Shared service management method and system

Abstract

The invention relates to the technical field of computers, and particularly provides a shared service management method and system.The method comprises the steps that firstly, a service system interface to be shared is registered to Kong, a route forwards a request to a corresponding service, and the route is assigned for the service; then, an authorization mode is assigned for the route, the route is authorized to the user, and an unauthorized user cannot access the route; and finally, controlling the access of the route according to the ip address, and when an abnormal access is found, adding the ip into a blacklist, registering by the user, and automatically distributing an authorization code for the user. Compared with the prior art, the management difficulty of the shared service interface can be simplified, the reliability and safety of the service interface are improved, and the development cost is reduced.

Description

Technical Field

[0001] The present invention relates to the field of computer technology, and specifically provides a shared service management method and system. Background Art

[0002] Shared service interface refers to the background service interface developed for data sharing and utilization between different organizations and departments. Real estate-related departments have also proposed to enhance information exchange and sharing capabilities, strengthen data sharing and utilization, optimize service processes, and lower the threshold for government informationization.

[0003] Traditional shared service interfaces are often bundled with business systems. The service interfaces of different business systems have different permission verification, logging, and flow control schemes, which cannot be managed uniformly, and authorization and access control cannot be flexibly performed. As the number of shared service interfaces increases, how to effectively manage the service interfaces has become an urgent problem to be solved. Summary of the invention

[0004] The present invention aims at solving the above-mentioned deficiencies of the prior art and provides a shared service management method with strong practicability.

[0005] A further technical task of the present invention is to provide a shared service management system that is rationally designed, safe and applicable.

[0006] The technical solution adopted by the present invention to solve its technical problem is:

[0007] A shared service management method, first register the business system interface to be shared with Kong, the route forwards the request to the corresponding service, and specifies the route for the service; then specify the authorization method for the route, and authorize the route to the user, so that unauthorized users cannot access it; finally, control the access to the route according to the IP address, and when abnormal access is found, add the IP to the blacklist, and the user registers, and the authorization code is automatically assigned to the user.

[0008] Furthermore, the service interface of the Kong gateway is called to register the business system interface to Kong, and the Kong gateway request parameters are set, including the host address, request context, protocol type, and timeout period. On this basis, the category, version number, and request parameters are added to classify and manage the service.

[0009] Furthermore, service routing is the corresponding service to which the request is forwarded. The route interface of the Kong gateway is called to add routing and bind the specified service, setting the request method and protocol type.

[0010] Furthermore, the route is authorized to the specified user according to the selected authorization method, including Basic Auth, KeyAuth or Jwt, which is added through plug-in management. The user needs to carry the authorization information when accessing.

[0011] Furthermore, when controlling access to routes based on IP addresses, including whitelist, blacklist, and unlimited methods, the consumers interface of the Kong gateway is called to add and delete users. At the same time, the user IP address and authorization code are added and saved to the system for user authorization management and access control.

[0012] A shared service management system, comprising a service registration module, a service routing module, a service authorization module, an access control module and a user management module;

[0013] The service registration module is used to register the business system interface to be shared with Kong;

[0014] The service routing module is used to forward the request to the corresponding service and specify the route for the service;

[0015] The service authorization module is used to specify the authorization method for the route and authorize the route to the user, so that unauthorized users cannot access it;

[0016] The access control module is used to control the access to the route according to the IP address. When abnormal access is found, the IP address can be added to the blacklist.

[0017] The user management module is used for registration, and the system automatically assigns an authorization code to the user.

[0018] Furthermore, the service registration module is used to call the service interface of the Kong gateway to register the business system interface to Kong, set the Kong gateway request parameters, including the host address, request context, protocol type and timeout period, and add categories, version numbers and request parameters on this basis to classify and manage the services.

[0019] Furthermore, the service routing module forwards the request to the corresponding service, calls the route interface of the Kong gateway to add a route and bind the specified service, and sets the request method and protocol type.

