A database password management method, device, equipment and medium based on Nacos

Abstract

The present application discloses a database password management method, apparatus, device and medium based on Nacos. The method comprises: creating a data set for storing database passwords, and determining that the client mode corresponding to the data set is observer mode; receiving authentication information sent by a client that needs to store the database password, and generating a database password corresponding to the client based on the authentication information; establishing a mapping relationship between the database password and the authentication information, and storing the database password and the mapping relationship in the data set; when a specified client needs to obtain its corresponding database password, obtaining the specified authentication information corresponding to the specified client, filtering out the specified database password that matches the specified client from the data set based on the specified authentication information and the mapping relationship, and returning the specified database password to the specified client.

Description

Technical Field

[0001] The present application relates to the field of data security technology, and in particular to a database password management method, apparatus, device, and medium based on Nacos. Background Art

[0002] With the continuous development of information technology, databases, as important tools for storing and managing data, are widely used in various fields, and their security is receiving increasing attention. Database password management is a key step in ensuring data security. However, traditional database password management methods have many problems, such as password leakage and untimely updates, which pose serious threats to data security. Therefore, the development of a database password management platform and method to achieve secure storage, dynamic update, and management of database passwords is of great practical significance. Summary of the Invention

[0003] To solve the above problems, this application proposes a database password management method based on Nacos, which is applied to the preset Nacos platform, including:

[0004] Create a data set for storing database passwords, and determine that the client mode corresponding to the data set is observer mode;

[0005] Receive authentication information sent by a client that needs to store a database password, and generate a database password corresponding to the client according to the authentication information;

[0006] Constructing a mapping relationship between the database password and the identity authentication information, and storing the database password and the mapping relationship in the data set;

[0007] In the case where a designated client needs to obtain its corresponding database password, the designated identity authentication information corresponding to the designated client is obtained, and based on the designated identity authentication information and the mapping relationship, the designated database password that matches the designated client is filtered out from the data set, and the designated database password is returned to the designated client.

[0008] In one implementation of the present application, after storing the database password and the mapping relationship in the data set, the method further includes:

[0009] According to a preset time interval or trigger condition, the database password is updated to obtain an updated database password, and a corresponding notification message is sent to a connected client, so that the client processes the notification message based on the observer mode, and re-acquires the updated database password from the Nacos platform according to the processed notification message.

[0010] In one implementation of the present application, after obtaining the specified identity authentication information corresponding to the specified client, the method further includes:

[0011] Obtaining an access control policy corresponding to the data set, and determining, based on the access control policy, whether the designated client has access rights corresponding to the data set;

[0012] If yes, the designated client is allowed to access the data set and the designated database password corresponding to the designated client is obtained.

[0013] In one implementation of the present application, the method further includes:

[0014] Determining a plurality of operation nodes corresponding to the database password, and generating corresponding operation logs for the plurality of operation nodes;

[0015] Perform security audit and troubleshooting on the data set based on the operation log.

[0016] In one implementation of the present application, security auditing and troubleshooting of the data set are performed based on the operation log, specifically including:

[0017] Verifying the database password stored in the data set based on the operation log to determine the integrity and security of the database password;

[0018] Determine whether there are any abnormal operations in each operation node of the data set, and if so, issue an early warning;

[0019] Vulnerability scanning and security assessment are performed at preset monitoring intervals to determine whether the Nacos platform has any faults.

[0020] In one implementation of the present application, after storing the database password and the mapping relationship in the data set, the method further includes:

[0021] The data set is backed up according to a preset backup cycle to obtain a backup data set copy, so that when a failure occurs on the Nacos platform, the originally stored database password can be restored through the data set copy.

[0022] In one implementation of the present application, the operation node includes generation, storage, update and retrieval.

[0023] The embodiment of the present application provides a Nacos-based database password management device, which is applied to a preset Nacos platform. The device includes:

[0024] A creation module is used to create a data set for storing database passwords, and determine that the client mode corresponding to the data set is observer mode;

[0025] A generating module, configured to receive authentication information sent by a client that needs to store a database password, and generate a database password corresponding to the client according to the authentication information;

[0026] A storage module, configured to construct a mapping relationship between the database password and the identity authentication information, and store the database password and the mapping relationship in the data set;

[0027] The filtering module is used to obtain the specified identity authentication information corresponding to the specified client when the specified client needs to obtain its corresponding database password; based on the specified identity authentication information and the mapping relationship, filter out the specified database password that matches the specified client from the data set, and return the specified database password to the specified client.

