User data access method and device, computer equipment and readable storage medium

Abstract

The invention relates to a user data access method and device, computer equipment, a computer readable storage medium and a computer program product. The method comprises the following steps: when a to-be-accessed application logs in a platform application with a user identifier, obtaining a process adapter and a data adapter matched with a data access process according to the data access process of the to-be-accessed application; obtaining original data corresponding to the user identifier from the to-be-accessed application through the process adapter, and converting the original data into target data of a preset data structure according to the data adapter; and transmitting the target data to a service system of the platform application. By adopting the method, the platform application can access various application programs, and the expansibility is high.

Description

Technical Field

[0001] The present application relates to the technical field of cloud platforms, and in particular to a method, apparatus, computer device, computer-readable storage medium, and computer program product for accessing user data. Background Art

[0002] As platform applications become more and more connected to various applications, developers face duplication of work and increased maintenance difficulty when integrating APIs of multiple applications.

[0003] In traditional technologies, third-party authorization login tool libraries are mainly based on user access based on standard SSO protocols, and are extremely dependent on SSO standard docking specifications. However, some applications are not suitable for non-standard SSO protocols, making it difficult to connect the data of these applications to platform applications. Summary of the invention

[0004] Based on this, it is necessary to provide a method, device, computer equipment, computer-readable storage medium and computer program product for accessing user data that can access multiple applications and has high scalability in order to address the above technical problems.

[0005] In a first aspect, the present application provides a method for accessing user data, the method comprising:

[0006] When the application to be accessed logs in to the platform application with a user identifier, a process adapter and a data adapter adapted to the data access process are obtained according to the data access process of the application to be accessed;

[0007] Obtaining original data corresponding to the user identifier from the application to be connected through the process adapter, and converting the original data into target data of a preset data structure according to the data adapter;

[0008] The target data is transmitted to the business system of the platform application.

[0009] In one embodiment, obtaining a process adapter and a data adapter adapted to the data access process according to the data access process of the application to be accessed includes:

[0010] According to the access process protocol matched by the application to be accessed, a process adapter corresponding to the access process protocol is derived; the process adapter includes a data processing process in the access process protocol;

[0011] The data adapter is determined according to a data structure matching the application to be accessed; the data adapter includes a field mapping relationship, and the field mapping relationship is used to map the original data to the target data according to the field.

[0012] In one embodiment, the process adapter includes a data acquisition process and a data driving process adapted to the data access process, and the data acquisition process and the data driving process are two processes in the data processing process;

[0013] The obtaining, through the process adapter, original data corresponding to the user identifier from the application to be accessed includes:

[0014] According to the data acquisition process, initial data corresponding to the user identifier is acquired from the application to be accessed;

[0015] According to the data-driven process, the initial data is processed to obtain original data corresponding to the user identifier.

[0016] In one embodiment, the processing of the initial data according to the data-driven process to obtain the original data corresponding to the user identifier includes:

[0017] In the case where the initial data is an identity identifier, calling the interface of the application to be accessed based on the identity identifier to obtain the original data corresponding to the user identifier;

[0018] In the case where the initial data is ciphertext of original data, ciphertext parsing is performed on the ciphertext of the original data according to a preset decryption rule to obtain the original data corresponding to the user identifier;

[0019] In the case that the initial data is a hypertext link, a page jump is performed through the hypertext link, and the original data corresponding to the user identifier is obtained through the page after the jump.

[0020] In one embodiment, converting the original data into target data of a preset data structure according to the data adapter includes:

[0021] Determine a user data template corresponding to the platform application; the user data template includes fields to be filled;

[0022] According to the field mapping relationship indicated by the data adapter, the original data is filled into the field to be filled to obtain the target data of the preset data structure.

[0023] In one embodiment, the transmitting the target data to the business system of the platform application includes:

[0024] Encrypt the target data according to the encryption method corresponding to the platform application to obtain target ciphertext data;

[0025] Distributing the target ciphertext data to the business system of the platform application;

[0026] The business processing flow in the business system is processed based on the target ciphertext data.

[0027] In one embodiment, before transmitting the target data to the business system of the platform application, the method further includes:

[0028] Determining a service system of the platform application according to a session of the user identifier in the platform application;

[0029] The business system processes the data in the session based on the target data.

[0030] In a second aspect, the present application also provides a user data access device, including:

[0031] A creation module is used to obtain a process adapter and a data adapter adapted to the data access process according to the data access process of the application to be accessed when the application to be accessed logs in to the platform application with a user identifier;

[0032] An access module, used to obtain the original data corresponding to the user identifier from the application to be accessed through the process adapter, and convert the original data into target data of a preset data structure according to the data adapter;

[0033] The conversion module is used to transmit the target data to the business system of the platform application.

[0034] In a third aspect, the present application further provides a computer device, wherein the computer device comprises a memory and a processor, wherein the memory stores a computer program, and when the processor executes the computer program, the steps of accessing user data in any of the above embodiments are implemented.

[0035] In a fourth aspect, the present application further provides a computer-readable storage medium having a computer program stored thereon, and when the computer program is executed by a processor, the steps of accessing user data in any of the above embodiments are implemented.

[0036] In a fifth aspect, the present application further provides a computer program product, wherein the computer program product includes a computer program, and when the computer program is executed by a processor, the steps of accessing user data in any of the above embodiments are implemented.

