Project configuration information reading method and device, computer equipment and storage medium

Abstract

The invention relates to a project configuration information reading method and device, computer equipment and a storage medium. The method comprises the steps that encryption access parameters are extracted from starting parameters of a target configuration item, and the target configuration item refers to a configuration item for completing information configuration in a distributed configuration center; decrypting the encrypted access parameter to obtain a plaintext access parameter; and accessing the distributed configuration center based on the plaintext access parameter, and reading configuration information of the target configuration item from the distributed configuration center. By adopting the method, the reading safety of reading the project configuration information is improved.

Description

Technical Field

[0001] The present application relates to the field of information security technology, and in particular to a method, device, computer equipment and computer-readable storage medium for reading project configuration information. Background Art

[0002] With the continuous development of science and technology, information security issues have received more and more attention. Taking distributed microservice projects in the computer field as an example, distributed configuration centers are usually used to store and modify project configuration information for subsequent business applications.

[0003] At present, in the process of reading project configuration information, users usually enter access parameters through the user interface of the distributed configuration center for direct reading, or users with access rights assist in entering access parameters for indirect reading. However, since the access parameters are exposed to the public, the process of reading project configuration information is in a high-risk state, which makes it easy for project configuration information to be leaked. Therefore, the current reading security of project configuration information is low. Summary of the invention

[0004] Based on this, it is necessary to provide a project configuration information reading method, device, computer equipment and computer-readable storage medium to improve the efficiency of project configuration information reading in response to the above technical problems.

[0005] In a first aspect, the present application provides a method for reading project configuration information, comprising:

[0006] Extracting the encrypted access parameter from the startup parameter of the target configuration item, wherein the target configuration item refers to the configuration item for which information configuration is completed in the distributed configuration center;

[0007] Decrypting the encrypted access parameter to obtain a plaintext access parameter;

[0008] The distributed configuration center is accessed based on the plaintext access parameter, and configuration information of the target configuration item is read from the distributed configuration center.

[0009] In one embodiment, decrypting the encrypted access parameter to obtain the plaintext access parameter includes:

[0010] According to the first encryption rule identifier of the encrypted access parameter, matching the encrypted access parameter with a corresponding first decryption rule;

[0011] The encrypted access parameter is decrypted according to the first decryption rule to obtain a plaintext access parameter.

[0012] In one of the embodiments, after accessing the distributed configuration center based on the plaintext access parameter and reading the configuration information of the target configuration item from the distributed configuration center, the method further includes:

[0013] Determining encryption configuration parameters in the configuration information;

[0014] Acquire a second decryption rule according to a second encryption rule identifier corresponding to the encryption configuration parameter;

[0015] The encrypted configuration parameters are decrypted according to the second decryption rule to obtain plaintext configuration parameters.

[0016] In one embodiment, decrypting the encrypted configuration parameter according to the second decryption rule to obtain the plaintext configuration parameter includes:

[0017] Reconstructing the basic property editor of the configuration management container according to the second decryption rule to obtain the designated property editor of the target configuration item;

[0018] Registering the specified property editor in the configuration management container;

[0019] Searching for the designated attribute editor in the configuration management container, wherein the designated attribute editor is adapted to the second decryption rule;

[0020] According to the specified attribute editor, the encrypted configuration parameter is converted into a plaintext configuration parameter that complies with the second decryption rule.

[0021] In one embodiment, the accessing the distributed configuration center based on the plaintext access parameter includes:

[0022] extracting non-encrypted access parameters from the startup parameters of the target configuration item;

[0023] Generate an overall plaintext access parameter for accessing the distributed configuration center according to the non-encrypted access parameter and the plaintext access parameter;

[0024] The distributed configuration center is accessed according to the overall plaintext access parameters.

[0025] In one embodiment, the step of reading the configuration information of the target configuration item from the distributed configuration center includes:

[0026] Reading an encrypted configuration file from the distributed configuration center, and matching a corresponding third decryption rule for the encrypted configuration file;

[0027] Decrypting the encrypted configuration file according to the third decryption rule to obtain a plaintext configuration file of the target configuration item;

[0028] The configuration information is read from the plain text configuration file.

[0029] In one of the embodiments, the number of the encrypted access parameter is at least one, and the encrypted access parameter is obtained based on encrypting the plaintext access parameter at least twice.

[0030] In a second aspect, the present application also provides a project configuration information reading device, comprising:

[0031] An extraction module, used to extract the encrypted access parameter from the startup parameters of the target configuration item, wherein the target configuration item refers to a configuration item for which information configuration is completed in the distributed configuration center;

[0032] A decryption module, used to decrypt the encrypted access parameters to obtain plaintext access parameters;

[0033] A reading module is used to access the distributed configuration center based on the plaintext access parameter and read the configuration information of the target configuration item from the distributed configuration center.

[0034] In a third aspect, the present application further provides a computer device, including a memory and a processor, wherein the memory stores a computer program, and when the processor executes the computer program, the following steps are implemented:

[0035] Extracting encrypted access parameters from startup parameters of a target configuration item, wherein the target configuration item refers to a configuration item for which information configuration is completed in a distributed configuration center; decrypting the encrypted access parameters to obtain plaintext access parameters; accessing the distributed configuration center based on the plaintext access parameters, and reading configuration information of the target configuration item from the distributed configuration center.

[0036] In a fourth aspect, the present application further provides a computer-readable storage medium having a computer program stored thereon, wherein when the computer program is executed by a processor, the following steps are implemented:

[0037] Extracting encrypted access parameters from startup parameters of a target configuration item, wherein the target configuration item refers to a configuration item for which information configuration is completed in a distributed configuration center; decrypting the encrypted access parameters to obtain plaintext access parameters; accessing the distributed configuration center based on the plaintext access parameters, and reading configuration information of the target configuration item from the distributed configuration center.

[0038] In a fifth aspect, the present application further provides a computer program product, including a computer program, which implements the following steps when executed by a processor:

[0039] Extracting encrypted access parameters from startup parameters of a target configuration item, wherein the target configuration item refers to a configuration item for which information configuration is completed in a distributed configuration center; decrypting the encrypted access parameters to obtain plaintext access parameters; accessing the distributed configuration center based on the plaintext access parameters, and reading configuration information of the target configuration item from the distributed configuration center.

[0040] The above-mentioned project configuration information reading method, device, computer device and computer-readable storage medium are applied to computer devices. In order to securely obtain the configuration information corresponding to the target configuration project from the distributed configuration center, when the target configuration project is started, the encrypted access parameters are extracted from the startup parameters of the target configuration project, and then the encrypted access parameters are decrypted to obtain the plaintext access parameters for accessing the distributed configuration center. Since the access parameters for accessing the distributed configuration center in the startup parameters are in encrypted form, that is, the access parameters for accessing the distributed configuration center are encrypted access parameters, even if the startup parameters are obtained or leaked, due to the encryption characteristics of the access parameters for accessing the distributed configuration center, the distributed configuration center cannot be easily accessed after the encrypted access parameters are obtained, thereby avoiding the problem of leakage of the plaintext access parameters, thereby improving the security of obtaining configuration information from the distributed configuration center. In addition, during the startup of the configuration project, the entire process from obtaining the encrypted access parameters from the startup parameters to accessing the distributed configuration center through the plaintext access parameters and obtaining the configuration information is adapted to be automatically completed when the configuration project is started, without the need for additional operations such as manually inputting access parameters to access the distributed configuration center, further improving the security of reading the project configuration information in the distributed configuration center. BRIEF DESCRIPTION OF THE DRAWINGS

[0041] In order to more clearly illustrate the technical solutions in the embodiments of the present application or the related technologies, the drawings required for use in the embodiments or the related technical descriptions are briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0042] Figure 1 A schematic diagram of a flow chart of a method for reading project configuration information in one embodiment;

[0043] Figure 2 A schematic diagram of a flow chart of a method for reading project configuration information in another embodiment;

[0044] Figure 3 It is an execution sequence diagram of reading configuration information of a target configuration item of a project configuration information reading method in one embodiment;

[0045] Figure 4 An execution sequence diagram of a project configuration information reading method in one embodiment for reading and storing configuration parameters in configuration information of a target configuration project;

[0046] Figure 5 It is a structural block diagram of a device for reading project configuration information in one embodiment;

[0047] Figure 6 FIG. 4 is a diagram showing the internal structure of a computer device in one embodiment. DETAILED DESCRIPTION

[0048] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0049] First of all, it should be understood that in distributed microservice Java projects, the project configuration information is usually stored and modified through the distributed configuration center (Dynamic Naming and Configuration Service, Nacos) to support business modifications. In the lower version of Nacos, the reading and modification of the configuration information of the distributed microservice project does not require permission authentication. Among them, the way to obtain the configuration information in the distributed microservice project is to directly connect to the distributed configuration center through the connection address or interface address, and then enter the distributed configuration center based on the access parameters such as the account password login method and read the configuration information of the corresponding distributed microservice project. However, the above-mentioned method of obtaining the configuration information in the distributed microservice project is a project configuration information reading method that does not require permission verification, which makes the reading of the project configuration information under a high-risk state. Once the access parameters are leaked, the project configuration information will be leaked. Therefore, there is an urgent need for a project configuration information reading method that improves the reading security of the project configuration information.