[0028] The present invention provides a Nacos-based database password management device, which is applied to a preset Nacos platform. The device includes:

[0029] at least one processor; and,

[0030] a memory communicatively connected to the at least one processor; wherein,

[0031] The memory stores instructions executable by the at least one processor, the instructions being executed by the at least one processor to enable the at least one processor to:

[0032] Create a data set for storing database passwords, and determine that the client mode corresponding to the data set is observer mode;

[0033] Receive authentication information sent by a client that needs to store a database password, and generate a database password corresponding to the client according to the authentication information;

[0034] Constructing a mapping relationship between the database password and the identity authentication information, and storing the database password and the mapping relationship in the data set;

[0035] In the case where a designated client needs to obtain its corresponding database password, the designated identity authentication information corresponding to the designated client is obtained, and based on the designated identity authentication information and the mapping relationship, the designated database password that matches the designated client is filtered out from the data set, and the designated database password is returned to the designated client.

[0036] An embodiment of the present application provides a non-volatile computer storage medium storing computer-executable instructions, wherein the computer-executable instructions are configured to:

[0037] Create a data set for storing database passwords, and determine that the client mode corresponding to the data set is observer mode;

[0038] Receive authentication information sent by a client that needs to store a database password, and generate a database password corresponding to the client according to the authentication information;

[0039] Constructing a mapping relationship between the database password and the identity authentication information, and storing the database password and the mapping relationship in the data set;

[0040] In the case where a designated client needs to obtain its corresponding database password, the designated identity authentication information corresponding to the designated client is obtained, and based on the designated identity authentication information and the mapping relationship, the designated database password that matches the designated client is filtered out from the data set, and the designated database password is returned to the designated client.

[0041] The database password management method based on Nacos proposed in this application can bring the following beneficial effects:

[0042] Using the Nacos platform as the infrastructure improves the security, reliability, and usability of database password management without requiring large-scale modifications to existing systems, resulting in better scalability and compatibility. By storing database passwords in a dedicated dataset, generating passwords based on authentication information, and establishing a mapping relationship, database password security can be improved. Using the observer pattern to manage the relationship between client and database passwords makes it easier to add new clients or change passwords. This approach also makes it easier to expand to more database password management needs to adapt to different scenarios and scales. BRIEF DESCRIPTION OF THE DRAWINGS

[0043] The drawings described herein are used to provide a further understanding of the present application and constitute a part of the present application. The illustrative embodiments of the present application and their descriptions are used to explain the present application and do not constitute an improper limitation on the present application. In the drawings:

[0044] Figure 1 A flowchart of a Nacos-based database password management method provided in an embodiment of the present application;

[0045] Figure 2 A schematic diagram of the structure of a database password management device based on Nacos provided in an embodiment of the present application;

[0046] Figure 3 A schematic diagram of the structure of a Nacos-based database password management device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0047] To make the purpose, technical solutions, and advantages of this application more clear, the technical solutions of this application will be clearly and completely described below in conjunction with the specific embodiments of this application and the corresponding drawings. Obviously, the embodiments described are only part of the embodiments of this application, not all of them. Based on the embodiments in this application, all other embodiments obtained by ordinary technicians in this field without making creative efforts are within the scope of protection of this application.

[0048] The following describes in detail the technical solutions provided by various embodiments of the present application in conjunction with the accompanying drawings.

[0049] like Figure 1 As shown, the embodiment of the present application provides a Nacos-based database password management method, which is applied to a preset Nacos platform, including:

[0050] S101: Create a data set for storing database passwords, and determine that the client mode corresponding to the data set is observer mode.

[0051] The Nacos platform is an open-source dynamic service discovery, configuration management, and service management platform that provides powerful support for database password generation, storage, update, logging, security auditing, and fault recovery. Based on this, the embodiments of this application implement secure storage, dynamic update, and management of database passwords based on the Nacos platform.

