Response processing method and device, equipment and medium

Abstract

The invention relates to the field of network security, in particular to a response processing method and device, equipment and a medium, and the method comprises the steps: obtaining a response request of a user through a standard interface, and enabling the request of the user to be received through a uniform interface; performing data conversion on the response request according to the identification information of the target security equipment, so that the request data can be matched with the target security equipment; according to the method, the position of the target security device in the container is positioned, and the request data is sent to the target security device for processing according to the position information, so that different security devices can receive requests only through a unified interface, user equipment does not need to switch the interface, the scheduling efficiency of the security devices is improved, and the user experience is improved. And the safety response processing efficiency of the safety equipment is improved.

Description

Technical Field

[0001] The present application relates to the field of network security, and in particular to a response handling method, apparatus, device and medium. Background Art

[0002] With the rapid development of information technology, network security issues have become increasingly prominent. Various security devices such as firewalls, EDR (Endpoint Detection and Response), XDR (Extended Detection and Response), TGFW, intrusion detection systems, and security gateways play a vital role in the network environment. Different security devices provide different interfaces and use different protocols to accomplish the same task.

[0003] In the related art, in order to achieve security response disposal, a communication method based on a specific protocol or API interface is usually adopted to allow users to access a certain security device. When customers use different security devices, they need to re-connect different devices or switch back and forth between different devices.

[0004] With the increasing types of security equipment and the increasing complexity of security needs, when users need to access different security devices, the scheduling efficiency of security equipment with related technologies is low, which in turn affects the efficiency of security response and disposal. Summary of the invention

[0005] The purpose of this application is to provide a response handling method, apparatus, device and medium, so that for different security devices, only a unified interface is needed to receive requests, and there is no need for user devices to switch interfaces, thereby improving the scheduling efficiency of the security equipment and further improving the security response handling efficiency of the security equipment.

[0006] In a first aspect, a response handling method is provided, comprising:

[0007] Obtaining a user's response request using a standard interface, the response request including: identification information of a target security device and a requested service;

[0008] Performing data conversion on the response request according to the identification information of the target security device to obtain request data corresponding to the target security device;

[0009] Determining location information corresponding to the target safety device in a container according to identification information corresponding to the target safety device, wherein a plurality of safety devices are integrated in the container;

[0010] The request data is sent to a target security device according to the location information, so that the target security device performs security processing according to the request service.

[0011] In a preferred example, the present application may be further configured as follows: the use of the target security device to perform security processing according to the request service includes:

[0012] Determine the standard action corresponding to the requested service according to the preset correspondence between the service type and the standard action;

[0013] The target security device is called to perform security processing according to the standard action corresponding to the requested service.

[0014] In a preferred example, the present application can be further configured as follows:

[0015] When the requested service includes: a blocking service and / or an unblocking service carrying parameter information, the using the target security device to perform security processing according to the requested service includes: calling a storage medium according to the parameter information to query whether there is a repeated request service; if there is no repeated request service, using the target security device to perform security processing according to the requested service;

[0016] When the requested service includes: a connectivity test, the using the target security device to perform security processing according to the requested service includes: using the target security device to perform a connectivity test according to the requested service.

[0017] In a preferred example, the present application may be further configured as follows: before obtaining the user's response request using the standard interface, at least one of the following is also included:

[0018] Obtaining a user's access request using a standard interface; determining a deployment architecture according to the access request, so as to perform system configuration according to the deployment architecture, wherein the deployment architecture includes a restful mode, a centralized mode, or an embedded mode;

[0019] Obtaining a user's registration request for the target security device using a standard interface; and performing user registration according to the registration request;

[0020] The storage policy of the user for the target security device is obtained by using a standard interface, so that when the target data needs to be stored, the target data is stored according to the storage policy.

[0021] In a preferred example, the present application may be further configured as follows: when the target data needs to be stored, the target data is stored according to the storage policy, including:

[0022] When the storage strategy is the own storage engine, storing the target data in the own storage engine;

[0023] When the storage strategy is a storage medium of a user device corresponding to the user, calling back the target data to the storage medium of the user device through a hook function;

[0024] When the storage strategy is other storage engines, the target data is sent to the other storage engines for data storage.

[0025] In a preferred example, the present application may be further configured to: obtain a user's registration request for the target security device using a standard interface, including:

[0026] Obtaining a user's initial registration request for a target security device;

[0027] Determine, according to the initial registration request, a rendering template corresponding to the target security device, so that the user can display an interface provided by the rendering template on a page on the user device;

[0028] Use the standard interface to obtain the registration request triggered by the user through the interface provided by the rendering template.