[0050] In one embodiment, Figure 1 As shown, a method for reading project configuration information is provided. This embodiment takes the method applied to a terminal as an example. The terminal includes but is not limited to a personal computer, a laptop computer, a smart phone, and a tablet computer, etc. The terminal includes an extraction module, a decryption module, and a reading module.

[0051] Among them, the extraction module is used to extract the encrypted access parameters in the startup parameters of the target configuration project. The target configuration project refers to the configuration project that completes the information configuration in the distributed center. The decryption module is used to decrypt the encrypted access parameters to obtain the plaintext access parameters. The reading module is used to access the distributed configuration center based on the plaintext access parameters and read the configuration information of the target configuration project from the distributed configuration center. Then, through the information interaction between the extraction module, the decryption module and the reading module, the encrypted access parameters in the startup parameters of the target configuration project can be decrypted to obtain the plaintext access parameters. Finally, the distributed configuration center is accessed through the plaintext access parameters, and the configuration information of the target configuration project is read from the distributed configuration center. This can achieve the purpose of adding a new reading security assurance process in the configuration information reading process for the target configuration project.

[0052] That is, the project configuration information reading method provided in this application, the way to obtain the configuration information of the distributed configuration center is: set the encrypted access parameters in the startup parameters of the target configuration project, decrypt the encrypted access parameters to obtain the plaintext access parameters, and then access the distributed configuration center based on the plaintext access parameters and obtain the configuration information.

[0053] By setting encrypted access parameters in the startup parameters, even if the startup parameters are easily obtained or leaked, since the access parameters for accessing the distributed configuration center are encrypted access parameters, the distributed configuration center cannot be accessed through the encrypted access parameters, thereby avoiding the problem of plaintext access parameter leakage and improving security. In addition, during the startup of the configuration project, the entire process from obtaining the encrypted access parameters from the startup parameters to accessing the distributed configuration center through plaintext access parameters and obtaining configuration information is automatically completed when the configuration project is started, without the need for additional operations such as manually entering access parameters to access the distributed configuration center, further improving the security of obtaining configuration information in the distributed configuration center and overcoming the technical defect that the configuration information stored in the distributed configuration center is at risk of leakage during the reading process due to lack of authority authentication.

[0054] That is, only when the plaintext access parameters are successfully decrypted can the configuration information of the target configuration project be read, rather than the distributed configuration center being easily accessible after the encrypted access parameters are obtained, thereby avoiding the problem of leakage of the plaintext access parameters, and thus improving the security of obtaining configuration information from the distributed configuration center. In addition, during the startup process of the configuration project, the entire process from obtaining the encrypted access parameters from the startup parameters to accessing the distributed configuration center through the plaintext access parameters and obtaining the configuration information is adapted to be automatically completed when the configuration project is started, without the need for additional operations such as manually entering access parameters to access the distributed configuration center, etc., further improving the security of reading the project configuration information in the distributed configuration center.

[0055] Optionally, the method may also be applied to a server, or to a system including a terminal and a server, and implemented through interaction between the terminal and the server. In this embodiment, the method includes the following steps:

[0056] Step 202: extracting encrypted access parameters from the startup parameters of the target configuration item, wherein the target configuration item refers to a configuration item for which information configuration is completed in a distributed configuration center.

[0057] It should be noted that the distributed configuration center is a centralized configuration management system used to manage the configuration information of microservice applications, wherein the distributed configuration center can store, modify, and read the configuration information of the configured microservice projects. The target configuration project refers to the configuration project for which information configuration is completed in the distributed configuration center. It is understandable that the number of configuration projects for which information configuration is completed in the distributed configuration center is at least one, and at least one configuration project includes the target configuration project. The configuration project is determined by business needs and business requirements, and can specifically be a Java project, a Spring boot project, a Spring Cloud project, a Helidon project, and the like.

[0058] In this embodiment, the startup parameter is used to start the target configuration item, and the encrypted access parameter refers to the parameter obtained by encrypting the plaintext access parameter for accessing the distributed configuration center, wherein the plaintext access parameter may be an account and password for accessing the distributed configuration center. Optionally, the encryption method for the plaintext access parameter may be symmetric encryption, asymmetric encryption, or hash encryption, etc., which is not specifically limited in this embodiment.

[0059] Normally, startup parameters are usually set in plain text. In this embodiment, in order to avoid the security risk of plain text access parameters for accessing the distributed configuration center being leaked, some parameters in the startup parameters, such as the plain text access parameters, are encrypted so that the access parameters for accessing the distributed configuration center in the startup parameters exist in encrypted form. Since the encrypted access parameters are presented in plain text only after decryption, the encrypted access parameters obtained from the startup parameters are secure, thereby improving the security of obtaining configuration information from the distributed configuration center. Furthermore, when the configuration project is started, the encrypted access parameters can be obtained from the startup parameters.

[0060] In one embodiment, relevant access parameters such as encrypted access parameters for accessing the distributed configuration center are pre-added to the startup parameters of the configuration project so that when the configuration project is started, the encrypted access parameters are obtained from the startup parameters. In other words, the encrypted access parameters for accessing the distributed configuration center can be regarded as included in the startup parameters of the configuration project.

[0061] Optionally, the relevant access parameters also include but are not limited to non-encrypted parameters such as the configuration information space name of the target configuration item in the distributed configuration center, the connection address or interface address of the distributed configuration center, etc.

[0062] Optionally, in actual application, it can be set as needed or according to actual conditions. The plain text access parameter can be an account password and an interface address for accessing the distributed configuration center.

[0063] The distributed configuration center is provided with at least one configuration information space, and the configuration information of different configuration items is stored in different configuration information spaces. The configuration information space can be identified and determined by the configuration information space name. Optionally, the configuration information space name can be used as a project identifier.

[0064] Optionally, in the process of encrypting the startup parameters, all the contents of the startup parameters can be encrypted, or part of the contents in the startup parameters, such as sensitive parameters, can be encrypted, wherein sensitive parameters refer to parameters whose leakage poses a security risk, such as plaintext access parameters for accessing a distributed configuration center and / or other sensitive parameters other than plaintext access parameters for accessing a distributed configuration center, such as database access parameters, exemplarily a database account and a database password. It can be understood that the sensitive parameters in the startup parameters include at least one.

[0065] Among them, an encryption method of encrypting all the contents of the startup parameters is adopted. During the entire process of reading the project configuration information, the encrypted access parameters extracted from the startup parameters of the target configuration project need to be completely decrypted first, so that the plaintext access parameters used to access the distributed configuration center can be obtained to achieve access to the distributed configuration center, thereby avoiding any content in the startup parameters from being easily obtained or leaked. Therefore, it further lays the foundation for improving the reading security of reading the project configuration information; and an encryption method of encrypting the sensitive content of the startup parameters is adopted. Since other contents in the startup parameters except the sensitive parameters can be easily obtained or leaked, it is impossible to achieve access to the distributed configuration center based on this part of the content alone. Since this part of the content is not encrypted, in the entire process of reading the project configuration information, only the sensitive parameters in the startup parameters need to be decrypted, and there is no need to completely decrypt all the contents of the startup parameters. Therefore, the decryption process of decrypting the encrypted access parameters can be simplified by shortening the amount of data required to be decrypted. Therefore, while laying the foundation for improving the reading security of reading the project configuration information, it also simultaneously lays the foundation for improving the reading efficiency of reading the project configuration information.

[0066] It is understandable that the database account and database password for accessing the database can be set in the startup parameters of the configuration project, or can be set in the configuration information corresponding to the configuration project of the distributed configuration center. Usually, the database account and database password for accessing the database are set in the configuration information corresponding to the configuration project of the distributed configuration center to achieve the purpose of sharing.

[0067] It can be understood that, in this embodiment, the startup parameters include relevant parameters for starting the target configuration item itself and relevant access parameters for accessing the distributed configuration center.

[0068] Optionally, the number of encrypted access parameters extracted from the startup parameters is at least one.

[0069] As an example, step 202 includes: obtaining encryption access parameters from the startup parameters, the encryption access parameters in the startup parameters can be determined by the encryption rule identifier, and the parameters in the startup parameters that match the encryption rule identifier can be used as encryption access parameters. Exemplarily, the encryption rule identifier can be an identifier pair. Assuming that "+++" is the identifier pair corresponding to the encryption rule identifier, and there is content "+++XXXX+++" in the startup parameters, the parameter that matches the encryption rule identifier is "+++XXXX+++", and the encryption access parameters are determined based on "+++XXXX+++". It can be understood that the content covered by the encryption rule identifier is regarded as the parameter in the startup parameters that matches the encryption rule identifier, that is, the content covered by the encryption rule identifier includes the identifier pair "+++" corresponding to the encryption access identifier and the "XXXX" between the identifier pairs as parameter content.

[0070] For example, suppose the startup parameters include the following:

[0071] xxxx.username=+++jZvcPDrbHWWZESmsQjlZhQ==+++

[0072] xxxx.password=! ! ! YU / zevKBPM8YYSC85xiRQg==! ! !

[0073] The preset encryption rule identifier is "+++XXXX+++" and / or "!!!XXXX!!!", and the parameters matching the encryption rule identifier in the startup parameters are as the encryption access parameters: +++jZvcPDrbHWWZESmsQjlZhQ==+++. It can be understood that the encryption access parameter corresponds to the encrypted form of the account in the plaintext access parameter, and

[0074] ! ! ! YU / zevKBPM8YYSC85xiRQg==! ! ! It can be understood that the encrypted access parameter corresponds to the encrypted form of the password in the plain text access parameter.