[0052] The Nacos platform provides password storage, update, and management services to clients communicating with it. Therefore, before a client can store its database password on the Nacos platform, it must establish a communication connection with the Nacos platform. The Nacos platform has built-in application and data processing scripts that allow you to configure the client's address and port. Once configured, clients connected to the Nacos platform can dynamically obtain and update database data by calling the relevant API interface.

[0053] The Nacos platform creates a dataset for storing database passwords and sets the client mode corresponding to the dataset to observer mode. This allows clients to observe whether the database password in the dataset has been updated in real time through observer mode, ensuring the real-time nature of the database password. The structure of the dataset is designed based on actual needs and can include authentication information and other related attributes. When creating a dataset, to ensure the security of the database password, an access control policy and encryption policy corresponding to the dataset must also be generated so that only clients with access rights can obtain the database password from the dataset, preventing the leakage of the database password.

[0054] S102: Receive identity authentication information sent by a client that needs to store a database password, and generate a database password corresponding to the client according to the identity authentication information.

[0055] The database password corresponding to each client is unique. The Nacos platform not only stores the database password but also assigns it to each client. That is, after establishing a communication connection with the Nacos platform, the client needs to send its own authentication information, such as username and email address, to the Nacos platform. After receiving this authentication information, the Nacos platform can generate the database password corresponding to the client using a random number generation algorithm or other security-enhancing algorithms. The database password should meet actual security requirements, including length, complexity, and other requirements.

[0056] S103: Construct a mapping relationship between the database password and the identity authentication information, and store the database password and the mapping relationship in a data set.

[0057] After the Nacos platform generates the database password corresponding to the client, it needs to build a mapping relationship between the database password and the authentication information, and store the database password and mapping relationship in the data set to achieve secure storage of the database.

[0058] S104: When the designated client needs to obtain its corresponding database password, the designated identity authentication information corresponding to the designated client is obtained, and according to the designated identity authentication information and the mapping relationship, the designated database password that matches the designated client is screened out from the data set, and the designated database password is returned to the designated client.

[0059] When an application in a designated client needs to obtain a database password, it must first verify the user's permissions and identity information before retrieving the database password to ensure that only authorized clients can obtain the database password, preventing unauthorized access and leakage. After obtaining the specified authentication information corresponding to the designated client, the Nacos platform must obtain the access control policy corresponding to the dataset. Then, based on the access control policy and the specified authentication information, it verifies the access rights corresponding to the designated client to determine whether the designated client has the access rights corresponding to the dataset. If so, the designated client is allowed to access the dataset and obtain the designated database password corresponding to the designated client. When retrieving the database password, the Nacos platform can filter out the designated database password that matches the designated client from the dataset based on the specified authentication information and mapping relationship, and return the designated database password to the designated client.

[0060] In one embodiment, to ensure the security and availability of the database password, the Nacos platform needs to regularly update the stored database password according to a preset time interval or trigger condition. For example, the trigger condition is that the client completes a database password retrieval or the client sends an update instruction. When the above trigger condition is met or the predetermined update time is reached, the Nacos platform will update the database password and obtain the updated database password. At this time, it is necessary to send a corresponding notification message to the connected client. In this way, the client can process the notification message based on the observer mode, and according to the processed notification message, it will know that the current Nacos platform has updated the database password and re-acquire the updated database password from the Nacos platform.

[0061] In one embodiment, the Nacos platform can monitor log data for security audits and troubleshooting, thereby identifying abnormal operations and potential security threats within the platform and ensuring password security. It should be noted that database passwords correspond to multiple operation nodes, including generation, storage, update, and retrieval. Each operation node performs a corresponding data operation on the database password. Accordingly, the Nacos platform records the data operation information corresponding to each operation node and generates a corresponding operation log. By invoking the operation log, security audits and troubleshooting of the data set can be achieved.

[0062] Specifically, based on the operation log, the database password stored in the data set can be verified to determine the integrity and security of the database password. Regular security audits can ensure the security of the database password and facilitate the timely detection and treatment of potential security threats. In addition, based on the operation log, it is also possible to promptly detect whether there are any abnormal operations in the data set at each operation node, such as malicious operations, unexpected interruptions, erroneous data operations, etc. If an abnormal operation is detected in the data set, it means that the database password stored in the current data set may be at risk of leakage. In this case, it is necessary to promptly issue an early warning and take appropriate measures to ensure data security. In addition, the Nacos platform may also have certain problems during operation, such as system failures. Therefore, it is also necessary to perform vulnerability scans and security assessments according to the preset monitoring intervals to determine whether the Nacos platform has any faults, thereby ensuring the security and stability of the Nacos platform.

