Function access control method and device of cloud platform and electronic equipment

Abstract

The invention relates to a function access control method and device of a cloud platform and electronic equipment. The method comprises the steps that under the condition that a first access request sent by a first external subsystem is received, a first secret key string of the first external subsystem is acquired from the first access request, and the first access request is used for requesting to access a first function in any item space of a first module in a cloud platform; under the condition that the first key string is consistent with the system key string of the first module, allowing the first external subsystem to access the first function; and under the condition that the first key string is inconsistent with the system key string of the first module, refusing the first external subsystem to access the first function. The technical problem that the project function security of the cloud platform is low is solved.

Description

Technical Field

[0001] The present application relates to the field of computers, and in particular to a method, device, storage medium and electronic device for controlling functional access to a cloud platform. Background Art

[0002] In the prior art, the authentication method of the cloud platform is to authenticate access based on the user level. If the cloud platform system is logged in through the system account of the cloud platform system, the user has the right to access all modules and projects on the cloud platform, including modules and projects of other users. Therefore, in the prior art, different users can view each other's functions in the modules and projects on the cloud platform, resulting in the problem of low security of project functions. Summary of the invention

[0003] The present application provides a method, device, storage medium and electronic device for controlling functional access of a cloud platform to solve the technical problem of low functional security of projects on the cloud platform.

[0004] In a first aspect, the present application provides a method for functional access control of a cloud platform, comprising: upon receiving a first access request sent by a first external subsystem, obtaining a first key string of the first external subsystem from the first access request, wherein the first access request is used to request access to a first function in any project space of a first module in the cloud platform; when the first key string is consistent with a system key string of the first module, allowing the first external subsystem to access the first function; when the first key string is inconsistent with the system key string of the first module, denying the first external subsystem access to the first function.

[0005] In the second aspect, the present application provides a function access control device for a cloud platform, comprising: an acquisition module, used to obtain a first key string of the first external subsystem from the first access request when a first access request sent by the first external subsystem is received, wherein the first access request is used to request access to a first function in any project space of a first module in the cloud platform; a processing module, used to allow the first external subsystem to access the first function when the first key string is consistent with the system key string of the first module; and deny the first external subsystem to access the first function when the first key string is inconsistent with the system key string of the first module.

[0006] As an optional example, the above-mentioned device also includes: a first receiving module, used to receive a first creation request from the above-mentioned first external subsystem before receiving a first access request sent by the first external subsystem, wherein the above-mentioned first creation request is used to request the creation of a first function on the above-mentioned cloud platform; a first creation module, used to create the above-mentioned first module when the above-mentioned cloud platform includes the above-mentioned first function, create a first project space in the above-mentioned first module, and set the function code of the first function of the above-mentioned cloud platform to the above-mentioned first project space; when the above-mentioned cloud platform does not include the above-mentioned first function, create the above-mentioned first module, obtain the function code of the above-mentioned first function from the above-mentioned first external subsystem and save the function code of the above-mentioned first function in the above-mentioned cloud platform, create the above-mentioned first project space in the above-mentioned first module and set the function code of the above-mentioned first function to the above-mentioned first project space.

[0007] As an optional example, the above-mentioned device also includes: a second receiving module, which is used to create a second project space in the above-mentioned first module after creating the above-mentioned first module and receiving a second creation request from the above-mentioned first external subsystem, wherein the above-mentioned second creation request is used to request to create a second function on the above-mentioned cloud platform; a second creation module, which is used to create a second project space in the above-mentioned first module when the above-mentioned cloud platform includes the above-mentioned second function, and set the function code of the second function of the above-mentioned cloud platform to the above-mentioned second project space; when the above-mentioned cloud platform does not include the above-mentioned second function, obtain the function code of the above-mentioned second function from the above-mentioned first external subsystem and save the function code of the above-mentioned second function in the above-mentioned cloud platform, create the above-mentioned second project space in the above-mentioned first module and set the function code of the above-mentioned second function to the above-mentioned second project space.

[0008] As an optional example, the apparatus further includes: a generating module, configured to generate the system key string for the first module after creating the first module; and send the system key string to the first external subsystem.

