Data access method and device and related product

Abstract

The invention discloses a data access method and device and a related product. Sending the data access request set to a third-party system to request the third-party system to perform authentication processing on the data access request set to obtain a first access request result set corresponding to a first access request set in the data access request set in a first time window, the second access request result set corresponds to the second access request set in the data access request set in the second time window; and if the number of the access request results in the first access request result set is greater than a preset number, and the number of the access request results in the second access request result set is greater than the preset number, performing degradation processing on the data access request set to obtain a degraded data access request set. In this way, the security problem of an upstream system caused by direct fusing in a related technical scheme is avoided, data access is achieved, and object experience is improved.

Description

Technical Field

[0001] This application relates to the field of smart gateway technology, and in particular to a data access method, apparatus and related products. Background Technology

[0002] Upstream systems play a crucial role in various scenarios, providing business logic support to clients to ensure the smooth operation of the entire business process. In most cases, upstream systems need the assistance of third-party systems to process data access requests initiated by objects on the client side. However, third-party systems may experience response anomalies, which can affect the stability of the upstream system.

[0003] In related technologies, circuit breakers are typically used to stop calls to third-party systems. This means that when the frequency of abnormal responses from the third-party system reaches a threshold, the circuit breaker is triggered to ensure the stability of the upstream system. However, because the circuit breaker mechanism in these technologies is too direct, it may lead to security issues in the upstream system or negatively impact the user experience.

[0004] Therefore, how to achieve data access has become a pressing technical problem that needs to be solved in the current field. Summary of the Invention

[0005] This application provides a data access method, apparatus, and related products, which aim to achieve data access.

[0006] The first aspect of this application provides a data access method, including:

[0007] Receive a set of data access requests;

[0008] The data access request set is sent to a third-party system to request the third-party system to perform authentication processing on the data access request set, and to obtain a first access request result set corresponding to the first access request set in the data access request set within a first time window, and a second access request result set corresponding to the second access request set in the data access request set within a second time window, wherein the first time window and the second time window are consecutive time windows;

[0009] If the number of failed requests to the third-party system in the first access request result set is greater than a preset number, and the number of failed requests to the third-party system in the second access request result set is greater than the preset number, the data access request set is downgraded to obtain a downgraded data access request set.

[0010] The degraded data access request set is sent to the upstream system so that the upstream system can process the degraded data access request set and obtain the access dataset corresponding to the degraded data access request set, wherein one degraded data access request corresponds to one access dataset.

[0011] A second aspect of this application provides a data access device, comprising:

[0012] The access request receiving unit is used to receive sets of data access requests;

[0013] The authentication processing unit is used to send the data access request set to a third-party system to request the third-party system to perform authentication processing on the data access request set, and to obtain a first access request result set corresponding to the first access request set in the data access request set within a first time window, and a second access request result set corresponding to the second access request set in the data access request set within a second time window, wherein the first time window and the second time window are consecutive time windows.

[0014] The request downgrade processing unit is used to downgrade the data access request set if the number of failed requests to the third-party system in the first access request result set is greater than a preset number, and the number of failed requests to the third-party system in the second access request result set is greater than the preset number, to obtain a downgraded data access request set.

[0015] The request access processing unit is used to send the degraded data access request set to the upstream system so that the upstream system can perform access processing on the degraded data access request set to obtain the access dataset corresponding to the degraded data access request set, wherein one degraded data access request corresponds to one access dataset.

[0016] A third aspect of this application provides a computer device, the device comprising a processor and a memory:

[0017] The memory is used to store computer programs and to transfer the computer programs to the processor;

[0018] The processor is configured to execute the steps of the data access method provided in the first aspect according to the instructions in the computer program.

[0019] A fourth aspect of this application provides a computer-readable storage medium for storing a computer program that, when executed by a computer device, implements the steps of the data access method provided in the first aspect.

[0020] The fifth aspect of this application provides a computer program product, including a computer program that, when executed by a computer device, implements the steps of the data access method provided in the first aspect.

