File downloading method and device, computer equipment, readable storage medium and program product
Through remote isolation of secure browser (RBI) technology, the security risks in the file download process are solved, and files are stored in file storage rather than local to improve security.
Patent Information
- Application Number
- CN202411670547.2
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-11-21
- Publication Date
- 2025-02-18
- Estimated Expiration
- 2044-11-21
AI Technical Summary
The existing technology has security risks during file downloading. The malware is disguised as normal files, resulting in personal privacy leakage and property losses.
Using remote isolation secure browser (RBI) technology, the RBI manager receives download requests, the RBI streaming client downloads the file, and uploads the file to the file storage, generates a temporary download link and returns it to the RBI front-end to avoid the file being stored in the user's local area. .
Effectively isolate potential security risks in users' access to web pages and file downloads, protect user equipment from malware and cyber attacks, and improve security.
Smart Images

Figure CN119484510A_ABST
Abstract
Description
Technical Field
[0001] The present application relates to the field of browser technology, and in particular to a file downloading method, apparatus, computer equipment, computer-readable storage medium, and computer program product. Background Art
[0002] In today's digital age, the Internet has already penetrated into every aspect of people's lives. From work communication, academic research to daily shopping, entertainment and leisure, it has become normal for netizens to access the Internet through browsers. As a bridge connecting users and the Internet, the security of browsers plays a vital role in protecting user information security and maintaining cyberspace security.
[0003] In daily use, users often need to download files through browsers. These files may come from email attachments, network disk sharing, software download sites, etc. Although these activities seem normal, they hide security risks that cannot be ignored. Malware, including viruses, Trojans, spyware, adware, etc., often spread by disguising themselves as normal files. Once users accidentally download and execute these malicious files, personal privacy leaks, property losses, and even corporate security incidents may occur.
[0004] Existing secure browser technologies mostly use local security checks to defend against these threats, such as scanning downloaded files through integrated or third-party antivirus software. However, these methods have limitations: local security checks are usually performed after the file is downloaded, which means that the malware has entered the user's local system. Even if the threat is detected, there is a certain degree of difficulty in removing it and potential residual risks, which affects local security. Summary of the invention
[0005] Based on this, it is necessary to provide a file downloading method, apparatus, computer device, computer-readable storage medium and computer program product that can improve security in response to the above technical problems.
[0006] In a first aspect, the present application provides a file downloading method, the method comprising:
[0007] Receiving, through the RBI manager, a download request sent by the RBI front end, wherein the download request carries an identifier of a file to be downloaded;
[0008] Download the file corresponding to the to-be-downloaded file identifier through the RBI streaming client, and send information indicating that the file download is complete to the RBI manager client;
[0009] Uploading the file to a file storage device through the RBI manager client, and obtaining a file link generated by the file storage device;
[0010] The file link is returned to the RBI front end, and the file link is used for the RBI front end to download the file.
[0011] In one embodiment, before receiving the download request sent by the RBI front end, the process includes:
[0012] Receive download process trigger instructions sent by the RBI front end;
[0013] Call the initialization interface of the RBI manager to start the download process;
[0014] Determine, by the RBI manager based on a load balancing strategy, an RBI edge server corresponding to the download process trigger instruction, and establish a connection between the edge server and the RBI front end;
[0015] The web page content is transmitted to the RBI front end through the edge server.
[0016] In one embodiment, before downloading the file corresponding to the to-be-downloaded file identifier through the RBI streaming client, the method further includes:
[0017] Performing an authority check on the download request through the RBI streaming media client, and checking the file size corresponding to the file identifier to be downloaded;
[0018] When the permission check passes and the file size corresponding to the to-be-downloaded file identifier is within a preset range, the step of downloading the file corresponding to the to-be-downloaded file identifier through the RBI streaming media client is continued.
[0019] In one embodiment, obtaining the file link generated by the file storage includes:
[0020] Returning the generated file link to the RBI manager through the file storage, wherein the file link is a temporary download link with a validity period;
[0021] Sending the file link to a message queue via the RBI manager;
[0022] Notify the RBI streaming media client of the file link through the message queue;
[0023] The file link is returned to the RBI front end via the RBI streaming client.
[0024] In one embodiment, downloading the file corresponding to the to-be-downloaded file identifier through the RBI streaming client includes:
[0025] The download function is started in the container through the RBI streaming media client to download the file corresponding to the file identifier to be downloaded.
[0026] In one embodiment, before obtaining the file link generated by the file storage, the method further includes:
[0027] The file is security processed by the file storage.
[0028] In a second aspect, the present application further provides a file downloading device, the device comprising:
[0029] A first receiving module, configured to receive a download request sent by the RBI front end through the RBI manager, wherein the download request carries an identifier of a file to be downloaded;
[0030] A download module, used for downloading the file corresponding to the to-be-downloaded file identifier through the RBI streaming client, and sending information on the completion of the file download to the RBI manager client;
[0031] A file link generation module, used to upload the file to a file storage device through the RBI manager client, and obtain a file link generated by the file storage device;
[0032] The sending module is used to return the file link to the RBI front end, and the file link is used for the RBI front end to download the file.
