File transmission method and device and terminal equipment

Abstract

The invention provides a file transmission method and device and terminal equipment, and the method comprises the steps: monitoring service calling interfaces of a plurality of service systems, judging whether a service request is received or not, and determining a service processing type corresponding to the service request; performing unified service processing on at least one service request sent by a service server based on the type; comprising the following steps: performing user authentication and authentication on a plurality of business systems by using a basic support service, managing and controlling the user authority of each business system based on the basic support service, and managing and controlling the service authority of the plurality of business systems based on an information access security service; the circulation of the internal file of the integrated system is controlled based on the user permission and the service permission, and it is ensured that the internal file is only encrypted or decrypted in the service system with the user permission and the service permission. In the scheme of the invention, the file is safely transmitted only in the service systems with mutual authority, so that the file content leakage is avoided, and the file interaction management and control of the multi-service system is solved.

Description

Technical Field

[0001] The present application relates to the field of data security technology, and in particular to a file transmission method, device and terminal equipment. Background Art

[0002] System Integration usually refers to the business of combining software, hardware and communication technologies to solve information processing problems for users. The separate parts involved in the integration were originally independent systems. After integration, the various parts of the whole can work organically and harmoniously with each other to give full play to the overall benefits and achieve the goal of overall optimization.

[0003] In many application scenarios, it is often necessary to use the above-mentioned system integration method to combine multiple different systems into a powerful integrated system for user use. The various separate parts of the integrated system, i.e., multiple systems, often need to transfer some internal files from the integrated system to each other. For the sake of file security management, it is necessary to perform security management on the file interaction between a system in the integrated system and other systems, as well as the files themselves, to prevent the leakage of file contents when files are accidentally leaked. Summary of the invention

[0004] The present application shows a file transmission method, apparatus and terminal device to solve the problem of secure file transmission within an integrated system.

[0005] In a first aspect, the present application shows a file transfer method, which is applied to a management server in an integrated system, wherein a basic support service and an information access security service are deployed on the management server, and the integrated system further includes a plurality of business servers, wherein a business system is deployed on the business server, and the method includes:

[0006] The management server monitors the service call interfaces of multiple service systems on multiple service servers;

[0007] Based on the monitoring results of the service call interfaces of each service system, determining whether the management server has received service requests sent by the service systems on the service servers;

[0008] Determine, according to the business request, a business processing type corresponding to the business request;

[0009] In response to at least one business request sent by one or more of the business servers, the management server performs unified business processing on the at least one business request sent by the multiple business servers based on the business processing type; wherein the business processing type includes: the management server performs unified user authentication and authorization on the multiple business systems using the basic support service, controls the user rights of the various business systems based on the basic support service, and controls the service rights of the multiple business systems based on the information access security service;

[0010] Based on the user authority and the service authority, the circulation of the internal files of the integrated system is controlled to ensure that the internal files are only encrypted or decrypted in the business system with the user authority and the service authority.

[0011] Optionally, the step of determining, according to the service request, a service processing type corresponding to the service request includes:

[0012] In a case where the monitoring result is that the login interface of the basic support service is called, determining that the business processing type of the business request is user login authentication;

[0013] Accordingly, in response to at least one service request sent by one or more of the service servers, the step of the management server performing unified service processing on the at least one service request sent by the multiple service servers based on the service processing type includes:

[0014] The management server monitors that the business system logs into the integrated system by calling the login interface of the basic support service. The basic support service performs a security check on the logged-in user and allows the user to log in to the integrated system and use it normally after the security check passes.

[0015] Optionally, the step of the basic support service performing a security check on the logged-in user and allowing the user to log in to the integrated system and use it normally after the security check passes includes:

[0016] When the first business system logs in to the integrated system, it calls the login interface of the basic support service, and queries whether the target user exists in the database based on the user name of the target user. If the query result is that the target user does not exist, an error code is returned. If the query result is that the target user exists, it further determines whether the current user status of the target user is locked. If the determination result is locked, an error code is returned. If the determination result is unlocked, it further verifies whether the password is correct. If the verification password is wrong, the number of password attempts is reduced by one until the number of password attempts reaches zero and the target user is locked. If the verification password is correct, it returns a successful login. After receiving the success, the first business system successfully enters the integrated system.

[0017] Optionally, the step of determining, according to the service request, a service processing type corresponding to the service request includes:

[0018] When the monitoring result is that the authentication interface of the basic support service is called, determining that the service processing type of the service request is user authority acquisition;

[0019] Accordingly, in response to at least one service request sent by one or more of the service servers, the step of the management server performing unified service processing on the at least one service request sent by the multiple service servers based on the service processing type includes:

[0020] After the management server detects that the business system has successfully logged in, it calls the authentication interface of the basic support service. The basic support service queries the system permissions owned by the logged-in user according to the role of the logged-in user. The basic support service encapsulates and returns the results to each business system on the business server, so that each business system can obtain the specific functions allowed to the user according to the content of the system permissions.