[0021] As can be seen from the above technical solutions, the embodiments of this application have the following advantages:

[0022] In this application's technical solution, a data access request set is first received; then, the data access request set is sent to a third-party system to request the third-party system to perform authentication processing on the data access request set, obtaining a first access request result set corresponding to the first access request set in the data access request set within a first time window, and a second access request result set corresponding to the second access request set in the data access request set within a second time window; and if the number of access request results in the first access request result set indicating that the request to the third-party system failed is greater than a preset number, and the number of access request results in the second access request result set indicating that the request to the third-party system failed is greater than a preset number, the data access request set is downgraded to obtain a downgraded data access request set; finally, the downgraded data access request set is sent to an upstream system to perform access processing on the downgraded data access request set, obtaining the access dataset corresponding to the downgraded data access request set.

[0023] It should be noted that the first and second time windows in this application are consecutive time windows. Therefore, in this technical solution, the request status of the third-party system within a consecutive time window can be used to determine whether subsequent data access request set needs to be downgraded. If the number of failed requests to the third-party system within the consecutive time window exceeds a preset number, the data access request set can be downgraded, allowing the upstream system to access and process the downgraded data access request set. Thus, this application avoids the security issues of upstream systems caused by direct circuit breaking in related technical solutions, achieves data access and improves the user experience, and reduces misjudgment problems caused by sudden fluctuations in third-party systems, thereby improving downgrade fault tolerance. Attached Figure Description

[0024] Figure 1 A schematic diagram of the circuit breaker mechanism provided in related technologies;

[0025] Figure 2 A scenario architecture diagram of a data access method provided in an embodiment of this application;

[0026] Figure 3 A flowchart illustrating a data access method provided in an embodiment of this application;

[0027] Figure 4This is a schematic diagram illustrating the configuration of system services in a data access method provided in an embodiment of this application;

[0028] Figure 5 This is a schematic diagram illustrating the time window degradation in a data access method provided in an embodiment of this application;

[0029] Figure 6 This is a schematic diagram illustrating access to a compensation page in a data access method provided in an embodiment of this application.

[0030] Figure 7 A schematic diagram illustrating the configuration of system services in another data access method provided in this application embodiment;

[0031] Figure 8 A complete flowchart of data access in a data access method provided in an embodiment of this application;

[0032] Figure 9 This application provides an example of a data access method with an interactive flowchart for data access.

[0033] Figure 10 This is a schematic diagram of the structure of a data access device provided in an embodiment of this application;

[0034] Figure 11 This is a schematic diagram of the server structure in an embodiment of this application;

[0035] Figure 12 This is a schematic diagram of the structure of a terminal device in an embodiment of this application. Detailed Implementation

[0036] The embodiments of this application will now be described with reference to the accompanying drawings.

[0037] First, we will explain several terms that may be involved in the embodiments of this application below.

[0038] APISIX: A microservice API gateway deployed on a server.

[0039] Upstream systems play a crucial role in various scenarios, providing business logic support to clients to ensure the smooth operation of the entire business process. In most cases, upstream systems need the assistance of third-party systems to process data access requests initiated by objects on the client side. However, third-party systems may experience response anomalies, which can affect the stability of the upstream system. For example, when an object initiates a data access request to an e-commerce website from the client, the third-party system can be responsible for verifying the object's identity information. If the object's identity information is verified, the object can access the upstream system. However, the third-party system may experience service interruptions or timeouts, which will also affect the stability of the upstream system.

[0040] In related technologies, circuit breaker mechanisms (such as API circuit breakers) are typically used to stop calls to third-party systems. That is, when the frequency of abnormal responses from the third-party system reaches a threshold, a circuit breaker is triggered to ensure the stability of the upstream system. For example... Figure 1 As shown, Figure 1 This is a schematic diagram of the circuit breaker mechanism provided in related technologies. Figure 1 The API-breaker plugin is integrated into APISIX (the gateway), enabling APISIX to implement API circuit breaking functionality. The upstream system includes Upstream Task 1, Upstream Task 2, and Upstream Task 3. Specifically, for data access requests initiated by objects on the client side, if the number of request errors in Upstream Task 1 and Upstream Task 2 in the upstream system does not reach the predicted number, APISIX does not perform a circuit breaker operation. For data access requests initiated by objects on the client side, if the number of request errors in Upstream Task 3 in the upstream system reaches the predicted number, APISIX directly performs a circuit breaker operation. This is understandable because the third-party system and the upstream system are coupled; the number of errors in the third-party system is equivalent to the number of errors in the upstream system.