[0075] The encryption rule identifier can be used as a unique identifier for finding and determining the encryption access parameter from the startup parameters, and / or a unique identifier for determining the encryption method used by the encryption access parameter. Optionally, the encryption rule identifier can be represented by at least one of a string, letters, and numbers, which is not limited.

[0076] Optionally, the unique identifier of the encrypted access parameter found from the startup parameters and the unique identifier used to determine the encryption method adopted by the encrypted access parameter can be set to the same identifier for determination, such as being uniformly determined by the encryption rule identifier, or can be set to different identifiers for determination, without limitation. In the case where the above identifiers are set to the same identifier, the purpose of searching for the encrypted access parameters and determining the encryption method adopted for the encrypted access parameters can be simultaneously achieved through a single identifier, thereby simplifying the decryption process of the plaintext access parameters in the process of decrypting the plaintext access parameters for accessing the distributed configuration center, thereby laying a foundation for improving the reading efficiency of reading project configuration information.

[0077] As an example, step 202 includes: obtaining the startup parameters of the target configuration item, identifying the startup parameters with encryption rule identifiers as encryption access parameters. For example, the encryption rule identifier can be a single identifier pair. Assuming that "+" is the encryption rule identifier, and the startup parameters contain "X1 (+) X2X3X4 (+)", the parameters matching the encryption rule identifier are "X1X4", and the encryption access parameters determined according to "+" are "X1X4". It can be understood that the content matching the encryption rule identifier is regarded as the encryption access parameter in the startup parameters.

[0078] Step 204, decrypt the encrypted access parameter to obtain the plaintext access parameter.

[0079] It should be noted that, in the process of decrypting the encrypted access parameters, the encryption method corresponding to the encrypted access parameters is determined, and then the encrypted access parameters are decrypted using the decryption method corresponding to the encryption method to obtain the plaintext access parameters.

[0080] As an optional implementation, step S204 includes:

[0081] The encrypted access parameters are decrypted according to a preset decryption algorithm to obtain the plaintext access parameters.

[0082] It is understandable that the preset decryption algorithm is a decryption algorithm corresponding to a preset decryption algorithm or decryption method. When the encryption algorithm or encryption method of the plaintext access parameter is determined, the encrypted access parameter can be decrypted by presetting the corresponding decryption algorithm or decryption method to obtain the plaintext access parameter.

[0083] As an optional implementation, step S204 includes:

[0084] According to the first encryption rule identifier of the encrypted access parameter, matching the encrypted access parameter with a corresponding first decryption rule;

[0085] According to the first decryption rule, the encrypted access parameter is decrypted to obtain the plaintext access parameter.

[0086] It should be noted that the specific implementation of step S204 will be described in detail in subsequent embodiments and will not be repeated here.

[0087] Optionally, the encrypted access parameter can be one or at least two. When the encrypted access parameter is at least two, the decryption method of the encrypted access parameter can be the same or different. After the decryption of the encrypted access parameter is completed, the plaintext access parameter for accessing the distributed configuration center can be obtained.

[0088] As an example, step 204 includes: decrypting a first encrypted access parameter in the encrypted access parameters according to a first preset decryption algorithm to obtain a first plaintext access parameter, and decrypting a second encrypted access parameter in the encrypted access parameters according to a second preset decryption algorithm to obtain a second plaintext access parameter, and using the first plaintext access parameter and the second plaintext access parameter together as the plaintext access parameter, wherein the first preset decryption algorithm may be a symmetric decryption algorithm, and the second preset decryption algorithm may be an asymmetric decryption algorithm.

[0089] In order to further improve the reading security of project configuration information, different encryption methods can be set for different contents of encrypted access parameters, and then in the process of decrypting the encrypted access parameters, different decryption algorithms can be relied on to decrypt the corresponding contents. For example, assuming that the first encrypted access parameter is the account number in the plaintext access parameter, and the second encrypted access parameter is the password in the plaintext access parameter, wherein the first encrypted access parameter is specifically "+++jZvcPDrbHWWZESmsQjlZhQ==+++", and the second encrypted access parameter is specifically "!!!YU / zevKBPM8YYSC85xiRQg==!!!", then through the first encrypted access parameter The identification pair "+++" corresponding to the encryption rule identification of the encrypted access parameter can be queried to obtain the first preset decryption algorithm matching the identification pair, and the identification pair "!!!" corresponding to the encryption rule identification of the second encrypted access parameter can be queried to obtain the second preset decryption algorithm matching the identification pair, and then the first preset decryption algorithm can be used to decrypt the first plaintext access parameter (the account number in the plaintext access parameter) as "jZvcPDrbHWWZESmsQjlZhQ", and the second preset decryption algorithm can be used to decrypt the second plaintext access parameter (the password in the plaintext access parameter), and finally the account number and password in the plaintext access parameter are used together as the plaintext access parameter.

[0090] It can be understood that after using different encryption algorithms to encrypt the plaintext access parameters in the startup parameters, the encrypted access parameters obtained need to be decrypted by using different decryption algorithms to decrypt different contents of the encrypted access parameters in the decryption stage before the plaintext access parameters can be decrypted. Since different encryption and decryption algorithms rely on different encryption and decryption logics, in the process of reading project configuration information, even if a decryption algorithm is obtained or leaked, it can still decrypt part of the plaintext access parameters for accessing the distributed configuration center, that is, it is impossible to completely decrypt the plaintext access parameters used to access the distributed configuration center. Therefore, by increasing the decryption complexity of the encrypted access parameters, the decryption process of the encrypted access parameters can be strengthened, so that the foundation can be further laid for improving the reading security of the project configuration information.

[0091] Step 206: Access the distributed configuration center based on the plain text access parameter, and read the configuration information of the target configuration item from the distributed configuration center.

[0092] It should be noted that after accessing the distributed configuration center based on the plaintext access parameters, since the distributed configuration center stores configuration information of different configuration items, the configuration information of the target configuration item can be read from the distributed configuration center by presetting the project identifier, the association relationship between the configuration item and the configuration information, wherein the project identifier is the unique identifier of the target configuration item, and the project identifier can be represented by a string, letters, and numbers, etc. Based on the association relationship between the project identifier, the configuration item and the configuration information, the project identifier corresponding to the target configuration item can be obtained, and the configuration information corresponding to the target configuration item can be obtained based on the project identifier. Optionally, the project identifier can be the name of the configuration information space corresponding to the configuration information space where the configuration information of the configuration item is located.

[0093] Optionally, in the process of reading the configuration information of the target configuration item, the distributed configuration center can be accessed relying on the plaintext access parameters, and then the first information index can be extracted in the read request corresponding to the startup parameter, and based on the first information index, the configuration information of the target configuration item is queried from the distributed configuration center and read. Exemplarily, the startup parameter and the first information index are jointly encapsulated into a read request before reading the project configuration information, and then after accessing the distributed configuration center based on the plaintext access parameters, the first information index encapsulated in the request body and URL parameters can be synchronously extracted in the read request, so as to determine the configuration item through the first information index, and read the configuration information of the configuration item. The above process can be specifically as follows: 1) When the program is running, start 1) The dynamic parameters and the first information index are encapsulated together as a read request, which is sent to the distributed configuration center through a secure communication channel (such as HTTPS); 2) Access the distributed configuration center: Use plain text access parameters (account, password, etc.) to authenticate and authorize the distributed configuration center; 3) Once access is authorized, the read request can continue to be processed; 4) Extract the first information index: After the distributed configuration center receives the read request, it will extract the first information index from the request body, URL parameters or other locations; 5) Query and read configuration information: Based on the extracted first information index, the distributed configuration center will query and return the corresponding configuration information to the user or system, where the first information index can specifically be a number, name or character segment, etc.

[0094] As an example, step 206 includes: accessing the distributed configuration center with plain text access parameters, extracting a first information index in a read request corresponding to the startup parameter, and querying and reading configuration information of the target configuration item from the distributed configuration center according to the first information index.

[0095] It should be noted that, by obtaining the encrypted access parameters for accessing the distributed configuration center from the startup parameters of the configuration project, when the configuration project is started, the encrypted access parameters are obtained from the startup parameters, and after the encrypted access parameters are decrypted to obtain the plaintext access parameters, the distributed configuration center is accessed through the plaintext access parameters and the configuration information is obtained. That is, the entire process from step 202: obtaining the encrypted access parameters from the startup parameters to step 206: accessing the distributed configuration center through the plaintext access parameters and obtaining the configuration information is adapted to be automatically completed when the configuration project is started, without the need for additional operations such as manually inputting access parameters to access the distributed configuration center, thereby improving the security of obtaining configuration information in the distributed configuration center.