[0037] The above-mentioned user data access method, device, computer equipment, computer-readable storage medium and computer program product, since the process adapter and the data adapter are different adapters of the access process, can decouple the data access acquisition process and the structure conversion process, thereby forming a process hierarchy. The process hierarchy is between the protocol layer and the application layer. It can be applicable to the corresponding protocol through the process adapter and adapt to various data structures through the data adapter, so it can access multiple protocols and applications and ensure high scalability. BRIEF DESCRIPTION OF THE DRAWINGS

[0038] In order to more clearly illustrate the technical solutions in the embodiments of the present application or related technologies, the drawings required for use in the embodiments of the present application or related technical descriptions will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other related drawings can be obtained based on these drawings without paying creative work.

[0039] Figure 1 An application environment diagram of a method for accessing user data in an embodiment;

[0040] Figure 2 A schematic diagram of a flow chart of a method for accessing user data in one embodiment;

[0041] Figure 3 A schematic diagram of a process for creating an adapter in one embodiment;

[0042] Figure 4 A schematic diagram of a process flow of an adapter processing in one embodiment;

[0043] Figure 5 A schematic diagram of a process for obtaining raw data in one embodiment;

[0044] Figure 6 A schematic diagram of the overall process of a method for accessing user data in an embodiment;

[0045] Figure 7 A schematic diagram of a specific example flow of a method for accessing user data in an embodiment;

[0046] Figure 8 is a structural block diagram of a device for accessing user data in one embodiment;

[0047] Fig. 9 FIG. 4 is a diagram showing the internal structure of a computer device in one embodiment. DETAILED DESCRIPTION

[0048] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0049] Accessing third-party login users is a basic function of major web services. Only with users can you log in to the business system. However, the process of accessing third-party users varies. There are access based on standard SSO protocols, access based on non-standard SSO protocols, and access in other ways. The data structure of accessing third-party users varies. For example, some third-party user information has tenant ID, tenant name, user ID, and user name fields, while some third-party user information only has user ID and user name fields.

[0050] In the face of the above problems, there is no user access method that can uniformly adapt to the above different user access processes and heterogeneous user data structures. Most of the current third-party authorization login tool libraries, such as JustAuth, are based on user access of the standard SSO protocol and are extremely dependent on the SSO standard docking specifications. However, it is difficult to support some non-standard SSO protocols, such as DCP and other user access middle layers. If these third-party authorization login tool libraries are forcibly integrated into the business system, the following problems will occur:

[0051] 1. Poor scalability. If you directly use the current authorization login tool library, such as JustAuth, because it is a framework developed based on the SSO protocol, it has good support for the third-party login platforms that have been connected, such as WeChat login, Weibo login, and QQ login. If you want to support a new user access process and heterogeneous user data structure, it will lead to extremely poor scalability. Especially for some non-SSO protocol user access, if you force new development on these open source frameworks, the code readability will be very poor, which is not conducive to the maintenance of the later code.

[0052] 2. A lot of repetitive work. Faced with many different processes of user login and access processes and different user data structures, there are actually many common steps. Some existing login tool libraries do not classify and abstract these processes, and direct use also leads to a lot of repetitive development work.

[0053] 3. Low development efficiency. When new processes and new structures of user data are connected, a new set of processes must be developed, resulting in extremely low development efficiency and not adapting to the company's response to rapid needs.

[0054] Therefore, a user access layer is designed that is compatible with different modes, supports standard SSO or non-standard SSO, and can adapt to heterogeneous user data structures. As the basic functional module of the business system, it can expand the user access capabilities of different types and standards for the business system, improve the efficiency of user access, and reduce development workload.

[0055] The user data access method provided in the embodiment of the present application can be applied to Figure 1 In the application environment shown, the terminal 102 communicates with the server 104 through a network. The data storage system can store data that the server 104 needs to process. The data storage system can be integrated on the server 104, or placed on the cloud or other network servers.

[0056] The terminal 102 may be, but is not limited to, various personal computers, laptops, smart phones, tablet computers, IoT devices, and portable wearable devices. The IoT devices may be smart speakers, smart TVs, smart air conditioners, smart car devices, projection devices, etc. Portable wearable devices may be smart watches, smart bracelets, head-mounted devices, etc. Head-mounted devices may be virtual reality (VR) devices, augmented reality (AR) devices, smart glasses, etc. The server 104 may be an independent physical server, a server cluster or distributed system consisting of multiple physical servers, or a cloud server that provides cloud computing services.

[0057] In an exemplary embodiment, Figure 2 As shown, a method for accessing user data is provided, and the method is applied to Figure 1 The server 104 in the example is used as an example to illustrate the method, which includes the following steps 202 to 206. Among them:

[0058] Step 202: When the application to be accessed logs into the platform application with a user identifier, a process adapter and a data adapter adapted to the data access process are obtained according to the data access process of the application to be accessed.

[0059] The application to be accessed is an application program that can provide user data; the application to be accessed is a user identity verification provider for the platform application. Optionally, the application to be accessed may belong to applications of different clients, for example, an instant messaging (IM) application. Optionally, the user data provided by the application to be accessed is stored in the server of the application to be accessed, and the user data can be accessed to the platform application through this solution, so that the platform application reuses the application data therein.

[0060] The user identifier is identification data used to represent the user's identity. Since the application to be accessed and the platform application do not necessarily share the same server, and there are relatively many types of applications to be accessed, the user identifiers of different applications to be accessed have different definitions. Optionally, the user identifier of the first application to be accessed is a phone number, and the user identifier of the second application to be accessed is an email address.

