Software authorization authentication proxy method, system, equipment and medium

Abstract

The invention discloses a software authorization authentication proxy method, system and equipment and a medium. The method comprises the following steps: configuring an authorization authentication proxy device; in response to the fact that the authorized authentication agent device is in a starting stage, calling a variable initialization service, executing an initialization process, and initializing a global variable; providing an agent authorization authentication service in response to the operation phase of the authorization authentication agent device; the proxy authorization authentication service asynchronously triggers a variable refreshing service according to threshold setting; in response to the fact that the authorization authentication agent device is in the closing stage, executing a destroying process, destroying and releasing the global variable; according to the invention, by setting two dimension counts of the number of times and the time interval, when any dimension count reaches the threshold value, the actual authorization authentication is triggered, so that the authorization authentication is prevented from being executed in each business operation, the time consumption influence of the authorization authentication on business processing is reduced, the authorization authentication efficiency is improved, and the method is suitable for a high-concurrency business scene.

Description

Technical Field

[0001] The present invention relates to the field of computer software technology, and in particular to a software authorization authentication agent method, system, device and medium. Background Art

[0002] Current commercial software usually has authorization control, and its basic implementation principle is: add authorization authentication logic before each business processing, if the authorization authentication passes, continue to process the business operation, if the authorization authentication fails, return an authorization exception.

[0003] Authorization authentication generally obtains server hardware and software authorization information, and encrypts and decrypts the software authorization information. Encryption and decryption and file reading and writing operations take a long time. If such operations are performed for every business operation, it will inevitably affect software performance.

[0004] Especially for software with high concurrency requirements, frequent encryption and decryption and file reading and writing can lead to reduced interface efficiency. Multi-threaded file reading and writing are prone to reading and writing anomalies, which in turn lead to authorization and authentication failure. Summary of the invention

[0005] The purpose of the present invention is to provide a software authorization authentication agent method, system, device and medium, thereby solving all or one of the above problems existing in the prior art.

[0006] In order to solve the above technical problems, the specific technical solutions of the present invention are as follows: In one aspect, the present invention provides a software authorization authentication agent method, comprising the following steps: Device configuration steps: Configure the authorization and authentication agent device; Startup steps: In response to the authorization and authentication agent being in the startup phase, calling a variable initialization service, executing an initialization process, and initializing global variables; Run steps: In response to the authorization and authentication proxy device being in the running stage, providing a proxy authorization and authentication service; the proxy authorization and authentication service asynchronously triggers a variable refresh service according to a threshold setting; Closing steps: In response to the authorization authentication proxy device being in the shutdown stage, a destruction process is executed to destroy and release the global variables.

[0007] In one embodiment, the configuration of the authorization authentication agent device includes: Constructing the authorization authentication agent device based on the global variable module, the authentication configuration module and the authentication service module; Calling the global variable module to define global attributes; the global attributes include: authorization authentication cache, authentication times count and last authentication update time; Calling the authentication configuration module to configure threshold information; the threshold information includes: authentication times threshold and last authentication interval threshold; The authentication service module is called to proxy the actual authentication service, and the global variable module and the authentication configuration module are combined to provide authentication services for the business; the authentication service includes: variable initialization and refresh service and proxy authentication service.

[0008] In one implementation manner, the variable initialization service includes: Call the actual authorization authentication service to obtain the software authorization authentication result; The software authorization authentication result is cached in the authorization authentication cache, the authentication times count is reset to zero, and the last authentication update time is equal to the current time.

[0009] In one embodiment, the operating step further comprises: In response to the business start, enter the proxy authentication service: The authentication times count is increased by one to determine whether the authentication times threshold is reached. If the threshold is reached, the fourth step is executed, otherwise the third step is executed; The third step includes: determining whether the interval between the current time and the last authentication time is greater than an authentication interval threshold, if it reaches the threshold, executing the fourth step, otherwise executing the fifth step; The fourth step includes: triggering an asynchronously executed variable refresh service to update global variables; the global variables include: authorization authentication cache, authentication times count and last authentication update time; The fifth step includes: obtaining the authorization authentication cache, judging whether the software authorization authentication is passed according to the cache value, and executing subsequent business operations if the authentication is passed, otherwise returning authorization authentication failure.

[0010] In one embodiment, the destruction process includes: Destroy and release global variables, including: authorization authentication cache, authentication times and last authentication update time.

[0011] In one embodiment, it also includes: When the software authorization expires, update the software authorization and call the variable refresh service to refresh the global variables.