[0029] In a preferred example, the present application may be further configured as follows: determining the location information corresponding to the target security device in the container according to the identification information corresponding to the target security device includes:

[0030] Determine whether the target security device exists in the container according to the identification information corresponding to the target security device;

[0031] If so, determining the location information corresponding to the target security device in the container according to the identification information corresponding to the target security device;

[0032] If it does not exist, a prompt message is generated.

[0033] In a second aspect, a response handling device is provided, comprising:

[0034] An acquisition module, used to acquire a user's response request using a standard interface, wherein the response request includes: identification information of a target security device and a requested service;

[0035] A conversion module, used to perform data conversion on the response request according to the identification information of the target security device to obtain request data corresponding to the target security device;

[0036] A location information determination module, used to determine the location information corresponding to the target safety device in a container according to the identification information corresponding to the target safety device, wherein a plurality of safety devices are integrated in the container;

[0037] The response module is used to send the request data to the target security device according to the location information, so that the target security device can perform security processing according to the request service.

[0038] In a third aspect, an electronic device is provided, including:

[0039] one or more processors;

[0040] Memory;

[0041] One or more applications, wherein one or more applications are stored in a memory and configured to be executed by one or more processors, and the one or more programs are configured to: perform operations corresponding to the response handling method shown in any possible implementation of the first aspect.

[0042] In a fourth aspect, a computer-readable storage medium is provided, wherein the storage medium stores at least one instruction, at least one program, a code set or an instruction set, and the at least one instruction, at least one program, a code set or an instruction set is loaded by a processor and executes the steps of the response handling method shown in any possible implementation method of the first aspect.

[0043] In a fifth aspect, a computer program product is provided, comprising a computer program, which, when executed by a processor, implements operations corresponding to the response handling method shown in any possible implementation manner in the first aspect.

[0044] In summary, the response handling method provided by this application includes the following beneficial technical effects:

[0045] In this solution, a standard interface is used to obtain the user's response request, so that the user's request can be received through a unified interface; the response request is converted according to the identification information of the target security device, so that the request data can match the target security device; the position of the target security device in the container is located, and the request data is sent to the target security device for processing based on the position information, so that for different security devices, only a unified interface is needed to receive requests, and there is no need for user devices to switch interfaces, which improves the scheduling efficiency of the security equipment and thereby improves the security response processing efficiency of the security equipment.

[0046] In addition, the present application also provides a response disposal device, equipment and medium, all of which have the above-mentioned beneficial technical effects. BRIEF DESCRIPTION OF THE DRAWINGS

[0047] In order to more clearly illustrate the embodiments of the present application or the technical solutions of the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0048] Figure 1 This is a schematic diagram of an application scenario of a response handling method provided in an embodiment of the present application;

[0049] Figure 2 This is a flow chart of a response handling method provided by an embodiment of the present application;

[0050] Figure 3 A flowchart of a blocking service provided in an embodiment of the present application;

[0051] Figure 4 A flowchart of a response handling configuration process provided in an embodiment of the present application;

[0052] Figure 5 A schematic diagram of a process flow for response processing of the deployment architecture provided in an embodiment of the present application;

[0053] Figure 6 A schematic diagram of a process of rendering and registering an app template provided in an embodiment of the present application;

[0054] Figure 7 It is a structural schematic diagram of a response handling device provided in an embodiment of the present application;

[0055] Figure 8 It is a structural schematic diagram of an electronic device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0056] This specific embodiment is merely an explanation of the present application and is not a limitation of the present application. After reading this specification, those skilled in the art may make modifications to the present embodiment without any creative contribution as needed, but such modifications are protected by the patent law as long as they are within the scope of the claims of the present application.

[0057] It should be noted that in the optional embodiments of the present application, the object information and other related data involved, when the embodiments in the present application are applied to specific products or technologies, need to obtain the permission or consent of the object, and the collection, use and processing of the relevant data need to comply with the relevant laws, regulations and standards of the relevant countries and regions. In other words, if the embodiments of the present application involve data related to the object, it needs to be obtained with the authorization and consent of the object, the authorization and consent of the relevant departments, and in compliance with the relevant laws, regulations and standards of the country and region. If personal information is involved in the embodiments, the acquisition of all personal information needs to obtain the consent of the individual. If sensitive information is involved, the separate consent of the information subject needs to be obtained. The embodiments also need to be implemented with the authorization and consent of the object.

[0058] In order to make the purpose, technical solution and advantages of the embodiments of the present application clearer, the technical solution in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0059] In addition, the term "and / or" in this article is only a description of the association relationship of associated objects, indicating that there can be three relationships. For example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone. In addition, the character " / " in this article, unless otherwise specified, generally means that the associated objects before and after are in an "or" relationship.

