation data sent by the storage system in response to the data acquisition request, and the access operation data is used to record the interaction information between the client and the cloud server. After receiving the access request from the client, forwarding the access request to the cloud server, receiving the response result sent by the cloud server in response to the access request, and forwarding the response result to the client, the server uses the access request and the response result as the access operation data.

10. The method according to claim 9, characterized in that, The provision of configuration information to the server includes: Send a configuration request to the server; Obtain the configuration page sent by the server in response to the configuration request; Display the configuration page; Generate configuration information based on the configuration page; The configuration information is sent to the server.

11. An access processing system, characterized in that, include: The client is used to send access requests for the cloud server to the server so that the server forwards the access requests to the cloud server and receives the response results forwarded by the server. A cloud server is used to obtain access requests from clients forwarded by the server, process the access requests, and send the processed access requests to the server. The server is used to forward the client's access request to the cloud server and forward the response result sent by the cloud server to the client, and to obtain the configuration information pre-generated by the client, including storage configuration information, and to send the access request and the response result as access operation data to the storage system indicated by the storage configuration information. The access operation data is used to record the interaction information between the client and the cloud server. After receiving the access request from the client, forwarding the access request to the cloud server, receiving the response result sent by the cloud server in response to the access request, and forwarding the response result to the client, the server uses the access request and the response result as the access operation data. A storage system is used to receive the access operation data sent by the server and store the access operation data.

12. A computing device, characterized in that, This includes processing components and storage components; The storage component stores one or more computer instructions; the one or more computer instructions are invoked and executed by the processing component to implement the access processing method as described in any one of claims 1 to 6, or to implement the access processing method as described in claim 7, or to implement the access processing method as described in claim 9.

13. A computer storage medium, characterized in that, The device stores a computer program, which, when executed by a computer, implements the access processing method as described in any one of claims 1 to 6, or the access processing method as described in claim 7, or the access processing method as described in claim 9.

Images