[0061] Platform applications are applications that serve multiple business systems. Business systems within platform applications use the platform applications to access the same user data. Optionally, the platform application can be a database shared by multiple business systems, or a web application system, that is, a network platform network application used to run multiple business systems.

[0062] The data access process corresponds to the adapter template of the integrated data processing process. The data access process does not correspond one-to-one with the protocol or the application to be accessed, but forms a process level between the protocol level and the application level, so that different applications to be accessed can use a common adapter to ensure the development efficiency of the adapter, high flexibility, and high scalability.

[0063] Since the data access processes of some applications to be connected have the same sub-processes, the same sub-processes are used as public processes, and the processing methods and data structures of the public processes are abstracted to obtain adapter templates, which can be used to generate corresponding process adapters and data adapters. Optionally, one data access process includes a single sign-on (SSO) protocol process and a process adjusted by the SSO protocol, and another data access process includes a non-SSO protocol process and a process adjusted by the SSO protocol, so that these two methods can be applied to different applications to be connected.

[0064] The process adapter is an object used for data processing flow. The process adapter includes the data processing flow between the application to be accessed and the platform application, and at least part of the data access process can be realized through this data interaction flow. Optionally, in terms of processing order, the process adapter includes a data acquisition process and a data-driven process. The data acquisition process can acquire the initial data to be processed, and the data-driven process is used to process the initial data to realize the corresponding data processing; in terms of processing methods, the process adapter includes but is not limited to: functions for data processing, conditions for triggering functions, and the execution order of different functions.

[0065] Optionally, the data acquisition process includes but is not limited to: functions for acquiring initial data, conditions for acquiring initial data, and the execution order of different functions in the process of acquiring initial data; the data-driven process includes but is not limited to: functions for subsequent processing of initial data, conditions for triggering subsequent processing of initial data, and the execution order of different functions in the process of processing initial data.

[0066] The data adapter is an object used to map the original data. The data adapter includes a data structure conversion process between the application to be connected and the platform application, through which the conversion of heterogeneous data can be achieved. Optionally, the data adapter includes a mapping of fields. Optionally, the data adapter indicates how the fields in the data access process are mapped so that the data transmitted from the application to be connected to the platform application can be converted into the corresponding preset data structure.

[0067] In an optional embodiment, according to the data access process of the application to be accessed, obtaining the process adapter and data adapter adapted to the data access process includes: determining the application identifier of the application to be accessed; searching for the access process identifier matching the application identifier in the access process identifier list corresponding to the data access process; and determining the process adapter and data adapter adapted to the data access process according to the access process identifier matching the application identifier. Thus, by searching for the two adapters respectively through the access process identifier, processing efficiency can be guaranteed.

[0068] Step 204: obtaining original data corresponding to the user identifier from the application to be connected through the process adapter, and converting the original data into target data of a preset data structure according to the data adapter.

[0069] The original data is the data to be converted obtained from the application to be connected through the process adapter. The original data includes but is not limited to the fields such as tenant ID, tenant name, user ID, user name, user role, etc., and can also be added to represent the user source data of the application to be connected.

[0070] The preset data structure is a data structure distributed to different business systems for data processing within the platform application. The preset data structure includes but is not limited to the attributes of the fields, the relationship between the fields, the attributes of the tables, the relationship between the tables, etc.

[0071] The target data is data with a preset data structure. The information represented by the target data contains the information represented by the original data, and the data structure of the target data is different from that of the original data. Optionally, the target data includes, but is not limited to, fields such as the tenant ID, the tenant name, the user ID, the user name, the user role, and the user source data used to represent the application to be connected.

[0072] In an optional embodiment, obtaining the original data corresponding to the user identifier from the application to be connected through the process adapter includes: obtaining the original data corresponding to the user identifier from the application to be connected according to the process of the protocol contained in the process adapter. Thus, the original data is obtained through the process of the protocol to ensure processing efficiency.

[0073] In an optional embodiment, obtaining original data corresponding to the user identifier from the application to be accessed through a process adapter includes: searching for the original data corresponding to the user identifier in the data transmitted by the application to be accessed according to the data processing process contained in the process adapter.

[0074] In an optional embodiment, according to the data adapter, the original data is converted into target data of a preset data structure, including: based on a general user data template as a standard, the original data is converted into corresponding user data field mapping, and empty fields are filled to obtain user data with filled user data fields.

[0075] Step 206: Transmit the target data to the business system of the platform application.

[0076] The business system is an application system that acquires data through the platform application. When the target data is transferred to the business system, part of the data in the business system can be used for subsequent business processing through the target data. Optionally, the business system is a sub-business in the platform application, and the corresponding functions can be realized through the business system.

[0077] In an optional embodiment, transmitting the target data to the business system of the platform application includes: distributing the target data to the business system of the platform application so that the target data is filled into a session of the business system, and performing data processing through the session.

[0078] In the above-mentioned user data access method, since the process adapter and the data adapter are different adapters of the access process, the acquisition process of data access and the structure conversion process can be decoupled, thus forming a process level. The process level is between the process levels between the protocol level and the application level. It can be applied to the corresponding protocol through the process adapter and adapt to various data structures through the data adapter. Therefore, it can access multiple protocols and applications, and ensure high scalability. Even if some users of non-SSO protocols access, the corresponding code can be reused to improve the readability of the code, which is conducive to the maintenance of the later code. Moreover, due to the user login and access processes of many different processes and different user data structures, many common steps can actually be found. By classifying and abstracting these processes, process adapters and data adapters can be formed, which can also reduce repeated development work. Moreover, when accessing user data of new processes and new structures, as long as there is a similar access process, there is no need to redevelop a set of processes, resulting in high development efficiency and adapting to the enterprise's response to rapid needs.