[0009] As an optional example, the above-mentioned device also includes: a monitoring module, which is used to obtain the capacity of the remaining creatable project space of the above-mentioned first external subsystem when the above-mentioned first project space or the above-mentioned second project space is created in the above-mentioned first module; when the above-mentioned capacity is greater than the capacity of the above-mentioned first project space or the above-mentioned second project space, the above-mentioned first project space or the above-mentioned second project space is created in the above-mentioned first module.

[0010] As an optional example, the above-mentioned device also includes: a third receiving module, used to receive a third creation request from the second external subsystem after creating the above-mentioned first module, wherein the above-mentioned third creation request is used to request to create the above-mentioned first function on the above-mentioned cloud platform; a third creation module, used to create a second module, create a third project space in the above-mentioned second module, and set the function code of the first function of the above-mentioned cloud platform to the above-mentioned third project space; generate a system key string for the above-mentioned second module; and send the system key string generated for the above-mentioned second module to the above-mentioned second external subsystem.

[0011] As an optional example, the above-mentioned device also includes: a registration module, used to register an application programming interface before receiving a first access request sent by the first external subsystem; and send the interface address of the above-mentioned application programming interface to the above-mentioned first external subsystem, so that the above-mentioned first external subsystem sends the above-mentioned first access request through the above-mentioned application programming interface.

[0012] In a third aspect, the present application provides an electronic device comprising: at least one communication interface; at least one bus connected to the at least one communication interface; at least one processor connected to the at least one bus; and at least one memory connected to the at least one bus, wherein the memory stores a computer program, and the processor is configured to implement any one of the above-mentioned cloud platform function access control methods when executing the computer program.

[0013] In a fourth aspect, the present application also provides a computer storage medium storing computer executable instructions, wherein the computer executable instructions are used to execute any of the above-mentioned cloud platform function access control methods of the present application.

[0014] The above technical solution provided by the embodiment of the present application has the following advantages over the prior art: the method provided by the embodiment of the present application allows the user to apply for access to the first function in the cloud platform through an external subsystem outside the cloud platform, and the first function is located in the project space of the module of the cloud platform. Each external subsystem can only access the functions in the project space of the module to which it has permission, and whether it has permission is determined by the key string, thereby ensuring the security of the functions in the project space on the cloud platform and preventing different users from accessing each other's functions. BRIEF DESCRIPTION OF THE DRAWINGS

[0015] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the invention and, together with the description, serve to explain the principles of the invention.

[0016] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, for ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative labor.

[0017] One or more embodiments are exemplarily described by pictures in the corresponding drawings, and these exemplified descriptions do not constitute limitations on the embodiments. Elements with the same reference numerals in the drawings represent similar elements, and unless otherwise stated, the figures in the drawings do not constitute proportional limitations.

[0018] Figure 1 A flowchart of a method for controlling access to functions of a cloud platform provided in an embodiment of the present application;

[0019] Figure 2 An access control schematic diagram of a method for controlling functional access to a cloud platform provided in an embodiment of the present application;

[0020] Figure 3 A flowchart of another method for controlling access to functions of a cloud platform provided in an embodiment of the present application;

[0021] Figure 4 A flowchart of another method for controlling access to functions of a cloud platform provided in an embodiment of the present application;

[0022] Figure 5 An access control diagram of another cloud platform function access control method provided in an embodiment of the present application;

[0023] Figure 6 A flowchart of another method for controlling access to functions of a cloud platform provided in an embodiment of the present application;

[0024] Figure 7 A flowchart of another method for controlling access to functions of a cloud platform provided in an embodiment of the present application;

[0025] Figure 8 A schematic diagram of the structure of a function access control device for a cloud platform provided in an embodiment of the present application;

[0026] Fig. 9 A schematic diagram of an electronic device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0027] In order to make the purpose, technical solution and advantages of the embodiments of the present application clearer, the technical solution in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of this application.

[0028] The disclosure below provides many different embodiments or examples to implement different structures of the present invention. In order to simplify the disclosure of the present invention, the parts and settings of specific examples are described below. Of course, they are only examples, and the purpose is not to limit the present invention. In addition, the present invention can repeat reference numbers and / or letters in different examples. This repetition is for the purpose of simplification and clarity, and does not itself indicate the relationship between the various embodiments and / or settings discussed.