[0033] In a third aspect, the present application further provides a computer device, comprising a memory and a processor, wherein the memory stores a computer program, and the processor implements the steps of the method in any one of the above-mentioned embodiments when executing the computer program.
[0034] In a fourth aspect, the present application further provides a computer-readable storage medium having a computer program stored thereon, wherein the computer program, when executed by a processor, implements the steps of the method in any one of the above-mentioned embodiments.
[0035] In a fifth aspect, the present application also provides a computer program product, including a computer program, which implements the steps of the method in any one of the above embodiments when executed by a processor.
[0036] The above-mentioned file downloading method, apparatus, computer equipment, computer-readable storage medium and computer program product receive a download request sent by an RBI front end through an RBI manager, wherein the download request carries an identifier of a file to be downloaded; downloads a file corresponding to the identifier of the file to be downloaded through an RBI streaming client, and sends information on the completion of the file download to the RBI manager client; uploads the file to a file storage device through the RBI manager client, and obtains a file link generated by the file storage device; returns the file link to the RBI front end, and the file link is used by the RBI front end to download the file, so that the downloaded file is stored in the file storage device rather than locally on the RBI front end, effectively isolating potential security risks in the process of users accessing web pages and downloading files, protecting user devices from malware and network attacks, and improving security. BRIEF DESCRIPTION OF THE DRAWINGS
[0037] In order to more clearly illustrate the technical solutions in the embodiments of the present application or related technologies, the drawings required for use in the embodiments of the present application or related technical descriptions will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other related drawings can be obtained based on these drawings without paying creative work.
[0038] FIG1 is an application environment diagram of a file downloading method in one embodiment;
[0039] FIG2 is a schematic diagram of a flow chart of a file downloading method in one embodiment;
[0040] FIG3 is a timing diagram of a file downloading method in one embodiment;
[0041] FIG4 is a network scenario diagram of a file downloading method in one embodiment;
[0042] FIG5 is a structural block diagram of a file downloading device in one embodiment;
[0043] FIG. 6 is a diagram showing the internal structure of a computer device in one embodiment. DETAILED DESCRIPTION
[0044] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.
[0045] Among them, in the traditional solution of downloading files through a browser, local security checks are used to defend against threats such as malware, such as scanning downloaded files through integrated or third-party antivirus software. However, these methods have limitations:
[0046] 1. Response time: Local security checks are usually performed after the file is downloaded, which means that the malware has already entered the user's local system. Even if the threat is detected, there is a certain degree of difficulty in removal and potential residual risks.
[0047] 2. Security vulnerabilities: New malware continues to emerge, and the virus database updates of security software often lag behind the emergence of new threats, which provides malware with opportunities to take advantage.
[0048] 3. System resource usage: Security check software usually requires a lot of computing resources, which may affect system performance and user experience for devices with lower configurations.
[0049] 4. User dependence: Users need to rely on the effectiveness of security software and their own security awareness, both of which are often difficult to guarantee.
[0050] In order to solve the above technical problems, the file download method provided in the embodiment of the present application is based on the remote isolated secure browser (RBI) technology. The RBI technology creates an isolated browsing environment on the server side, and all the user's browsing activities including file downloads are performed in this isolated environment. This means that any potential malware is restricted to the remote server and cannot directly access the user's local system. In addition, RBI can also be combined with cloud security services to provide more timely and comprehensive security checks.
[0051] Therefore, an efficient and reliable remote isolation secure browser download function control system is particularly important. It can not only improve the security of users during web browsing and reduce the risk of malware intrusion, but also improve the user's browsing experience by reducing dependence on local resources. More importantly, for corporate users, this technology can help companies build a more solid network security line of defense and protect corporate information assets from network threats.
[0052] In summary, the download function control technology of the remote isolation security browser is not only crucial to the network security of individual users, but also has great significance for ensuring the security and stability of the entire network ecosystem.
[0053] To this end, the file download method in the present application can be applied to the application environment shown in Figure 1. The RBI front end 102 communicates with the back end 104 through a network. The back end 104 includes multiple distributed servers, and the distributed servers include an RBI manager, an RBI edge server, an RBI streaming client, a back end system, an RBI manager client, a storage server, and a message queue.
[0054] Among them, the user uses the RBI front end 102 to access the web page, and the back end 104 receives the download request sent by the RBI front end through the RBI manager, and the download request carries the identifier of the file to be downloaded; the file corresponding to the identifier of the file to be downloaded is downloaded through the RBI streaming client, and the information of the completion of the file download is sent to the RBI manager client; the file is uploaded to the file storage through the RBI manager client, and the file link generated by the file storage is obtained; the file link is returned to the RBI front end, and the file link is used by the RBI front end to download the file. In this way, the downloaded files are stored in the file storage, rather than locally in the RBI front end, which effectively isolates the potential security risks in the process of users accessing web pages and downloading files, protects the user's device from the influence of malware and network attacks, and improves security.