[0096] In the project configuration information reading method provided in the present embodiment, in order to securely obtain the configuration information corresponding to the target configuration project from the distributed configuration center, when the target configuration project is started, the encrypted access parameters are extracted from the startup parameters of the target configuration project, and then the encrypted access parameters are decrypted to obtain the plaintext access parameters for accessing the distributed configuration center. Since the access parameters for accessing the distributed configuration center in the startup parameters are in encrypted form, that is, encrypted access parameters, even if the startup parameters are obtained or leaked, since the access parameters for accessing the distributed configuration center are encrypted, the distributed configuration center cannot be accessed through the encrypted access parameters, thereby avoiding the problem of plaintext access parameter leakage and improving the security of obtaining the configuration information in the distributed configuration center. In addition, during the startup of the configuration project, the entire process from obtaining the encrypted access parameters from the startup parameters to accessing the distributed configuration center through the plaintext access parameters and obtaining the configuration information is adapted to be automatically completed when the configuration project is started, without the need for additional operations such as manually inputting access parameters to access the distributed configuration center, and without exposing the plaintext access parameters to anyone, further improving the security of obtaining the configuration information in the distributed configuration center.

[0097] In addition, in the present embodiment, the plaintext access parameters are encrypted to obtain encrypted access parameters, which are set in the startup parameters of the configuration project, and the encrypted access parameters are decrypted to obtain plaintext access parameters. The distributed configuration center is accessed based on the plaintext access parameters, so that the prior access parameter decryption needs to be completed when reading the configuration information from the distributed configuration center. That is, in the process of reading the project configuration information, the purpose of increasing the security assurance process of reading is achieved, rather than directly reading the configuration information of the target configuration project from the distributed configuration center through the plaintext access parameters. This overcomes the technical defect that the process of reading the project configuration information is in a high-risk state due to the exposure of the access parameters to the public environment, which makes it easy for the project configuration information to be leaked. Therefore, the reading security of the project configuration information is improved.

[0098] In one embodiment, Figure 2As shown, the encrypted access parameters are decrypted to obtain the plaintext access parameters, including:

[0099] Step 302: Match a corresponding first decryption rule for the encrypted access parameter according to the first encryption rule identifier of the encrypted access parameter.

[0100] Step 304: decrypt the encrypted access parameter according to the first decryption rule to obtain the plaintext access parameter.

[0101] It should be noted that in an actual application process, the encryption method for the plaintext access parameter can be different encryption methods. In order to avoid the risk of being cracked and leaking the plaintext access parameter due to the long-term use of one encryption method to encrypt the plaintext access parameter, different encryption methods can be switched to encrypt the plaintext access parameter at regular or preset time intervals to obtain the encrypted access parameter, and then the encrypted access parameter is added to the startup parameters of the configuration item to improve the encryption level and encryption complexity of the encrypted access parameter, thereby improving the security of accessing the distributed configuration center; in another actual application process, the encrypted access parameter obtained from the startup parameters can be at least one, and the encryption method used in at least one encrypted access parameter can be the same or different. When different encryption methods are used to encrypt the encrypted access parameters respectively, compared with the same encryption method used for each encrypted access parameter, the risk of being cracked and leaking the plaintext access parameter can be avoided, the encryption level and encryption complexity of the encrypted access parameter can be improved, and the security of accessing the distributed configuration center can be improved.

[0102] When plaintext access parameters are encrypted using different encryption methods, in order to clarify the decryption method or decryption rule corresponding to the encryption method, the encryption method corresponding to the encrypted access parameters can be determined through the encryption rule identifier, and then the decryption method or decryption rule corresponding to the encryption method can be determined based on the encryption rule identifier.

[0103] Optionally, the encryption rule identifier includes a first encryption rule identifier, which can be set in advance. Exemplarily, the first encryption rule identifier can be represented by an identifier pair, such as "+++XXXX+++", "---XXXX+++", and "!!!XXXX!!!" etc.; it can be represented in other forms, which are not limited here.

[0104] It can be understood that the mapping relationship between the encryption rule identifier and the decryption rule can be set in advance, and based on the mapping relationship between the encryption rule identifier and the decryption rule, the first decryption rule corresponding to the first encryption rule identifier is obtained, wherein the decryption rule includes the first decryption rule, and then the encrypted access parameter can be decrypted according to the first decryption rule to obtain the plaintext access parameter.

[0105] It is easy to understand that different encryption rule identifiers, different encryption methods, different encryption rules, and correspondingly, different decryption methods and different decryption rules. For example, assuming that when the encryption rule identifier is "+++XXXX+++", the corresponding encryption method and decryption method adopt symmetric encryption, and the encryption rule and decryption rule are AES symmetric encryption and decryption algorithms, and when the encryption rule identifier is "!!!XXXX!!!", the corresponding encryption method and decryption method adopt symmetric encryption, and the encryption rule and decryption rule adopt DES symmetric encryption and decryption algorithms.

[0106] For example, suppose the startup parameters include the following:

[0107] xxxx.username=+++jZvcPDrbHWWZESmsQjlZhQ==+++

[0108] xxxx.password=! ! ! YU / zevKBPM8YYSC85xiRQg==! ! !

[0109] From the two encryption access parameters determined in the startup parameters, the encryption rule used for the username account is the AES symmetric encryption and decryption algorithm, and the encryption rule used for the password is the DES symmetric encryption and decryption algorithm.

[0110] Optionally, in an actual application scenario, in order to further improve the encryption complexity of the plaintext access parameters and improve the security of accessing the distributed configuration center, the plaintext access parameters may be encrypted at least twice to obtain encrypted access parameters, that is, the encrypted access parameters are obtained based on encrypting the plaintext access parameters at least twice. The encryption algorithms used to encrypt the plaintext access parameters at least twice may be the same or different.

[0111] Exemplarily, assume that the plaintext access parameters are encrypted twice, the first encryption is: performing AES symmetric encryption and decryption algorithm on the plaintext access parameters to obtain intermediate encrypted access parameters, where the encryption rule identifier pair of the intermediate encrypted access parameters is "+++", and the second encryption is: performing DES symmetric encryption and decryption algorithm on the intermediate encrypted access parameters to obtain encrypted access parameters, where the encryption rule identifier pair of the encrypted access parameters is "!!!".

[0112] Correspondingly, the encrypted access parameters are decrypted twice. The first decryption is: according to the encryption rule identifier of the encrypted access parameters, the DES symmetric encryption and decryption algorithm is determined, and the encrypted access parameters are decrypted based on the DES symmetric encryption and decryption algorithm to obtain intermediate encrypted access parameters. The second decryption is: according to the decryption rule identifier of the intermediate encrypted access parameters, the AES symmetric encryption and decryption algorithm is determined, and the intermediate encrypted access parameters are decrypted based on the AES symmetric encryption and decryption algorithm to obtain plaintext access parameters.

[0113] In one practicable manner, referring to Figure 3 , Figure 3 The execution sequence diagram is for reading the configuration information of the target configuration project, wherein the project configuration information reading system deployed on the terminal first extracts the encrypted access parameters from the startup parameters of the target configuration project after startup, and then calls the parameter encryption and decryption component to decrypt the encrypted access parameters, that is, through the first encryption rule identifier of the encrypted access parameter, matches the corresponding first decryption rule, and decrypts the encrypted access parameter through the first decryption rule to obtain the plaintext access parameter. After the project configuration information reading system reads the plaintext access parameter, the distributed configuration center is accessed based on the plaintext access parameter, that is, a communication connection is established between the project configuration information reading system and the distributed configuration center, so that the distributed configuration center returns the configuration information of the target configuration project to the project configuration information reading system. After the project configuration information reading system reads the configuration information into the memory, the configuration information of the target configuration project can be directly read.

[0114] In this embodiment, when the plaintext access parameters are encrypted using different encryption methods, in order to clarify the decryption method or decryption rule corresponding to the encryption method, the encrypted access parameters are decrypted to obtain the plaintext access parameters based on the first decryption rule determined by the first encryption rule identifier of the encrypted access parameters. When the encryption rule identifier of the encrypted access parameters is different, such as the first encryption rule identifier, it indicates that the encryption methods used by the encrypted access parameters are different, and thus the corresponding determined decryption rules, such as the first decryption rule, are different, so that the encryption method used by the encrypted access parameters is selective, while improving the encryption level and encryption complexity of the encrypted access parameters, thereby improving the security of access to the distributed configuration center.

[0115] In addition, since the plaintext access parameter is encrypted twice in the encryption stage, in the decryption process, the first decryption rule is matched for the encrypted access parameter according to the encryption rule identifier of the encrypted access parameter, and then the encrypted access parameter is decrypted in one layer by the first decryption algorithm to obtain the intermediate encrypted access parameter, and then the second decryption rule is matched for the intermediate encrypted access parameter according to the decryption rule identifier of the intermediate encrypted access parameter, and then the encrypted access parameter is decrypted in two layers by the second decryption algorithm, that is, the intermediate encrypted access parameter is decrypted to obtain the plaintext access parameter, which can be based on the encryption and decryption rule identifier established in the stage of encrypting the plaintext access parameter and the decryption rule. The mapping relationship realizes that in the process of decrypting the encrypted access parameters, the encrypted access parameters are decrypted multiple times relying on different decryption rules, and finally the purpose of obtaining the plaintext access parameters for accessing the distributed configuration center is achieved. Therefore, even if a decryption algorithm is obtained or leaked, it can also decrypt part of the plaintext access parameters for accessing the distributed configuration center, that is, it is impossible to completely decrypt the plaintext access parameters for accessing the distributed configuration center. Therefore, by increasing the decryption complexity of the encrypted access parameters, the decryption process of the encrypted access parameters can be strengthened. Therefore, it can further lay the foundation for improving the reading security of reading project configuration information.