[0021] Optionally, the step of determining, according to the service request, a service processing type corresponding to the service request includes:

[0022] In a case where the monitoring result is that the registration interface of the information access security service is called, determining that the service processing type of the service request is service registration;

[0023] Accordingly, in response to at least one service request sent by one or more of the service servers, the step of the management server performing unified service processing on the at least one service request sent by the multiple service servers based on the service processing type includes:

[0024] The management server monitors that the business system calls the registration interface of the information access security service, and the information access security service receives the system name and system unique identification code sent by the business server. The information access security service registers the business system to the service management of the management server based on the system name and the system unique identification code, and the administrator sets permissions for the business system to implement permission control over the business system.

[0025] Optionally, the step of determining, according to the service request, a service processing type corresponding to the service request includes:

[0026] In a case where the monitoring result is that the encryption and decryption interface of the information access security service is called, determining that the service processing type of the service request is file encryption and decryption;

[0027] Accordingly, in response to at least one service request sent by one or more of the service servers, the step of the management server performing unified service processing on the at least one service request sent by the multiple service servers based on the service processing type includes:

[0028] When the first business system needs to use the encrypted file of the second business system, the first business system transmits the file path, file encryption method and system unique identification code of the target file through the file encryption and decryption interface of the information access security service. The information access security service queries whether the first business system has the decryption authority to decrypt the encrypted file of the second business system based on the system unique identification code of the first business system. When the query result is that the system has the decryption authority, the management server of the integrated system decrypts the target file and sends the decrypted file path to the first business system.

[0029] In a second aspect, the present application shows a file transmission device, which is applied to a management server in an integrated system, wherein a basic support service and an information access security service are deployed on the management server, and the integrated system further includes a plurality of business servers, wherein a business system is deployed on the business server, and the device includes:

[0030] A monitoring module, used for the management server to monitor the service call interfaces of multiple service systems on multiple service servers;

[0031] A service request receiving module, used to determine whether the management server has received service requests sent by the service systems on the service servers based on the monitoring results of the service call interfaces of the various service systems;

[0032] A service type determination module, used to determine the service processing type corresponding to the service request according to the service request;

[0033] A business processing module, configured to respond to at least one business request sent by one or more of the business servers, and the management server performs unified business processing on the at least one business request sent by the multiple business servers based on the business processing type; wherein the business processing type includes: the management server performs unified user authentication and authorization on the multiple business systems using the basic support service, controls the user rights of the various business systems based on the basic support service, and controls the service rights of the multiple business systems based on the information access security service;

[0034] The file control module is used to control the flow of internal files of the integrated system based on the user authority and the service authority to ensure that the internal files are encrypted or decrypted only in the business system with user authority and service authority.

[0035] In a third aspect, the present application shows a terminal device, comprising: a processor, a memory, and a computer program stored in the memory and executable on the processor, wherein the computer program implements the method described in any of the above aspects when executed by the processor.

[0036] In a fourth aspect, the present application illustrates a non-temporary computer-readable storage medium, which, when instructions in the storage medium are executed by a processor of a terminal device, enables the terminal device to execute a method as described in any of the above aspects.

[0037] In a fifth aspect, the present application illustrates a computer program product. When instructions in the computer program product are executed by a processor of a terminal device, the terminal device is enabled to execute the method described in any of the above aspects.

[0038] The technical solution provided by this application may have the following beneficial effects:

[0039] The solution provided by the present application improves the architecture of the integrated system when solving the problem of integrating multiple systems, that is, a management server that controls the multiple systems is set up to perform unified business processing, including unified authentication, unified authorization, etc., so that files can only be securely transmitted among systems that have mutual permissions. During the transmission process, the files themselves are encrypted to further prevent the leakage of file contents due to accidental outflow. It can be seen that the present application solves the file interaction control of multiple systems, and the user authority control and service authority control between services. BRIEF DESCRIPTION OF THE DRAWINGS

[0040] Figure 1 A flowchart of the file transmission method provided by this application.

[0041] Figure 2 A flow chart of the main data flow in the integrated system provided in this application.

[0042] Figure 3 A flowchart of the service request login process provided for this application.

[0043] Figure 4 A flowchart of the access control process provided for this application.

[0044] Figure 5 A flow chart of the service registration process provided for this application.

[0045] Figure 6 A flow chart of the service routing process provided for this application.

[0046] Figure 7 Another flow chart of the main data flow in the integrated system provided by this application.

[0047] Figure 8 A structural block diagram of the file transmission device provided in this application.

[0048] Fig. 9 A block diagram of a terminal device provided in this application.

