Dynamic multi-mode authentication method, device and equipment of aggregation gateway and medium

Abstract

The application discloses a dynamic multi-mode authentication method of a polymerization gateway, which comprises the following steps: when receiving a calling request, extracting characteristic parameters in the calling request, and determining a target system sending the calling request based on an analysis rule engine and the characteristic parameters; when the target system is authenticated, determining a home back-end service of a request interface in the calling request based on a globally unique address of the request interface; processing request information corresponding to the calling request based on a protocol request corresponding to the home back-end service, and forwarding the processed request information to the target system. The application takes an API gateway as a core, changes a mode that other systems adapt to the gateway into a mode that the API gateway actively adapts to inventory systems, integrates a large number of existing inventory systems, breaks information islands, and better transforms and optimizes old systems. Therefore, more efficient and more flexible system integration and information sharing are realized.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of computer, in particular to a dynamic multi-mode authentication method and device of aggregation gateway, equipment and medium. BACKGROUND

[0002] At present, information systems are usually opened to the outside through OpenAPI, and API gateway provides unified authentication and certification capabilities. However, the traditional API gateway generally only provides a standard authentication capability and a standard interface routing forwarding capability. Therefore, the interface capability service and the client system that needs to use the interface must be connected according to the specification of the API gateway. This will cause many inventory systems of large enterprises, especially those that have been built for a long time, to be difficult to adapt to the system according to the specification of the API gateway due to various reasons. Therefore, how to solve the problems of not easy to transform and difficult to break the information island of the inventory old system has become a technical problem to be solved at present. SUMMARY

[0003] The present application provides a dynamic multi-mode authentication method, device, equipment and medium of aggregation gateway to solve the problems of not easy to transform and difficult to break the information island of the inventory old system.

[0004] In a first aspect, the present application provides a dynamic multi-mode authentication method of aggregation gateway, which is applied to an aggregation gateway. The dynamic multi-mode authentication method of aggregation gateway comprises:

[0005] When receiving a calling request, extracting feature parameters in the calling request, and determining a target system sending the calling request based on an analysis rule engine and the feature parameters;

[0006] When the target system is authenticated, determining a home backend service of a request interface based on a globally unique address of the request interface in the calling request;

[0007] Processing request information corresponding to the calling request based on a protocol request corresponding to the home backend service, and forwarding the processed request information to the target system.

[0008] Further, the aggregation gateway comprises a request feature analyzer. The extraction of the feature parameters in the calling request and the determination of the target system sending the calling request based on the analysis rule engine and the feature parameters comprise:

[0009] Based on the request feature analyzer, extracting header, path, query and body parameters in the calling request as the feature parameters;

[0010] Based on the request feature analyzer, the feature parameters are transmitted into the analysis rule engine for analysis, and the system matched with the feature parameters is determined as the target system.

[0011] Further, the feature parameters are transmitted into the analysis rule engine for analysis, and the system matched with the feature parameters is determined as the target system, including:

[0012] Based on the analysis rule engine, the request feature analyzer library is matched with the feature parameters, and the system matched with the feature parameters in the request feature analyzer library is determined as the target system.

[0013] Further, the aggregation gateway further includes an authentication adapter, and before the target system is authenticated, based on the global unique address of the request interface in the calling request, the home backend service of the request interface is determined, further including:

[0014] Based on the authentication adapter, the authentication script and the signature protocol corresponding to the target system in the authentication adapter library are determined.

[0015] Based on the authentication script and the signature protocol, the target system is authenticated by signature.

[0016] Further, the authentication adapter includes a standard authentication processor and a customized authentication processor, and before the authentication script and the signature protocol corresponding to the target system in the authentication adapter library are determined based on the authentication adapter, further including:

[0017] When the target system is a standard system, the standard authentication processor is obtained as the authentication adapter.

[0018] When the target system is a customized system, the customized authentication processor is obtained as the authentication adapter.

[0019] Further, the aggregation gateway further includes a backend service adapter, and when the target system is authenticated, based on the global unique address of the request interface in the calling request, the home backend service of the request interface is determined, including:

[0020] Based on the backend service adapter, the home backend service corresponding to the global unique address is determined in the backend service adapter library.