[0055] Among them, the RBI front end 102 can be installed in a terminal, which can be, but is not limited to, various personal computers, laptops, smart phones, tablet computers, IoT devices and portable wearable devices. IoT devices can be smart speakers, smart TVs, smart air conditioners, smart car devices, projection devices, etc. Portable wearable devices can be smart watches, smart bracelets, head-mounted devices, etc. Head-mounted devices can be virtual reality (VR) devices, augmented reality (AR) devices, smart glasses, etc. The backend 104 can be an independent physical server, a server cluster or distributed system composed of multiple physical servers, or a cloud server that provides cloud computing services.
[0056] In an exemplary embodiment, as shown in FIG. 2 , a file download method is provided, which is described by taking the method applied to the backend 104 in FIG. 1 as an example, and includes the following steps 202 to 208 . Among them:
[0057] S202: receiving a download request sent by the RBI front end through the RBI manager, where the download request carries an identifier of a file to be downloaded.
[0058] The RBI edge server transmits web page content to the RBI front end, and the user browses the web page through the RBI front end. The RBI edge server is used to ensure that the user can browse the web page content.
[0059] In this way, when the user clicks a download link on the web page of the RBI front end, the download request is sent to the RBI streaming client corresponding to the RBI edge server.
[0060] S204: Download the file corresponding to the to-be-downloaded file identifier through the RBI streaming client, and send information indicating that the file download is complete to the RBI manager client.
[0061] Among them, the RBI streaming client is used to download the file corresponding to the file identifier to be downloaded, so that the file is downloaded on the RBI streaming client instead of the RBI front end. By isolating the user's downloading activities on the server side, even if the file the user attempts to download contains malware, it will not pose a direct threat to the user's local computer system.
[0062] After the RBI streaming client completes downloading the file, it sends the file download completion information to the RBI manager client.
[0063] S206: Upload the file to the file storage through the RBI manager client, and obtain the file link generated by the file storage.
[0064] The downloaded file is uploaded to the file storage through the RBI manager client, where the file storage may be an S3 storage service. In other embodiments, the file storage may also be other storage services, which are not specifically limited here.
[0065] The file storage can generate corresponding file links for easy downloading by the RBI front end.
[0066] Optionally, the download link may be a temporary download link.
[0067] S208: Return the file link to the RBI front end, and the file link is used by the RBI front end to download the file.
[0068] The file storage returns the file link to the RBI front end, and the RBI front end displays the file link so that the RBI front end can download the file through the temporary download link.
[0069] The above-mentioned file download method receives a download request sent by the RBI front end through the RBI manager, and the download request carries an identifier of the file to be downloaded; downloads the file corresponding to the identifier of the file to be downloaded through the RBI streaming media client, and sends information on the completion of the file download to the RBI manager client; uploads the file to the file storage through the RBI manager client, and obtains the file link generated by the file storage; returns the file link to the RBI front end, and the file link is used by the RBI front end to download the file, so that the downloaded file is stored in the file storage rather than locally on the RBI front end, which effectively isolates the potential security risks in the process of users accessing web pages and downloading files, protects user devices from malware and network attacks, and improves security.
[0070] In one of the optional embodiments, before receiving the download request sent by the RBI front end, it includes: receiving the download process trigger instruction sent by the RBI front end; calling the initialization interface of the RBI manager to start the download process; determining the RBI edge server corresponding to the download process trigger instruction based on the load balancing strategy through the RBI manager, and establishing a connection between the edge server and the RBI front end; transmitting the web page content to the RBI front end through the edge server.
[0071] Among them, this embodiment mainly involves the initiation of the download process. The user visits a specific web page through a browser to trigger the download process. For example, when the user opens a link through a remote isolation security browser, the user's access request is first received by the RBI front-end, and the RBI front-end calls the initialization interface of the RBI manager to start the download process. Specifically, the start interface of the RBI manager (rbi-manager) is called to initialize the download process.
[0072] The RBI manager selects the appropriate RBI edge server (rbi-edge), establishes a connection between the RBI front end and the RBI edge server, and displays the web content that the user accesses through the RBI edge server.
[0073] The RBI manager selects a suitable RBI edge server based on the current load and other strategies. Specifically, the RBI manager can select the RBI edge server with the smallest load as the edge server for communicating with the RBI front end, thereby realizing communication between the RBI front end and the RBI edge server. In other embodiments, other strategies may also be adopted, such as priority strategies, etc., which are not specifically limited here.
[0074] The selected RBI edge server can transmit web page content to the RBI front end, and the user browses the web page at the RBI front end.
[0075] In the above embodiments, through the intelligent selection and deployment of the RBI edge server, the performance of user access and downloading can be optimized according to the real-time load and network conditions, and the response speed and stability can be improved.