[0049] Fig.10 Another block diagram of the terminal device provided in this application. DETAILED DESCRIPTION

[0050] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0051] In many application scenarios, it is often necessary to use the above-mentioned system integration method to combine multiple different systems into a powerful integrated system for users to use. The separate parts of the integrated system, that is, multiple systems, often need to transfer some internal files from the integrated system to each other, which often requires users to perform multiple authentications, resulting in a poor user experience and poor security of file interactions in multiple terminals. For the sake of file security management, it is necessary to securely control the file interaction actions between a system and other systems in the integrated system and the files themselves to prevent the leakage of file contents when files are accidentally leaked. To solve the above problems, the present application provides a file transfer method, device and terminal device. The file transfer method provided by the present application is described below.

[0052] Embodiment 1

[0053] Reference Figure 1 and Figure 2 , Figure 1 A flowchart of the file transfer method provided in the present application is applied to a management server in an integrated system, on which basic support services and information access security services are deployed. The integrated system also includes multiple business servers, on which business systems are deployed. Figure 2 A specific integrated system is provided for this application, in which server B is a management server, server A and server C are two specific business systems in the integrated system, and server B controls server A and server C. Figure 2 It can be seen that basic support services and information access services are deployed in server B. The basic support services include user management, user group management, role management, and authority management. The information access services include information access security management and file encryption and decryption management. Server A and server C deploy specific business services, including user login authentication, user authority acquisition, security service registration, and file encryption and decryption. It should be noted that the integrated system targeted by this application has a management server that plays a management and control role, and multiple (two or more) business servers. In this way, when transferring files within the integrated system, only the management server needs to be uniformly authenticated and authorized. This technology can avoid the uncomfortable experience brought to users by multiple authentications, and can also improve the security of file transfer by reducing the back-and-forth interaction between systems.

[0054] like Figure 1 As shown, the file transmission method provided by the present application may include the following steps:

[0055] Step S101: the management server monitors the service call interfaces of multiple service systems on multiple service servers.

[0056] Step S102: Based on the monitoring result of the service call interface of each service system, it is determined whether the management server has received service requests sent by the service systems on the service servers.

[0057] Step S103: Determine the service processing type corresponding to the service request according to the service request.

[0058] Step S104: In response to at least one service request sent by one or more of the service servers, the management server performs unified service processing on the at least one service request sent by the multiple service servers based on the service processing type.

[0059] Among them, the business processing types include: the management server performs unified user authentication and authorization on the multiple business systems using the basic support service, manages and controls the user rights of each business system based on the basic support service, and manages and controls the service rights of the multiple business systems based on the information access security service.

[0060] The "unified user authentication and authorization" mentioned above includes unified authentication and unified authorization. Unified authorization means verifying the identity of users or applications through a centralized and standardized method, and determining whether they have the authority to access specific system resources, preventing unauthorized access, ensuring the security and availability of system resources, and simplifying the authentication process to improve user experience.

[0061] Step S105: Based on the user authority and the service authority, the flow of the internal files of the integrated system is controlled to ensure that the internal files are only encrypted or decrypted in the business system with user authority and service authority.

[0062] The "encryption or decryption operation" mentioned above refers to the encryption or decryption of files within the integrated system. The purpose of file encryption is to protect the confidentiality of data and ensure that only authorized users can access and decrypt encrypted files. It can be seen that by encrypting the files within the integrated system, even if the files are obtained by unauthorized users, the unauthorized users cannot read the file contents, thereby further protecting the privacy and security of the data.

[0063] In one implementation of the present application, when the monitoring result is that the login interface of the basic support service is called, the business processing type of the business request is determined to be user login authentication; accordingly, the management server monitors that the business system logs in to the integrated system by calling the login interface of the basic support service, and the basic support service performs a security check on the logged-in user and allows the user to log in to the integrated system and use it normally after the security check passes. Figure 3 , which is a flow chart of the service request login process provided by the present application, wherein the "third-party service" is a business system such as system A, and the "backend" is the management server. Specifically, when system A logs in, it will call the login interface of the basic support service, and query whether there is such a user in the database according to the input user name. If not, an error code is returned. If so, it is determined whether the user status is locked. If locked, an error code is returned. If not locked, it verifies whether the password is correct. If the password is wrong, the number of password attempts is reduced by one until it reaches zero to lock the user. If the password is correct, a successful login is returned, and system A successfully enters the system after receiving the success.

[0064] Specifically, when the first business system logs in to the integrated system, it calls the login interface of the basic support service, and queries whether the target user exists in the database based on the user name of the target user input. If the query result is that the target user does not exist, an error code is returned. If the query result is that the target user exists, it further determines whether the current user status of the target user is locked. If the judgment result is locked, an error code is returned. If the judgment result is unlocked, it further verifies whether the password is correct. If the verification password is wrong, the number of password attempts is reduced by one until the number of password attempts is zero and the target user is locked. If the verification password is correct, it returns a successful login. After receiving the success, the first business system successfully enters the integrated system.