[0116] In one embodiment, after accessing the distributed configuration center based on the plaintext access parameter and reading the configuration information of the target configuration item from the distributed configuration center, the method further includes:

[0117] Determining encryption configuration parameters in the configuration information;

[0118] Acquire a second decryption rule according to a second encryption rule identifier corresponding to the encryption configuration parameter;

[0119] The encrypted configuration parameters are decrypted according to the second decryption rule to obtain the plaintext configuration parameters.

[0120] Normally, after reading the configuration information of the target configuration project from the distributed configuration center, the configuration information such as configuration parameters, configuration environment and other information can be directly obtained for application. However, there are differences in the security requirements of different configuration projects, and there are also differences in the security requirements between the configuration information corresponding to the same configuration project, such as different configuration parameters. Exemplarily, sensitive configuration parameters in the configuration information such as database account and database password, it can be understood that the database can be accessed through the database account and database password, so as to obtain the data in the database, and once the database account and database password are exposed or leaked, there is a security risk of data leakage. Therefore, if the configuration parameters in the configuration information such as database account and database password are directly stored in plain text in the distributed configuration center, there is a security risk of data leakage. In this embodiment, for the sensitive configuration parameters in the configuration information, the sensitive configuration parameters will be encrypted and stored in the distributed configuration center. Among them, the sensitive configuration parameters can also be regarded as plain text configuration parameters. After obtaining the plain text configuration parameters, the plain text configuration parameters can be stored.

[0121] It should be noted that the specific implementation process and principle of determining the encrypted configuration parameters in the configuration information and extracting the encrypted access parameters from the startup parameters in step 202 are similar, and the second decryption rule is obtained according to the second encryption rule identifier corresponding to the encrypted configuration parameters, and the encrypted configuration parameters are decrypted according to the second decryption rule to obtain the plaintext configuration parameters, which are similar to the specific implementation process and principle of steps 302 and 304. Therefore, the encrypted configuration parameters in the configuration information are determined, and the second decryption rule is obtained according to the second encryption rule identifier corresponding to the encrypted configuration parameters, and the encrypted configuration parameters are decrypted according to the second decryption rule to obtain the plaintext configuration parameters. All the contents of the specific implementation process of the above steps S202, step 302 and step 304 can be referred to, and this embodiment will not be repeated here. Among them, the encryption rule identifier includes the second encryption rule identifier, and the decryption rule includes the second decryption rule.

[0122] During the storage process of plaintext configuration parameters, encryption can be performed separately, that is, in the decryption process, there are two stages: decryption of encrypted access parameters to obtain plaintext access parameters and decryption of encrypted configuration parameters to obtain plaintext configuration parameters. For example, in the stage of decrypting encrypted access parameters to obtain plaintext access parameters, after encryption of sensitive parameters with higher security levels such as database account and database password involved in accessing the distributed configuration center, the purpose of accessing the distributed configuration center can be achieved by decrypting the encrypted access parameters to obtain plaintext access parameters, and in the stage of decrypting encrypted configuration parameters to obtain plaintext configuration parameters, after encryption of configuration information with higher security levels involved in accessing the target configuration item, the purpose of reading the configuration information of the target configuration item from the distributed configuration center can be achieved. Therefore, the corresponding configuration parameters can be encrypted separately to ensure the security level of the configuration parameters, wherein the configuration information can exist and be managed in the form of configuration files.

[0123] It should be noted that, similar to the encrypted access parameters, the encrypted configuration parameters can be obtained by encrypting all the configuration information or by encrypting some parameters in the configuration information. The specific method for encrypting the configuration information is not specifically limited in this embodiment. In the encryption process, in order to distinguish the encryption process of the startup parameters and the configuration parameters, different encryption rule identifiers can be configured for different parameters in the process of encrypting the configuration parameters and the startup parameters. For example, in an implementable method, the characters "+++" with the same suffix are used as the first encryption rule identifier for encrypting the startup parameters, and the characters "***" with the same suffix are used as the second encryption rule identifier for encrypting the configuration parameters, that is, the first encryption rule identifier and the second encryption rule identifier can be different encryption rule identifiers. Optionally, the first decryption rule can specifically be a decryption rule corresponding to the AES encryption method, and the second decryption rule can specifically be a decryption rule corresponding to the DES encryption method.

[0124] As an example, a second information index in the configuration information is obtained, and based on the second information index, the encryption configuration parameters in the configuration information are queried; a second encryption rule identifier is extracted from the encryption configuration parameters, and the second encryption rule identifier is used as an index to query and obtain a second decryption rule; the encryption configuration parameters are decrypted using the second decryption rule to obtain plaintext configuration parameters, and the plaintext configuration parameters are stored in a preset storage space.

[0125] In one practicable manner, referring to Figure 4 , Figure 4The execution sequence diagram of the configuration parameters in the configuration information of the target configuration project is read and stored, wherein the project configuration information reading system deployed on the terminal first extracts the encrypted access parameters from the startup parameters of the target configuration project after startup, and then calls the parameter encryption and decryption component to decrypt the encrypted access parameters, that is, through the first encryption rule identifier of the encrypted access parameter, the corresponding first decryption rule is matched, and the encrypted access parameter is decrypted by the first decryption rule to obtain the plaintext access parameter. After the project configuration information reading system reads the plaintext access parameter, the distributed configuration center is accessed based on the plaintext access parameter, that is, a communication connection is established between the project configuration information reading system and the distributed configuration center, so that the distributed configuration center returns the configuration information of the target configuration project to the project configuration information reading system. After the project configuration information reading system reads the configuration information into the memory, since there are encrypted configuration parameters in the configuration information, it is necessary to first determine the encrypted configuration parameters in the configuration information, and query the second decryption rule through the second encryption rule identifier corresponding to the encrypted configuration parameter, and finally decrypt the encrypted configuration parameters based on the second decryption rule after the second decryption rule is successfully matched, and the decrypted plaintext configuration parameters are stored in the local terminal.

[0126] In this embodiment, after decrypting the encrypted access parameters once, the plaintext access parameters are obtained, so as to access the distributed configuration center through the account password in the plaintext access parameters. Since the access parameters for accessing the distributed configuration center are in encrypted form, the distributed configuration center can be accessed only by accurately decrypting the encrypted access parameters, thereby avoiding the technical problem of low security of reading configuration information from the distributed configuration center due to easy leakage of the plaintext access parameters, that is, the decryption of the pre-encrypted access parameters is required when reading the configuration information of the target configuration project from the distributed configuration center, that is, the purpose of increasing the security assurance process of reading is achieved in the process of reading the project configuration information, rather than directly reading the configuration information of the target configuration project from the distributed configuration center through the plaintext access parameters. Therefore, the technical defect that the process of reading the project configuration information is in a high-risk state due to the exposure of the access parameters to the public environment, which makes it easy for the project configuration information to be leaked, is overcome, and the reading security of the project configuration information is improved.

[0127] Furthermore, after the encrypted configuration parameters are decrypted twice, the plaintext configuration parameters are obtained, and then the plaintext configuration parameters are stored locally for subsequent business applications, such as accessing the database to obtain data through plaintext configuration parameters such as database account and database password. Since the sensitive configuration parameters in the configuration information are stored in the distributed configuration center in an encrypted form, the configuration information of the target configuration project can be read only by accurately decrypting the encrypted configuration parameters, which further avoids the security risks of data leakage caused by the leakage of sensitive configuration parameters, and further improves the reading security of project configuration information. In addition, in the whole process of reading the configuration information, similar to accessing the distributed configuration center, in the process of reading the configuration information, the encrypted configuration parameters in the configuration information are determined, and then the whole process of decrypting the encrypted configuration parameters based on the second decryption rule to obtain the plaintext configuration parameters is an automatic implementation process, which automatically accesses the database based on the plaintext configuration parameters such as database account and database password obtained by decryption, without human intervention in the middle, and there is no need to expose the plaintext configuration parameters to anyone, which has high security.

[0128] In this embodiment, in the process of reading the configuration information of the target configuration project, different decryption rules are matched based on different encryption rule identifiers, and then the encrypted access parameters and the encrypted configuration parameters are decrypted in turn through different decryption rules, so that the configuration information stored in the distributed configuration center can be successfully read. That is, in the process of storing the configuration information of the target configuration project in the distributed configuration center, the access process of the distributed configuration center and the reading process of the configuration information are doubly encrypted using different encryption methods, so that the purpose of reading the plaintext configuration parameters with a high security requirement level in the configuration information after double decryption can be achieved when reading the configuration information. Therefore, the foundation is laid for further improving the reading security of the project configuration information.

[0129] In one embodiment, decrypting the encrypted configuration parameters according to the second decryption rule to obtain the plaintext configuration parameters and storing the plaintext configuration parameters includes:

[0130] According to the second decryption rule, the basic property editor of the configuration management container is reconstructed to obtain a designated property editor of the target configuration item;

[0131] Register the specified property editor in the configuration management container;

[0132] Searching for a specified attribute editor in the configuration management container, wherein the specified attribute editor is adapted to the second decryption rule;

[0133] According to the specified attribute editor, the encrypted configuration parameter is converted into a plaintext configuration parameter that complies with the second decryption rule.