[0076] In one of the optional embodiments, before downloading the file corresponding to the file identifier to be downloaded through the RBI streaming client, it also includes: performing an authority check on the download request through the RBI streaming client, and checking the file size corresponding to the file identifier to be downloaded; when the authority check passes and the file size corresponding to the file identifier to be downloaded is within a preset range, continuing to execute the step of downloading the file corresponding to the file identifier to be downloaded through the RBI streaming client.
[0077] Permission verification refers to whether the RBI front-end has the permission to download the corresponding file. The permission can be pre-set. For example, the account logged into the RBI front-end corresponds to different roles, and the permissions of different roles are different. After receiving the download request sent by the RBI front-end, the account logged into the RBI front-end can be verified for permissions, wherein the permission verification may include: obtaining the permission information corresponding to the account and the permission information corresponding to the file identifier to be downloaded, and determining whether the permission information corresponding to the account includes the permission information corresponding to the file identifier to be downloaded. If it does, it is determined that the RBI front-end has passed the permission verification, otherwise it is determined that the RBI front-end has not passed the permission verification. Optionally, the permission information corresponding to different file types may be different, so the permission information of the corresponding file can be configured based on the file type.
[0078] The file size check is to determine whether the file size corresponding to the file identifier to be downloaded is within the file size range corresponding to the account. If so, the file size check passes.
[0079] The file size range corresponding to the account can be pre-configured, which provides enterprises with flexible download control strategies, including but not limited to file size restrictions, file type filtering, etc., to meet the needs of different security levels.
[0080] Among them, the permission check and the file size check can be performed through a corresponding verification system, and the verification system can receive corresponding configuration information and enable the configuration information corresponding to the permission check and the file size check.
[0081] After receiving the download request, the RBI streaming client calls the verification system to verify the download request, including verifying the user's identity and checking whether he has the download permission. The verification system returns the permission verification result to the RBI streaming client. If the user does not have the download permission, the RBI streaming client passes the error information back to the RBI front end through the RBI manager, and the RBI front end displays the error prompt to the user. The verification system can be a module in the RBI manager, or a separate verification system, which is not specifically limited here.
[0082] After the permission check is passed, the RBI streaming client checks the file size. If the file size is not within the preset range, the RBI streaming client transmits the error information back to the RBI front end through the RBI manager, and the RBI front end displays the error prompt to the user. If it is within the preset range, the RBI streaming client downloads the file corresponding to the file identifier to be downloaded.
[0083] In some optional embodiments, downloading the file corresponding to the to-be-downloaded file identifier through the RBI streaming client includes: starting the download function in the container through the RBI streaming client to download the file corresponding to the to-be-downloaded file identifier. In this way, the in-container download technology effectively utilizes system resources, improves the download speed, optimizes the file transfer process, and reduces network congestion and transmission delay.
[0084] In the above embodiments, enterprises are provided with flexible download control policies, including but not limited to file size restrictions, file type filtering, etc., to meet the needs of different security levels. Permission verification and file checking ensure that only authorized users can download files, and limit the size of downloaded files, effectively preventing overly large files from having a negative impact on the system and user experience.
[0085] In one of the optional embodiments, obtaining a file link generated by a file storage includes: returning the generated file link to an RBI manager through the file storage, wherein the file link is a temporary download link with a validity period; sending the file link to a message queue through the RBI manager; notifying an RBI streaming client of the file link through the message queue; and returning the file link to an RBI front end through the RBI streaming client.
[0086] The file storage returns the file upload result to the RBI manager client. If the RBI streaming client successfully uploads the file to the file storage, the file storage continues to generate a temporary download link. For example, the file storage generates a temporary file link with a validity period of three minutes and returns the file link to the RBI manager. In other embodiments, the validity period of the file link can be other time periods, which are not specifically limited here.
[0087] The RBI manager passes the upload result and temporary download link to the RBI streaming client through the message queue. For example, the RBI manager passes the upload result and temporary download link to the message queue through the message queue, and the message queue passes the information to the RBI streaming client. The RBI streaming client transmits the received upload result and download link to the RBI front end. The RBI front end displays the corresponding results to the user based on the received information. If the download is successful, the user can download the file through the temporary download link; if it fails, the front end displays the corresponding error message.
[0088] In the above embodiment, the generation and management of temporary download links enable users to easily obtain and download the files they need without the need for complicated login and authorization processes, thereby simplifying the operation process; the use of message queues optimizes the information transmission and collaboration between modules within the system, so that upload results and download links can be efficiently transmitted and processed, thereby enhancing the manageability and scalability of the system.
[0089] In one of the optional embodiments, before obtaining the file link generated by the file storage, the method further includes: performing security processing on the file through the file storage.
[0090] After the file is uploaded to the file storage, the file storage can perform security processing on the file. For example, to prevent the downloaded file from containing a virus, the suffix .tmp is added to the .exe file. In this way, the security check of the file is placed in the file storage instead of the RBI front end, which can reduce the pressure on the front end.
[0091] Among them, different levels of processing can be used for the security processing of files to meet the needs of different security levels, and the processing strategies corresponding to different levels may be different.