[0065] In another implementation of the present application, when the monitoring result is that the authentication interface of the basic support service is called, the business processing type of the business request is determined to be user authority acquisition; accordingly, after the management server detects that the business system has successfully logged in, it calls the authentication interface of the basic support service, and the basic support service queries the system authority owned by the logged-in user according to the role of the logged-in user. The basic support service is packaged and returned to each business system on the business server, so that each business system can obtain the specific functions allowed to the user according to the content of the system authority. Please refer to Figure 4 , which is a flow chart of the access control process provided by this application, wherein the "third-party system" is a specific business system such as system A, and the "present system" is the management system corresponding to the management server. Specifically, system A initiates an authentication request, encapsulates its own service information according to the request format, and calls the basic support service authentication interface. After receiving the request information, the basic support service queries the user role according to the user ID, integrates and encapsulates the user's permissions through the role, and returns it to system A.

[0066] In another implementation of the present application, when the monitoring result is that the registration interface of the information access security service is called, the business processing type of the business request is determined to be service registration; accordingly, the management server monitors that the business system calls the registration interface of the information access security service, and the information access security service receives the system name and system unique identification code sent by the business server. The information access security service registers the business system with the service management of the management server according to the system name and the system unique identification code, and the administrator sets permissions for the business system to implement permission control over the business system. Please refer to Figure 5, which is a flow chart of the service registration process provided by this application, wherein the "third-party system" is a specific business system such as system A, and the "present system" is the management system corresponding to the management server. Specifically, system A initiates a service registration request, encapsulates its own service information according to the request format, and calls the information security access service registration interface. After receiving the request information, the information security access service stores the system information of system A in the database and returns the stored result to system A.

[0067] In another implementation of the present application, when the monitoring result is that the encryption and decryption interface of the information access security service is called, it is determined that the business processing type of the business request is file encryption and decryption; accordingly, when the first business system needs to use the encrypted file of the second business system, the first business system passes the file path, file encryption method and system unique identification code of the target file through the file encryption and decryption interface of the information access security service, and the information access security service queries whether the first business system has the decryption authority to decrypt the encrypted file of the second business system based on the system unique identification code of the first business system, and when the query result is that the decryption authority is obtained, the management server of the integrated system decrypts the target file and sends the decrypted file path to the first business system. Please refer to Figure 6 , which is a flow chart of the service routing process provided by the present application, wherein the "third-party system" is a specific business system such as system A, and the "present system" is the management system corresponding to the management server. Specifically, when system A needs to use the encrypted file of system B (not shown in the figure), the file path, file encryption method and system ID are passed in through the file encryption and decryption interface of the information access security service. The information access security service queries whether the system has the authority to decrypt the encrypted file of system B according to the system ID. If so, the file is downloaded to the server according to the file path, the file is operated according to the selected method, the decrypted file is uploaded to the original path, and the file path is sent to system A.

[0068] Combine the following Figure 7 , an example is given to illustrate the main data flow in the integrated system provided in this application. Figure 7 Another flow chart of the main data flow in the integrated system provided by this application, Figure 7 The "This System" on the left is the management system where the management server is located. Figure 7 The "System A" and "System B" on the right side are the business systems where the business servers are located. The details are as follows:

[0069] (1) When logging into the system, system A / B needs to call the login interface of the basic support service. The basic support service will verify the login user's security before the user can log in to the system for normal use.

[0070] (2) After successful login, system A / B calls the authentication interface of the basic support service. The basic support service queries the system permissions of the user based on the role of the logged-in user, encapsulates the permissions and returns them to system A / B. System A / B displays the specific functions available to the user based on the permissions.

[0071] (3) System A / B calls the information access security service to register and sends its own system ID and name to the information access security service. The information access security service registers the system into the service management, and the administrator sets permissions for the system to implement system permission control.

[0072] (4) When system A needs to use the encrypted file of system B, it passes the file path, file encryption method and system ID through the file encryption and decryption interface of the information access security service. The information access security service queries whether the system has the authority to decrypt the encrypted file of system B based on the system ID. If so, it decrypts the file and sends the decrypted file path to system A.

[0073] It should be noted that in the integration of multiple business systems, users are often more concerned with integrating business systems with required functions, and usually do not change the overall architecture of the integrated system. The solution provided by the present application improves the architecture of the integrated system when solving the integration problem of multiple systems, that is, a management server that controls the multiple systems is set up to perform unified business processing, including unified authentication, unified authorization, etc., so that files can only be securely transmitted between systems with mutual permissions. During the transmission process, the files themselves are encrypted to further prevent the leakage of file contents due to accidental outflow. It can be seen that the present application solves the file interaction control of multiple systems, and the user authority control and service authority control between services.

[0074] It should be noted that, for the sake of simplicity, the method embodiments are described as a series of action combinations, but those skilled in the art should be aware that the present application is not limited by the order of the actions described, because according to the present application, certain steps can be performed in other orders or simultaneously. Secondly, those skilled in the art should also be aware that the embodiments described in the specification are all optional embodiments, and the actions involved are not necessarily required by the present application.