[0012] In one embodiment, when the software authorization expires, the software authorization is updated, and a variable refresh service is called to refresh the global variables, further comprising: Call the actual authorization code update service to complete the authorization update; call the variable refresh service to update the global variables; return the authorization authentication information.

[0013] On the other hand, the present invention also provides a software authorization authentication agent system, comprising: The device configuration module is used to: configure the authorization and authentication agent device; A startup module, used for: in response to the authorization and authentication agent device being in the startup phase, calling a variable initialization service, executing an initialization process, and initializing global variables; An operation module is used to: in response to the authorization and authentication agent device being in the operation stage, provide an agent authorization and authentication service; the agent authorization and authentication service asynchronously triggers a variable refresh service according to a threshold setting; The closing module is used for: in response to the authorization and authentication agent device being in the closing stage, executing a destruction process, destroying and releasing the global variables.

[0014] On the other hand, the present invention further provides a computer-readable storage medium, on which a computer program is stored, and when the computer program is executed by a processor, the steps of the software authorization authentication agent method are implemented.

[0015] On the other hand, the present invention further provides a computer device, comprising a processor, a communication interface, a memory and a communication bus, wherein the processor, the communication interface and the memory communicate with each other via the communication bus; wherein: The memory is used to store computer programs; The processor is used to execute the steps of the software authorization authentication agent method by running the program stored in the memory.

[0016] The beneficial effects of the technical solution of the present invention are: 1. The software authorization authentication proxy method described in the present invention can be implemented by setting the counting of two dimensions, namely the number of times and the time interval. When the count of any dimension reaches the threshold, the actual authorization authentication will be triggered, thereby avoiding the execution of authorization authentication for each business operation, reducing the time-consuming impact of authorization authentication on business processing, and improving the efficiency of authorization authentication. It is suitable for high-concurrency business scenarios; moreover, the present invention supports counting control of two dimensions, namely the number of times and the time. When any dimension reaches the threshold, the authentication cache variable refresh operation can be triggered. The counting threshold supports configuration, which is flexible and easy to control; the global variable refresh of the present invention uses asynchronous single-threaded operation, which avoids the synchronous update operation blocking the current business process, and the single-threaded operation is not prone to file read and write exceptions.

[0017] 2. The software authorization authentication agent system described in the present invention can realize the software authorization authentication agent method described in the present invention through the mutual cooperation of system modules.

[0018] 3. The computer-readable storage medium described in the present invention can realize the cooperation of the guiding system module, thereby realizing the software authorization authentication agent method described in the present invention, and the computer-readable storage medium described in the present invention also effectively improves the operability of the software authorization authentication agent method.

[0019] 4. The computer device described in the present invention can store and execute the computer-readable storage medium, thereby realizing the software authorization authentication agent method described in the present invention. BRIEF DESCRIPTION OF THE DRAWINGS

[0020] In order to more clearly illustrate the specific implementation methods of the present invention or the technical solutions in the prior art, the drawings required for use in the specific implementation methods or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are some implementation methods of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0021] Figure 1 It is a flowchart of the software authorization authentication agent method described in Example 1 of the present invention; Figure 2 It is a schematic diagram of the architecture of the authorization authentication agent device in the software authorization authentication agent method described in Example 1 of the present invention; Figure 3 It is a life cycle logic diagram of the authorization authentication agent device in the software authorization authentication agent method described in Example 1 of the present invention; Figure 4 It is a flow chart of the variable initialization service in the authorization authentication agent device in the software authorization authentication agent method in Embodiment 1 of the present invention; Figure 5 It is a specific flow chart of the operation steps in the authorization authentication agent device in the software authorization authentication agent method in Embodiment 1 of the present invention; Figure 6 It is a specific flow chart of the closing step in the authorization authentication agent device in the software authorization authentication agent method in Example 1 of the present invention; Figure 7 It is a specific flow chart of the authorization code update operation in the authorization authentication agent device in the software authorization authentication agent method described in Example 1 of the present invention; Figure 8 It is a schematic diagram of the architecture of the software authorization authentication agent system described in Example 2 of the present invention; Fig. 9is a schematic diagram of the structure of the computer device described in Example 4 of the present invention; The symbols in the accompanying drawings are explained as follows: 1501, processor; 1502, communication interface; 1503, memory; 1504, communication bus. DETAILED DESCRIPTION

[0022] The preferred embodiments of the present invention are described in detail below in conjunction with the accompanying drawings so that the advantages and features of the present invention can be more easily understood by those skilled in the art, thereby making a clearer and more definite definition of the protection scope of the present invention.