[0092] The above embodiments implement real-time monitoring of downloading behaviors, timely interception and processing of potential security threats, thereby providing more proactive security protection, and reducing the enterprise's operation and maintenance costs in information security through centralized security management and automated security inspection processes.
[0093] For ease of understanding, FIG3 and FIG4 are combined, where FIG3 is a timing diagram of a file download method in an embodiment, and FIG4 is a network scene diagram of a file download method in an embodiment. In this embodiment, the downloading activities of users are isolated in the background to achieve real-time monitoring and control of downloading behaviors, thereby improving the security of downloading activities. The following is a detailed technical solution:
[0094] Start the download process: When the user opens the link through the remote isolation secure browser (RBI front-end), the RBI manager (rbi-manager) calls its start interface to initialize the download process.
[0095] Select RBI edge server: RBI manager selects the appropriate RBI edge server (rbi-edge), establishes the connection between RBI front end and RBI edge server, and displays the web content that users access through RBI edge server.
[0096] Download request interception: When a user clicks the download operation on a web page, the RBI streaming client (rbi-streaming-client) intercepts the download request and handles the Browser.downloadWillBegin and Browser.downloadProgress events in the ChromeDevToolsProtocol (CDP).
[0097] Download permission verification: The background checks whether the user has download permission. If the download permission is not enabled, an error message is returned and displayed to the user by the RBI front end.
[0098] File size limit: The backend determines the size of the file to be downloaded. If it exceeds the preset `download_max_size` limit, an error message is returned and displayed to the user by the RBI frontend.
[0099] Start downloading in the container: The RBI streaming client starts the Chrome download function in the container and downloads the file to the container.
[0100] Download completion notification: After the download is completed, the RBI streaming client notifies the RBI manager client (rbi-manager-client) through the message queue that the download is complete.
[0101] Upload the file to the file storage S3: After the file is downloaded, the key value of the file storage S3 storage service is generated through the label, and the file is uploaded to the file storage S3. To prevent the downloaded file from containing viruses, add the suffix .tmp to the .exe file.
[0102] Upload result processing: The system returns the result of uploading the file to the file storage S3. If the upload is successful, the next step will be carried out. If the upload fails, the system will jump to the error handling step.
[0103] Generate a temporary download link: Call the file storage S3 service to generate a temporary download link that is valid for three minutes.
[0104] Return download link: Return the generated temporary download link to the RBI manager.
[0105] File review and virus detection: Review and detect viruses on downloaded files.
[0106] Message queue transmission information: Based on the upload result processing, the return download link, and the file review and detection results, the upload file storage S3 results, review detection information, and temporary download link are transmitted to the RBI streaming client through the message queue.
[0107] Front-end data transmission: Information is transmitted to the RBI front-end through the data channel.
[0108] Front-end display results: According to the message queue transmission information, the RBI front-end displays the corresponding error information or starts the download task. For successful cases, the RBI front-end starts downloading the file in the file storage S3 through the temporary download link.
[0109] This application provides a systematic method to ensure that download activities in a remote isolated secure browser are fully securely controlled and supervised, thereby improving overall network security.
[0110] The above embodiments include at least the following significant effects:
[0111] Security Improvements:
[0112] (1) The introduction of the Remote Isolation Secure Browser (RBI) effectively isolates potential security risks when users access web pages and download files, protecting user devices from malware and network attacks.
[0113] (2) Permission verification and file checking ensure that only authorized users can download files, and limit the size of downloaded files, effectively preventing excessively large files from having a negative impact on the system and user experience.
[0114] Performance optimization:
[0115] (1) Intelligent selection and deployment of RBI edge servers can optimize user access and download performance based on real-time load and network conditions, improving response speed and stability.
[0116] (2) In-container download technology effectively utilizes system resources, improves download speed, optimizes the file transfer process, and reduces network congestion and transmission delays.
[0117] User experience improvement:
[0118] (1) The generation and management of temporary download links allows users to easily obtain and download the files they need without the need for complicated login and authorization processes, thus simplifying the operation process.
[0119] (2) The error handling and feedback mechanism promptly provides feedback on download error information, such as insufficient permissions or file size exceeding the limit, thus improving user convenience and satisfaction.
[0120] Enhanced management and monitoring functions:
[0121] (1) The use of message queues optimizes the information transmission and collaboration between modules within the system, enabling efficient transmission and processing of upload results and download links, thus enhancing the manageability and scalability of the system.
[0122] (2) Enhanced auditing and monitoring functions enable administrators to effectively track and monitor the file download and upload process, ensuring the transparency and security of system operations.
[0123] Wide applicability:
[0124] This application is not only suitable for the file download needs of general Internet users, but can also be applied to scenarios with specific security requirements such as enterprise-level and educational institutions, such as confidential file downloads and internal file sharing.
[0125] In summary, the present invention effectively improves the security, performance and user experience in the file download process by introducing the remote isolation secure browser (RBI) and related technologies and optimization measures, and has broad application prospects and market competitive advantages.