[0063] In the event of a Nacos platform failure, the Nacos platform's data backup and recovery features enable rapid recovery of database passwords and related data, ensuring business continuity and stability. It's important to note that the Nacos platform has automatic backup capabilities. After storing the database passwords and mapping relationships in a dataset, the dataset is backed up according to a pre-set backup cycle to create a backup copy. This allows the original stored database password to be restored from the dataset copy in the event of a Nacos platform failure, reducing the risk of data loss. In addition to the aforementioned backup and recovery methods, other recovery technologies, such as snapshot recovery and mirror replication, can also be used to improve data recovery efficiency and reliability.

[0064] The above are embodiments of the method proposed in this application. Based on the same idea, some embodiments of this application also provide devices, equipment and non-volatile computer storage media corresponding to the above method.

[0065] Figure 2 This is a schematic diagram of the structure of a database password management device based on Nacos provided in an embodiment of the present application. Figure 2 As shown, the device includes:

[0066] A creation module 201 is used to create a data set for storing database passwords and determine that the client mode corresponding to the data set is observer mode;

[0067] The generating module 202 is used to receive the authentication information sent by the client that needs to store the database password, and generate the database password corresponding to the client according to the authentication information;

[0068] The storage module 203 is used to construct a mapping relationship between the database password and the authentication information, and store the database password and the mapping relationship in a data set;

[0069] The screening module 204 is used to obtain the specified authentication information corresponding to the specified client when the specified client needs to obtain its corresponding database password, screen out the specified database password that matches the specified client from the data set based on the specified authentication information and the mapping relationship, and return the specified database password to the specified client.

[0070] Figure 3 This is a schematic diagram of the structure of a database password management device based on Nacos provided in an embodiment of the present application. Figure 3 Shown, including:

[0071] at least one processor; and,

[0072] at least one processor communicatively connected to a memory; wherein,

[0073] The memory stores instructions executable by at least one processor, the instructions being executed by the at least one processor to enable the at least one processor to:

[0074] Create a data set for storing database passwords and set the client mode corresponding to the data set to observer mode.

[0075] Receive authentication information sent by the client that needs to store the database password, and generate the database password corresponding to the client based on the authentication information;

[0076] Build a mapping relationship between the database password and authentication information, and store the database password and mapping relationship in the data set;

[0077] When a specified client needs to obtain its corresponding database password, the specified authentication information corresponding to the specified client is obtained, and according to the specified authentication information and the mapping relationship, the specified database password that matches the specified client is filtered out from the data set, and the specified database password is returned to the specified client.

[0078] An embodiment of the present application provides a non-volatile computer storage medium storing computer-executable instructions, wherein the computer-executable instructions are configured as follows:

[0079] Create a data set for storing database passwords and set the client mode corresponding to the data set to observer mode.

[0080] Receive authentication information sent by the client that needs to store the database password, and generate the database password corresponding to the client based on the authentication information;

[0081] Build a mapping relationship between the database password and authentication information, and store the database password and mapping relationship in the data set;

[0082] When a specified client needs to obtain its corresponding database password, the specified authentication information corresponding to the specified client is obtained, and according to the specified authentication information and the mapping relationship, the specified database password that matches the specified client is filtered out from the data set, and the specified database password is returned to the specified client.

[0083] The various embodiments in this application are described in a progressive manner. Similar portions between the various embodiments can be referred to in conjunction with each other. Each embodiment focuses on the differences between the other embodiments. In particular, the device and medium embodiments are generally similar to the method embodiments, so their descriptions are relatively simple. For relevant portions, refer to the descriptions of the method embodiments.

[0084] The devices and media provided in the embodiments of the present application correspond one-to-one to the methods. Therefore, the devices and media also have similar beneficial technical effects to their corresponding methods. Since the beneficial technical effects of the methods have been described in detail above, the beneficial technical effects of the devices and media will not be repeated here.