[0075] Embodiment 2

[0076] Reference Figure 8 , is a structural block diagram of a file transmission device provided by the present application, which is applied to a management server in an integrated system, on which a basic support service and an information access security service are deployed, and the integrated system further includes a plurality of business servers, on which a business system is deployed, and the device includes:

[0077] Monitoring module 310, used for the management server to monitor the service call interfaces of multiple service systems on multiple service servers;

[0078] A service request receiving module 320, configured to determine whether the management server has received service requests sent by the service systems on the service servers based on the monitoring results of the service call interfaces of the service systems;

[0079] A service type determination module 330, configured to determine a service processing type corresponding to the service request according to the service request;

[0080] The business processing module 340 is used for responding to at least one business request sent by one or more of the business servers, and the management server performs unified business processing on the at least one business request sent by the multiple business servers based on the business processing type; wherein the business processing type includes: the management server performs unified user authentication and authorization on the multiple business systems using the basic support service, controls the user rights of the various business systems based on the basic support service, and controls the service rights of the multiple business systems based on the information access security service;

[0081] The file control module 350 is used to control the flow of internal files of the integrated system based on the user authority and the service authority to ensure that the internal files are encrypted or decrypted only in the business system with user authority and service authority.

[0082] It should be noted that in the integration of multiple business systems, users are often more concerned with integrating business systems with required functions, and usually do not change the overall architecture of the integrated system. The solution provided by the present application improves the architecture of the integrated system when solving the integration problem of multiple systems, that is, a management server that controls the multiple systems is set up to perform unified business processing, including unified authentication, unified authorization, etc., so that files can only be securely transmitted between systems with mutual permissions. During the transmission process, the files themselves are encrypted to further prevent the leakage of file contents due to accidental outflow. It can be seen that the present application solves the file interaction control of multiple systems, and the user authority control and service authority control between services.

[0083] In one implementation of the present application, the business type determination module 330 is specifically used to determine that the business processing type of the business request is user login authentication when the monitoring result is that the login interface of the basic support service is called;

[0084] Correspondingly, the business processing module 340 is used for the management server to monitor that the business system logs into the integrated system by calling the login interface of the basic support service. The basic support service performs a security check on the logged-in user and allows the user to log in to the integrated system and use it normally after the security check passes.

[0085] Specifically, the business processing module 340 is specifically used to call the login interface of the basic support service when the first business system logs in to the integrated system, and query whether the target user exists in the database according to the user name of the input target user. If the query result is that the target user does not exist, an error code is returned. If the query result is that the target user exists, it is further determined whether the current user status of the target user is locked. If the judgment result is locked, an error code is returned. If the judgment result is unlocked, it is further verified whether the password is correct. If the verification password is wrong, the number of password attempts is reduced by one until the number of password attempts reaches zero to lock the target user. If the verification password is correct, a successful login is returned, and the first business system successfully enters the integrated system after receiving the success.

[0086] In another implementation of the present application, the business type determination module 330 is specifically used to determine that the business processing type of the business request is user authority acquisition when the monitoring result is that the authentication interface of the basic support service is called;

[0087] Correspondingly, the business processing module 340 is used for the management server to call the authentication interface of the basic support service after detecting that the business system has successfully logged in. The basic support service queries the system permissions possessed by the logged-in user according to the role of the logged-in user. The basic support service is packaged and returned to each business system on the business server, so that each business system can obtain the specific functions allowed to the user according to the content of the system permissions.

[0088] In another implementation of the present application, the business type determination module 330 is specifically used to determine that the business processing type of the business request is service registration when the monitoring result is that the registration interface of the information access security service is called;

[0089] Correspondingly, the business processing module 340 is used for the management server to monitor that the business system calls the registration interface of the information access security service, and the information access security service receives the system name and the system unique identification code sent by the business server. The information access security service registers the business system to the service management of the management server according to the system name and the system unique identification code, and the administrator sets permissions for the business system to implement permission control over the business system.

[0090] In another implementation of the present application, the business type determination module 330 is specifically used to determine that the business processing type of the business request is file encryption and decryption when the monitoring result is that the encryption and decryption interface of the information access security service is called;

[0091] Correspondingly, the business processing module 340 is used for when the first business system needs to use the encrypted file of the second business system, the first business system transmits the file path of the target file, the file encryption method and the system unique identification code of the first business system through the file encryption and decryption interface of the information access security service, and the information access security service queries whether the first business system has the decryption authority to decrypt the encrypted file of the second business system according to the system unique identification code of the first business system, and when the query result is that the decryption authority is obtained, the management server of the integrated system decrypts the target file and sends the decrypted file path to the first business system.

[0092] As for the device embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.