[0029] Figure 1 A flowchart of a method for controlling access to functions of a cloud platform provided in an embodiment of the present application. Figure 1 As shown, the function access control method of the above cloud platform includes:

[0030] S102, upon receiving a first access request sent by a first external subsystem, obtaining a first key string of the first external subsystem from the first access request, wherein the first access request is used to request access to a first function in any project space of a first module in the cloud platform;

[0031] S104-1, when the first key string is consistent with the system key string of the first module, allowing the first external subsystem to access the first function;

[0032] S104-2: When the first key string is inconsistent with the system key string of the first module, deny the first external subsystem access to the first function.

[0033] The above-mentioned cloud platform can be a big data cloud platform, and the big data cloud platform can interact with external subsystems. External subsystems refer to systems that are independent of the big data cloud platform and can transmit data with the big data cloud platform, such as third-party systems, customer systems, etc. The big data cloud platform can provide different permissions for different third-party systems. Different third-party systems can only access modules on the big data cloud platform that they have access rights to. For example, if third-party system A has access rights to module 1 on the big data cloud platform, then third-party system A is allowed to access functions in all project spaces of module 1. If third-party system A does not have access rights to module 2, then third-party system A is not allowed to access functions in any project space of module 2.

[0034] The first module mentioned above is the module corresponding to the first external subsystem. Each subsystem can correspond to a module on the cloud platform. The module is the unit that describes the application system and is the basic granularity of the cloud platform's external authentication. The module corresponds to the external subsystem. The module can contain one or more project spaces. The project space refers to the development permission unit in the process of developing modules on the cloud platform. It is the basic granularity of all computing resources and data permission authorization in the big cloud platform. Each project space is used to store the function code of the function to implement the corresponding function.

[0035] In this embodiment, the first access request may include three parts of content. The first part of the content is used to mark the module and the function under the module requested to be accessed by the first access request. The second part of the content is the first key string. The third part of the content is the input parameter, that is, the input parameter is input into the function under the module to realize the function, such as resource calculation, calling service, etc.

[0036] In this embodiment, the cloud platform can receive an access request sent by an external subsystem, and the access request carries a key string assigned by the cloud platform to the external subsystem. The first access request of the first external subsystem carries the first key string, and the request is to access the first module. If the first external subsystem requests to access the second module of the cloud platform, the second key string corresponding to the second module can be carried in the first access request. After receiving the first access request, the cloud platform obtains the first key string from the first access request, and then compares the first key string with the system key string of the first module stored on the cloud platform. If the two are consistent, the first external subsystem is allowed to access the first module, and the first external subsystem can access all functions in the project space under the first module. If the first key string is inconsistent with the system key string, it means that the first external subsystem does not have access rights to the first module on the cloud platform, and the first external subsystem is not allowed to access the first module.

[0037] For example, Figure 2 As shown, Figure 2 In the example, the cloud platform includes the first module, the second module and the third module. The external subsystem 1 has access rights to the first module, and the external subsystem 2 has access rights to the second module. The first access request of the external subsystem 1 is sent to the cloud platform. The cloud platform determines that the external subsystem 1 has access rights to the first module by comparing the first key string in the first access request. The cloud platform then allows the external subsystem 1 to access the functions in the project space of the first module, but does not allow the external subsystem 1 to access the functions in the project spaces of the second and third modules. The external subsystem 2 is allowed to access the functions in the project space of the second module, but does not allow the external subsystem 2 to access the functions in the project spaces of the first and third modules.

[0038] The method provided by the embodiment of the present application allows a user to apply for access to a first function in the cloud platform through an external subsystem outside the cloud platform, and the first function is located in the project space of a module of the cloud platform. Each external subsystem can only access functions in the project space of the module to which it has permission, and whether it has permission is determined by a key string, thereby ensuring the security of functions in the project space on the cloud platform and preventing different users from accessing each other's functions.

[0039] As an alternative example, Figure 3 As shown, before receiving the first access request sent by the first external subsystem, the method further includes:

[0040] S302, receiving a first creation request from a first external subsystem, wherein the first creation request is used to request creation of a first function on the cloud platform;

[0041] S304, when the cloud platform includes the first function, create a first module, create a first project space in the first module, and set the function code of the first function of the cloud platform into the first project space; when the cloud platform does not include the first function, create a first module, obtain the function code of the first function from the first external subsystem and save the function code of the first function in the cloud platform, create a first project space in the first module and set the function code of the first function into the first project space.