[0021] Further, the backend service adapter includes a standard routing forwarding processor and a customized routing forwarding processor, and before the home backend service corresponding to the global unique address is determined in the backend service adapter library based on the backend service adapter, including:

[0022] When the system to which the request interface belongs is a standard system, the standard routing forwarding processor is acquired as the backend service adapter;

[0023] When the system to which the request interface belongs is a customized system, the customized routing forwarding processor is acquired as the backend service adapter.

[0024] In a second aspect, the application further provides a dynamic multi-mode authentication device of an aggregation gateway, the dynamic multi-mode authentication device being applied to an aggregation gateway, and the dynamic multi-mode authentication device comprises:

[0025] a feature parameter analysis module, configured to extract feature parameters in a calling request when the calling request is received, and determine a target system sending the calling request based on an analysis rule engine and the feature parameters;

[0026] a backend service determination module, configured to determine a home backend service of a request interface based on a globally unique address of the request interface in the calling request when the target system is authenticated;

[0027] a request information forwarding module, configured to process request information corresponding to the calling request based on a protocol request corresponding to the home backend service, and forward the processed request information to the target system.

[0028] Further, the aggregation gateway comprises a request feature analyzer, and the feature parameter analysis module comprises:

[0029] a feature parameter extraction unit, configured to extract header, path, query and body parameters in the calling request as the feature parameters based on the request feature analyzer;

[0030] a feature parameter matching unit, configured to transmit the feature parameters into the analysis rule engine for analysis based on the request feature analyzer, and determine a system matched with the feature parameters as the target system.

[0031] Further, the feature parameter matching unit is further configured to:

[0032] match a request feature analyzer library with the feature parameters based on the analysis rule engine, and determine a system matched with the feature parameters in the request feature analyzer library as the target system.

[0033] Further, the aggregation gateway further comprises an authentication adapter, and the dynamic multi-mode authentication device further comprises:

[0034] a signature protocol determination module, configured to determine an authentication script and a signature protocol corresponding to the target system in an authentication adapter library based on the authentication adapter.

[0035] a system signature authentication module, configured to perform signature authentication on the target system based on the authentication script and the signature protocol.

[0036] Further, the authentication adapter comprises a standard authentication processor and a customized authentication processor, and the dynamic multi-mode authentication device further comprises an authentication processor determination module, configured to:

[0037] when the target system is a standard system, acquire the standard authentication processor as the authentication adapter;

[0038] when the target system is a customized system, acquire the customized authentication processor as the authentication adapter.

[0039] Further, the backend service determination module is further configured to:

[0040] determine, based on the backend service adapter, a home backend service corresponding to the globally unique address from a backend service adapter library.

[0041] Further, the dynamic multi-mode authentication device further comprises a service adapter determination module, configured to:

[0042] when the system to which the request interface belongs is a standard system, acquire the standard route forwarding processor as the backend service adapter;

[0043] when the system to which the request interface belongs is a customized system, acquire the customized route forwarding processor as the backend service adapter.

[0044] In a third aspect, the present application further provides a computer device, comprising a memory and a processor; the memory is configured to store a computer program; the processor is configured to execute the computer program and implement the dynamic multi-mode authentication method of the aggregation gateway as described above when executing the computer program.

[0045] In a fourth aspect, the present application further provides a computer readable storage medium, which stores a computer program; the computer program is executed by a processor to make the processor implement the dynamic multi-mode authentication method of the aggregation gateway as described above.

[0046] This application discloses a dynamic multi-mode authentication method, apparatus, device, and medium for an aggregation gateway. The dynamic multi-mode authentication method includes: upon receiving a call request, extracting feature parameters from the call request and determining the target system sending the call request based on an analysis rule engine and the feature parameters; when the target system passes authentication, determining the backend service to which the request interface belongs based on the globally unique address of the request interface in the call request; processing the request information corresponding to the call request based on the protocol request corresponding to the backend service, and forwarding the processed request information to the target system. Through the above method, this application solves the aforementioned problems by setting up a multi-mode authentication aggregation gateway. It changes the approach from having an API gateway as the core, requiring other systems to adapt to the gateway, to having the API gateway actively adapt to existing systems. This can integrate a large number of existing systems, break down information silos, and enable better transformation and optimization of older systems. This achieves more efficient and flexible system integration and information sharing. Attached Figure Description