[0079] In an exemplary embodiment, Figure 3 As shown, according to the data access process of the application to be accessed, a process adapter and a data adapter adapted to the data access process are obtained, including:

[0080] Step 302: derive a process adapter corresponding to the access process protocol according to the access process protocol matched by the application to be accessed; the process adapter includes the data processing process in the access process protocol.

[0081] The access process protocol is a standard interaction process between the preset application and the platform application. Since the application to be accessed does not correspond to the access process protocol one by one, the application to be accessed in this embodiment has a matching process with the access process protocol, and the corresponding process adapter is derived through the access process protocol indicated by the matching result.

[0082] Optionally, the access process protocol can be a class in programming, through which specific object instances can be created, each of which has its own attribute values ​​and process functions to execute the corresponding process. Optionally, matching can be performed based on each sub-process in the access process protocol to create a process adapter more flexibly. Optionally, matching can also be performed based on the first process contained in the access process protocol to directly build a corresponding process adapter.

[0083] Optionally, the data processing process in the access process protocol includes, but is not limited to, a data acquisition process and a data driving process adapted to the data access process, and may also include other types of sub-processes.

[0084] In an optional embodiment, according to the access process protocol matched by the application to be accessed, a process adapter corresponding to the access process protocol is derived, including: the first sub-process matched based on the data sent by the application to be accessed; instantiated according to the access process protocol to which the first sub-process belongs, to obtain a process adapter corresponding to the access process protocol; the first sub-process is the first data processing process in each data access process. Therefore, using the processing process to determine the first sub-process, and then directly instantiating it based on the access process protocol to which it belongs, can ensure high processing accuracy, and using the data structure for matching can more flexibly select one or more data adapter templates as the corresponding adapter.

[0085] In an optional embodiment, a process adapter corresponding to the access process protocol is derived based on the access process protocol matched by the application to be accessed, including: searching for the access process protocol matching the application identifier of the application to be accessed; creating a corresponding object based on the access process protocol, and using the object as the process adapter corresponding to the access process protocol.

[0086] Step 304, determining a data adapter according to a data structure matching the application to be connected; the data adapter includes a field mapping relationship, and the field mapping relationship is used to map the original data to the target data according to the field.

[0087] The field mapping relationship is the mapping relationship between the original data and the target data on the field. Optionally, the field mapping relationship represents a mapping rule between field attributes so as to perform data conversion according to the field attributes. Optionally, the data adapter can be determined by a corresponding data structure identifier.

[0088] In an optional embodiment, according to the data structure that matches the application to be accessed, determining the data adapter includes: matching the data sent by the application to be accessed with the preset data structure to obtain the data structure that matches the data sent by the application to be accessed; according to the data structure that matches the data sent by the application to be accessed, in the mapping table of the preset rules, determining the data adapter class used to map the data structure; instantiating the data adapter class to obtain the data adapter. Thus, by matching the data structure level, selecting the appropriate data adapter class from a variety of preset rules can avoid the situation where multiple data adapters occupy memory at the same time, thereby ensuring data processing efficiency; and by allocating the corresponding memory through the preset rule set at the abstract level of the data adapter class to create the corresponding data adapter, flexibility can be ensured, thereby taking into account both data processing efficiency and flexibility.

[0089] In this embodiment, the corresponding process adapter is constructed in real time by accessing the process protocol, which can avoid data conflicts between different process adapters and avoid waste of resources caused by the simultaneous existence of multiple process adapters. By determining the corresponding data adapter through the matching data structure, the mapping relationship can be adaptively selected for the data structure of the application to be accessed, so as to perform data conversion through mapping. At the same time, since the process adapter and the data adapter are matched separately, the selection process of the two can be further decoupled, and can be more flexibly adapted to more types of applications to be accessed. In this way, a universal interface method is formed, which reduces the cost of docking different protocols and reduces repeated development work.

[0090] In one embodiment, Figure 4 As shown, the process adapter includes a data acquisition process and a data driving process adapted to the data access process. The data acquisition process and the data driving process are two processes in the data processing process.

[0091] The data acquisition process is used to acquire the initial data to be processed. The data acquisition process includes but is not limited to: functions used to acquire the initial data, conditions used to acquire the initial data, and the execution order of different functions in the process of acquiring the initial data.

[0092] The data-driven process is used to process the initial data to achieve the corresponding data processing. The processing results of different data-driven processes are different. The data-driven process includes but is not limited to: functions used for subsequent processing of the initial data, conditions used to trigger subsequent processing of the initial data, and the execution order of different functions in the process of processing the initial data.

[0093] Through the process adapter, obtain the original data corresponding to the user ID from the application to be connected, including:

[0094] Step 402: According to the data acquisition process, initial data corresponding to the user identifier is acquired from the application to be accessed.

[0095] Initial data is data pre-transmitted from the application to be connected to the platform application during the identity authentication process. If there is an adapted data-driven process for the initial data, the method of obtaining the original data can be adaptively adjusted through the data-driven process adapted by the initial data to further increase flexibility. Optionally, the initial data can be matched with the candidate data-driven processes contained in the platform application to determine the data-driven process for processing the initial data, thereby further decoupling the data matching process to increase flexibility.

[0096] In an optional embodiment, according to the data acquisition process, initial data corresponding to the user identifier is acquired from the application to be accessed, including: when the data sent by the terminal to which the application to be accessed belongs is the identity identifier corresponding to the user identifier, using the identity identifier as the initial data corresponding to the user identifier.