[0093] Embodiment 3

[0094] Optionally, an embodiment of the present application also provides a terminal device, including: a processor, a memory, and a computer program stored in the memory and executable on the processor. When the computer program is executed by the processor, the various processes of the above-mentioned method embodiment are implemented, and the same technical effect can be achieved. To avoid repetition, it will not be repeated here.

[0095] Embodiment 4

[0096] The embodiment of the present application also provides a computer-readable storage medium, on which a computer program is stored, and when the computer program is executed by a processor, each process of the above method embodiment is implemented, and the same technical effect can be achieved. To avoid repetition, it is not repeated here. The computer-readable storage medium is, for example, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk.

[0097] Embodiment 5

[0098] The present application shows a computer program product. When instructions in the computer program product are executed by a processor of a terminal device, the terminal device is enabled to execute the method as described in any one of the above aspects.

[0099] FIG9 is a block diagram of a terminal device 800 shown in the present application. For example, the terminal device 800 may be a mobile phone, a computer, a digital broadcast terminal, a messaging device, a game console, a tablet device, a medical device, a fitness device, a personal digital assistant, etc.

[0100] Reference Fig. 9 The terminal device 800 may include one or more of the following components: a processing component 802 , a memory 804 , a power component 806 , a multimedia component 808 , an audio component 810 , an input / output (I / O) interface 812 , a sensor component 814 , and a communication component 816 .

[0101] The processing component 802 generally controls the overall operation of the terminal device 800, such as operations associated with display, phone calls, data communications, camera operations, and recording operations. The processing component 802 may include one or more processors 820 to execute instructions to complete all or part of the steps of the above method. In addition, the processing component 802 may include one or more modules to facilitate the interaction between the processing component 802 and other components. For example, the processing component 802 may include a multimedia module to facilitate the interaction between the multimedia component 808 and the processing component 802.

[0102] The memory 804 is configured to store various types of data to support operations on the device 800. Examples of such data include instructions for any application or method operating on the terminal device 800, contact data, phone book data, messages, images, videos, etc. The memory 804 can be implemented by any type of volatile or non-volatile storage device or a combination thereof, such as static random access memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic memory, flash memory, magnetic disk or optical disk.

[0103] The power supply component 806 provides power to various components of the terminal device 800. The power supply component 806 may include a power management system, one or more power supplies, and other components associated with generating, managing, and distributing power to the terminal device 800.

[0104] The multimedia component 808 includes a screen that provides an output interface between the terminal device 800 and the user. In some embodiments, the screen may include a liquid crystal display (LCD) and a touch panel (TP). If the screen includes a touch panel, the screen may be implemented as a touch screen to receive input signals from the user. The touch panel includes one or more touch sensors to sense touch, slide, and gestures on the touch panel. The touch sensor may not only sense the boundaries of the touch or slide action, but also detect the duration and pressure associated with the touch or slide operation. In some embodiments, the multimedia component 808 includes a front camera and / or a rear camera. When the device 800 is in an operating mode, such as a shooting mode or a video mode, the front camera and / or the rear camera may receive external multimedia data. Each front camera and rear camera may be a fixed optical lens system or have a focal length and optical zoom capability.

[0105] The audio component 810 is configured to output and / or input audio signals. For example, the audio component 810 includes a microphone (MIC), and when the terminal device 800 is in an operation mode, such as a call mode, a recording mode, and a speech recognition mode, the microphone is configured to receive an external audio signal. The received audio signal can be further stored in the memory 804 or sent via the communication component 816. In some embodiments, the audio component 810 also includes a speaker for outputting audio signals.

[0106] I / O interface 812 provides an interface between processing component 802 and peripheral interface modules, such as keyboards, click wheels, buttons, etc. These buttons may include but are not limited to: home button, volume button, start button, and lock button.

[0107] The sensor assembly 814 includes one or more sensors for providing various aspects of status assessment for the terminal device 800. For example, the sensor assembly 814 can detect the open / closed state of the device 800, the relative positioning of the components, such as the display and keypad of the terminal device 800, and the sensor assembly 814 can also detect the position change of the terminal device 800 or a component of the terminal device 800, the presence or absence of contact between the user and the terminal device 800, the orientation or acceleration / deceleration of the terminal device 800, and the temperature change of the terminal device 800. The sensor assembly 814 may include a proximity sensor configured to detect the presence of nearby objects without any physical contact. The sensor assembly 814 may also include an optical sensor, such as a CMOS or CCD image sensor, for use in imaging applications. In some embodiments, the sensor assembly 814 may also include an acceleration sensor, a gyroscope sensor, a magnetic sensor, a pressure sensor, or a temperature sensor.