[0020] Furthermore, the service authorization module is used to authorize the route to the specified user according to the selected authorization method, including Basic Auth, Key Auth or Jwt, which is added through plug-in management, and the user needs to carry authorization information when accessing.

[0021] Furthermore, the access control module is used to limit the access of the specified IP address to the route, including three methods: whitelist, blacklist, and no restriction;

[0022] The user management module is used to call the consumers interface of the Kong gateway to add and delete users, and add the user's IP address and authorization code to the system for user authorization management and access control.

[0023] Compared with the prior art, the shared service management method and system of the present invention has the following outstanding beneficial effects:

[0024] The present invention realizes the visual unified management of shared service interfaces, provides unified permission authentication, log management, and access control solutions, simplifies the management difficulty of shared service interfaces, and improves the reliability and security of service interfaces. At the same time, the shared service interfaces provided by various business systems no longer need to perform separate permission verification, log recording, etc., thereby reducing development costs. BRIEF DESCRIPTION OF THE DRAWINGS

[0025] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0026] Attached Figure 1 It is a flow chart of a shared service management method. DETAILED DESCRIPTION

[0027] In order to enable those skilled in the art to better understand the solution of the present invention, the present invention is further described in detail below in conjunction with specific implementation methods. Obviously, the described embodiments are only part of the embodiments of the present invention, rather than all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0028] A best embodiment is given below:

[0029] like Figure 1 As shown, a shared service management method in this embodiment first registers the business system interface to be shared with Kong, and the route forwards the request to the corresponding service, and specifies the route for the service; then specifies the authorization method for the route, including token authentication, user authentication, etc., and authorizes the route to the user, and unauthorized users cannot access it; finally, the access to the route is controlled according to the IP address. When abnormal access is found, the IP is added to the blacklist, the user is registered, and the authorization code is automatically assigned to the user.

[0030] Call the Kong gateway's service interface to register the business system interface to Kong. You can set Kong gateway request parameters such as host address, request context, protocol type, timeout, and add categories, version numbers, request parameters and other fields on this basis to facilitate the classification management of services.

[0031] The service route is the corresponding service to which the request is forwarded. Call the route interface of the Kong gateway to add the route and bind the specified service. You can set parameters such as request method and protocol type.

[0032] Among them, the route is authorized to the specified user according to the selected authorization method. Kong Gateway supports multiple authentication methods, including Basic Auth, Key Auth, Jwt, etc., which can be added through plug-in management. Users need to carry authorization information when accessing.

[0033] Specify the IP address to access the route, supporting three modes: whitelist, blacklist, and unlimited. Call the consumers interface of the Kong gateway to add and delete users, and add user IP addresses, authorization codes and other fields to the system to implement user authorization management and access control.

[0034] Based on the above method, a shared service management system in this embodiment includes a service registration module, a service routing module, a service authorization module, an access control module and a user management module;

[0035] The service registration module is used to register the business system interface to be shared with Kong;

[0036] Call the service interface of Kong gateway to register the business system interface to Kong, set the Kong gateway request parameters, including host address, request context, protocol type and timeout, and add categories, version numbers and request parameters on this basis to classify and manage services.

[0037] The service routing module is used to forward requests to the corresponding services and specify routes for the services;

[0038] Forward the request to the corresponding service, call the route interface of the Kong gateway to add the route and bind the specified service, and set the request method and protocol type.

[0039] The service authorization module is used to specify the authorization method for the route and authorize the route to the user. Unauthorized users cannot access it.

[0040] Authorize the route to the specified user according to the selected authorization method, including Basic Auth, Key Auth or Jwt. It is added through plug-in management. Users need to carry authorization information when accessing.

[0041] The access control module is used to control the access to the route according to the IP address. When abnormal access is found, the IP address can be added to the blacklist.

[0042] Limit the access of specified IP addresses to the route, including whitelist, blacklist and unlimited.