[0042] In this embodiment, before receiving the first access request of the first external subsystem, a corresponding module can be assigned to each external subsystem. For example, before receiving the first access request of the first external subsystem, a first creation request of the first external subsystem is received, and the first creation request is used to create a first function in the cloud platform, then the cloud platform can create a first module for the first external subsystem, create a project space in the first module, and provide the first function through the project space. When creating a project space in the first module and providing the first function in the project space, if the cloud platform has a function code that provides the first function, the function code can be set in the project space. If the cloud platform does not have the function code, the cloud platform can obtain the function code from the first external subsystem and save it, and set the function code in the project space.

[0043] That is to say, when the external subsystem wants to implement a certain function through the cloud platform, it can first request the function on the cloud platform. If the cloud platform provides the function, it can create a module corresponding to the external subsystem, and then create a project space in the module and set the function in the project space. If the cloud platform does not have the function, the external subsystem can upload the function code of the function to the cloud platform, and the cloud platform saves the code and creates a project space in the module and sets the function in the project space. When the external subsystem implements the function through the cloud platform again, the module corresponding to the external subsystem must already exist on the cloud platform, and the project space in the module already has the function. The external subsystem can directly access the function of the cloud platform (if it has permission).

[0044] As an alternative example, Figure 4 As shown, after creating the first module, the method further includes:

[0045] S402, upon receiving a second creation request from the first external subsystem, creating a second project space in the first module, wherein the second creation request is used to request creation of a second function on the cloud platform;

[0046] S404, when the cloud platform includes the second function, create a second project space in the first module, and set the function code of the second function of the cloud platform into the second project space; when the cloud platform does not include the second function, obtain the function code of the second function from the first external subsystem and save the function code of the second function in the cloud platform, create a second project space in the first module and set the function code of the second function into the second project space.

[0047] Continue to combine Figure 3 In this embodiment, a first module is created in a first external subsystem, and a first project space is created in the first module. After a first function is set in the first project space, if the first external subsystem applies to create a second function, a second project space can be created in the first module, and the second function can be set in the second project space. In other words, the requested function of an external subsystem will be created in a module, and multiple project spaces of a module will carry multiple functions.

[0048] For example, Figure 5 As shown, the external subsystem 1 requests to create N functions, then a first module is created on the cloud platform, multiple project spaces are created in the first module, and one function is set in each project space.

[0049] As an optional example, after creating the first module, the method further includes: generating a system key string for the first module; and sending the system key string to the first external subsystem.

[0050] Continue to combine Figure 3 , 4 The embodiment is described in detail. In this embodiment, the first external subsystem can create multiple functions in the cloud platform. The cloud platform sets the multiple functions by creating a first module and creating multiple project spaces in the first module. The first external subsystem has access rights to all functions of all project spaces under the first module, and the access rights are granted by generating a system key string by the cloud platform. The cloud platform sends the system key string generated for the first module to the first external subsystem, and the first external subsystem can access all functions of all project spaces under the first module through the system key string.

[0051] As an optional example, when creating the first project space or the second project space in the first module, the above method also includes: obtaining the remaining capacity of the first external subsystem that can create project space; when the capacity is greater than the capacity of the first project space or the second project space, creating the first project space or the second project space in the first module.

[0052] In this embodiment, a certain project space capacity can be allocated to each external subsystem. When any external subsystem creates a module on the cloud platform and further creates a project space, it needs to occupy the capacity of the cloud platform. The capacity of the cloud platform occupied by each project space may be different. In this embodiment, the capacity of the remaining creatable project space of an external subsystem can be monitored. When the external subsystem wants to create a new function, it checks whether the capacity of the project space required by the function is less than the capacity of the creatable project space, thereby determining whether the external subsystem can create a project space. By constraining the project space created by the external subsystem on the cloud platform, the problem of an external subsystem creating unlimited project space on the cloud platform can be avoided.

[0053] As an alternative example, Figure 6 As shown, after creating the first module, the method further includes:

[0054] S602, receiving a third creation request from a second external subsystem, wherein the third creation request is used to request creation of a first function on the cloud platform;

[0055] S604, creating a second module, creating a third project space in the second module, and setting the function code of the first function of the cloud platform into the third project space;

[0056] S606, generating a system key string for the second module;

[0057] S608: Send the system key string generated for the second module to the second external subsystem.