[0108] The communication component 816 is configured to facilitate wired or wireless communication between the terminal device 800 and other devices. The terminal device 800 can access a wireless network based on a communication standard, such as WiFi, a carrier network (such as 2G, 3G, 4G or 5G), or a combination thereof. In an exemplary embodiment, the communication component 816 receives a broadcast signal or broadcast operation information from an external broadcast management system via a broadcast channel. In an exemplary embodiment, the communication component 816 also includes a near field communication (NFC) module to facilitate short-range communication. For example, the NFC module can be implemented based on radio frequency identification (RFID) technology, infrared data association (IrDA) technology, ultra-wideband (UWB) technology, Bluetooth (BT) technology and other technologies.

[0109] In an exemplary embodiment, the terminal device 800 can be implemented by one or more application-specific integrated circuits (ASICs), digital signal processors (DSPs), digital signal processing devices (DSPDs), programmable logic devices (PLDs), field programmable gate arrays (FPGAs), controllers, microcontrollers, microprocessors, or other electronic components to perform the above method.

[0110] In an exemplary embodiment, a non-transitory computer-readable storage medium including instructions is also provided, such as a memory 804 including instructions, and the instructions can be executed by a processor 820 of a terminal device 800 to complete the above method. For example, the non-transitory computer-readable storage medium can be a ROM, a random access memory (RAM), a CD-ROM, a magnetic tape, a floppy disk, an optical data storage device, etc.

[0111] Fig.10 1 is a block diagram of a terminal device 1900 shown in the present application. For example, the terminal device 1900 may be provided as a server.

[0112] Reference Fig.10 , the terminal device 1900 includes a processing component 1922, which further includes one or more processors, and a memory resource represented by a memory 1932 for storing instructions executable by the processing component 1922, such as an application. The application stored in the memory 1932 may include one or more modules, each corresponding to a set of instructions. In addition, the processing component 1922 is configured to execute instructions to perform the above method.

[0113] The terminal device 1900 may also include a power supply component 1926 configured to perform power management of the terminal device 1900, a wired or wireless network interface 1950 configured to connect the terminal device 1900 to a network, and an input / output (I / O) interface 1958. The terminal device 1900 may operate based on an operating system stored in the memory 1932, such as Windows Server™, Mac OS X™, Unix™, Linux™, FreeBSD™ or the like.

[0114] It should be noted that, in this article, the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, an element defined by the sentence "comprises a ..." does not exclude the existence of other identical elements in the process, method, article or device including the element.

[0115] Through the description of the above implementation methods, those skilled in the art can clearly understand that the above-mentioned embodiment methods can be implemented by means of software plus a necessary general hardware platform, and of course by hardware, but in many cases the former is a better implementation method. Based on such an understanding, the technical solution of the present application, or the part that contributes to the prior art, can be embodied in the form of a software product, which is stored in a storage medium (such as ROM / RAM, a magnetic disk, or an optical disk), and includes a number of instructions for a terminal (which can be a mobile phone, a computer, a server, an air conditioner, or a network device, etc.) to execute the methods described in each embodiment of the present application.

[0116] The embodiments of the present application are described above in conjunction with the accompanying drawings, but the present application is not limited to the above-mentioned specific implementation methods. The above-mentioned specific implementation methods are merely illustrative and not restrictive. Under the guidance of the present application, ordinary technicians in this field can also make many forms without departing from the purpose of the present application and the scope of protection of the claims, all of which are within the protection of the present application.

[0117] Those of ordinary skill in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed in the present application can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this application.

[0118] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0119] In the embodiments provided in the present application, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0120] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0121] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.

[0122] If the functions are implemented in the form of software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application, or the part that contributes to the prior art or the part of the technical solution, can be embodied in the form of a software product, which is stored in a storage medium and includes several instructions for a computer device (which can be a personal computer, server, or network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage medium includes: various media that can store program codes, such as USB flash drives, mobile hard drives, ROM, RAM, magnetic disks, or optical disks.

[0123] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art who is familiar with the present technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

Claims

1. A file transmission method, characterized in that: A management server applied to an integrated system, wherein the management server is deployed with a basic support service and an information access security service, wherein the integrated system further comprises a plurality of business servers, wherein the business servers are deployed with business systems, wherein the method comprises: The management server monitors the service call interfaces of multiple service systems on multiple service servers; Based on the monitoring results of the service call interfaces of each service system, determining whether the management server has received service requests sent by the service systems on the service servers; Determine, according to the business request, a business processing type corresponding to the business request; In response to at least one business request sent by one or more of the business servers, the management server performs unified business processing on the at least one business request sent by the multiple business servers based on the business processing type; wherein the business processing type includes: the management server performs unified user authentication and authorization on the multiple business systems using the basic support service, controls the user rights of the various business systems based on the basic support service, and controls the service rights of the multiple business systems based on the information access security service; Based on the user authority and the service authority, the circulation of the internal files of the integrated system is controlled to ensure that the internal files are only encrypted or decrypted in the business system with the user authority and the service authority.