[0060] In today's Internet environment, the status of network security has become extremely important. More and more security devices are appearing on the market. There are many security devices on the market, such as firewalls, EDR, XDR, TGFW and other different security devices. These security devices provide different interfaces and different protocols to complete the same response and disposal. On many platforms, customers need to reconnect different security devices or switch back and forth between different security devices. However, the functions of different devices are very different, and there is no unified interface for related technologies. It cannot provide standardized actions, nor can it support multiple deployment modes, expansion, and storage-selected response and disposal solutions.

[0061] Based on this, the present application provides a solution for unifying the capabilities of security devices, and the response processing can provide a unified scheduling interface.

[0062] Furthermore, users can choose the access method by themselves, supporting multiple deployment modes: restful mode, centralized mode, and embedded mode. For example, when the SDK is embedded in an existing platform, or used as a restful service.

[0063] Furthermore, standardized output actions can be provided, and the request services corresponding to the output actions include but are not limited to registration, blocking, unblocking, disposal record query, connectivity testing, file antivirus, device monitoring, etc.

[0064] Furthermore, by using dynamic data sources to control the definition of the storage layer, users can use the storage devices already available on their platform, such as s, mysq l Common storage media such as MySQL and MySQL can also be used to call back user platform storage. Of course, the default MySQL storage method is provided, and users can also expand the dynamic custom storage layer according to the configuration (without loading MySQL).

[0065] Furthermore, different devices are registered in different ways, and a dynamic template is provided to support users to access different device systems.

[0066] In order to better understand the solution provided by the embodiment of the present application, the solution is described below in conjunction with a specific application scenario.

[0067] In one embodiment, please refer to Figure 1 , Figure 1 A schematic diagram of an application scenario of a response handling method provided in an embodiment of the present application. The response handling method can be applied to a response handling system.

[0068] In some embodiments, the data supervision system includes electronic devices and user devices. Among them, user devices include but are not limited to: mobile phones, laptops, digital broadcast receivers, PDAs (personal digital assistants), PADs (tablet computers), PMPs (portable multimedia players), vehicle-mounted terminals (such as vehicle-mounted navigation terminals), etc., and fixed terminals such as digital TVs, desktop computers, etc. The electronic device can be an independent physical server, or a server cluster or distributed system composed of multiple physical servers, or a cloud server that provides basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communications, middleware services, domain name services, security services, content distribution networks (Content Delivery Network, CDN), and big data and artificial intelligence platforms. The user device and the server can be directly or indirectly connected via wired or wireless communication, which is not limited in the embodiments of the present application. The user initiates a response request through the user device, and the electronic device obtains the user's response request using a standard interface, and responds based on the response request.

[0069] It is understandable that the above is only an example and is not limited to this embodiment.

[0070] The present application embodiment provides a response handling method, such as Figure 2 As shown, the method provided in the embodiment of the present application can be executed by an electronic device, and the method includes: S101-S104, wherein:

[0071] S101, using a standard interface to obtain a user's response request, the response request including: identification information of a target security device and a requested service;

[0072] In the embodiment of the present application, the electronic device is externally embodied as a unified standard interface for communicating with the user device. In the process of user interaction with the electronic device, when the user needs to perform a service or operation on a specific security device, the electronic device obtains the user's response request through the standard interface, including the identification information of the target security device and the specific service that the user wants to perform. The electronic device provides a unified interface for the security device and accepts requests using a unified interface, so even for multiple categories of security devices, there is no need to switch interfaces.

[0073] The request service includes but is not limited to: registration, blocking, unblocking, disposal record query, connectivity test, file antivirus, and device monitoring. For blocking, the corresponding request service parameters may include: blocking address, blocking time, etc.

[0074] In some embodiments, when generating a user's response request, the user can specify a security device. Alternatively, based on the request service of the user's response request and the current load of the security device, the electronic device automatically allocates a target security device that can implement the request to the server and has a lower load. This is no longer limited in the embodiments of the present application.

[0075] In an embodiment of the present application, security devices may be grouped according to actions to obtain a correspondence between actions and device groups. In one possible case, the target security device represents a certain security device, and in another case, the target security device represents a certain type of security device. For a security device group, when a user device calls a security device, the identification information passed in may be the ID of the security device or the ID of the device group, and then the corresponding operation is performed.

[0076] Furthermore, in some possible cases, the identification information of the target security device can also be the department identification information. The electronic device has a pre-stored correspondence between the department and the security device. Then, after determining the department identification information, the corresponding security device can be directly called. In other possible cases, the group can be mapped into security domains, and the assets can be classified into a security domain. When a vulnerability or alarm occurs in an asset, the corresponding security domain can be directly found and then the corresponding device can be found.