[0097] In an optional embodiment, according to the data acquisition process, initial data corresponding to the user identifier is obtained from the application to be accessed, including: when the data sent by the gateway adapted by the application to be accessed is the original data ciphertext corresponding to the user identifier, the original data ciphertext is used as the original data ciphertext corresponding to the user identifier.

[0098] In an optional embodiment, according to the data acquisition process, initial data corresponding to the user identifier is obtained from the application to be accessed, including: when the data sent by the gateway adapted by the application to be accessed is a web link corresponding to the user identifier, the web link is used as the original data ciphertext corresponding to the user identifier.

[0099] Step 404: Process the initial data according to the data-driven process to obtain original data corresponding to the user identifier.

[0100] In an optional embodiment, the initial data is processed according to a data-driven process to obtain original data corresponding to the user identifier, including: determining a function of the data-driven process according to the type of the initial data; and processing the initial data according to the function of the data-driven process to obtain original data corresponding to the user identifier.

[0101] In this embodiment, during the identity authentication process when a user logs in to a platform application, various data access processes have their own data acquisition process and data-driven process. Therefore, these two processes are decoupled so that different initial data can be implemented simultaneously with the data-driven process, thereby being more flexibly applicable to the login process of multiple applications to be accessed.

[0102] In an alternative embodiment, Figure 5 As shown, according to the data-driven process, the initial data is processed to obtain the original data corresponding to the user identifier, including:

[0103] Step 502: When the initial data is an identity identifier, the interface of the application to be accessed is called based on the identity identifier to obtain the original data corresponding to the user identifier.

[0104] The identity identifier is an identifier used to indicate the identity of a user. Optionally, the identity identifier may be a temporary identity identifier or the user identifier mentioned above.

[0105] In an optional embodiment, calling the interface of the application to be accessed based on the identity identifier to obtain the original data corresponding to the user identifier includes: calling the data passing interface getAccountByTicket of the first application to be accessed through the temporary identity identifier ticket, and obtaining the current logged-in user data from the data passing interface as the original data corresponding to the user identifier. Therefore, the identity identifier is a temporary authority identifier, which helps to increase its flexibility and help to ensure security.

[0106] Step 504: When the initial data is the ciphertext of the original data, the ciphertext of the original data is parsed according to a preset decryption rule to obtain the original data corresponding to the user identifier.

[0107] The original data ciphertext is the original data encrypted by the application to be connected through a preset encryption rule. Optionally, the preset encryption rule includes but is not limited to the open standard of JSON (JSON Web Token, JWT), the hash algorithm MD5 and other algorithms.

[0108] In an optional embodiment, when the initial data is a ciphertext of the original data, the ciphertext of the original data is parsed according to a preset decryption rule to obtain the original data corresponding to the user identifier, including: when it is detected that the initial data and the jwt_token have the same data arrangement, the original data ciphertext is parsed according to the open standard of JSON to obtain the original data corresponding to the user identifier.

[0109] Step 506: When the initial data is a hypertext link, a page jump is performed through the hypertext link, and the original data corresponding to the user identifier is obtained through the page after the jump.

[0110] In the case where the initial data is a hypertext link, the hypertext link points to a page of the authentication service, so that the identity data is acquired through the page integrated with the authentication service.

[0111] In an optional embodiment, when the initial data is a hypertext link, a page jump is performed through the hypertext link, and the original data corresponding to the user identifier is obtained through the page after the jump, including: docking with the application to be accessed through the auth-url method, and obtaining the original data corresponding to the user identifier through the page of the application to be accessed.

[0112] In this embodiment, the type of the initial data can be one of an identity identifier, a ciphertext of the original data, and a hypertext link. The type of the original data and the subsequent processing process are adaptively adjusted through the type to obtain the original data corresponding to the user identifier more flexibly. On this basis, the initial data under step 502, step 504, and step 506 are all different, so the data-driven process is also different. In the case where the initial data is an identity identifier, directly calling the interface can reduce the computing resources required for the platform application to adjust the efficiency of obtaining the original data; in the case where the initial data is a ciphertext of the original data, transmitting the corresponding original data in the form of ciphertext can reduce the frequency of interaction to adjust the efficiency of obtaining the original data; in the case where the initial data is a hypertext link, the page is adjusted to provide the original data more flexibly.

[0113] In one embodiment, according to the data adapter, the original data is converted into target data of a preset data structure, including: determining a user data template corresponding to the platform application; the user data template includes fields to be filled; according to the field mapping relationship indicated by the data adapter, the original data is filled into the fields to be filled to obtain the target data of the preset data structure.

[0114] The user data template is a data structure corresponding to the platform application, which includes fields to be filled and attributes of the fields to be filled; the attributes of these fields to be filled include at least the name of the field, and may also include the data type of the field, for example, a field to be filled is a user ID, and its corresponding data type is a string. Optionally, the fields of the user data template include, but are not limited to, data fields such as "tenant ID", "tenant name", "user ID", "user name", "user role", "user source", "telephone number", and "email address".

[0115] The field mapping relationship is a mapping relationship set by field attributes. The field mapping relationship indicates the mapping rules between field attributes so as to fill in data according to field attributes. Since the mapping is based on field attributes rather than the specific content of the field, compatibility can be further guaranteed. For example: the user ID of the first application to be accessed is a phone number, and the user ID of the second application to be accessed is an email address. At this time, through the correspondence between the user ID and the "user ID", both the phone number and the email address are filled into the "user ID" of the user data template to form the target data of the preset data structure.