[0126] It should be understood that, although the steps in the flowcharts involved in the above embodiments are displayed in sequence according to the indication of the arrows, these steps are not necessarily executed in sequence according to the order indicated by the arrows. Unless there is a clear explanation in this article, the execution of these steps is not strictly limited in order, and these steps can be executed in other orders. Moreover, at least a part of the steps in the flowcharts involved in the above embodiments may include multiple steps or multiple stages, and these steps or stages are not necessarily executed at the same time, but can be executed at different times, and the execution order of these steps or stages is not necessarily carried out in sequence, but can be executed in turn or alternately with other steps or at least a part of the steps or stages in other steps.
[0127] Based on the same inventive concept, the embodiment of the present application also provides a file download device for implementing the file download method involved above. The implementation scheme for solving the problem provided by the device is similar to the implementation scheme recorded in the above method, so the specific limitations in one or more file download device embodiments provided below can refer to the limitations on the file download method above, and will not be repeated here.
[0128] In an exemplary embodiment, as shown in FIG5 , a file downloading device is provided, comprising: a first receiving module 501, a downloading module 502, a file link generating module 503 and a sending module 504, wherein:
[0129] The first receiving module 501 is used to receive a download request sent by the RBI front end through the RBI manager, where the download request carries an identifier of a file to be downloaded;
[0130] A download module 502, configured to download the file corresponding to the file identifier to be downloaded through the RBI streaming client, and send information on the completion of the file download to the RBI manager client;
[0131] The file link generation module 503 is used to upload the file to the file storage through the RBI manager client and obtain the file link generated by the file storage;
[0132] The sending module 504 is used to return the file link to the RBI front end, and the file link is used for the RBI front end to download the file.
[0133] In one of the optional embodiments, the above-mentioned device also includes: a startup module, used to receive a download process trigger instruction sent by the RBI front end; call the initialization interface of the RBI manager to start the download process; determine the RBI edge server corresponding to the download process trigger instruction based on the load balancing strategy through the RBI manager, and establish a connection between the edge server and the RBI front end; transmit web page content to the RBI front end through the edge server.
[0134] In one of the optional embodiments, the above-mentioned device also includes: a permission verification module, which is used to perform permission verification on the download request through the RBI streaming media client, and to verify the file size corresponding to the file identifier to be downloaded; when the permission verification passes and the file size corresponding to the file identifier to be downloaded is within a preset range, continue to execute the step of downloading the file corresponding to the file identifier to be downloaded through the RBI streaming media client.
[0135] In one of the optional embodiments, the above-mentioned file link generation module 503 is specifically used to return the generated file link to the RBI manager through the file storage, wherein the file link is a temporary download link with a validity period; send the file link to the message queue through the RBI manager; notify the RBI streaming client of the file link through the message queue; and return the file link to the RBI front end through the RBI streaming client.
[0136] In one of the optional embodiments, the download module 502 is specifically used to start the download function in the container through the RBI streaming media client to download the file corresponding to the file identifier to be downloaded.
[0137] In one of the optional embodiments, the above-mentioned device further includes: a security processing module, which is used to perform security processing on the file through the file storage.
[0138] Each module in the above-mentioned file downloading device can be implemented in whole or in part by software, hardware or a combination thereof. Each module can be embedded in or independent of a processor in a computer device in the form of hardware, or can be stored in a memory in a computer device in the form of software, so that the processor can call and execute operations corresponding to each module above.
[0139] In an exemplary embodiment, a computer device is provided, which may be a server, and its internal structure diagram may be shown in FIG6. The computer device includes a processor, a memory, an input / output interface (Input / Output, referred to as I / O) and a communication interface. The processor, the memory and the input / output interface are connected via a system bus, and the communication interface is connected to the system bus via the input / output interface. The processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program and a database. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The input / output interface of the computer device is used to exchange information between the processor and an external device. The communication interface of the computer device is used to communicate with an external RBI front end through a network connection. When the computer program is executed by the processor, a file download method is implemented.
[0140] Those skilled in the art will understand that the structure shown in FIG. 6 is merely a block diagram of a partial structure related to the solution of the present application, and does not constitute a limitation on the computer device to which the solution of the present application is applied. The specific computer device may include more or fewer components than shown in the figure, or combine certain components, or have a different arrangement of components.
[0141] In an exemplary embodiment, a computer device is provided, including a memory and a processor, wherein a computer program is stored in the memory, and the processor implements the following steps when executing the computer program: receiving a download request sent by an RBI front end through an RBI manager, the download request carrying an identifier of a file to be downloaded; downloading a file corresponding to the identifier of the file to be downloaded through an RBI streaming client, and sending information on the completion of the file download to the RBI manager client; uploading the file to a file storage through the RBI manager client, and obtaining a file link generated by the file storage; returning the file link to the RBI front end, and the file link is used by the RBI front end to download the file.