[0041] However, the circuit breaker mechanism of related technical solutions is too direct, which may lead to security issues in upstream systems or affect the user experience. Understandably, since the third-party system is a critical service of the upstream system (i.e., in a coupled state), directly not calling the third-party system may prevent the upstream system from completing data access requests. This means attackers could launch attacks on the upstream system during the third-party system's interruption, leading to security problems. Furthermore, during the third-party system's interruption, related technical solutions may return a 503 page to the client, potentially impacting the user experience. Therefore, how to achieve data access has become a pressing technical problem to be solved in this field.

[0042] In view of the above problems, this application provides a data access method, apparatus, and related products to achieve data access. In the technical solution provided in this application, a data access request set is first received. Then, the data access request set is sent to a third-party system to request the third-party system to perform authentication processing on the data access request set, obtaining a first access request result set corresponding to a first access request set within a first time window, and a second access request result set corresponding to a second access request set within a second time window. If the number of failed access request results in the first access request result set (where the number of failed requests to the third-party system is greater than a preset number), and the number of failed access request results in the second access request result set (where the number of failed requests to the third-party system is greater than the preset number), then the data access request set is downgraded to obtain a downgraded data access request set. Finally, the downgraded data access request set is sent to an upstream system for access processing, obtaining an access dataset corresponding to the downgraded data access request set. As can be seen, the technical solution of this application can determine whether the data access request set needs to be downgraded by observing the request status of the third-party system within a continuous time window. This allows the upstream system to access and process the downgraded data access request set. Thus, this application avoids the security issues of the upstream system caused by direct circuit breaking in related technical solutions, achieves data access and improves the user experience to a certain extent, and reduces misjudgment problems caused by sudden fluctuations in third-party systems, thereby improving degradation fault tolerance.

[0043] The execution subject of the data access method provided in this application embodiment can be a terminal device. For example, a data access request set is received on the terminal device. As an example, the terminal device may include, but is not limited to, mobile phones, desktop computers, tablet computers, laptops, PDAs, smart voice interaction devices, smart home appliances, vehicle terminals, aircraft, etc. The execution subject of the data access method provided in this application embodiment can also be a server, that is, a data access request set can be received on the server. In addition, the data access method provided in this application embodiment can also be executed collaboratively by the terminal device and the server. The terminal and the server can be directly or indirectly connected through wired or wireless communication, which is not limited here. Therefore, the implementation subject of the technical solution of this application is not limited in this application embodiment.

[0044] Figure 2An exemplary scenario architecture diagram of a data access method is illustrated. The diagram includes a server and various types of terminal devices, such as mobile phones, desktop computers, tablets, laptops, and PDAs, which are not specifically limited here. A smart gateway is deployed on the server to implement the data access scheme of this application. For example, in this application, a data access request set can be obtained from the terminal device. The server then performs subsequent degradation processing on this data access request set, enabling it to be sent to the upstream system for further access processing. Figure 2 The server shown can be a standalone physical server, a server cluster consisting of multiple physical servers, or a distributed system. Additionally, the server can also be a cloud server providing basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communication, middleware services, domain name services, security services, CDN, and big data and artificial intelligence platforms.

[0045] See Figure 3 This figure is a flowchart of a data access method provided in an embodiment of this application. Figure 3 The data access method shown includes the following steps:

[0046] S301: Receive data access request set.

[0047] In this step, the client first receives data access requests from different objects. An object can initiate one data access request, or multiple data access requests; no specific limitation is made here. Then, these data access requests from different objects are compiled into a data access request set and sent to the server. The smart gateway on the server can then receive this data access request set.

[0048] Understandably, an object can interact with a button on the client's interface (i.e., the object clicks a button on the client's interface) to initiate a data access request. This button can support navigation to the corresponding system page. This button can include different types of buttons, such as data query buttons, etc. There are no specific limitations here, and it can be set and applied according to the needs in actual applications.

[0049] Furthermore, after receiving the data access request set, this application can also parse the data access request set to obtain the access address set corresponding to the data access request set, where one data access request corresponds to one access address. Each data access request can correspond to a different access address, or each data access request can correspond to the same access address. For example, if the data access request set includes data access request 1, data access request 2, and data access request 3, data access request 1 can correspond to access address 1, data access request 2 can correspond to access address 2, and data access request 3 can correspond to access address 3; or data access request 1, data access request 2, and data access request 3 can all correspond to access address 1.