[0134] It should be noted that in different application scenarios, the specific methods of decrypting the plaintext configuration parameters by the project configuration information reading system are different. In order to improve the adaptability of the project configuration information reading scenario, the decryption method can be set specifically. For example, in one feasible method, assuming that the target configuration project is a Spring boot project, when decrypting the encrypted configuration parameters, xxxPropertyEditor is implemented according to the PropertyEditorRegistrar provided by Spring, and PropertyEditorSupport is inherited and implemented to implement PropertyEditorRegistrar, and then PropertyEditorSupport is overwritten. In the setAsText method, if the configuration information meets the encryption rules, it is decrypted and reset, and finally the registerCustomEditors method of PropertyEditorRegistrar is implemented to register xxxPropertyEditor. That is, in the process of decrypting the encrypted configuration parameters, the property editor provided by the Spring framework is first used to rebuild a specified property editor configured for the target configuration project, where the specified property editor can adapt to the second decryption rule, thereby automatically completing the decryption of the encrypted configuration parameters when reading the configuration information from the distributed configuration center. The setAsText method can be used to convert the incoming string into the corresponding object and set it inside the PropertyEditor.

[0135] As an example, a basic property editor of a configuration management container is reconstructed using a second decryption rule to obtain a specified property editor for a target configuration item; the specified property editor is registered in the configuration management container; the specified property editor is queried in the configuration management container using a project identifier of the target configuration item as an index, wherein the specified property editor is adapted to the second decryption rule; and according to the specified property editor, encrypted configuration parameters are converted into plaintext configuration parameters that comply with the second decryption rule.

[0136] In this embodiment, by setting a specified property editor for the target configuration item and relying on the specified property editor to convert the encrypted configuration parameters into plain text configuration parameters, the encryption and decryption process can be integrated into the configuration loading process under a unified framework, thereby achieving unified management of the configuration. Therefore, while laying the foundation for improving the reading security of project configuration information, the decryption efficiency of the encrypted configuration parameters is improved.

[0137] In one embodiment, reading configuration information of a target configuration item from a distributed configuration center includes:

[0138] Read the encrypted configuration file from the distributed configuration center, and match the corresponding third decryption rule for the encrypted configuration file;

[0139] According to the third decryption rule, the encrypted configuration file is decrypted to obtain a plain text configuration file of the target configuration item; and the configuration information is read from the plain text configuration file.

[0140] It should be noted that, in order to improve the security of configuration information, the configuration file corresponding to the configuration information may be encrypted during the encryption phase to obtain an encrypted configuration file, wherein the third decryption rule may be the same as or different from the first decryption rule and the second encryption rule.

[0141] As an example, an encrypted configuration file is read from a distributed configuration center, and a corresponding third decryption rule is matched for the encrypted configuration file; the encrypted configuration file is decrypted according to the third decryption rule to obtain a plaintext configuration file of the target configuration item; and configuration information is read from the plaintext configuration file.

[0142] In this embodiment, in the process of reading the configuration information of the distributed configuration center, it is necessary to first decrypt the encrypted configuration file, that is, the plaintext configuration file carrying the configuration information is encrypted again through a specific encryption method, thereby further increasing the security of the encrypted configuration information such as configuration parameters, thus laying the foundation for further improving the reading security of the project configuration information.

[0143] In one embodiment, reading the plain text configuration parameters of the target configuration item from the distributed configuration center includes:

[0144] Extract the encrypted access parameters from the startup parameters of the target configuration project; decrypt the encrypted access parameters to obtain plaintext access parameters, access the distributed configuration center based on the plaintext access parameters, read the configuration information of the target configuration project from the distributed configuration center, and determine the encrypted configuration parameters in the configuration information; obtain the second decryption rule according to the second encryption rule identifier corresponding to the encrypted configuration parameter; decrypt the encrypted configuration parameter according to the second decryption rule to obtain the plaintext configuration parameter.

[0145] It should be noted that in order to improve the security of configuration information, dual encryption measures can be set for the configuration parameters of the target configuration project, including encryption of the plaintext configuration parameters of the target configuration project and plaintext access parameters for accessing the distributed configuration center. Then, in the decryption stage, it is necessary to perform a first decryption on the encrypted access parameters, and the first decryption is completed based on the first decryption rule, and access to the distributed configuration center is achieved through the plaintext access parameters obtained by the first decryption. Then, a second decryption is performed on the encrypted configuration parameters, and the second decryption is completed based on the second decryption rule, and the plaintext configuration parameters of the target configuration project are read through the plaintext access parameters obtained by the second decryption. Among them, the specific implementation process and principle of the decryption method for the first decryption of the encrypted access parameters, as well as the specific implementation process and principle of the decryption method for the second decryption of the encrypted configuration parameters, can all refer to the above-mentioned embodiments, and this embodiment will not be repeated here.

[0146] As an example, the startup parameters of the target configuration item are obtained, and the startup parameters with encryption rule identifiers are identified as encrypted access parameters; according to the first encryption rule identifier of the encrypted access parameters, the corresponding first decryption rule is matched for the encrypted access parameters; according to the first decryption rule, the encrypted access parameters are decrypted to obtain plaintext access parameters; the distributed configuration center is accessed with the plaintext access parameters, and the first information index is extracted in the read request corresponding to the startup parameters, and according to the first information index, the configuration information of the target configuration item is queried from the distributed configuration center and read; the second information index in the configuration information is obtained, and according to the second information index, the encrypted configuration parameters in the configuration information are queried; the second encryption rule identifier is extracted from the encrypted configuration parameters, and the second decryption rule is queried with the second encryption rule identifier as the index; the encrypted configuration parameters are decrypted with the second decryption rule to obtain the plaintext configuration parameters.

[0147] In this embodiment, in the process of reading the configuration information of the target configuration item, different first decryption rules and second decryption rules are matched based on different encryption rule identifiers, and then the encrypted access parameters are decrypted by the first decryption rule, and the encrypted configuration parameters are decrypted by the second decryption rule, so that the configuration parameters stored in the target configuration item in the distributed configuration center can be successfully read, that is, the access process of the distributed configuration center and the reading process of the plaintext configuration parameters of the target configuration item are double encrypted by adopting different encryption methods, so that the purpose of reading the plaintext configuration parameters with high security requirement level in the configuration information after double decryption can be achieved when reading the configuration information, so as to lay the foundation for further improving the reading security of the project configuration information.

[0148] In one embodiment, reading the plain text configuration parameters of the target configuration item from the distributed configuration center includes:

[0149] Extract encrypted access parameters from the startup parameters of the target configuration project; decrypt the encrypted access parameters to obtain plaintext access parameters, access the distributed configuration center based on the plaintext access parameters, read the encrypted configuration file from the distributed configuration center, and match the encrypted configuration file with the corresponding third decryption rule; decrypt the encrypted configuration file according to the third decryption rule to obtain the plaintext configuration file of the target configuration project; read configuration information from the plaintext configuration file; determine the encrypted configuration parameters in the configuration information; obtain a second decryption rule according to a second encryption rule identifier corresponding to the encrypted configuration parameter; decrypt the encrypted configuration parameter according to the second decryption rule to obtain the plaintext configuration parameter.

[0150] It should be noted that in order to improve the security of configuration information, a triple encryption measure can be set for the configuration parameters of the target configuration project, including encryption of the plaintext configuration parameters of the target configuration project, the configuration file corresponding to the configuration information, and the plaintext access parameters for accessing the distributed configuration center. Then, in the decryption stage, it is necessary to perform the first decryption on the encrypted access parameters, the first decryption is completed based on the first decryption rule, and the access to the distributed configuration center is realized through the plaintext access parameters obtained by the first decryption. Then, the encrypted configuration file is decrypted twice, the second decryption is completed based on the third decryption rule, and the configuration information of the target configuration project is read through the plaintext configuration file obtained by the second decryption. Then, the encrypted configuration parameters are decrypted for the third time, the third decryption is completed based on the second decryption rule, and the plaintext configuration parameters of the target configuration project are read through the plaintext access parameters obtained by the third decryption. Among them, the specific implementation process and principle of the decryption method for the first decryption of the encrypted access parameters, the specific implementation process and principle of the decryption method for the second decryption of the encrypted configuration file, and the specific implementation process and principle of the decryption method for the third decryption of the encrypted configuration parameters can all refer to the above-mentioned embodiment, which will not be repeated in this embodiment.

[0151] As an example, the startup parameters of the target configuration project are obtained, and the startup parameters with encryption rule identifiers are identified as encrypted access parameters; according to the first encryption rule identifier of the encrypted access parameters, the corresponding first decryption rule is matched for the encrypted access parameters; according to the first decryption rule, the encrypted access parameters are decrypted to obtain plaintext access parameters; the distributed configuration center is accessed with the plaintext access parameters, and the first information index is extracted in the read request corresponding to the startup parameters, and according to the first information index, the encrypted configuration file is queried from the distributed configuration center; the corresponding third decryption rule is matched for the encrypted configuration file; according to the third decryption rule, the encrypted configuration file is decrypted to obtain the plaintext configuration file of the target configuration project; the configuration information is read in the plaintext configuration file; the second information index in the configuration information is obtained, and according to the second information index, the encrypted configuration parameters in the configuration information are queried; the second encryption rule identifier is extracted from the encrypted configuration parameters, and the second decryption rule is queried with the second encryption rule identifier as the index; the encrypted configuration parameters are decrypted with the second decryption rule to obtain the plaintext configuration parameters.