[0142] In one embodiment, before receiving the download request sent by the RBI front end, the processor executes the computer program, including: receiving the download process trigger instruction sent by the RBI front end; calling the initialization interface of the RBI manager to start the download process; determining the RBI edge server corresponding to the download process trigger instruction based on the load balancing strategy through the RBI manager, and establishing a connection between the edge server and the RBI front end; transmitting the web page content to the RBI front end through the edge server.
[0143] In one embodiment, before the processor executes the computer program to download the file corresponding to the file identifier to be downloaded through the RBI streaming client, it also includes: performing a permission check on the download request through the RBI streaming client, and checking the file size corresponding to the file identifier to be downloaded; when the permission check passes and the file size corresponding to the file identifier to be downloaded is within a preset range, continue to execute the step of downloading the file corresponding to the file identifier to be downloaded through the RBI streaming client.
[0144] In one embodiment, the acquisition of the file link generated by the file storage implemented by the processor when executing the computer program includes: returning the generated file link to the RBI manager through the file storage, wherein the file link is a temporary download link with a validity period; sending the file link to the message queue through the RBI manager; notifying the RBI streaming client of the file link through the message queue; and returning the file link to the RBI front end through the RBI streaming client.
[0145] In one embodiment, the downloading of the file corresponding to the file identifier to be downloaded by the RBI streaming client implemented when the processor executes the computer program includes: starting a download function in a container by the RBI streaming client to download the file corresponding to the file identifier to be downloaded.
[0146] In one embodiment, before the processor executes the computer program to obtain the file link generated by the file storage, the process further includes: performing security processing on the file through the file storage.
[0147] In one embodiment, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, the following steps are implemented: receiving a download request sent by an RBI front end through an RBI manager, the download request carrying an identifier of a file to be downloaded; downloading a file corresponding to the identifier of the file to be downloaded through an RBI streaming client, and sending information on the completion of the file download to the RBI manager client; uploading the file to a file storage through the RBI manager client, and obtaining a file link generated by the file storage; returning the file link to the RBI front end, and the file link is used by the RBI front end to download the file.
[0148] In one embodiment, before receiving the download request sent by the RBI front end, the computer program implemented when executed by the processor includes: receiving a download process trigger instruction sent by the RBI front end; calling the initialization interface of the RBI manager to start the download process; determining the RBI edge server corresponding to the download process trigger instruction based on the load balancing strategy through the RBI manager, and establishing a connection between the edge server and the RBI front end; transmitting web page content to the RBI front end through the edge server.
[0149] In one embodiment, before the computer program is executed by the processor and the file corresponding to the file identifier to be downloaded is downloaded through the RBI streaming client, it also includes: performing a permission check on the download request through the RBI streaming client, and checking the file size corresponding to the file identifier to be downloaded; when the permission check passes and the file size corresponding to the file identifier to be downloaded is within a preset range, continuing to execute the step of downloading the file corresponding to the file identifier to be downloaded through the RBI streaming client.
[0150] In one embodiment, the method of obtaining a file link generated by a file storage device when a computer program is executed by a processor includes: returning the generated file link to an RBI manager through the file storage device, wherein the file link is a temporary download link with a validity period; sending the file link to a message queue through the RBI manager; notifying an RBI streaming client of the file link through the message queue; and returning the file link to an RBI front end through the RBI streaming client.
[0151] In one embodiment, the computer program executed by the processor downloads the file corresponding to the file identifier to be downloaded through the RBI streaming client, including: starting the download function in the container through the RBI streaming client to download the file corresponding to the file identifier to be downloaded.
[0152] In one embodiment, before obtaining the file link generated by the file storage device when the computer program is executed by the processor, the process further includes: performing security processing on the file through the file storage device.
[0153] In one embodiment, a computer program product is provided, including a computer program, which implements the following steps when executed by a processor: receiving a download request sent by an RBI front end through an RBI manager, the download request carrying an identifier of a file to be downloaded; downloading a file corresponding to the identifier of the file to be downloaded through an RBI streaming client, and sending information on the completion of the file download to the RBI manager client; uploading the file to a file storage through the RBI manager client, and obtaining a file link generated by the file storage; returning the file link to the RBI front end, and the file link is used by the RBI front end to download the file.
[0154] In one embodiment, before receiving the download request sent by the RBI front end, the computer program implemented when executed by the processor includes: receiving a download process trigger instruction sent by the RBI front end; calling the initialization interface of the RBI manager to start the download process; determining the RBI edge server corresponding to the download process trigger instruction based on the load balancing strategy through the RBI manager, and establishing a connection between the edge server and the RBI front end; transmitting web page content to the RBI front end through the edge server.
[0155] In one embodiment, before the computer program is executed by the processor and the file corresponding to the file identifier to be downloaded is downloaded through the RBI streaming client, it also includes: performing a permission check on the download request through the RBI streaming client, and checking the file size corresponding to the file identifier to be downloaded; when the permission check passes and the file size corresponding to the file identifier to be downloaded is within a preset range, continuing to execute the step of downloading the file corresponding to the file identifier to be downloaded through the RBI streaming client.