[0077] S102, converting the response request into data according to the identification information of the target security device to obtain request data corresponding to the target security device;

[0078] Each safety device corresponds to unique identification information, or each group of safety devices corresponds to identification information. The request data is a data format and structure that meets the requirements of the target safety device / any safety device in the target safety device group after data conversion.

[0079] It is understandable that different security devices may correspond to different data formats. Therefore, the electronic device will look for the corresponding data conversion rules based on the identification information of the target security device; use the data conversion rules to convert the data format of the response request to obtain request data that meets the requirements of the target security device.

[0080] S103, determining location information corresponding to a target security device in a container according to identification information corresponding to the target security device, wherein a plurality of security devices are integrated in the container;

[0081] A plurality of safety devices are integrated in the container of the electronic device, and each safety device has a corresponding storage path. When a target safety device in the container is required to respond to a disposal, the specific position of the target safety device in the container needs to be determined so that a response disposal operation can be accurately performed with it.

[0082] In some embodiments, the container maintains a registry containing all security devices and their identification information and location information. When the location of a target security device needs to be determined, the location information can be obtained by simply searching the registry for information matching the device identification information.

[0083] It is understandable that since the electronic device provides a unified standard to the outside, even if the version of the internal security device is updated, there is no need to adjust the standard interface to the outside. At the same time, as long as the security device is included in the container of the electronic device, the response and disposal can be realized through the standard interface. Therefore, the container can be updated regularly to add, delete, check and modify the security device.

[0084] S104. Send the request data to the target security device according to the location information, so that the target security device performs security processing according to the requested service.

[0085] According to the location information, the request data is sent to the target security device so as to call the target security device for security processing.

[0086] It can be seen that in the embodiment of the present application, a standard interface is used to obtain the user's response request, so that the user's request can be received through a unified interface; the response request is converted according to the identification information of the target security device, so that the request data can match the target security device; the position of the target security device in the container is located, and the request data is sent to the target security device for processing based on the position information, so that for different security devices, only a unified interface is required to receive requests, and there is no need for the user device to switch interfaces, which improves the scheduling efficiency of the security device and thereby improves the security response handling efficiency of the security device.

[0087] A possible implementation of the embodiment of the present application uses a target security device to perform security processing according to a request service, including:

[0088] Determine the standard action corresponding to the requested service according to the correspondence between the preset service type and the standard action;

[0089] Call the target security device and perform security processing according to the standard action corresponding to the requested service.

[0090] In the embodiment of the present application, the classification can be done according to standard actions, for example, blocking and unblocking categories, firewall categories, and each category corresponds to a unified standard action.

[0091] It can be seen that in the embodiment of the present application, when using the target security device for security processing, the standard action corresponding to the requested service is determined according to the correspondence between the preset service type and the standard action, and the target security device is called to perform security processing according to the standard action, providing standardized output actions, which can further improve the efficiency of the corresponding processing.

[0092] A possible implementation of the embodiment of the present application is that when the requested service includes: a blocking service and / or an unblocking service carrying parameter information, the target security device is used to perform security processing according to the requested service, including: calling a storage medium according to the parameter information to query whether there is a repeated request service; if there is no repeated request service, the target security device is used to perform security processing according to the requested service;

[0093] See also Figure 3 , Figure 3 A flow chart of a banning service provided for an embodiment of the present application includes obtaining a banned IP, querying disposal records to facilitate calling a storage medium query, determining whether the ban is repeated, and if so, determining the result, and if not, calling a security device to ban.

[0094] Furthermore, when a certain IP is blocked, the blocked IP is determined, and the operation information of the blocked IP is determined based on the log of the security device; the whitelist / blacklist is obtained, and based on the operation information and the blacklist and whitelist, it is determined whether it is an abnormal IP. If it is not an abnormal IP, a confirmation prompt is sent to facilitate the user to confirm again. If it is an abnormal IP, it will be blocked. Similarly, when unblocking a certain IP, the unblocked IP is determined, and the operation information of the unblocked IP is determined based on the log of the security device; the whitelist / blacklist is obtained, and based on the operation information and the blacklist and whitelist, it is determined whether it is an abnormal IP. If it is an abnormal IP, a confirmation prompt is sent to facilitate the user to confirm again. If it is not an abnormal IP, it will be unblocked.

[0095] A possible implementation manner of the embodiment of the present application is that when the requested service includes: a connectivity test, using the target security device to perform security processing according to the requested service includes: using the target security device to perform a connectivity test according to the requested service.

[0096] Connectivity testing refers to testing the connectivity between security devices and user devices. Specifically, after the user completes the registration of the APP for the target security device through the user settings, he / she will verify whether the network is connected and whether the account and password are correct.