[0085] Those skilled in the art will appreciate that the embodiments of the present application can be provided as methods, systems, or computer program products. Therefore, the present application can adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment in combination with software and hardware. Moreover, the present application can adopt the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to magnetic disk storage, CD-ROM, optical storage, etc.) that contain computer-usable program code.

[0086] The present application is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 a process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0087] These computer program instructions may also be stored in a computer readable memory that can direct a computer or other programmable data processing device to work in a specific manner, so that the instructions stored in the computer readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 a process or multiple processes and / or boxes Figure 1 The function specified in one or more boxes.

[0088] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operational steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing the instructions executed on the computer or other programmable device for implementing the process. Figure 1 a process or multiple processes and / or boxes Figure 1 A step that specifies a function in one or more boxes.

[0089] In a typical configuration, a computing device includes one or more processors (CPUs), input / output interfaces, network interfaces, and memory.

[0090] Memory may include non-permanent storage in a computer-readable medium, random access memory (RAM) and / or non-volatile memory in the form of read-only memory (ROM) or flash RAM. Memory is an example of a computer-readable medium.

[0091] Computer-readable media includes permanent and non-permanent, removable and non-removable media that can be implemented by any method or technology to store information. The information can be computer-readable instructions, data structures, program modules or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, compact disc read-only memory (CD-ROM), digital versatile disc (DVD) or other optical storage, magnetic cassettes, magnetic tape, magnetic disk storage or other magnetic storage devices or any other non-transmission media that can be used to store information that can be accessed by a computing device. As defined herein, computer-readable media does not include transitory computer-readable media (transitory media), such as modulated data signals and carrier waves.

[0092] It should also be noted that the terms "comprises," "includes," or any other variations thereof are intended to encompass non-exclusive inclusion, such that a process, method, commodity, or apparatus that includes a series of elements includes not only those elements but also other elements not explicitly listed, or includes elements inherent to such process, method, commodity, or apparatus. In the absence of further limitations, an element defined by the phrase "comprises a ..." does not exclude the presence of other identical elements in the process, method, commodity, or apparatus that includes the element.

[0093] The foregoing is merely an embodiment of the present application and is not intended to limit the present application. For those skilled in the art, the present application may have various changes and variations. Any modifications, equivalent replacements, improvements, etc. made within the spirit and principles of the present application should all be included within the scope of the claims of the present application.

Claims

1. A database password management method based on Nacos, characterized in that: Applied to a preset Nacos platform, the method includes: Create a data set for storing database passwords, and determine that the client mode corresponding to the data set is observer mode; Receive authentication information sent by a client that needs to store a database password, and generate a database password corresponding to the client according to the authentication information; Constructing a mapping relationship between the database password and the identity authentication information, and storing the database password and the mapping relationship in the data set; When a designated client needs to obtain its corresponding database password, obtaining designated identity authentication information corresponding to the designated client, screening out a designated database password matching the designated client from the data set based on the designated identity authentication information and the mapping relationship, and returning the designated database password to the designated client; After storing the database password and the mapping relationship in the data set, the method further includes: According to a preset time interval or trigger condition, the database password is updated to obtain an updated database password, and a corresponding notification message is sent to a connected client, so that the client processes the notification message based on the observer mode and re-acquires the updated database password from the Nacos platform according to the processed notification message; After obtaining the specified identity authentication information corresponding to the specified client, the method further includes: Obtaining an access control policy corresponding to the data set, and determining, based on the access control policy, whether the designated client has access rights corresponding to the data set; If yes, the designated client is allowed to access the data set and the designated database password corresponding to the designated client is obtained.

2. A database password management method based on Nacos according to claim 1, characterized in that: The method further comprises: Determining a plurality of operation nodes corresponding to the database password, and generating corresponding operation logs for the plurality of operation nodes; Perform security audit and troubleshooting on the data set based on the operation log.

3. A database password management method based on Nacos according to claim 2, characterized in that: Conduct security audits and troubleshooting on the dataset based on the operation logs, specifically including: Verifying the database password stored in the data set based on the operation log to determine the integrity and security of the database password; Determine whether there are any abnormal operations in each operation node of the data set, and if so, issue an early warning; Vulnerability scanning and security assessment are performed at preset monitoring intervals to determine whether the Nacos platform has any faults.