2. The file transmission method according to claim 1, characterized in that: The step of determining the service processing type corresponding to the service request according to the service request comprises: In a case where the monitoring result is that the login interface of the basic support service is called, determining that the business processing type of the business request is user login authentication; Accordingly, in response to at least one service request sent by one or more of the service servers, the step of the management server performing unified service processing on the at least one service request sent by the multiple service servers based on the service processing type includes: The management server monitors that the business system logs into the integrated system by calling the login interface of the basic support service. The basic support service performs a security check on the logged-in user and allows the user to log in to the integrated system and use it normally after the security check passes.

3. The file transmission method according to claim 2, characterized in that: The steps of the basic support service performing a security check on the logged-in user and allowing the user to log in to the integrated system and use it normally after the security check passes include: When the first business system logs in to the integrated system, it calls the login interface of the basic support service, and queries whether the target user exists in the database based on the user name of the target user. If the query result is that the target user does not exist, an error code is returned. If the query result is that the target user exists, it further determines whether the current user status of the target user is locked. If the determination result is locked, an error code is returned. If the determination result is unlocked, it further verifies whether the password is correct. If the verification password is wrong, the number of password attempts is reduced by one until the number of password attempts reaches zero and the target user is locked. If the verification password is correct, it returns a successful login. After receiving the success, the first business system successfully enters the integrated system.

4. The file transmission method according to claim 2 or 3, characterized in that: The step of determining the service processing type corresponding to the service request according to the service request comprises: When the monitoring result is that the authentication interface of the basic support service is called, determining that the service processing type of the service request is user authority acquisition; Accordingly, in response to at least one service request sent by one or more of the service servers, the step of the management server performing unified service processing on the at least one service request sent by the multiple service servers based on the service processing type includes: After the management server detects that the business system has successfully logged in, it calls the authentication interface of the basic support service. The basic support service queries the system permissions owned by the logged-in user according to the role of the logged-in user. The basic support service encapsulates and returns the results to each business system on the business server, so that each business system can obtain the specific functions allowed to the user according to the content of the system permissions.

5. The file transmission method according to claim 3, characterized in that: The step of determining the service processing type corresponding to the service request according to the service request comprises: In a case where the monitoring result is that the registration interface of the information access security service is called, determining that the service processing type of the service request is service registration; Accordingly, in response to at least one service request sent by one or more of the service servers, the step of the management server performing unified service processing on the at least one service request sent by the multiple service servers based on the service processing type includes: The management server monitors that the business system calls the registration interface of the information access security service, and the information access security service receives the system name and system unique identification code sent by the business server. The information access security service registers the business system to the service management of the management server based on the system name and the system unique identification code, and the administrator sets permissions for the business system to implement permission control over the business system.

6. The file transmission method according to claim 5, characterized in that: The step of determining the service processing type corresponding to the service request according to the service request comprises: In a case where the monitoring result is that the encryption and decryption interface of the information access security service is called, determining that the service processing type of the service request is file encryption and decryption; Accordingly, in response to at least one service request sent by one or more of the service servers, the step of the management server performing unified service processing on the at least one service request sent by the multiple service servers based on the service processing type includes: When the first business system needs to use the encrypted file of the second business system, the first business system transmits the file path, file encryption method and system unique identification code of the target file through the file encryption and decryption interface of the information access security service. The information access security service queries whether the first business system has the decryption authority to decrypt the encrypted file of the second business system based on the system unique identification code of the first business system. When the query result is that the system has the decryption authority, the management server of the integrated system decrypts the target file and sends the decrypted file path to the first business system.

7. A file transmission device, characterized in that: A management server applied to an integrated system, wherein the management server is deployed with basic support services and information access security services, wherein the integrated system further comprises a plurality of business servers, wherein the business servers are deployed with business systems, wherein the device comprises: A monitoring module, used for the management server to monitor the service call interfaces of multiple service systems on multiple service servers; A service request receiving module, used to determine whether the management server has received service requests sent by the service systems on the service servers based on the monitoring results of the service call interfaces of the various service systems; A service type determination module, used to determine the service processing type corresponding to the service request according to the service request; A business processing module, configured to respond to at least one business request sent by one or more of the business servers, and the management server performs unified business processing on the at least one business request sent by the multiple business servers based on the business processing type; wherein the business processing type includes: the management server performs unified user authentication and authorization on the multiple business systems using the basic support service, controls the user rights of the various business systems based on the basic support service, and controls the service rights of the multiple business systems based on the information access security service; The file control module is used to control the flow of internal files of the integrated system based on the user authority and the service authority to ensure that the internal files are encrypted or decrypted only in the business system with user authority and service authority.

8. A terminal device, characterized in that: include: A processor, a memory, and a computer program stored in the memory and executable on the processor, wherein the computer program implements the method according to any one of claims 1 to 6 when executed by the processor.

9. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the method according to any one of claims 1 to 6 is implemented.

10. A computer program product, characterized in that When the instructions in the computer program product are executed by a processor of a terminal device, the terminal device is enabled to execute the method according to any one of claims 1 to 6.

Images