[0097] In one possible implementation, the user can test the health check through the test button on the display interface of the user device to facilitate the health check of the electronic device. If the result is unhealthy, the app status is set to false, otherwise it is set to true.

[0098] In another possible implementation, the electronic device has a periodic task to scan the health check status.

[0099] It can be seen that in the embodiment of the present application, for the blocked service and / or unblocked service in the requested service, repeated processing is avoided by querying whether there are repeated requested services, thereby reducing unnecessary resource waste and improving processing efficiency. At the same time, for the connectivity test request, the target security device is used for testing to ensure that the user device can communicate with the security device and ensure that the security device can perform security processing in a timely manner.

[0100] A possible implementation method of an embodiment of the present application, before using a standard interface to obtain a user's response request, also includes at least one of the following: using a standard interface to obtain a user's access request; determining a deployment architecture based on the access request to facilitate system configuration based on the deployment architecture, the deployment architecture including a restful mode, a centralized mode or an embedded mode; using a standard interface to obtain a user's registration request for a target security device; and registering the user based on the registration request; using a standard interface to obtain a user's storage policy for the target security device, so that when the target data needs to be stored, the target data is stored in accordance with the storage policy.

[0101] It is understandable that there are multiple safety devices in the container in advance, see Figure 4 , Figure 4 A flow chart of a response handling configuration process provided for an embodiment of the present application includes rendering a registration template on a user interface to initiate user registration for a security device; when registration is completed, performing a connectivity test; after the test passes, the security device can be called; specifically, the security device can be called through a network proxy layer, or directly, and after initiating a request through a unified standard interface, business data conversion is performed to obtain request data that can call the security device to implement the call; at the same time, the storage module is called to record events, and it can be determined whether the storage decision is built-in storage engine / hook callback user storage / other user storage engine to facilitate dynamic loading of data sources, save registration information and call time data.

[0102] In the embodiment of the present application, a user's access request is obtained using a standard interface; a deployment architecture is determined according to the access request, so that the system is configured according to the deployment architecture, and the deployment architecture includes a restful mode, a centralized mode, or an embedded mode. Figure 5 , Figure 5 A schematic diagram of the process of responding to the deployment architecture provided in the embodiment of the present application.

[0103] RESTFUL mode: Provides http interface services, deployed separately for other services to call, zero intrusion on other services. When other services or the platform installed on the user's device call the service, the architecture responds to the app.

[0104] Centralized mode: Provide SDK for server integration, and then deploy response processing services separately. Users use it just like calling local methods.

[0105] Embedded mode: The entire response processing service becomes an SDK. Users can customize the storage layer, and it has advantages such as small size.

[0106] Dynamically load custom storage layer: Based on multiple data sources, dynamic loading is performed in conjunction with configuration.

[0107] It can be understood that the three deployment architectures provided in the embodiments of the present application divide the modules into presentation layer, core layer, API layer, and storage layer; users can expand according to actual needs. For example, for the storage layer: users can develop a storage layer. The default storage layer uses MySQL, or users can implement the storage layer interface themselves and replace it with elasticsearch or other storage methods.

[0108] The presentation layer mainly serves in the RESTful architecture style, and is used to receive requests from other services through a unified interface, including some business data conversion (such as cloud communication information supplement) and calling the core layer.

[0109] The core layer contains the core logic of the entire response processing, including device registration, connectivity check, calling the storage engine, decision-making and calling security devices, etc.

[0110] The API layer mainly includes methods exposed to the presentation layer or the entry points provided when embedded, and public utility classes (ID generator, etc.);

[0111] Storage layer: provides commonly used storage methods such as mysql, redis, es, memory, hook functions, etc. During the startup process, combined with the configuration, the mybatis dynamic data source configuration method and liquibase initialize mysql as the data source are used by default. The storage layer is referenced in the core layer, and other layers are shielded from the details of the storage layer. Hook functions are provided for users to expand and implement their own storage methods.

[0112] In embedded mode, only the api layer, core layer and storage layer are required.

[0113] Furthermore, Prometheus is used to collect the online status of security devices, and the response and disposal provide a connectivity detection interface; based on different device implementations, some use the account password to obtain the token as the connectivity interface, and some use the query disposal record as the connectivity check interface. In the core layer, an abstract class that can be used contains a common interface to provide unified input and output to the outside. The specific policy mode determines which security device to use based on the parameters, and each security device has a corresponding implementation subclass.

[0114] In the embodiment of the present application, a user's registration request for a target security device is obtained using a standard interface; and user registration is performed according to the registration request. Figure 6 , Figure 6 A schematic diagram of the process of rendering and registering an app template provided in an embodiment of the present application, wherein a developer writes a template according to the app corresponding to different security devices and stores it in the server templatessvc, and the user selects the app registration template and sends it to the server templatessvc. The server templatessvc renders the parameters required by the corresponding app to the user to enable registration. Furthermore, the user can also input the parameters required for blocking to the server templatessvc.