[0047] To more clearly illustrate the technical solutions of the embodiments of this application, the drawings used in the description of the embodiments will be briefly introduced below. Obviously, the drawings described below are some embodiments of this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0048] Figure 1 This is a schematic flowchart of a dynamic multi-mode authentication method for an aggregation gateway provided in the first embodiment of this application;

[0049] Figure 2 This is a logical flowchart illustrating the dynamic multi-mode authentication method of the aggregation gateway in this application;

[0050] Figure 3 This is a schematic block diagram of a dynamic multi-mode authentication device for an aggregation gateway provided in an embodiment of this application;

[0051] Figure 4 A schematic block diagram of the structure of a computer device provided for an embodiment of this application. Detailed Implementation

[0052] The technical solutions of the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this application, not all embodiments. Based on the embodiments of this application, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of this application.

[0053] The flowcharts shown in the drawings are merely illustrative and do not necessarily include all contents and operations / steps, nor are they necessarily executed in the order described. For example, some operations / steps can be further decomposed, combined or partially merged, so the actual execution order can be changed according to actual conditions.

[0054] It should be understood that the terms used in the specification of the present application are only for the purpose of describing specific embodiments and are not intended to limit the present application. As used in the specification and the appended claims of the present application, the singular forms "a", "an" and "the" are intended to include the plural forms unless the context clearly indicates otherwise.

[0055] It should also be understood that the term "and / or" used in the specification and the appended claims of the present application means any combination of one or more of the associated listed items and all possible combinations, and includes these combinations.

[0056] At present, information systems are generally opened to the outside through OpenAPI, and unified authentication and authorization capabilities are provided by API gateways. However, traditional API gateways generally only provide one standard authentication capability and one standard interface routing and forwarding capability, so that the service providing the interface capability and the client system needing to use the interface must be connected according to the specification of the API gateway. However, many large enterprises, especially enterprises that have built information systems for a long time, have many inventory systems, and it is difficult to adapt and modify the systems according to the specification of the API gateway.

[0057] In view of the problems that the above-mentioned inventory old systems are not easy to modify and information islands are difficult to break, the embodiments of the present application provide a dynamic multi-mode authentication method, device, equipment and medium of an aggregation gateway, that is, a solution is provided by using Groovy dynamic language as the basis, through three dynamic logic processors of request feature analyzers, authentication adapters and backend service adapters. The solution is different from the traditional way of adapting the gateway by taking the API gateway as the core of each system, and changes to actively adapt the inventory system by taking the API gateway, so as to realize more efficient and flexible system integration and information sharing, thereby breaking the information islands and enabling the old systems to be better modified and optimized. The server can be a stand-alone server or a server cluster.

[0058] The dynamic multi-mode authentication method provided by the embodiments can be used for large-scale heterogeneous system integration and integration of existing inventory systems to provide unified external services.

[0059] Some embodiments of the present application will be described in detail below with reference to the accompanying drawings. In the case of no conflict, the embodiments described below and the features in the embodiments can be combined with each other.

[0060] Please refer to Figure 1 ,Figure 1 is a schematic flowchart of a dynamic multi-mode authentication method of a polymeric gateway provided by the first embodiment of the present application.

[0061] As shown in Figure 1 , the dynamic multi-mode authentication method of the polymeric gateway specifically comprises steps S10 to S30.

[0062] Step S10, upon receiving a calling request, extracting feature parameters in the calling request, and determining a target system sending the calling request based on an analysis rule engine and the feature parameters;

[0063] Step S20, upon authentication of the target system, determining a home backend service of a request interface based on a globally unique address of the request interface in the calling request;

[0064] Step S30, processing request information corresponding to the calling request based on a protocol request corresponding to the home backend service, and forwarding the processed request information to the target system.

[0065] In an embodiment, the polymeric gateway comprises three dynamic logic processors, namely a request feature analyzer, an authentication adapter, and a backend service adapter, and the above dynamic logic processors are implemented using Groovy language. The header, path, query, and body parameters in the calling request are extracted by the request feature analyzer, and the extracted feature parameters are analyzed by a rule engine implemented using Groovy language, and a matching authentication adapter is selected from an authentication adapter library according to the feature parameters of the calling request to authenticate and certify the target system sending the calling request. When the target system is authenticated, the backend service adapter matches the corresponding service according to the globally unique address of the backend service registration interface (i.e. the globally unique external address), loads the processing groovy script corresponding to the service, and forwards and processes the request information corresponding to the calling request based on the protocol request corresponding to the home backend service.