[0116] In an optional embodiment, determining a user data template corresponding to a platform application includes: generating a user data template corresponding to the platform application according to preset fields and arrangement positions between preset fields; and using fields in the user data template as fields to be filled corresponding to a user identifier.

[0117] In an optional embodiment, according to the field mapping relationship indicated by the data adapter, the original data is filled into the to-be-filled field to obtain the target data of the preset data structure, including: according to the mapping relationship, the original data is filled into the preset user data template with the preset data structure, and the preset user data template filled with the original data is used as the target data. Thus, the data structure is predefined by the preset user data template, and then filled, so that the generation of the data structure and the data filling form two steps, so as to improve the accuracy of the target data.

[0118] In an optional embodiment, according to the field mapping relationship indicated by the data adapter, the original data is filled into multiple fields to obtain target data of a preset data structure, including: when the user identifier of the application to be accessed is a number identifier, the number identifier is filled into the user identifier field to obtain data in the user identifier field; when the user identifier of the application to be accessed is a mailbox identifier, the mailbox identifier is filled into the user identifier field to obtain data in the user identifier field.

[0119] In this embodiment, a corresponding user data template is set for the platform application, so that the data structure of the target data can be established before the data filling process. In this case, the data is filled through the field mapping relationship indicated by the data adapter, which is not easy to cause data conflicts and can ensure relatively high filling efficiency. In this way, various types of heterogeneous user data are uniformly mapped into a common user data structure, providing a common interface method for downstream processing, reducing the complexity of data structure docking.

[0120] In an optional embodiment, before transmitting the target data to the business system of the platform application, the method further includes: determining the business system of the platform application according to the session of the user identifier in the platform application; wherein the business system performs data processing on the data in the session based on the target data.

[0121] A session represents the interaction status between the application to be connected and the platform application. The session can be used to determine the business system that needs to use the target data in the context, so as to send the corresponding data in a targeted manner.

[0122] The business system processes the data in the session based on the target data, which means that the context of the business system needs to be processed based on the target data to continue the business processing flow of the corresponding business coordination. Optionally, the time period during which the target data is applied to the business system is associated with the session to more finely control the time when the target data exists in the business system, thereby avoiding the target data from existing for a long time and ensuring data security.

[0123] In an optional embodiment, determining the business system of the platform application according to the session of the user identifier in the platform application includes: determining the business system of the platform application according to the page operation of the user identifier in the session of the platform application.

[0124] In this embodiment, the business system that needs to use the target data in context is determined through the session of the user identifier in the platform application, and the propagation scope of the user identifier is limited through the platform application, and the propagation of the user identifier is made more targeted to improve processing efficiency.

[0125] In an optional embodiment, the target data is transmitted to the business system of the platform application, including: encrypting the target data according to the encryption method corresponding to the platform application to obtain target ciphertext data; distributing the target ciphertext data to the business system of the platform application; wherein the business processing flow in the business system is processed based on the target ciphertext data.

[0126] The target ciphertext data is the user data distributed to the business system by the platform application.

[0127] The data to be processed by the business process flow includes the target ciphertext data, and the next business process step can be executed through the target ciphertext data. Optionally, the business process flow includes a function for business processing and data for the function. For example, a business process flow searches for corresponding data or functions based on the target ciphertext data for calculation to obtain a corresponding calculation result.

[0128] In an optional embodiment, the target data is encrypted according to the encryption method corresponding to the platform application to obtain target ciphertext data, including: when the encryption method corresponding to the platform application is the open standard of JSON, the target data is encrypted according to the open standard of JSON to obtain the target jwt_token; and the target jwt_token is used as the target ciphertext data.

[0129] In an optional embodiment, the target data is encrypted according to the encryption method corresponding to the platform application to obtain the target ciphertext data, including: when the encryption method corresponding to the platform application is the SAML standard, the target data is encrypted according to the SAML standard to obtain the target ciphertext data.

[0130] In this embodiment, the encryption method is set by the platform application, so that the encryption and decryption methods of the platform application and each business system are almost the same. Therefore, the distribution process of target data improves the security of data transmission and can ensure the efficiency of the data encryption and decryption process.

[0131] In one embodiment, Figure 6As shown, the platform to be accessed is an external user service platform; the external user service platform sends the user identification to the platform application, and the platform application, as the user access layer, can provide the application to be accessed to send data to the business system under the user access layer. Among them, the user access process adapter generates original data, and outputs the original data, which is the third-party user information, to the heterogeneous user data adapter. The heterogeneous user data adapter fills the original data into the general user data template to form a standardized output user information with a preset data structure; then the user information is output according to the template standardization to the user data encryption processor for data encryption, and the target ciphertext data, that is, the encrypted user information, is obtained. Finally, the encrypted user information is distributed to the business system.

[0132] In an exemplary embodiment, Figure 7 As shown, the user access layer of the data management service DMS is designed based on the above platform application of this embodiment, and includes the following modules:

[0133] First user access process adapter: After the user logs in to the first client, the user access process is connected to the first client. The front end passes an available temporary identity ticket to the data management service DMS back end. The adapter logic uses this ticket to call the getAccountByTicket interface of the first client, obtain the current logged-in user data, and output it to the first client user data adapter for processing.

[0134] Second user access process adapter: After the user logs in to the second client, the data management service connects with the second client to the user access process. The data interaction gateway will pass the user information of the second client to the backend of the data management service in the form of jwt_token. The logic of this adapter is to parse the jwt_token of the second client to obtain the user information in plain text and output it to the second client user data adapter for processing.