[0115] The user's storage policy for the target security device is obtained by using a standard interface, so that when the target data needs to be stored, the target data can be stored according to the storage policy.

[0116] Specifically, when the target data needs to be stored, the target data is stored according to the storage strategy, including: when the storage strategy is the own storage engine, the target data is stored in the own storage engine; when the storage strategy is the storage medium of the user device corresponding to the user, the target data is called back to the storage medium of the user device through the hook function; when the storage strategy is other storage engines, the target data is sent to other storage engines for data storage. When the target data needs to be stored, the storage method is selected according to the storage strategy, and the data can be stored using the own storage engine, ensuring the security and reliability of the data; the storage medium of the user device can be called back through the hook function to achieve convenient access to the data; the data can be stored in other storage engines; the data storage flexibility is high.

[0117] It can be seen that in the embodiments of the present application, users can determine the deployment architecture according to actual needs, providing users with more flexible and customized services; users can register to ensure the security and legitimacy of user identities; users can determine storage strategies according to actual needs, providing more flexible and diverse options for data storage, making electronic devices more flexible and scalable.

[0118] A possible implementation of the embodiment of the present application uses a standard interface to obtain a user's registration request for a target security device, including:

[0119] Obtaining a user's initial registration request for a target security device;

[0120] Determine, based on the initial registration request, a rendering template corresponding to the target security device, so that the user can display the interface provided by the rendering template on the page on the user device;

[0121] Use the standard interface to obtain the registration request triggered by the user through the interface provided by the rendering template.

[0122] Different security devices correspond to different request parameters. After obtaining the user's initial registration request for the target security device, the corresponding rendering template can be determined so that the user triggers the registration request on the page.

[0123] It can be seen that in the embodiment of the present application, an initial registration request is obtained, and then a rendering template is determined according to the initial request, and an interface provided by the rendering template is displayed on the user device, and finally a registration request triggered by the user through the interface is obtained.

[0124] A possible implementation of the embodiment of the present application is to determine the location information corresponding to the target security device in the container according to the identification information corresponding to the target security device, including:

[0125] Determine whether the target security device exists in the container according to the identification information corresponding to the target security device;

[0126] If it exists, determining the location information corresponding to the target safety device in the container according to the identification information corresponding to the target safety device;

[0127] If it does not exist, a prompt message is generated.

[0128] It can be seen that in the embodiment of the present application, when determining the location information of the target security device in the container, it is first determined whether the target security device exists in the container, and then the location information is determined based on the identification information. If it does not exist, a prompt message is generated; the accuracy and reliability of the location information are ensured, and processing errors caused by the non-existence of the device are avoided; by generating a prompt message, the user is prompted that a security response cannot be made or the background staff is prompted to write the target security device into the container to update the container.

[0129] Based on any of the above embodiments, the present application provides a variety of deployment methods based on the user security device, which can better adapt to the architecture of different platforms. For example, users with limited resources can use embedded mode deployment; users who do not use Java language can use restful style deployment without affecting the original business, etc.; provide a variety of scalable storage methods, different platforms use different storage, and can save device-related business information based on existing storage media, or use independent database storage that does not affect the original business; provide a unified interface, the platform only needs to call the response disposal to ban, without making other adjustments according to different devices, different interfaces, and different protocols, and can be connected once.

[0130] The following is an introduction to a device provided in an embodiment of the present application. The device described below and the method described above can be referred to each other. The device of this embodiment is set in an electronic device. Figure 7 , Figure 7 It is a structural block diagram of a device of one embodiment of the present application, comprising:

[0131] The acquisition module 210 is used to acquire the user's response request using a standard interface, and the response request includes: identification information of the target security device and the requested service;

[0132] The conversion module 220 is used to perform data conversion on the response request according to the identification information of the target security device to obtain the request data corresponding to the target security device;

[0133] A location information determination module 230, for determining location information corresponding to a target security device in a container according to identification information corresponding to the target security device, wherein a plurality of security devices are integrated in the container;

[0134] The response module 240 is used to send the request data to the target security device according to the location information, so that the target security device can perform security processing according to the request service.

[0135] In a preferred example, the present application may be further configured as: a response module 240 for:

[0136] Determine the standard action corresponding to the requested service according to the correspondence between the preset service type and the standard action;

[0137] Call the target security device and perform security processing according to the standard action corresponding to the requested service.