[0066] The dynamic multi-mode authentication and adaptation method provided by the embodiment has the ability of active adaptation access, which can greatly reduce the access difficulty of the existing old system and speed up the project construction period. The design of the three processors, namely the feature analyzer, the authentication adapter, and the backend service adapter, and the implementation of Groovy make the system more flexible and efficient in system interfacing compared with the existing API gateway. Since the request features can be actively analyzed and processing rules can be dynamically added, the gateway not only has the dynamic multi-mode authentication capability, but also can dynamically adapt to the backend service in multi-mode.

[0067] The embodiment discloses a dynamic multi-mode authentication method, device and equipment of an aggregation gateway and a medium. The dynamic multi-mode authentication method comprises the following steps: when a calling request is received, extracting feature parameters in the calling request, and determining a target system sending the calling request based on an analysis rule engine and the feature parameters; when the target system is authenticated, determining a home backend service of a request interface of the calling request based on a globally unique address of the request interface; processing request information corresponding to the calling request based on a protocol request corresponding to the home backend service, and forwarding the processed request information to the target system. Through the above method, the aggregation gateway with multi-mode authentication is set to solve the above problems, the API gateway is taken as the core, the mode of adapting the gateway by other systems is changed to the mode of actively adapting the existing systems by the API gateway, a large number of existing systems can be integrated, the information silos are broken, and the old systems can be better transformed and optimized. Therefore, more efficient and flexible system integration and information sharing are realized.

[0068] Further, as shown in Figure 2 The step S10 comprises the following steps:

[0069] Based on the request feature analyzer, the header, path, query and body parameters in the calling request are extracted as the feature parameters.

[0070] Based on the request feature analyzer, the feature parameters are transmitted into the analysis rule engine for analysis, a system matched with the feature parameters is determined as the target system.

[0071] Further, the step of transmitting the feature parameters into the analysis rule engine for analysis and determining the system matched with the feature parameters as the target system comprises the following steps:

[0072] Based on the analysis rule engine, the request feature analyzer library is matched with the feature parameters, and a system matched with the feature parameters in the request feature analyzer library is determined as the target system.

[0073] Further, the aggregation gateway further comprises an authentication adapter, and before the step of determining the home backend service of the request interface of the calling request based on the globally unique address of the request interface when the target system is authenticated, the aggregation gateway further comprises the following steps:

[0074] Based on the authentication adapter, a corresponding authentication script and signature protocol of the target system are determined in an authentication adapter library.

[0075] Based on the authentication script and the signature protocol, the target system is authenticated by signature.

[0076] Further, the authentication adapter comprises a standard authentication processor and a customized authentication processor, and before determining the authentication script corresponding to the target system and the signature protocol based on the authentication adapter, the method further comprises:

[0077] When the target system is a standard system, the standard authentication processor is obtained as the authentication adapter.

[0078] When the target system is a customized system, the customized authentication processor is obtained as the authentication adapter.

[0079] Further, the aggregation network management further comprises a backend service adapter, and when the target system is authenticated, the method further comprises:

[0080] Based on the backend service adapter, the globally unique address corresponding to the backend service is determined in a backend service adapter library.

[0081] Further, the backend service adapter comprises a standard routing forwarding processor and a customized routing forwarding processor, and before determining the globally unique address corresponding to the backend service based on the backend service adapter in the backend service adapter library, the method further comprises:

[0082] When the system to which the request interface belongs is a standard system, the standard routing forwarding processor is obtained as the backend service adapter.

[0083] When the system to which the request interface belongs is a customized system, the customized routing forwarding processor is obtained as the backend service adapter.