[0058] Continue to combine Figure 3 The embodiment is described. When the first external subsystem creates a first module in the cloud platform and sets a first function in the first project space in the first module, if the second external subsystem also wants to create a first function in the cloud platform, the cloud platform can create a second module for the second external subsystem, create a project space in the second module, and set the first function of the first external subsystem to the project space of the second module. In addition, the cloud platform will also generate a system key string for the second module for the second external subsystem and send it to the second external subsystem.

[0059] That is to say, the first function created by the first external subsystem in the project space of the first module of the cloud platform can also be used by the second external subsystem in the second module of the cloud platform. Although both the first external subsystem and the second external subsystem can use the first function of the cloud platform, the first external subsystem only has access to the first module, and the second external subsystem only has access to the second module. The two subsystems cannot access the functions under each other's modules. Different external subsystems can achieve the same function through the first module, but different external subsystems input different parameters, so the results achieved by using the same function are different.

[0060] As an optional example, before receiving the first access request sent by the first external subsystem, the above method also includes: registering an application programming interface; sending the interface address of the application programming interface to the first external subsystem, so that the first external subsystem sends the first access request through the application programming interface.

[0061] In this embodiment, the cloud platform can register an application programming interface (Application Programming Interface, API), and then send the address of the API to the external subsystem. The external subsystem can access the cloud platform through the API interface and send a request to the cloud platform.

[0062] For example, a first external subsystem requests to create two functions, namely a first function and a second function, and a second external subsystem requests to create a first function.

[0063] The cloud platform receives a request from the first external subsystem to create a request for the first function and the second function, and the request can be one or two. After receiving the request from the first external subsystem, the cloud platform creates a first module, creates a first project space in the first module, and sets the function code of the first function in the first project space. A second project space is created in the first module, and the function code of the second function is set in the second project space. If the cloud platform has the function codes of the first function and the second function, it is set directly. If not, it is obtained from the first external subsystem. After obtaining the code, a security check can be performed. In addition, the cloud platform receives a request from the second external subsystem to create a request for the first function, creates a second module for the second external subsystem, creates a project space in the second module, and sets the function code of the first function in the first module to the project space of the second module. The cloud platform generates a system key string for each module. The system key strings of different modules are different, and the generated system key strings are sent to their respective external subsystems.

[0064] When an external subsystem requests a function from the cloud platform, the process is as follows Figure 7 As shown. The cloud platform receives an access request from an external subsystem, which carries the module identifier of the module to be accessed by the external subsystem, the key string sent by the external subsystem, and the input parameters of the external subsystem. The cloud platform first determines the module to be accessed by the external subsystem based on the module representation, obtains the system key string of the module, and then compares the system key string with the key string sent by the external subsystem. If the two are consistent, the input parameters are input into the function code requested by the external subsystem to access, the code is run, the output result is obtained, and it is returned to the external subsystem. If the comparison result is that the key strings are inconsistent, the function requested by the external subsystem to access will not be run.

[0065] Figure 8 A schematic diagram of the structure of a function access control device for a cloud platform provided in an embodiment of the present application. Figure 8 As shown, the function access control device of the above cloud platform includes:

[0066] The acquisition module 802 is used to acquire a first key string of the first external subsystem from the first access request when receiving the first access request sent by the first external subsystem, wherein the first access request is used to request access to a first function in any project space of the first module in the cloud platform;

[0067] Processing module 804 is used to allow the first external subsystem to access the first function when the first key string is consistent with the system key string of the first module; and to deny the first external subsystem to access the first function when the first key string is inconsistent with the system key string of the first module.

[0068] The above-mentioned cloud platform can be a big data cloud platform, and the big data cloud platform can interact with external subsystems. External subsystems refer to systems that are independent of the big data cloud platform and can transmit data with the big data cloud platform, such as third-party systems, customer systems, etc. The big data cloud platform can provide different permissions for different third-party systems. Different third-party systems can only access modules on the big data cloud platform that they have access rights to. For example, if third-party system A has access rights to module 1 on the big data cloud platform, then third-party system A is allowed to access functions in all project spaces of module 1. If third-party system A does not have access rights to module 2, then third-party system A is not allowed to access functions in any project space of module 2.

[0069] The first module mentioned above is the module corresponding to the first external subsystem. Each subsystem can correspond to a module on the cloud platform. The module is the unit that describes the application system and is the basic granularity of the cloud platform's external authentication. The module corresponds to the external subsystem. The module can contain one or more project spaces. The project space refers to the development permission unit in the process of developing modules on the cloud platform. It is the basic granularity of all computing resources and data permission authorization in the big cloud platform. Each project space is used to store the function code of the function to implement the corresponding function.