[0050] After this, the set of sending destinations corresponding to the set of data access requests can be determined based on the set of access addresses corresponding to the set of data access requests. Each data access request corresponds to a sending destination, which is used to indicate the receiving end of the data access request. It can be understood that each data access request specifies a unique sending destination, which clearly identifies the recipient of the data access request so that the data access request can be directly sent to the corresponding receiving end (i.e., the subsequent third-party system) in the subsequent process.

[0051] Furthermore, this application allows for the pre-setting of a mapping rule set, where each mapping rule corresponds to an access address and a sending destination. This means that the access address corresponding to a data access request can be mapped using the mapping rule to obtain the sending destination of the data access request. In this way, the data access request can be directly forwarded to the corresponding receiving end based on the sending destination in subsequent processes, which can improve data access efficiency to a certain extent.

[0052] It should be noted that each data access request can correspond to a different access address, but to the same receiving end; each data access request can correspond to different access addresses, and to different receiving ends. These different access addresses can come from different regions and cities, without specific limitations. For example, data access request 1 can correspond to access address 1, data access request 2 can correspond to access address 2, and data access request 3 can correspond to access address 3. All three data access requests correspond to receiving end 1, meaning that in subsequent processes, receiving end 1 handles data access requests 1, 2, and 3 respectively.

[0053] Furthermore, before receiving the data access request set, this application can also obtain a first system service to be configured and a second system service to be configured in the third-party system. Afterwards, the first system service to be configured can be configured to obtain the first system service, and the second system service to be configured can be configured to obtain the second system service. The first and second system services can be understood as sub-services of the third-party system. It should be noted that the first and second system services provided in this application are only partial examples and are not specifically limited. Sub-services of the third-party system can be added and deleted in actual applications. Furthermore, the third-party system mentioned in this application can perform identity authentication processing operations for data access requests, data detection processing operations for data access requests, and permission management processing operations for data access requests. These are not specifically limited, and the execution performance of the third-party system can be determined according to actual needs in actual applications. Correspondingly, the execution performance of the first and second system services in the third-party system can also be changed according to the execution performance of the third-party system.

[0054] The following describes the process of configuring the first and second system services in this application. Figure 4 As shown, Figure 4 This is a schematic diagram illustrating the configuration of system services in a data access method provided in an embodiment of this application. It should be noted that the present application... Figure 4 (a) and Figure 4(b) in the text is only a partial example, and the pages of the system services are not limited here. Figure 4 (a) illustrates the process of configuring the first system service to be configured. Specifically, the service address (i.e., the destination for data access requests) of the first system service to be configured can first be configured as http: / / serverA.com / X. The service address can be preset or selected from the address library. After that, the number of consecutive time windows can be set to 2, the window duration of each time window can be 10 seconds, and the preset number of failed system service requests can be set to 90%. Finally, the degradation method of the first system service to be configured can be configured to jump to the backup configuration service (the jump address is http: / / serverA.bak.com). At this point, the above process can be named Strategy 1. In this way, the first system service to be configured can be configured as the first system service through Strategy 1.

[0055] Figure 4 (b) illustrates the process of configuring the second system service to be configured. Specifically, firstly, the service address of the second system service to be configured can be configured as http: / / serverA.com / Y. After that, the number of consecutive time windows can be set to 2, the window duration of each time window can be set to 10 seconds, and the preset number of failed system service requests can be set to 80%. Finally, the degradation method of the second system service to be configured can be configured to allow access to the upstream system. At this point, the above process can be named Strategy 2. In this way, the second system service to be configured can be configured as the second system service through Strategy 2.

[0056] The degradation method can also include returning to the access compensation page. The number of consecutive time windows can be up to three, with each window lasting 8 seconds. The preset number of failed system service requests can be 85%, with no specific limitations on the duration and number. Within each time window, the system service status can be consecutive timeouts, consecutive rejections, slow responses, or a specified status code. That is, if the system service exhibits any of these statuses within the time window, it can be considered a service request failure. By configuring the service system in advance, memory and computing resources can be saved.