[0084] In an embodiment, the request feature analyzer is a processor for performing feature analysis on a calling request, which extracts the header, path, query and body parameters of the request, and transmits the parameters to a rule engine implemented in Groovy language for analysis. According to the request features, a matching authentication adapter is selected from an authentication adapter library for authentication processing. The authentication adapter includes a standard authentication processor and a customized authentication processor for certain specific client services. The customized authentication processor uses a Groovy language customized adapter that adapts the authentication protocol, and the input parameters are the header, path, query and body parameters of the request extracted by the request feature analyzer, and the output parameter is the authentication result. The backend service adapter includes a standard backend service routing forwarding processor and a customized routing forwarding processor for certain specific backend services. The customized routing forwarding processor is implemented in Groovy language and is required to process the request information for the backend service, such as adding the required exclusive parameter information.

[0085] Specifically, after receiving a request, the aggregation gateway first enters the request feature analyzer. The feature analyzer extracts the header, path, query and body parameters of the request, and then loads the groovy scripts in the request feature analyzer library to poll the request features corresponding to each system. After successful matching, the next step is entered. The authentication adapter loads the corresponding groovy script from the authentication adapter according to the feature matching result of the previous step, performs authentication processing, and returns no access right if the authentication fails. If the authentication is successful, the next step is entered. The backend service adapter matches the corresponding service according to the globally unique external address of the backend service registration interface, loads the corresponding processing groovy script, and performs forwarding processing. For example:

[0086] A certain scenario inventory system Z calls the interface capabilities provided by inventory systems A and B through the aggregation gateway, with the following requirements:

[0087] 1. Inventory system A provides interface capabilities through the aggregation gateway. A requires the aggregation gateway to forward its interface with a jwt in the header as an interface security measure.

[0088] 2. Inventory system B provides interface capabilities through the aggregation gateway. B requires the aggregation gateway to forward its interface after encrypting the request message using a public key.

[0089] 3. Inventory system Z calls the capabilities of inventory systems A and B through the aggregation gateway. Z requires the aggregation gateway to perform signature authentication according to the ask signature protocol of system Z, and the request header will always carry its specific parameters z-app-ak=xxxx, z-app-timestamp=yyyy, and z-app-signature=zzzz.

[0090] For the above needs, the specific process is as follows:

[0091] The aggregation gateway receives the call request, requests the request header, path, query and body parameters, and transmits them to the rule engine implemented by the Groovy language for parameter analysis. When polling the request feature analyzer library, that is, polling the features of each system in the analyzer library, if the header parameters z-app-ak, z-app-timestamp, and z-app-signature are matched at the same time, it is determined that the matching rule of the inventory system Z is met, and the authentication adapter is notified that the call request is for system Z, that is, the target system is system Z.

[0092] The authentication adapter loads the groovy authentication script dedicated to system Z from the authentication adapter library and performs signature authentication according to the aksk signature protocol dedicated to system Z. If the authentication fails, it returns no access right, and if the authentication succeeds, it enters the next step.

[0093] The backend service adapter identifies the interface belonging backend service according to the global unique address of the request. If the interface belongs to system A, the backend service adapter obtains the groovy processing script corresponding to A from the backend service adapter library and adds jwt information in the request header according to the protocol of system A. If the interface belongs to system B, the backend service adapter obtains the groovy processing script corresponding to B from the backend service adapter library and encrypts the request message with a public key according to the protocol of system B.

[0094] In this embodiment, a dynamic multi-mode authentication method of an aggregation gateway is provided. Through the request feature analyzer, the authentication adapter, and the backend service adapter, three dynamic logic processors actively analyze the characteristics of the access system for adaptation and support authentication processing according to the existing protocols of the inventory system, which can greatly reduce the difficulty of interfacing systems. In addition, the three dynamic logic processors of the request feature analyzer, the authentication adapter, and the backend service adapter use the Groovy dynamic language for related logic processing. Groovy dynamic language can be stored in a database or a cache such as Redis, and the processing rules can be modified and increased at any time, the processing is flexible, and the gateway does not need to be restarted.

[0095] In addition, when doing private cloud deployment adaptation, the adapted interface no longer needs a large amount of code development and modification. Only the groovy of the request feature analyzer and the authentication adapter for the specific customer's existing system can realize the interfacing work, greatly shortening the interfacing period and reducing the cost.