[0070] In this embodiment, the first access request may include three parts of content. The first part of the content is used to mark the module and the function under the module requested to be accessed by the first access request. The second part of the content is the first key string. The third part of the content is the input parameter, that is, the input parameter is input into the function under the module to realize the function, such as resource calculation, calling service, etc.

[0071] In this embodiment, the cloud platform can receive an access request sent by an external subsystem, and the access request carries a key string assigned by the cloud platform to the external subsystem. The first access request of the first external subsystem carries the first key string, and the request is to access the first module. If the first external subsystem requests to access the second module of the cloud platform, the second key string corresponding to the second module can be carried in the first access request. After receiving the first access request, the cloud platform obtains the first key string from the first access request, and then compares the first key string with the system key string of the first module stored on the cloud platform. If the two are consistent, the first external subsystem is allowed to access the first module, and the first external subsystem can access all functions in the project space under the first module. If the first key string is inconsistent with the system key string, it means that the first external subsystem does not have access rights to the first module on the cloud platform, and the first external subsystem is not allowed to access the first module.

[0072] For example, Figure 2 As shown, Figure 2In the example, the cloud platform includes the first module, the second module and the third module. The external subsystem 1 has access rights to the first module, and the external subsystem 2 has access rights to the second module. The first access request of the external subsystem 1 is sent to the cloud platform. The cloud platform determines that the external subsystem 1 has access rights to the first module by comparing the first key string in the first access request. The cloud platform then allows the external subsystem 1 to access the functions in the project space of the first module, but does not allow the external subsystem 1 to access the functions in the project spaces of the second and third modules. The external subsystem 2 is allowed to access the functions in the project space of the second module, but does not allow the external subsystem 2 to access the functions in the project spaces of the first and third modules.

[0073] The method provided by the embodiment of the present application allows a user to apply for access to a first function in the cloud platform through an external subsystem outside the cloud platform, and the first function is located in the project space of a module of the cloud platform. Each external subsystem can only access functions in the project space of the module to which it has permission, and whether it has permission is determined by a key string, thereby ensuring the security of functions in the project space on the cloud platform and preventing different users from accessing each other's functions.

[0074] For other examples of this embodiment, please refer to the above examples and will not be described in detail here.

[0075] like Fig. 9 As shown, an embodiment of the present application provides an electronic device, including a processor 111, a communication interface 112, a memory 113 and a communication bus 114, wherein the processor 111, the communication interface 112, and the memory 113 communicate with each other through the communication bus 114.

[0076] Memory 113, used for storing computer programs;

[0077] In one embodiment of the present application, the processor 111 is used to implement the function access control method of the cloud platform provided by any one of the aforementioned method embodiments when executing the program stored in the memory 113, including:

[0078] Upon receiving a first access request sent by a first external subsystem, obtaining a first key string of the first external subsystem from the first access request, wherein the first access request is used to request access to a first function in any project space of a first module in the cloud platform;

[0079] When the first key string is consistent with the system key string of the first module, allowing the first external subsystem to access the first function;

[0080] In a case where the first key string is inconsistent with the system key string of the first module, the first external subsystem is denied access to the first function.

[0081] An embodiment of the present application also provides a computer-readable storage medium on which a computer program is stored. When the computer program is executed by a processor, the steps of the function access control method of the cloud platform provided by any of the aforementioned method embodiments are implemented.

[0082] The device embodiments described above are merely illustrative, wherein the units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, i.e., they may be located in one place, or may be distributed over multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0083] Through the description of the above implementation methods, those skilled in the art can clearly understand that each implementation method can be implemented by means of software plus a general hardware platform, and of course, it can also be implemented by hardware. Based on this understanding, the above technical solution is essentially or the part that contributes to the relevant technology can be embodied in the form of a software product, and the computer software product can be stored in a computer-readable storage medium, such as ROM / RAM, a disk, an optical disk, etc., including a number of instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to execute the methods of each embodiment or some parts of the embodiment.