[0156] In one embodiment, the method of obtaining a file link generated by a file storage device when a computer program is executed by a processor includes: returning the generated file link to an RBI manager through the file storage device, wherein the file link is a temporary download link with a validity period; sending the file link to a message queue through the RBI manager; notifying an RBI streaming client of the file link through the message queue; and returning the file link to an RBI front end through the RBI streaming client.
[0157] In one embodiment, the computer program executed by the processor downloads the file corresponding to the file identifier to be downloaded through the RBI streaming client, including: starting the download function in the container through the RBI streaming client to download the file corresponding to the file identifier to be downloaded.
[0158] In one embodiment, before obtaining the file link generated by the file storage device when the computer program is executed by the processor, the process further includes: performing security processing on the file through the file storage device.
[0159] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of relevant data must comply with relevant regulations.
[0160] A person of ordinary skill in the art can understand that all or part of the processes in the above-mentioned embodiment method can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to the memory, database or other medium used in the embodiments provided in the present application can include at least one of non-volatile memory and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetic random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. As an illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM). The database involved in each embodiment provided in this application may include at least one of a relational database and a non-relational database. Non-relational databases may include distributed databases based on blockchains, etc., but are not limited to this. The processor involved in each embodiment provided in this application may be a general-purpose processor, a central processing unit, a graphics processor, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, an artificial intelligence (AI) processor, etc., but are not limited to this.
[0161] The technical features of the above embodiments may be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this application.
[0162] The above-described embodiments only express several implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the present application. It should be pointed out that, for a person of ordinary skill in the art, several variations and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the present application shall be subject to the attached claims.
Claims
1. A file downloading method, characterized in that: The method comprises: Receiving, through the RBI manager, a download request sent by the RBI front end, wherein the download request carries an identifier of a file to be downloaded; Download the file corresponding to the to-be-downloaded file identifier through the RBI streaming client, and send information indicating that the file download is complete to the RBI manager client; Uploading the file to a file storage device through the RBI manager client, and obtaining a file link generated by the file storage device; The file link is returned to the RBI front end, and the file link is used for the RBI front end to download the file.
2. The method according to claim 1, characterized in that Before receiving the download request sent by the RBI front end, the method includes: Receive download process trigger instructions sent by the RBI front end; Call the initialization interface of the RBI manager to start the download process; Determine, by the RBI manager based on a load balancing strategy, an RBI edge server corresponding to the download process trigger instruction, and establish a connection between the edge server and the RBI front end; The web page content is transmitted to the RBI front end through the edge server.
3. The method according to claim 1, characterized in that Before downloading the file corresponding to the to-be-downloaded file identifier through the RBI streaming media client, the method further includes: Performing an authority check on the download request through the RBI streaming media client, and checking the file size corresponding to the file identifier to be downloaded; When the permission check passes and the file size corresponding to the to-be-downloaded file identifier is within a preset range, the step of downloading the file corresponding to the to-be-downloaded file identifier through the RBI streaming media client is continued.
4. The method according to claim 1, characterized in that: The obtaining of the file link generated by the file storage device comprises: Returning the generated file link to the RBI manager through the file storage, wherein the file link is a temporary download link with a validity period; Sending the file link to a message queue via the RBI manager; Notify the RBI streaming media client of the file link through the message queue; The file link is returned to the RBI front end via the RBI streaming client.
5. The method according to any one of claims 1 to 4, characterized in that: The downloading of the file corresponding to the to-be-downloaded file identifier by the RBI streaming media client includes: The download function is started in the container through the RBI streaming media client to download the file corresponding to the file identifier to be downloaded.
6. The method according to any one of claims 1 to 4, characterized in that: Before obtaining the file link generated by the file storage, the method further includes: The file is security processed by the file storage.
7. A file downloading device, characterized in that: The device comprises: A first receiving module, configured to receive a download request sent by the RBI front end through the RBI manager, wherein the download request carries an identifier of a file to be downloaded; A download module, used for downloading the file corresponding to the to-be-downloaded file identifier through the RBI streaming client, and sending information on the completion of the file download to the RBI manager client; A file link generation module, used to upload the file to a file storage device through the RBI manager client, and obtain a file link generated by the file storage device; The sending module is used to return the file link to the RBI front end, and the file link is used for the RBI front end to download the file.
8. A computer device comprising a memory and a processor, wherein the memory stores a computer program, wherein: When the processor executes the computer program, the steps of the method according to any one of claims 1 to 6 are implemented.
9. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 6 are implemented.
10. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 6 are implemented.
Citation Information
Patent Citations
File output method, file downloading method, equipment and storage medium
CN116455890A
Inline file download control in remote browser isolation system
CN116584086A
Security access method and system and readable storage medium
CN116643680A
User based remote browser isolation
GB202219708D0
System and method for client device authentication through remote browser isolation
US20230409680A1