[0135] Third-party user access process adapter: After the user logs in to the third-party client, the data management service connects to the third-party client's platform through the auth-url method to complete the user access process, obtains the user information of the third-party client, and outputs it to the third-party client user data adapter for processing.

[0136] First client user data adapter: the user data output by the first client user access process adapter is used as a standard to perform operations such as user data field mapping and empty field filling to obtain a set of user data including common user data fields.

[0137] Second client user data adapter: The user data output by the second client user access process adapter is used as a standard to perform operations such as user data field mapping and empty field filling to obtain a set of user data including general user data fields.

[0138] Third-party client user data adapter: The user data output by the third-party client user access process adapter is used as a standard to perform operations such as user data field mapping and empty field filling to obtain a set of user data including common user data fields.

[0139] Among them, the general user data template includes data fields such as "tenant ID", "tenant name", "user ID", "user name", "user role", "user source", "telephone number", and "email address".

[0140] User data encryption processor: Generates jwt_token from the standardized user data output by the first client user data adapter, the second client user data adapter, and the third client user data adapter, and then distributes it to the business subsystem contexts of the data management service.

[0141] Therefore, different process adapters are derived and extended for different user access processes to achieve high scalability of adapted access processes; different data adapters are also adapted and extended for heterogeneous user data to achieve high scalability of heterogeneous user data access; various heterogeneous user data are processed according to the general user data template to obtain standard user structure information, and then unified processing is carried out through the user data encryption processor, which eliminates repetitive processing work and improves development efficiency.

[0142] It should be understood that, although the steps in the flowcharts involved in the above embodiments are displayed in sequence according to the indication of the arrows, these steps are not necessarily executed in sequence according to the order indicated by the arrows. Unless there is a clear explanation in this article, the execution of these steps is not strictly limited in order, and these steps can be executed in other orders. Moreover, at least a part of the steps in the flowcharts involved in the above embodiments may include multiple steps or multiple stages, and these steps or stages are not necessarily executed at the same time, but can be executed at different times, and the execution order of these steps or stages is not necessarily carried out in sequence, but can be executed in turn or alternately with other steps or at least a part of the steps or stages in other steps.

[0143] Based on the same inventive concept, the embodiment of the present application also provides a user data access device for implementing the user data access method involved above. The implementation solution provided by the device to solve the problem is similar to the implementation solution recorded in the above method, so the specific limitations of one or more user data access device embodiments provided below can refer to the limitations of the user data access method above, and will not be repeated here.

[0144] In an exemplary embodiment, Figure 8 As shown, a user data access device is provided, comprising:

[0145] A creation module 802 is used to obtain a process adapter and a data adapter adapted to the data access process according to the data access process of the application to be accessed when the application to be accessed logs in to the platform application with a user identifier;

[0146] The access module 804 is used to obtain the original data corresponding to the user identifier from the application to be accessed through the process adapter, and convert the original data into target data of a preset data structure according to the data adapter;

[0147] The conversion module 806 is used to transmit the target data to the business system of the platform application.

[0148] In one embodiment, the creation module 802 is used to:

[0149] According to the access process protocol matched by the application to be accessed, a process adapter corresponding to the access process protocol is derived; the process adapter includes a data processing process in the access process protocol;

[0150] The data adapter is determined according to a data structure matching the application to be accessed; the data adapter includes a field mapping relationship, and the field mapping relationship is used to map the original data to the target data according to the field.

[0151] In one embodiment, the process adapter includes a data acquisition process and a data driving process adapted to the data access process, and the data acquisition process and the data driving process are two processes in the data processing process;

[0152] The access module 804 is used to:

[0153] According to the data acquisition process, initial data corresponding to the user identifier is acquired from the application to be accessed;

[0154] According to the data-driven process, the initial data is processed to obtain original data corresponding to the user identifier.

[0155] In one embodiment, the access module 804 is used to:

[0156] In the case where the initial data is an identity identifier, calling the interface of the application to be accessed based on the identity identifier to obtain the original data corresponding to the user identifier;

[0157] In the case where the initial data is ciphertext of original data, ciphertext parsing is performed on the ciphertext of the original data according to a preset decryption rule to obtain the original data corresponding to the user identifier;

[0158] In the case that the initial data is a hypertext link, a page jump is performed through the hypertext link, and the original data corresponding to the user identifier is obtained through the page after the jump.

[0159] In one embodiment, the access module 804 is used to:

[0160] Determine a user data template corresponding to the platform application; the user data template includes fields to be filled;

[0161] According to the field mapping relationship indicated by the data adapter, the original data is filled into the field to be filled to obtain the target data of the preset data structure.

[0162] In one embodiment, the conversion module 806 is used to:

[0163] Encrypt the target data according to the encryption method corresponding to the platform application to obtain target ciphertext data;

[0164] Distributing the target ciphertext data to the business system of the platform application;

[0165] The business processing flow in the business system is processed based on the target ciphertext data.

[0166] In one embodiment, the conversion module 806 is used to:

[0167] Determining a service system of the platform application according to a session of the user identifier in the platform application;

[0168] The business system processes the data in the session based on the target data.

[0169] Each module in the above-mentioned user data access device can be implemented in whole or in part by software, hardware, or a combination thereof. Each of the above-mentioned modules can be embedded in or independent of a processor in a computer device in the form of hardware, or can be stored in a memory in a computer device in the form of software, so that the processor can call and execute operations corresponding to each of the above modules.