[0043] The user management module is used for registration, and the system automatically assigns authorization codes to users;

[0044] Call the consumers interface of the Kong gateway to add and delete users, and add the user's IP address and authorization code to the system for user authorization management and access control.

[0045] The present invention realizes the visual unified management of shared service interfaces, provides unified permission authentication, log management, and access control solutions, simplifies the management difficulty of shared service interfaces, and improves the reliability and security of service interfaces. At the same time, the shared service interfaces provided by various business systems no longer need to perform separate permission verification, log recording, etc., thereby reducing development costs.

[0046] The above-mentioned specific implementations are only specific cases of the present invention. The patent protection scope of the present invention includes but is not limited to the above-mentioned specific implementations. Any technical solutions that conform to the above-mentioned specific implementations of the present invention and any appropriate changes or substitutions made by ordinary technicians in the relevant technical field shall fall within the patent protection scope of the present invention.

[0047] Although embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions and variations may be made to the embodiments without departing from the principles and spirit of the present invention, and that the scope of the present invention is defined by the appended claims and their equivalents.

Claims

1. A shared service management method, characterized in that: First, register the business system interface to be shared with Kong. The router forwards the request to the corresponding service and specifies the route for the service. Then specify the authorization method for the route and authorize the route to the user. Unauthorized users cannot access it. Finally, control the access to the route based on the IP address. When abnormal access is found, the IP address is added to the blacklist. The user registers and the authorization code is automatically assigned to the user.

2. A shared service management method according to claim 1, characterized in that: Call the service interface of the Kong gateway to register the business system interface to Kong, set the Kong gateway request parameters, including the host address, request context, protocol type, and timeout, and add categories, version numbers, and request parameters on this basis to classify and manage services.

3. A shared service management method according to claim 2, characterized in that: The service route is the corresponding service to which the request is forwarded. The route interface of the Kong gateway is called to add the route and bind the specified service, and the request method and protocol type are set.

4. A shared service management method according to claim 3, characterized in that: Authorize the route to the specified user according to the selected authorization method, including Basic Auth, Key Auth or Jwt. It is added through plug-in management. Users need to carry authorization information when accessing.

5. A shared service management method according to claim 4, characterized in that: When controlling access to routes based on IP addresses, including whitelist, blacklist, and unlimited methods, call the consumers interface of the Kong gateway to add and delete users, and add user IP addresses and authorization codes to the system for user authorization management and access control.

6. A shared service management system, characterized in that: Including service registration module, service routing module, service authorization module, access control module and user management module; The service registration module is used to register the business system interface to be shared with Kong; The service routing module is used to forward the request to the corresponding service and specify the route for the service; The service authorization module is used to specify the authorization method for the route and authorize the route to the user, so that unauthorized users cannot access it; The access control module is used to control the access to the route according to the IP address. When abnormal access is found, the IP address can be added to the blacklist. The user management module is used for registration, and the system automatically assigns an authorization code to the user.

7. A shared service management system according to claim 6, characterized in that: The service registration module is used to call the service interface of the Kong gateway to register the business system interface with Kong, set the Kong gateway request parameters, including the host address, request context, protocol type and timeout, and add categories, version numbers and request parameters on this basis to classify and manage services.

8. A shared service management system according to claim 7, characterized in that: The service routing module forwards the request to the corresponding service, calls the route interface of the Kong gateway to add the route and bind the specified service, and sets the request method and protocol type.

9. A shared service management system according to claim 8, characterized in that: The service authorization module is used to authorize the route to the specified user according to the selected authorization method, including Basic Auth, Key Auth or Jwt, which is added through plug-in management. Users need to carry authorization information when accessing.

10. A shared service management system according to claim 8, characterized in that: The access control module is used to limit the access of the specified IP address to the route, including three methods: whitelist, blacklist and no restriction; The user management module is used to call the consumers interface of the Kong gateway to add and delete users, and add the user's IP address and authorization code to the system for user authorization management and access control.

Images