[0023] In the description of the present invention, it should be noted that the embodiments described in the present invention are only part of the embodiments of the present invention, rather than all of the embodiments; based on the embodiments in the present invention, all other embodiments obtained by ordinary technicians in the field without making creative work are within the scope of protection of the present invention.

[0024] The terms "first", "second", etc. in the specification and claims of this article and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchanged where appropriate, so that the embodiments of this article described here can be implemented in an order other than those illustrated or described here. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions, for example, a process, method, device, product or equipment that includes a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or equipment. Example 1

[0025] This embodiment provides a software authorization authentication agent method, such as Figure 1 to Figure 7 As shown, the following steps are included: Device configuration steps: Configure the authorization and authentication agent device; Startup steps: In response to the authorization and authentication agent being in the startup phase, calling a variable initialization service, executing an initialization process, and initializing global variables; Run steps: In response to the authorization and authentication proxy device being in the running stage, providing a proxy authorization and authentication service; the proxy authorization and authentication service asynchronously triggers a variable refresh service according to a threshold setting; Closing steps: In response to the authorization authentication proxy device being in the shutdown stage, a destruction process is executed to destroy and release the global variables.

[0026] In one embodiment, the configuration of the authorization authentication agent device includes: Constructing the authorization authentication agent device based on the global variable module, the authentication configuration module and the authentication service module; Calling the global variable module to define global attributes; the global attributes include: authorization authentication cache, authentication times count and last authentication update time; Calling the authentication configuration module to configure threshold information; the threshold information includes: authentication times threshold and last authentication interval threshold; The authentication service module is called to proxy the actual authentication service, and the global variable module and the authentication configuration module are combined to provide authentication services for the business; the authentication service includes: variable initialization and refresh service and proxy authentication service.

[0027] In one implementation manner, the variable initialization service includes: Call the actual authorization authentication service to obtain the software authorization authentication result; The software authorization authentication result is cached in the authorization authentication cache, the authentication times count is reset to zero, and the last authentication update time is equal to the current time.

[0028] In one embodiment, the operating step further comprises: In response to the business start, enter the proxy authentication service: The authentication times count is increased by one to determine whether the authentication times threshold is reached. If the threshold is reached, the fourth step is executed, otherwise the third step is executed; The third step includes: determining whether the interval between the current time and the last authentication time is greater than an authentication interval threshold, if it reaches the threshold, executing the fourth step, otherwise executing the fifth step; The fourth step includes: triggering an asynchronously executed variable refresh service to update global variables; the global variables include: authorization authentication cache, authentication times count and last authentication update time; The fifth step includes: obtaining the authorization authentication cache, judging whether the software authorization authentication is passed according to the cache value, and executing subsequent business operations if the authentication is passed, otherwise returning authorization authentication failure.

[0029] In one embodiment, the destruction process includes: Destroy and release global variables, including: authorization authentication cache, authentication times and last authentication update time.

[0030] In one embodiment, it also includes: When the software authorization expires, update the software authorization and call the variable refresh service to refresh the global variables.

[0031] In one embodiment, when the software authorization expires, the software authorization is updated, and a variable refresh service is called to refresh the global variables, further comprising: Call the actual authorization code update service to complete the authorization update; call the variable refresh service to update the global variables; return the authorization authentication information.

[0032] As an example, in actual operation, the steps of this method are as follows: The first step is to configure the count threshold and time interval threshold and start the agent device.

[0033] In the second step, when the device starts, it calls the actual authorization authentication service, obtains the authentication information, updates it to the authentication cache, and updates the count variable to 0 and the "last authentication update time variable" to the current time.

[0034] In the third step, the business calls the authorization authentication service of the authorization proxy device. The proxy device adds 1 to the times count and determines whether the times count reaches the threshold. If it does not reach the threshold, it executes step 4. If it reaches the threshold, it jumps to step 5. In the fourth step, the agent device determines whether the time interval reaches the threshold. If it does not reach the threshold, it jumps to step 6. If it reaches the threshold, it executes step 5. In the fifth step, the proxy device asynchronously calls the variable update service to update the authentication cache, resets the count variable value to 0, and the "last authentication update time variable" to the current time.

[0035] In the sixth step, the proxy device obtains the authentication cache information and determines whether the software authorization is valid. If it is valid, the business operation continues to be executed; otherwise, a software authorization exception is returned.

[0036] Step 7: The business calls the authorization authentication service again and repeats steps 3-6. When the device is turned off, execute step 8. In the eighth step, the device is shut down, the authentication cache is destroyed and released, and the count variable is cleared.