[0152] In this embodiment, in the process of reading the configuration information of the target configuration project, different first decryption rules, second decryption rules and third decryption rules are matched based on different encryption rule identifiers, and then the encrypted access parameters are decrypted by the first decryption rule, the encrypted configuration file is decrypted by the third decryption rule, and the encrypted configuration parameters are decrypted by the second decryption rule, so that the configuration parameters in the target configuration project stored in the distributed configuration center can be successfully read, that is, the access process of the distributed configuration center, the reading of the configuration information and the reading process of the plaintext configuration parameters of the target configuration project are triple encrypted by adopting different encryption methods, so that the purpose of reading the plaintext configuration parameters with a high security requirement level in the configuration information can be achieved after triple decryption when reading the configuration information, so as to lay a foundation for further improving the reading security of the project configuration information.

[0153] In one embodiment, accessing a distributed configuration center based on plaintext access parameters includes:

[0154] Extract non-encrypted access parameters from the startup parameters of the target configuration project; generate overall plaintext access parameters for accessing the distributed configuration center based on the non-encrypted access parameters and the plaintext access parameters; and access the distributed configuration center based on the overall plaintext access parameters.

[0155] In the process of encrypting the startup parameters, if all the contents in the startup parameters are encrypted, when it is necessary to access the distributed configuration center, it is necessary to decrypt all the contents contained in the startup parameters before reading the plaintext startup parameters. Since the overall access parameters are huge and there are many projects that configure the configuration parameters based on the distributed configuration center, the entire decryption process will be complicated, and it is easy to have the plaintext startup parameter reading time be too long when the project configuration is started. Optionally, in order to improve the reading efficiency of the plaintext startup parameters and the configuration information corresponding to the configuration project, part of the content in the startup parameters can be partially encrypted, which not only ensures the security of the sensitive parameters in the startup parameters, but also compared with the method of encrypting and then decrypting all the contents in the startup parameters, since only the encrypted part of the startup parameters needs to be decrypted, the system resource usage is saved, and the decryption efficiency is improved, and the plaintext startup parameters required for the startup of the configuration project can be quickly obtained. Among them, sensitive parameters include plaintext access parameters for accessing the distributed configuration center, database accounts for accessing the database, and database passwords.

[0156] For example, in one feasible method, assuming that the target configuration project is a Java project, and the startup parameter is specifically "java-Dxxx-jar xxx.jar", if the account and password of the distributed configuration center are configured in the startup parameters in plain text, such as "java -Dnacos.config.username=nacos -Dnacos.config.password=1122 -jar xxx.jar", this will lead to the risk of leakage of access parameters such as the account and password of the distributed configuration center. Different encryption methods can be used to encrypt sensitive parameters in the startup parameters. For example, "-Dxxx" is encrypted as "+++TUFSCE1W+fEjlJYhFIYjow==+++", " -Dxxx" is encrypted as "+++TUFSCE1W+fEjlJYhFIYjow==+++", and "Dnacos.config.password" is encrypted as "+++YU / zevKBPM8YYSC85xiRQg==+++", so that in the decryption stage, only the encrypted access parameters need to be decrypted, and the plaintext access parameters are obtained after decryption.

[0157] It should be noted that the startup parameters are used to start the target configuration project, including relevant parameters for starting the target configuration project itself and relevant access parameters for accessing the distributed configuration center. Among them, the relevant access parameters for accessing the distributed configuration center include encrypted access parameters for accessing the distributed configuration center and non-encrypted access parameters such as the configuration information space name of the target configuration project in the distributed configuration center and / or the connection address / interface address of the distributed configuration center.

[0158] Extracting the non-encrypted access parameters from the startup parameters can be done by obtaining the non-encrypted access parameters corresponding to the non-encrypted rule identifier in the startup parameters, wherein the non-encrypted rule identifier can be set in advance. For example, the non-encrypted rule identifier corresponding to the configuration information space name of the target configuration item in the distributed configuration center can be set to namespace. Assuming that the startup parameters include -Dnacos.config.namespace=3c587276-c005-449d-839d, the non-encrypted access parameter corresponding to the non-encrypted rule identifier is 3c587276-c005-449d-839d. For another example, the non-encrypted rule identifier corresponding to the connection address or interface address of the distributed configuration center can be set to serve-add. Assuming that the startup parameters include -Dnacos.config.serve-add=http: / / config-new.plform.123.com.cn:8848, the non-encrypted access parameter corresponding to the non-encrypted rule identifier is http: / / config-new.plform.123.com.cn:8848.

[0159] Based on the plaintext access parameters and non-encrypted access parameters for accessing the distributed configuration center, the overall plaintext access parameters for accessing the distributed configuration center can be obtained, and then the distributed configuration center can be accessed based on the overall plaintext access parameters. That is, the distributed configuration center can be connected through the connection address of the distributed configuration center in the non-encrypted access parameters, and the distributed configuration center can be logged in based on the plaintext access parameters. The location of the configuration information of the target configuration project is located based on the configuration information space name in the non-encrypted access parameters, that is, the configuration information space to which the configuration information of the target configuration project belongs.

[0160] In this embodiment, in the process of decrypting the startup parameters, only the locally encrypted encrypted access parameters are decrypted to obtain the plaintext access parameters, and then the overall plaintext access parameters of the distributed configuration center are obtained by integrating the non-encrypted access parameters and the plaintext access parameters in the startup parameters. Finally, the access to the distributed configuration center is achieved through the overall plaintext access parameters. Since the overall plaintext access parameters are composed of encrypted access parameters and non-encrypted access parameters, in the process of reading the project configuration information, only the encrypted access parameters in the overall access parameters need to be decrypted to obtain the overall plaintext access parameters for accessing the distributed configuration center. At the same time, the encryption of the local access parameters can effectively ensure The target configuration project accesses the access security of the distributed configuration center, and the omission of the decryption process of the non-encrypted access parameters greatly reduces the complexity of the encryption and decryption process in the process of reading the project configuration parameters, thereby achieving the purpose of reducing the reading time of the project configuration parameters. There is no need to decrypt the overall access parameters to read the project configuration parameters, which overcomes the technical defect that the overall access parameters are huge and there are many projects based on the distributed configuration center for configuration parameter configuration, which makes the entire decryption process complicated, and thus makes it easy for the project configuration parameters to be read for a long time. That is, while laying the foundation for improving the reading security of the project configuration information, the efficiency of reading the project configuration information is improved.

[0161] In one embodiment, the overall plaintext access parameters for accessing the distributed configuration center are generated based on the non-encrypted access parameters and the plaintext access parameters, including:

[0162] Obtain application environment parameters for target configuration items to access distributed configuration centers; generate overall plaintext access parameters based on application environment parameters, non-encrypted access parameters, and plaintext access parameters.

[0163] It should be noted that the access conditions for accessing the distributed configuration center are different in different application scenarios. That is, due to the different application environments of different configuration projects, it is necessary to rely on different forms of overall plaintext access parameters to access the distributed configuration center. Among them, the application environment parameters may specifically include basic environment parameters, application configuration parameters, and dynamic configuration parameters.

[0164] As an example, the application environment parameters for the target configuration project to access the distributed configuration center are extracted; the application environment parameters, the non-encrypted access parameters, and the plaintext access parameters are integrated into the overall plaintext access parameters. This embodiment extracts different application environment parameters based on different configuration projects to complete the configuration of the corresponding overall plaintext access parameters, so that the access to the distributed configuration center in the specified application scenario can be completed with the help of the overall plaintext access parameters, thereby improving the read adaptability of the project configuration information reading.

[0165] In one embodiment, when the project configuration information reading system deployed on the terminal needs to read the configuration information of the target configuration project, the encrypted access parameters are first extracted from the startup parameters of the target configuration project, and then the first decryption rule is used to decrypt the encrypted access parameters to obtain the plaintext access parameters, and the plaintext access parameters, non-encrypted access parameters and application environment parameters are integrated to obtain the overall plaintext access parameters, and then the distributed configuration center is accessed through the overall plaintext access parameters, that is, a layer of decryption stage is completed in the process of reading the project configuration information, and then after successfully receiving the configuration information, the configuration information is first decrypted depending on the third decryption rule to obtain the plaintext configuration information, and then the encrypted configuration parameters are extracted from the plaintext configuration information, and then the designated attribute editor adapted to the second decryption rule is used to convert the encrypted configuration parameters into plaintext configuration parameters, that is, the second-layer decryption stage and the third-layer decryption stage are completed in the process of reading the project configuration information, and finally the plaintext configuration parameters are read and stored in the project configuration information reading system.

[0166] By encrypting the plaintext access parameters before reading the project configuration information to obtain the encrypted access parameters, and decrypting the encrypted access parameters during the project configuration information reading process to obtain the plaintext access parameters, it is necessary to complete the prior access parameter decryption when reading the configuration information of the target configuration project from the distributed configuration center. That is, in the process of reading the project configuration information, the purpose of increasing the reading security assurance process is achieved, rather than directly reading the configuration information of the target configuration project from the distributed configuration center through the plaintext access parameters. Therefore, the technical defect that the process of reading the project configuration information is in a high-risk state due to the exposure of the access parameters to the public environment, which makes it easy for the project configuration information to be leaked, is overcome. Therefore, the reading security of the project configuration information is improved.