4. The database password management method based on Nacos according to claim 1, characterized in that: After storing the database password and the mapping relationship in the data set, the method further includes: The data set is backed up according to a preset backup cycle to obtain a backup data set copy, so that when a failure occurs on the Nacos platform, the originally stored database password can be restored through the data set copy.

5. The Nacos-based database password management method according to claim 2, characterized in that: The operation nodes include generation, storage, update and retrieval.

6. A database password management device based on Nacos, characterized in that: Applied to the preset Nacos platform, the device includes: A creation module is used to create a data set for storing database passwords, and determine that the client mode corresponding to the data set is observer mode; A generating module, configured to receive authentication information sent by a client that needs to store a database password, and generate a database password corresponding to the client according to the authentication information; A storage module, configured to construct a mapping relationship between the database password and the identity authentication information, and store the database password and the mapping relationship in the data set; a screening module configured to, when a designated client needs to obtain its corresponding database password, obtain designated identity authentication information corresponding to the designated client, screen out a designated database password that matches the designated client from the data set based on the designated identity authentication information and the mapping relationship, and return the designated database password to the designated client; After storing the database password and the mapping relationship in the data set, the method further includes: According to a preset time interval or trigger condition, the database password is updated to obtain an updated database password, and a corresponding notification message is sent to a connected client, so that the client processes the notification message based on the observer mode and re-acquires the updated database password from the Nacos platform according to the processed notification message; After obtaining the specified identity authentication information corresponding to the specified client, the method further includes: Obtaining an access control policy corresponding to the data set, and determining, based on the access control policy, whether the designated client has access rights corresponding to the data set; If yes, the designated client is allowed to access the data set and the designated database password corresponding to the designated client is obtained.

7. A database password management device based on Nacos, characterized in that: Applied to the preset Nacos platform, the device includes: at least one processor; and, a memory communicatively connected to the at least one processor; wherein, The memory stores instructions executable by the at least one processor, the instructions being executed by the at least one processor to enable the at least one processor to: Create a data set for storing database passwords, and determine that the client mode corresponding to the data set is observer mode; Receive authentication information sent by a client that needs to store a database password, and generate a database password corresponding to the client according to the authentication information; Constructing a mapping relationship between the database password and the identity authentication information, and storing the database password and the mapping relationship in the data set; When a designated client needs to obtain its corresponding database password, obtaining designated identity authentication information corresponding to the designated client, screening out a designated database password matching the designated client from the data set based on the designated identity authentication information and the mapping relationship, and returning the designated database password to the designated client; After storing the database password and the mapping relationship in the data set, the method further includes: According to a preset time interval or trigger condition, the database password is updated to obtain an updated database password, and a corresponding notification message is sent to a connected client, so that the client processes the notification message based on the observer mode and re-acquires the updated database password from the Nacos platform according to the processed notification message; After obtaining the specified identity authentication information corresponding to the specified client, the method further includes: Obtaining an access control policy corresponding to the data set, and determining, based on the access control policy, whether the designated client has access rights corresponding to the data set; If yes, the designated client is allowed to access the data set and the designated database password corresponding to the designated client is obtained.

8. A non-volatile computer storage medium storing computer-executable instructions, characterized in that: The computer executable instructions are configured to: Create a data set for storing database passwords, and determine that the client mode corresponding to the data set is observer mode; Receive authentication information sent by a client that needs to store a database password, and generate a database password corresponding to the client according to the authentication information; Constructing a mapping relationship between the database password and the identity authentication information, and storing the database password and the mapping relationship in the data set; When a designated client needs to obtain its corresponding database password, obtaining designated identity authentication information corresponding to the designated client, screening out a designated database password matching the designated client from the data set based on the designated identity authentication information and the mapping relationship, and returning the designated database password to the designated client; After storing the database password and the mapping relationship in the data set, the method further includes: According to a preset time interval or trigger condition, the database password is updated to obtain an updated database password, and a corresponding notification message is sent to the connected client, so that the client processes the notification message based on the observer mode and re-acquires the updated database password from the Nacos platform according to the processed notification message; After obtaining the specified identity authentication information corresponding to the specified client, the method further includes: Obtaining an access control policy corresponding to the data set, and determining, based on the access control policy, whether the designated client has access rights corresponding to the data set; If yes, the designated client is allowed to access the data set and the designated database password corresponding to the designated client is obtained.

Images