[0037] It should be noted that the examples herein are only for explaining the present invention and are not intended to limit the protection scope of the present invention. Example 2

[0038] This embodiment is based on the same inventive concept as the software authorization authentication agent method described in Embodiment 1, and provides a software authorization authentication agent system, such as Figure 8 As shown, including: The device configuration module is used to: configure the authorization and authentication agent device; A startup module, used for: in response to the authorization and authentication agent device being in the startup phase, calling a variable initialization service, executing an initialization process, and initializing global variables; An operation module is used to: in response to the authorization and authentication agent device being in the operation stage, provide an agent authorization and authentication service; the agent authorization and authentication service asynchronously triggers a variable refresh service according to a threshold setting; The closing module is used for: in response to the authorization and authentication agent device being in the closing stage, executing a destruction process, destroying and releasing global variables. Example 3

[0039] This embodiment provides a computer-readable storage medium, including: The storage medium is used to store computer software instructions used to implement the software authorization authentication agent method described in the above-mentioned embodiment 1, which includes instructions for executing the above-mentioned program set for the software authorization authentication agent method; specifically, the executable program can be built into the software authorization authentication agent system described in embodiment 2, so that the software authorization authentication agent system can implement the software authorization authentication agent method described in embodiment 1 by executing the built-in executable program.

[0040] In addition, the computer-readable storage medium of this embodiment may adopt any combination of one or more computer-readable storage media, wherein the computer-readable storage medium includes electrical, optical, electromagnetic, infrared or semiconductor systems, devices or components, or any combination thereof. Example 4

[0041] This embodiment provides an electronic device, such as Fig. 9 As shown, the electronic device may include: a processor 1501 , a communication interface 1502 , a memory 1503 and a communication bus 1504 , wherein the processor 1501 , the communication interface 1502 , and the memory 1503 communicate with each other via the communication bus 1504 .

[0042] Memory 1503, used for storing computer programs; The processor 1501 is used to implement the steps of the software authorization authentication agent method described in the above embodiment 1 when executing the computer program stored in the memory 1503.

[0043] As an embodiment of the present invention, the communication bus mentioned in the above terminal can be a Peripheral Component Interconnect (PCI) bus or an Extended Industry Standard Architecture (EISA) bus. The communication bus can be divided into an address bus, a data bus, a control bus, etc. For ease of representation, Fig. 9 Only one thick line is used in the diagram, but this does not mean that there is only one bus or only one type of bus.

[0044] As an implementation mode of the present invention, the communication interface is used for communication between the above-mentioned terminal and other devices.

[0045] As an embodiment of the present invention, the memory may include a random access memory (RAM) or a non-volatile memory, such as at least one disk memory. Optionally, the memory may also be at least one storage device located away from the aforementioned processor.

[0046] As an embodiment of the present invention, the above-mentioned processor can be a general-purpose processor, including a central processing unit (CPU), a network processor (NP), etc.; it can also be a digital signal processor (DSP), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA) or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components.

[0047] Different from the prior art, the present application adopts a software authorization authentication proxy method, system, device and medium, which can set the counts in two dimensions, namely the number of times and the time interval. When the count in any dimension reaches the threshold, the actual authorization authentication will be triggered, thereby avoiding the execution of authorization authentication for each business operation, reducing the time-consuming impact of authorization authentication on business processing, improving the efficiency of authorization authentication, and being suitable for high-concurrency business scenarios; moreover, the present invention supports count control in two dimensions, namely the number of times and the time. When any dimension reaches the threshold, the authentication cache variable refresh operation can be triggered. The count threshold supports configuration, which is flexible and easy to control; the global variable refresh of the present invention uses asynchronous single-threaded operation, avoiding the synchronous update operation blocking the current business process, and the single-threaded operation is not prone to file read and write exceptions.

[0048] It should be understood that in the various embodiments of this document, the size of the serial numbers of the above-mentioned processes does not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of this document.

[0049] It should also be understood that in the embodiments of this article, the term "and / or" is only a description of the association relationship of the associated objects, indicating that three relationships may exist. For example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone. In addition, the character " / " in this article generally indicates that the associated objects before and after are in an "or" relationship.

[0050] Those of ordinary skill in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of the two. In order to clearly illustrate the interchangeability of hardware and software, the composition and steps of each example have been generally described in terms of function in the above description. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this article.

[0051] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0052] In the several embodiments provided herein, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic, for example, the division of the units is only a logical function division, and there may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. In addition, the mutual coupling or direct coupling or communication connection shown or discussed can be an indirect coupling or communication connection through some interfaces, devices or units, or can be electrical, mechanical or other forms of connection.