[0096] Please refer to Figure 3 , Figure 3The embodiment of the application provides a dynamic multi-mode authentication device of an aggregation gateway, the dynamic multi-mode authentication device comprises:

[0097] A feature parameter analysis module 10 is configured to extract feature parameters in the calling request when the calling request is received, and determine a target system sending the calling request based on an analysis rule engine and the feature parameters;

[0098] A backend service determination module 20 is configured to determine a home backend service of a request interface based on a globally unique address of the request interface in the calling request when the target system is authenticated;

[0099] A request information forwarding module 30 is configured to process request information corresponding to the calling request based on a protocol request corresponding to the home backend service, and forward the processed request information to the target system.

[0100] Further, the aggregation gateway comprises a request feature analyzer, and the feature parameter analysis module 10 comprises:

[0101] A feature parameter extraction unit is configured to extract header, path, query and body parameters in the calling request as the feature parameters based on the request feature analyzer;

[0102] A feature parameter matching unit is configured to transmit the feature parameters into the analysis rule engine for analysis based on the request feature analyzer, and determine a system matched with the feature parameters as the target system.

[0103] Further, the feature parameter matching unit is further configured to:

[0104] Match a request feature analyzer library with the feature parameters based on the analysis rule engine, and determine a system matched with the feature parameters in the request feature analyzer library as the target system.

[0105] Further, the aggregation gateway further comprises an authentication adapter, and the dynamic multi-mode authentication device further comprises:

[0106] A signature protocol determination module is configured to determine an authentication script and a signature protocol corresponding to the target system in an authentication adapter library based on the authentication adapter;

[0107] A system signature authentication module is configured to perform signature authentication on the target system based on the authentication script and the signature protocol.

[0108] Further, the authentication adapter comprises a standard authentication processor and a customized authentication processor, and the dynamic multi-mode authentication device further comprises an authentication processor determination module configured to:

[0109] In the case that the target system is a standard system, the standard authentication processor is acquired as the authentication adapter;

[0110] In the case that the target system is a customized system, the customized authentication processor is acquired as the authentication adapter.

[0111] Further, the backend service determination module 20 is further configured to:

[0112] Based on the backend service adapter, the global unique address corresponding to the home backend service is determined in a backend service adapter library.

[0113] Further, the dynamic multi-mode authentication apparatus further comprises a service adapter determination module, configured to:

[0114] In the case that the system to which the request interface belongs is a standard system, the standard route forwarding processor is acquired as the backend service adapter;

[0115] In the case that the system to which the request interface belongs is a customized system, the customized route forwarding processor is acquired as the backend service adapter.

[0116] It should be noted that, for the convenience and brevity of description, the specific working processes of the apparatus and the modules described above can refer to the corresponding processes in the foregoing method embodiments, which will not be described herein.

[0117] The apparatus described above can be implemented in the form of a computer program, which can run on a computer device as shown in Figure 4 .

[0118] Please refer to Figure 4 , Figure 4 is a structural schematic block diagram of a computer device provided by an embodiment of the present application. The computer device can be a server.

[0119] Please refer to Figure 4 , the computer device comprises a processor, a memory and a network interface connected through a system bus, wherein the memory can comprise a non-volatile storage medium and an internal memory.

[0120] The non-volatile storage medium can store an operating system and a computer program. The computer program comprises program instructions, which, when executed, can cause the processor to execute any kind of dynamic multi-mode authentication method of an aggregation gateway.

[0121] The processor is configured to provide computing and control capabilities to support the operation of the entire computer device.

[0122] The internal memory provides an environment for the running of a computer program in a non-volatile storage medium, which, when executed by the processor, can cause the processor to perform any one of the dynamic multi-mode authentication methods of the aggregation gateway.

[0123] The network interface is used for network communication, such as sending assigned tasks. Those skilled in the art can understand that, Figure 4 The structure shown in the figure is only a block diagram of part of the structure related to the scheme of the present application, and does not constitute a limitation on the computer device to which the scheme of the present application is applied. The specific computer device can include more or fewer components than those shown in the figure, or combine certain components, or have a different arrangement of components.

[0124] It should be understood that the processor can be a central processing unit (CPU), and the processor can also be other general-purpose processors, digital signal processors (DSP), application specific integrated circuits (ASIC), field programmable gate arrays (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. Among them, the general-purpose processor can be a microprocessor or the processor can also be any conventional processor, etc.