[0138] In a preferred example, the present application can be further configured as follows:

[0139] When the requested service includes: a blocking service and / or an unblocking service carrying parameter information, the response module 240 is used to: call the storage medium according to the parameter information to query whether there is a repeated request service; if there is no repeated request service, use the target security device to perform security processing according to the request service;

[0140] When the requested service includes: a connectivity test, the response module 240 is used to: use the target security device to perform a connectivity test according to the requested service.

[0141] In a preferred example, the present application can be further configured as follows:

[0142] A deployment module is used to obtain a user's access request using a standard interface; determine a deployment architecture based on the access request so as to configure the system based on the deployment architecture, which includes a restful mode, a centralized mode, or an embedded mode;

[0143] A registration module, used to obtain a user's registration request for a target security device using a standard interface; and perform user registration according to the registration request;

[0144] The storage module is used to obtain the user's storage policy for the target security device using a standard interface, so that when the target data needs to be stored, the target data can be stored according to the storage policy.

[0145] In a preferred example, the present application can be further configured as: a storage module for:

[0146] When the storage strategy is the own storage engine, the target data is stored in the own storage engine;

[0147] When the storage policy is the storage medium of the user device corresponding to the user, the target data is called back to the storage medium of the user device through the hook function;

[0148] When the storage strategy is other storage engines, the target data is sent to other storage engines for data storage.

[0149] In a preferred example, the present application can be further configured as: a registration module, for:

[0150] Obtaining a user's initial registration request for a target security device;

[0151] Determine, based on the initial registration request, a rendering template corresponding to the target security device, so that the user can display the interface provided by the rendering template on the page on the user device;

[0152] Use the standard interface to obtain the registration request triggered by the user through the interface provided by the rendering template.

[0153] In a preferred example, the present application may be further configured as: a location information determination module 230 for:

[0154] Determine whether the target security device exists in the container according to the identification information corresponding to the target security device;

[0155] If it exists, determining the location information corresponding to the target safety device in the container according to the identification information corresponding to the target safety device;

[0156] If it does not exist, a prompt message is generated.

[0157] An electronic device is provided in an embodiment of the present application, such as Figure 8 As shown, Figure 8 The electronic device 300 shown includes: a processor 301 and a memory 303. The processor 301 and the memory 303 are connected, such as through a bus 302. Optionally, the electronic device 300 may also include a transceiver 304. It should be noted that in actual applications, the transceiver 304 is not limited to one, and the structure of the electronic device 300 does not constitute a limitation on the embodiments of the present application.

[0158] The processor 301 may be a CPU (Central Processing Unit), a general-purpose processor, a DSP (Digital Signal Processor), an ASIC (Application Specific Integrated Circuit), an FPGA (Field Programmable Gate Array) or other programmable logic devices, transistor logic devices, hardware components or any combination thereof. It may implement or execute various exemplary logic blocks, modules and circuits described in conjunction with the disclosure of this application. The processor 301 may also be a combination that implements computing functions, such as a combination of one or more microprocessors, a combination of a DSP and a microprocessor, etc.

[0159] The bus 302 may include a path to transmit information between the above components. The bus 302 may be a PCI (Peripheral Component Interconnect) bus or an EISA (Extended Industry Standard Architecture) bus. The bus 302 may be divided into an address bus, a data bus, a control bus, etc. For ease of representation, Figure 8 Only one thick line is used in the diagram, but this does not mean that there is only one bus or only one type of bus.

[0160] The memory 303 may be a ROM (Read Only Memory) or other types of static storage devices that can store static information and instructions, a RAM (Random Access Memory) or other types of dynamic storage devices that can store information and instructions, or an EEPROM (Electrically Erasable Programmable Read Only Memory), a CD-ROM (Compact Disc Read Only Memory) or other optical disk storage, optical disk storage (including compressed optical disk, laser disk, optical disk, digital versatile disk, Blu-ray disk, etc.), a magnetic disk storage medium or other magnetic storage device, or any other medium that can be used to carry or store the desired program code in the form of instructions or data structures and can be accessed by a computer, but is not limited thereto.

[0161] The memory 303 is used to store the application code for executing the solution of the present application, and the execution is controlled by the processor 301. The processor 301 is used to execute the application code stored in the memory 303 to implement the contents shown in the above method embodiment.

[0162] Figure 8 The electronic device shown is merely an example and should not bring any limitation to the functions and scope of use of the embodiments of the present application.

[0163] An embodiment of the present application provides a computer-readable storage medium, on which a computer program is stored. When the computer-readable storage medium is run on a computer, the computer can execute the corresponding content in the aforementioned method embodiment.

[0164] An embodiment of the present application provides a computer program product, including a computer program, which implements the corresponding contents of the aforementioned method embodiment when the computer program is executed by a processor.