[0053] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the embodiments of this article.

[0054] In addition, each functional unit in each embodiment of this invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above integrated unit may be implemented in the form of hardware or in the form of software functional unit.

[0055] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this article is essentially or the part that contributes to the prior art, or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including a number of instructions to enable a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the method described in each embodiment of this article. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), disk or optical disk and other media that can store program codes.

[0056] The above descriptions are merely embodiments of the present invention and are not intended to limit the patent scope of the present invention. Any equivalent structure or equivalent process transformation made using the contents of the present invention specification and drawings, or directly or indirectly applied in other related technical fields, are also included in the patent protection scope of the present invention.

Claims

1. A software authorization authentication agent method, characterized in that: The following steps are involved: Device configuration steps: Configure the authorization and authentication agent device; Startup steps: In response to the authorization and authentication agent being in the startup phase, calling a variable initialization service, executing an initialization process, and initializing global variables; Run steps: In response to the authorization and authentication proxy device being in the running stage, providing a proxy authorization and authentication service; the proxy authorization and authentication service asynchronously triggers a variable refresh service according to a threshold setting; Closing steps: In response to the authorization authentication proxy device being in the shutdown stage, a destruction process is executed to destroy and release the global variables.

2. The software authorization authentication agent method according to claim 1, characterized in that: The configuration authorization authentication agent device includes: Constructing the authorization authentication agent device based on the global variable module, the authentication configuration module and the authentication service module; Calling the global variable module to define global attributes; the global attributes include: authorization authentication cache, authentication times count and last authentication update time; Calling the authentication configuration module to configure threshold information; the threshold information includes: authentication times threshold and last authentication interval threshold; The authentication service module is called to proxy the actual authentication service, and the global variable module and the authentication configuration module are combined to provide authentication services for the business; the authentication service includes: variable initialization and refresh service and proxy authentication service.

3. The software authorization authentication agent method according to claim 1, characterized in that: The variable initialization service includes: Call the actual authorization authentication service to obtain the software authorization authentication result; The software authorization authentication result is cached in the authorization authentication cache, the authentication times count is reset to zero, and the last authentication update time is equal to the current time.

4. The software authorization authentication agent method according to claim 1, characterized in that: The operation steps further include: In response to the business start, enter the proxy authentication service: The authentication times count is increased by one to determine whether the authentication times threshold is reached. If the threshold is reached, the fourth step is executed; otherwise, the third step is executed. The third step includes: determining whether the interval between the current time and the last authentication time is greater than an authentication interval threshold, if it reaches the threshold, executing the fourth step, otherwise executing the fifth step; The fourth step includes: triggering an asynchronously executed variable refresh service to update global variables; the global variables include: authorization authentication cache, authentication times count and last authentication update time; The fifth step includes: obtaining the authorization authentication cache, judging whether the software authorization authentication is passed according to the cache value, and executing subsequent business operations if the authentication is passed, otherwise returning authorization authentication failure.

5. The software authorization authentication agent method according to claim 1, characterized in that: The destruction process includes: Destroy and release global variables, including: authorization authentication cache, authentication times and last authentication update time.

6. The software authorization authentication agent method according to claim 1, characterized in that: Also includes: When the software authorization expires, update the software authorization and call the variable refresh service to refresh the global variables.

7. The software authorization authentication agent method according to claim 6, characterized in that: When the software authorization expires, the software authorization is updated, and a variable refresh service is called to refresh global variables, further comprising: Call the actual authorization code update service to complete the authorization update; call the variable refresh service to update the global variables; return the authorization authentication information.

8. A software authorization authentication agent system, characterized in that: include: The device configuration module is used to: configure the authorization and authentication agent device; A startup module, used for: in response to the authorization and authentication agent device being in the startup phase, calling a variable initialization service, executing an initialization process, and initializing global variables; An operation module is used to: in response to the authorization and authentication agent device being in the operation stage, provide an agent authorization and authentication service; the agent authorization and authentication service asynchronously triggers a variable refresh service according to a threshold setting; The closing module is used for: in response to the authorization and authentication agent device being in the closing stage, executing a destruction process, destroying and releasing the global variables.

9. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by the processor, the steps of the software authorization authentication agent method described in any one of claims 1 to 7 are implemented.

10. A computer device, characterized in that: It includes a processor, a communication interface, a memory and a communication bus, wherein the processor, the communication interface and the memory communicate with each other through the communication bus; wherein: The memory is used to store computer programs; The processor is used to execute the steps of the software authorization authentication agent method according to any one of claims 1 to 7 by running the program stored in the memory.

Images