[0170] In an exemplary embodiment, a computer device is provided. The computer device may be a server, and its internal structure diagram may be as shown in FIG. Fig. 9 As shown. The computer device includes a processor, a memory, an input / output interface (Input / Output, referred to as I / O) and a communication interface. The processor, the memory and the input / output interface are connected through a system bus, and the communication interface is connected to the system bus through the input / output interface. The processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program and a database. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The input / output interface of the computer device is used to exchange information between the processor and an external device. The communication interface of the computer device is used to communicate with an external terminal through a network connection. When the computer program is executed by the processor, a method for accessing user data is implemented.

[0171] Those skilled in the art will understand that Fig. 9 The structure shown in the figure is only a block diagram of a part of the structure related to the solution of the present application, and does not constitute a limitation on the computer device to which the solution of the present application is applied. The specific computer device may include more or fewer components than those shown in the figure, or combine certain components, or have a different arrangement of components.

[0172] In one embodiment, a computer device is further provided, including a memory and a processor, wherein a computer program is stored in the memory, and the processor implements the steps in the above method embodiments when executing the computer program.

[0173] In one embodiment, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, the steps in the above-mentioned method embodiments are implemented.

[0174] In one embodiment, a computer program product is provided, including a computer program, which implements the steps in the above method embodiments when executed by a processor.

[0175] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of relevant data must comply with relevant regulations.

[0176] A person of ordinary skill in the art can understand that all or part of the processes in the above-mentioned embodiment method can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to the memory, database or other medium used in the embodiments provided in the present application can include at least one of non-volatile memory and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetic random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. As an illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM). The database involved in each embodiment provided in this application may include at least one of a relational database and a non-relational database. Non-relational databases may include distributed databases based on blockchains, etc., but are not limited to this. The processor involved in each embodiment provided in this application may be a general-purpose processor, a central processing unit, a graphics processor, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, an artificial intelligence (AI) processor, etc., but are not limited to this.

[0177] The technical features of the above embodiments may be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this application.

[0178] The above-described embodiments only express several implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the present application. It should be pointed out that, for a person of ordinary skill in the art, several variations and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the present application shall be subject to the attached claims.

Claims

1. A method for accessing user data, characterized in that: The method comprises: When the application to be accessed logs in to the platform application with a user identifier, a process adapter and a data adapter adapted to the data access process are obtained according to the data access process of the application to be accessed; Obtaining original data corresponding to the user identifier from the application to be connected through the process adapter, and converting the original data into target data of a preset data structure according to the data adapter; The target data is transmitted to the business system of the platform application.

2. The method according to claim 1, characterized in that The step of obtaining a process adapter and a data adapter adapted to the data access process according to the data access process of the application to be accessed includes: According to the access process protocol matched by the application to be accessed, a process adapter corresponding to the access process protocol is derived; the process adapter includes a data processing process in the access process protocol; The data adapter is determined according to a data structure matching the application to be accessed; the data adapter includes a field mapping relationship, and the field mapping relationship is used to map the original data to the target data according to the field.

3. The method according to claim 1, characterized in that The process adapter includes a data acquisition process and a data driving process adapted to the data access process, and the data acquisition process and the data driving process belong to two processes in the data processing process; The obtaining, through the process adapter, original data corresponding to the user identifier from the application to be accessed includes: According to the data acquisition process, initial data corresponding to the user identifier is acquired from the application to be accessed; According to the data-driven process, the initial data is processed to obtain original data corresponding to the user identifier.

4. The method according to claim 3, characterized in that The step of processing the initial data according to the data-driven process to obtain original data corresponding to the user identifier includes: In the case where the initial data is an identity identifier, calling the interface of the application to be accessed based on the identity identifier to obtain the original data corresponding to the user identifier; In the case where the initial data is ciphertext of original data, ciphertext parsing is performed on the ciphertext of the original data according to a preset decryption rule to obtain the original data corresponding to the user identifier; In the case that the initial data is a hypertext link, a page jump is performed through the hypertext link, and the original data corresponding to the user identifier is obtained through the page after the jump.

5. The method according to claim 1, characterized in that The converting the original data into target data of a preset data structure according to the data adapter comprises: Determine a user data template corresponding to the platform application; the user data template includes fields to be filled; According to the field mapping relationship indicated by the data adapter, the original data is filled into the field to be filled to obtain the target data of the preset data structure.

6. The method according to claim 1, characterized in that The transmitting the target data to the business system of the platform application includes: Encrypt the target data according to the encryption method corresponding to the platform application to obtain target ciphertext data; Distributing the target ciphertext data to the business system of the platform application; The business processing flow in the business system is processed based on the target ciphertext data.

7. The method according to claim 1, characterized in that Before transmitting the target data to the business system of the platform application, the method further includes: Determining a service system of the platform application according to a session of the user identifier in the platform application; The business system processes the data in the session based on the target data.

8. A user data access device, characterized in that: The device comprises: A creation module is used to obtain a process adapter and a data adapter adapted to the data access process according to the data access process of the application to be accessed when the application to be accessed logs in to the platform application with a user identifier; An access module, used to obtain the original data corresponding to the user identifier from the application to be accessed through the process adapter, and convert the original data into target data of a preset data structure according to the data adapter; The conversion module is used to transmit the target data to the business system of the platform application.

9. A computer device comprising a memory and a processor, wherein the memory stores a computer program, wherein: When the processor executes the computer program, the steps of the method according to any one of claims 1 to 7 are implemented.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 7 are implemented.

Images