[0084] It should be understood that the terms used herein are only for the purpose of describing specific example embodiments and are not intended to be limiting. Unless the context clearly indicates otherwise, the singular forms "one", "an" and "said" as used herein may also be meant to include plural forms. The terms "include", "comprise", "contain", and "have" are inclusive, and therefore specify the existence of stated features, steps, operations, elements and / or parts, but do not exclude the existence or addition of one or more other features, steps, operations, elements, parts, and / or combinations thereof. The method steps, processes, and operations described herein are not interpreted as necessarily requiring them to be performed in the specific order described or illustrated, unless the execution order is clearly indicated. It should also be understood that additional or alternative steps may be used.

[0085] The foregoing is merely a specific embodiment of the present invention, which enables those skilled in the art to understand or implement the present invention. Various modifications to these embodiments will be apparent to those skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the present invention. Therefore, the present invention will not be limited to the embodiments shown herein, but rather to the widest scope consistent with the principles and novel features claimed herein.

Claims

1. A method for controlling functional access to a cloud platform, characterized in that: include: Upon receiving a first access request sent by a first external subsystem, obtaining a first key string of the first external subsystem from the first access request, wherein the first access request is used to request access to a first function in any project space of a first module in the cloud platform; When the first key string is consistent with the system key string of the first module, allowing the first external subsystem to access the first function; When the first key string is inconsistent with the system key string of the first module, the first external subsystem is denied access to the first function.

2. The method according to claim 1, characterized in that Before receiving the first access request sent by the first external subsystem, the method further includes: Receiving a first creation request of the first external subsystem, wherein the first creation request is used to request creation of a first function on the cloud platform; In a case where the cloud platform includes the first function, creating the first module, creating a first project space in the first module, and setting the function code of the first function of the cloud platform into the first project space; If the cloud platform does not include the first function, create the first module, obtain the function code of the first function from the first external subsystem and save the function code of the first function in the cloud platform, create the first project space in the first module and set the function code of the first function to the first project space.

3. The method according to claim 2, characterized in that After creating the first module, the method further includes: Upon receiving a second creation request from the first external subsystem, creating a second project space in the first module, wherein the second creation request is used to request creation of a second function on the cloud platform; In the case where the cloud platform includes the second function, creating a second project space in the first module, and setting the function code of the second function of the cloud platform into the second project space; When the cloud platform does not include the second function, the function code of the second function is obtained from the first external subsystem and saved in the cloud platform, the second project space is created in the first module and the function code of the second function is set in the second project space.

4. The method according to claim 2 or 3, characterized in that: After creating the first module, the method further includes: generating the system key string for the first module; The system key string is sent to the first external subsystem.

5. The method according to claim 3, characterized in that: When creating the first project space or the second project space in the first module, the method further includes: obtaining the remaining capacity of the first external subsystem that can create project space; In a case where the capacity is greater than the capacity of the first project space or the second project space, the first project space or the second project space is created in the first module.

6. The method according to claim 2, characterized in that After creating the first module, the method further includes: receiving a third creation request from a second external subsystem, wherein the third creation request is used to request creation of the first function on the cloud platform; Creating a second module, creating a third project space in the second module, and setting the function code of the first function of the cloud platform into the third project space; generating a system key string for the second module; The system key string generated for the second module is sent to the second external subsystem.

7. The method according to claim 1, characterized in that Before receiving the first access request sent by the first external subsystem, the method further includes: Registration API; The interface address of the application programming interface is sent to the first external subsystem, so that the first external subsystem sends the first access request through the application programming interface.

8. A function access control device for a cloud platform, characterized in that: include: an acquisition module, configured to acquire a first key string of the first external subsystem from a first access request sent by the first external subsystem upon receiving the first access request, wherein the first access request is used to request access to a first function in any project space of a first module in the cloud platform; A processing module is used to allow the first external subsystem to access the first function when the first key string is consistent with the system key string of the first module; and to deny the first external subsystem to access the first function when the first key string is inconsistent with the system key string of the first module.

9. An electronic device, characterized in that: include: at least one communication interface; at least one bus connected to the at least one communication interface; at least one processor coupled to the at least one bus; At least one memory connected to the at least one bus, wherein a computer program is stored in the memory, and when the processor executes the computer program, the method described in any one of claims 1 to 7 is implemented.

10. A computer-readable storage medium, wherein the storage medium stores computer-executable instructions, wherein the computer-executable instructions are used to execute the method described in any one of claims 1 to 7 of the present application.

Images