[0125] In one embodiment, the processor is configured to run a computer program stored in the memory to perform the following steps:

[0126] Upon receiving the invocation request, extracting feature parameters in the invocation request, and determining a target system sending the invocation request based on an analysis rule engine and the feature parameters;

[0127] Upon authentication of the target system, determining the home backend service of the request interface based on the globally unique address of the request interface in the invocation request;

[0128] Based on the protocol request corresponding to the home backend service, processing the request information corresponding to the invocation request, and forwarding the processed request information to the target system.

[0129] Further, the aggregation gateway includes a request feature analyzer, and the extraction of the feature parameters in the invocation request and the determination of the target system sending the invocation request based on the analysis rule engine and the feature parameters include:

[0130] Based on the request feature analyzer, the header, path, query and body parameters in the calling request are extracted as the feature parameters;

[0131] Based on the request feature analyzer, the feature parameters are transmitted to the analysis rule engine for analysis to determine the system matched with the feature parameters as the target system.

[0132] Further, the transmission of the feature parameters to the analysis rule engine for analysis to determine the system matched with the feature parameters as the target system comprises:

[0133] Based on the analysis rule engine, the request feature analyzer library is matched with the feature parameters, and the system matched with the feature parameters in the request feature analyzer library is determined as the target system.

[0134] Further, the aggregation gateway further comprises an authentication adapter, and before the determination of the home backend service of the request interface based on the globally unique address of the request interface in the calling request when the target system passes the authentication, the aggregation gateway further comprises:

[0135] Based on the authentication adapter, the authentication script and the signature protocol corresponding to the target system are determined in the authentication adapter library.

[0136] Based on the authentication script and the signature protocol, the target system is subjected to signature authentication.

[0137] Further, the authentication adapter comprises a standard authentication processor and a customized authentication processor, and before the determination of the authentication script and the signature protocol corresponding to the target system in the authentication adapter library based on the authentication adapter, the authentication adapter further comprises:

[0138] When the target system is a standard system, the standard authentication processor is acquired as the authentication adapter.

[0139] When the target system is a customized system, the customized authentication processor is acquired as the authentication adapter.

[0140] Further, the aggregation gateway further comprises a backend service adapter, and the determination of the home backend service of the request interface based on the globally unique address of the request interface in the calling request when the target system passes the authentication comprises:

[0141] Based on the backend service adapter, the home backend service corresponding to the globally unique address is determined in the backend service adapter library.

[0142] Further, the backend service adapter comprises a standard routing forwarding processor and a customized routing forwarding processor, and based on the backend service adapter, before determining the home backend service corresponding to the globally unique address in a backend service adapter library, the method comprises the following steps:

[0143] When the system to which the request interface belongs is a standard system, the standard routing forwarding processor is acquired as the backend service adapter;

[0144] When the system to which the request interface belongs is a customized system, the customized routing forwarding processor is acquired as the backend service adapter.

[0145] In an embodiment of the present application, a computer readable storage medium is also provided, which stores a computer program. The computer program comprises program instructions. The processor executes the program instructions to implement any one of the dynamic multi-mode authentication methods of the aggregation gateway provided in the embodiments of the present application.

[0146] The computer readable storage medium can be an internal storage unit of the computer device, such as a hard disk or a memory of the computer device. The computer readable storage medium can also be an external storage device of the computer device, such as a plug-in hard disk, a smart media card (SMC), a secure digital (SD) card, a flash card, etc.

[0147] The above merely provides a specific implementation of the present application, but the protection scope of the present application is not limited to this. Any person skilled in the art can easily think of various equivalent modifications or replacements within the technical scope disclosed in the present application, and these modifications or replacements should be encompassed in the protection scope of the present application. Therefore, the protection scope of the present application should be subject to the protection scope of the claims.