[0167] It should be understood that, although the steps in the flowcharts involved in the above embodiments are displayed in sequence according to the indication of the arrows, these steps are not necessarily executed in sequence according to the order indicated by the arrows. Unless there is a clear explanation in this article, the execution of these steps is not strictly limited in order, and these steps can be executed in other orders. Moreover, at least a part of the steps in the flowcharts involved in the above embodiments may include multiple steps or multiple stages, and these steps or stages are not necessarily executed at the same time, but can be executed at different times, and the execution order of these steps or stages is not necessarily carried out in sequence, but can be executed in turn or alternately with other steps or at least a part of the steps or stages in other steps.

[0168] Based on the same inventive concept, the embodiment of the present application also provides a project configuration information reading device for implementing the project configuration information reading method involved above. The implementation scheme for solving the problem provided by the device is similar to the implementation scheme recorded in the above method, so the specific limitations in one or more project configuration information reading device embodiments provided below can refer to the limitations of the project configuration information reading method above, and will not be repeated here.

[0169] In an exemplary embodiment, Figure 5 As shown, a device for reading project configuration information is provided, comprising: an extraction module 401, a decryption module 402 and a reading module 403, wherein:

[0170] An extraction module 401 is used to extract the encrypted access parameter from the startup parameters of the target configuration item, wherein the target configuration item refers to a configuration item for which information configuration is completed in a distributed configuration center;

[0171] A decryption module 402, used to decrypt the encrypted access parameter to obtain a plaintext access parameter;

[0172] The reading module 403 is used to access the distributed configuration center based on the plain text access parameter and read the configuration information of the target configuration item from the distributed configuration center.

[0173] In one embodiment, the decryption module 402 is further configured to:

[0174] According to the first encryption rule identifier of the encrypted access parameter, matching the encrypted access parameter with a corresponding first decryption rule;

[0175] The encrypted access parameter is decrypted according to the first decryption rule to obtain a plaintext access parameter.

[0176] In one embodiment, the project configuration information reading device further includes a storage module, and the storage module is used to:

[0177] Determining encryption configuration parameters in the configuration information;

[0178] Acquire a second decryption rule according to a second encryption rule identifier corresponding to the encryption configuration parameter;

[0179] The encrypted configuration parameters are decrypted according to the second decryption rule to obtain plaintext configuration parameters.

[0180] In one embodiment, the storage module is further used for:

[0181] Reconstructing the basic property editor of the configuration management container according to the second decryption rule to obtain the designated property editor of the target configuration item;

[0182] Registering the specified property editor in the configuration management container;

[0183] Searching for the designated attribute editor in the configuration management container, wherein the designated attribute editor is adapted to the second decryption rule;

[0184] According to the specified attribute editor, the encrypted configuration parameter is converted into a plaintext configuration parameter that complies with the second decryption rule.

[0185] In one embodiment, the reading module 403 is further used for:

[0186] extracting non-encrypted access parameters from the startup parameters of the target configuration item;

[0187] Generate an overall plaintext access parameter for accessing the distributed configuration center according to the non-encrypted access parameter and the plaintext access parameter;

[0188] The distributed configuration center is accessed according to the overall plaintext access parameters.

[0189] In one embodiment, the reading module 403 is further used for:

[0190] Reading an encrypted configuration file from the distributed configuration center, and matching a corresponding third decryption rule for the encrypted configuration file;

[0191] The encrypted configuration file is decrypted according to the third decryption rule to obtain a plain text configuration file of the target configuration item; and the configuration information is read from the plain text configuration file.

[0192] In one of the embodiments, the number of the encrypted access parameter is at least one, and the encrypted access parameter is obtained based on encrypting the plaintext access parameter at least twice.

[0193] Each module in the above-mentioned project configuration information reading device can be implemented in whole or in part by software, hardware or a combination thereof. Each module can be embedded in or independent of a processor in a computer device in the form of hardware, or can be stored in a memory in a computer device in the form of software, so that the processor can call and execute operations corresponding to each module above.

[0194] In an exemplary embodiment, a computer device is provided. The computer device may be a terminal, and its internal structure diagram may be as shown in FIG. Figure 6As shown. The computer device includes a processor, a memory, an input / output interface, a communication interface, a display unit and an input device. The processor, the memory and the input / output interface are connected via a system bus, and the communication interface, the display unit and the input device are connected to the system bus via the input / output interface. The processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system and a computer program. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The input / output interface of the computer device is used to exchange information between the processor and an external device. The communication interface of the computer device is used to communicate with an external terminal in a wired or wireless manner, and the wireless manner can be achieved through WIFI, a mobile cellular network, NFC (near field communication) or other technologies. When the computer program is executed by the processor, it implements a method for reading project configuration information. Those skilled in the art can understand that Figure 6 The structure shown in the figure is only a block diagram of a part of the structure related to the solution of the present application, and does not constitute a limitation on the computer device to which the solution of the present application is applied. The specific computer device may include more or fewer components than those shown in the figure, or combine certain components, or have a different arrangement of components.

[0195] In one embodiment, a computer device is further provided, including a memory and a processor, wherein a computer program is stored in the memory, and the processor implements the steps in the above method embodiments when executing the computer program.

[0196] In one embodiment, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, the steps in the above-mentioned method embodiments are implemented.

[0197] In one embodiment, a computer program product is provided, including a computer program, which implements the steps in the above method embodiments when executed by a processor.

[0198] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to the memory, database or other medium used in the embodiments provided in this application can include at least one of non-volatile and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetoresistive random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. As an illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM). The database involved in each embodiment provided in this application may include at least one of a relational database and a non-relational database. Non-relational databases may include distributed databases based on blockchains, etc., but are not limited to this. The processor involved in each embodiment provided in this application may be a general-purpose processor, a central processing unit, a graphics processor, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, etc., but are not limited to this.

[0199] The technical features of the above embodiments may be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0200] The above-described embodiments only express several implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the present application. It should be pointed out that, for a person of ordinary skill in the art, several variations and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the present application shall be subject to the attached claims.

Claims

1. A method for reading project configuration information, characterized in that: The method comprises: Extracting the encrypted access parameter from the startup parameter of the target configuration item, wherein the target configuration item refers to the configuration item for which information configuration is completed in the distributed configuration center; Decrypting the encrypted access parameter to obtain a plaintext access parameter; The distributed configuration center is accessed based on the plaintext access parameter, and configuration information of the target configuration item is read from the distributed configuration center.

2. The method according to claim 1, characterized in that: The decrypting the encrypted access parameter to obtain the plaintext access parameter includes: According to the first encryption rule identifier of the encrypted access parameter, matching the encrypted access parameter with a corresponding first decryption rule; The encrypted access parameter is decrypted according to the first decryption rule to obtain the plaintext access parameter.

3. The method according to claim 1, characterized in that After accessing the distributed configuration center based on the plaintext access parameter and reading the configuration information of the target configuration item from the distributed configuration center, the method further includes: Determining encryption configuration parameters in the configuration information; Acquire a second decryption rule according to a second encryption rule identifier corresponding to the encryption configuration parameter; The encrypted configuration parameters are decrypted according to the second decryption rule to obtain plaintext configuration parameters.

4. The method according to claim 3, characterized in that The decrypting the encrypted configuration parameter according to the second decryption rule to obtain the plaintext configuration parameter includes: Reconstructing the basic property editor of the configuration management container according to the second decryption rule to obtain the designated property editor of the target configuration item; Registering the specified property editor in the configuration management container; Searching for the designated attribute editor in the configuration management container, wherein the designated attribute editor is adapted to the second decryption rule; According to the specified attribute editor, the encrypted configuration parameter is converted into a plaintext configuration parameter that complies with the second decryption rule.

5. The method according to claim 1, characterized in that The accessing the distributed configuration center based on the plaintext access parameter includes: extracting non-encrypted access parameters from the startup parameters of the target configuration item; Generate an overall plaintext access parameter for accessing the distributed configuration center according to the non-encrypted access parameter and the plaintext access parameter; The distributed configuration center is accessed according to the overall plaintext access parameters.

6. The method according to any one of claims 1 to 5, characterized in that: The reading the configuration information of the target configuration item from the distributed configuration center includes: Reading an encrypted configuration file from the distributed configuration center, and matching a corresponding third decryption rule for the encrypted configuration file; Decrypting the encrypted configuration file according to the third decryption rule to obtain a plaintext configuration file of the target configuration item; The configuration information is read from the plain text configuration file.

7. The method according to any one of claims 1 to 5, characterized in that: The number of the encrypted access parameter is at least one, and the encrypted access parameter is obtained based on encrypting the plaintext access parameter at least twice.

8. A project configuration information reading device, characterized in that: The device comprises: An extraction module, used to extract the encrypted access parameter from the startup parameters of the target configuration item, wherein the target configuration item refers to a configuration item for which information configuration is completed in the distributed configuration center; A decryption module, used to decrypt the encrypted access parameters to obtain plaintext access parameters; A reading module is used to access the distributed configuration center based on the plaintext access parameter and read the configuration information of the target configuration item from the distributed configuration center.

9. A computer device comprising a memory and a processor, wherein the memory stores a computer program, wherein: When the processor executes the computer program, the steps of the method according to any one of claims 1 to 7 are implemented.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 7 are implemented.

Images