[0165] It should be understood that, although the steps in the flowchart of the accompanying drawings are displayed in sequence as indicated by the arrows, these steps are not necessarily executed in sequence in the order indicated by the arrows. Unless otherwise specified herein, there is no strict order restriction on the execution of these steps, and they can be executed in other orders. Moreover, at least a part of the steps in the flowchart of the accompanying drawings may include multiple sub-steps or multiple stages, and these sub-steps or stages are not necessarily executed at the same time, but can be executed at different times, and their execution order is not necessarily sequential, but can be executed in turn or alternately with other steps or at least a part of the sub-steps or stages of other steps.

[0166] The above are only some implementation methods of the present application. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principles of the present application. These improvements and modifications should also be regarded as the scope of protection of the present application.

Claims

1. A response handling method, characterized in that: include: Obtaining a user's response request using a standard interface, the response request including: identification information of a target security device and a requested service; Performing data conversion on the response request according to the identification information of the target security device to obtain request data corresponding to the target security device; Determining location information corresponding to the target safety device in a container according to identification information corresponding to the target safety device, wherein a plurality of safety devices are integrated in the container; The request data is sent to a target security device according to the location information, so that the target security device performs security processing according to the request service.

2. The response handling method according to claim 1, characterized in that: The using the target security device to perform security processing according to the request service includes: Determine the standard action corresponding to the requested service according to the preset correspondence between the service type and the standard action; The target security device is called to perform security processing according to the standard action corresponding to the requested service.

3. The response handling method according to claim 1, characterized in that: When the requested service includes: a blocking service and / or an unblocking service carrying parameter information, the using the target security device to perform security processing according to the requested service includes: calling a storage medium according to the parameter information to query whether there is a repeated request service; if there is no repeated request service, using the target security device to perform security processing according to the requested service; When the requested service includes: a connectivity test, the using the target security device to perform security processing according to the requested service includes: using the target security device to perform a connectivity test according to the requested service.

4. The response handling method according to claim 1, characterized in that: Before using the standard interface to obtain the user's response request, at least one of the following is also included: Obtaining a user's access request using a standard interface; determining a deployment architecture according to the access request, so as to perform system configuration according to the deployment architecture, wherein the deployment architecture includes a restful mode, a centralized mode, or an embedded mode; Obtaining a user's registration request for the target security device using a standard interface; and performing user registration according to the registration request; The storage policy of the user for the target security device is obtained by using a standard interface, so that when the target data needs to be stored, the target data is stored according to the storage policy.

5. The response handling method according to claim 4, characterized in that: When the target data needs to be stored, the target data is stored according to the storage policy, including: When the storage strategy is the own storage engine, storing the target data in the own storage engine; When the storage strategy is a storage medium of a user device corresponding to the user, calling back the target data to the storage medium of the user device through a hook function; When the storage strategy is other storage engines, the target data is sent to the other storage engines for data storage.

6. The response handling method according to claim 4, characterized in that: Obtaining a user's registration request for the target security device using a standard interface, including: Obtaining a user's initial registration request for a target security device; Determine, according to the initial registration request, a rendering template corresponding to the target security device, so that the user can display an interface provided by the rendering template on a page on the user device; Use the standard interface to obtain the registration request triggered by the user through the interface provided by the rendering template.

7. The response handling method according to any one of claims 1 to 6, characterized in that: The determining, according to the identification information corresponding to the target safety device, the location information corresponding to the target safety device in the container includes: Determine whether the target security device exists in the container according to the identification information corresponding to the target security device; If so, determining the location information corresponding to the target security device in the container according to the identification information corresponding to the target security device; If it does not exist, a prompt message is generated.

8. A response handling device, characterized in that: include: An acquisition module, used to acquire a user's response request using a standard interface, wherein the response request includes: identification information of a target security device and a requested service; A conversion module, used to perform data conversion on the response request according to the identification information of the target security device to obtain request data corresponding to the target security device; A location information determination module, used to determine the location information corresponding to the target safety device in a container according to the identification information corresponding to the target safety device, wherein a plurality of safety devices are integrated in the container; The response module is used to send the request data to the target security device according to the location information, so that the target security device can perform security processing according to the request service.

9. An electronic device, characterized in that: include: one or more processors; Memory; One or more applications, wherein the one or more applications are stored in the memory and configured to be executed by the one or more processors, and the one or more applications are configured to: execute the steps of the response handling method according to any one of claims 1 to 7.

10. A computer-readable storage medium, characterized in that: The storage medium stores at least one instruction, at least one program, code set or instruction set, and the at least one instruction, at least one program, code set or instruction set is loaded by the processor and executes the steps of the response handling method according to any one of claims 1 to 7.

Images