Claims

1. A dynamic multi-mode authentication method for a polymeric gateway, characterized by, The dynamic multi-mode authentication method of the aggregation gateway is applied to the aggregation gateway, and the dynamic multi-mode authentication method of the aggregation gateway comprises the following steps: When receiving the calling request, the header, path, query and body parameters in the calling request are extracted as characteristic parameters by a request characteristic analyzer, and the characteristic parameters are transmitted into an analysis rule engine based on Groovy to determine the target system sending the calling request in real time; When the target system is authenticated, the authentication script and signature protocol corresponding to the target system are determined in the authentication adapter library through the authentication adapter, and after the target system is authenticated based on the authentication script and signature protocol, the globally unique address of the request interface in the calling request is used to determine the home backend service corresponding to the globally unique address in the backend service adapter library through the backend service adapter; The request information corresponding to the calling request is processed based on the protocol request corresponding to the home backend service, and the processed request information is forwarded to the target system.

2. The dynamic multi-modal authentication method of claim 1, wherein, The aggregation gateway comprises a request characteristic analyzer, and the characteristic parameters in the calling request are extracted, and the target system sending the calling request is determined based on the analysis rule engine and the characteristic parameters, which comprises the following steps: The header, path, query and body parameters in the calling request are extracted as the characteristic parameters based on the request characteristic analyzer; The characteristic parameters are transmitted into the analysis rule engine for analysis based on the request characteristic analyzer, and the system matched with the characteristic parameters is determined as the target system.

3. The dynamic multi-modal authentication method of claim 2, wherein, The characteristic parameters are transmitted into the analysis rule engine for analysis based on the request characteristic analyzer, and the system matched with the characteristic parameters is determined as the target system, which comprises the following steps: The request characteristic analyzer library is matched with the characteristic parameters based on the analysis rule engine, and the system matched with the characteristic parameters in the request characteristic analyzer library is determined as the target system.

4. The dynamic multi-modal authentication method of claim 1, wherein, The aggregation gateway further comprises an authentication adapter, and before the home backend service of the request interface is determined based on the globally unique address of the request interface in the calling request when the target system is authenticated, the following steps are further included: The authentication script and signature protocol corresponding to the target system are determined in the authentication adapter library based on the authentication adapter; The target system is authenticated based on the authentication script and the signature protocol.

5. The dynamic multi-modal authentication method of claim 4, wherein, The authentication adapter comprises a standard authentication processor and a customized authentication processor, and before the authentication script and signature protocol corresponding to the target system are determined in the authentication adapter library based on the authentication adapter, the following steps are further included: When the target system is a standard system, the standard authentication processor is acquired as the authentication adapter; When the target system is a customized system, the customized authentication processor is acquired as the authentication adapter.

6. The dynamic multi-modal authentication method of any one of claims 1-5, wherein, The aggregation gateway further The backend service adapter comprises a standard routing forwarding processor and a customized routing forwarding processor, and before determining the home backend service corresponding to the global unique address based on the backend service adapter in the backend service adapter library, the method comprises: When the system to which the request interface belongs is a standard system, the standard routing forwarding processor is acquired as the backend service adapter; 7. The dynamic multi-modal authentication method of claim 6, wherein, When the system to which the request interface belongs is a customized system, the customized routing forwarding processor is acquired as the backend service adapter. The dynamic multi-mode authentication device comprises: A feature parameter analysis module is configured to, when receiving a calling request, extract header, path, query and body parameters in the calling request as feature parameters through a request feature analyzer, and transmit the feature parameters into an analysis rule engine implemented based on Groovy to determine a target system sending the calling request in real time; 8. A dynamic multi-mode authentication apparatus of a polymerization gateway, characterized by, A backend service determination module is configured to, when the target system is authenticated, determine a corresponding authentication script and a signature protocol of the target system in an authentication adapter library through an authentication adapter, and after signature authentication of the target system based on the authentication script and the signature protocol, determine a home backend service corresponding to a global unique address of a request interface in the calling request in a backend service adapter library through a backend service adapter; A request information forwarding module is configured to process request information corresponding to the calling request based on a protocol request corresponding to the home backend service, and forward the processed request information to the target system. The computer device comprises a memory and a processor; The memory is configured to store a computer program; 9. A computer device, comprising: The processor is configured to execute the computer program and implement the dynamic multi-mode authentication method of the aggregation gateway as claimed in any one of claims 1 to 7 when executing the computer program. The computer readable storage medium stores a computer program, and the computer program is executed by the processor to enable the processor to implement the dynamic multi-mode authentication method of the aggregation gateway as claimed in any one of claims 1 to 7. ​ 10. A computer-readable storage medium, characterized in that, ​

Images