[0057] S302: Send the data access request set to a third-party system to request the third-party system to perform authentication processing on the data access request set, and obtain a first access request result set corresponding to the first access request set in the data access request set within a first time window, and a second access request result set corresponding to the second access request set in the data access request set within a second time window.

[0058] In this step, the first and second time windows are consecutive time windows, with each window potentially being 10 seconds long and the number of time windows potentially being three, without specific limitations. It is understood that the data access requests in the data access request set can be authentication-type access requests, meaning that the data access request needs to be authenticated by a third-party system before it can be accessed by the upstream system. At this time, the gateway in the server can request the third-party system to authenticate the first set of access requests in the data access request set within the first time window to obtain the first set of access request results, and can request the third-party system to authenticate the second set of access requests in the data access request set within the second time window to obtain the second set of access request results. Each access request corresponds to one access request result, which can either indicate a failed request or a successful request. Thus, this application can determine whether subsequent data access requests need to be downgraded based on the access request results of the access requests within consecutive time windows.

[0059] Correspondingly, third-party systems can inspect the submitted data corresponding to data access requests to check whether the submitted data conforms to preset data format, data type, and data range requirements. If the submitted data does not conform to these requirements, the upstream system will be refused access to the data access request in subsequent processes, thereby ensuring the accuracy of the submitted data. Third-party systems can also perform permission verification on the initiating object corresponding to the data access request to determine whether the initiating object can use the upstream system to process the data access request in subsequent processes. If the initiating object's permission verification fails, the upstream system will be refused access to the data access request in subsequent processes, thereby ensuring the security of data access.

[0060] In the embodiments of this application, there are multiple possible implementations of S302 mentioned above, which will be described below. It should be noted that the implementations given below are only illustrative examples and do not represent all implementations of the embodiments of this application.

[0061] As can be seen from step S301, a first system service has been configured in the third-party system. Next, we will introduce the first optional implementation method of S302 in conjunction with the first system service in the third-party system. The first optional implementation method of S302 is as follows:

[0062] First, after determining the sending destination set corresponding to the data access request set based on the access address set corresponding to the data access request set, the receiving end corresponding to each data access request can be determined based on the sending destination set corresponding to the data access request set. That is, the third-party system to which each data access request needs to be sent can be determined. At this point, the first system service in the third-party system to which each data access request needs to be sent can be determined.

[0063] Subsequently, the data access request set can be sent to a first system service in a third-party system. Within a first time window, the first system service can be requested to authenticate the first access request set within the data access request set, obtaining a first access request result set corresponding to the first access request set within the first time window. Similarly, within a second time window, the first system service can be requested to authenticate the second access request set within the data access request set, obtaining a second access request result set corresponding to the second access request set within the second time window. This allows the first system service to authenticate the data access requests, confirming the authenticity of each data access request and ensuring the security of subsequent upstream systems.

[0064] Understandably, since each data access request in the data access request set needs to be sent to the first system service in the third-party system, and the data access request set needs to be accessed and processed within a continuous time window, in order to ensure that the data access request set is processed evenly in each time window, the data access request set can be divided into a first access request set and a second access request set with the same number of requests. This allows the first access request result set corresponding to the first access request set to be obtained within the first time window, and the second access request result set corresponding to the second access request set to be obtained within the second time window. This can, to a certain extent, ensure the correctness of subsequent judgments on the access request result sets.

[0065] As can be seen from step S301, the third-party system contains a first system service and a second system service that have been configured. Next, we will introduce the second optional implementation method of S302 in conjunction with the first and second system services in the third-party system. The second optional implementation method of S302 is as follows:

[0066] First, after determining the destination set corresponding to the data access request set based on the access address set, we can then determine the receiving end for each data access request, i.e., the third-party system to which each data access request needs to be sent. At this point, we can determine the first and second system services within these third-party systems, where the second system service is a downstream service of the first system service. Understandably, after authentication by the first system service, the data access request also needs authentication by the second system service. Only if both the first and second system services successfully authenticate the data access request can it be forwarded to the upstream system.

[0067] After this, the first access request set in the data access request set can be sent to the first system service and the second system to request the first system service to authenticate the first access request set in the data access request set within the first time window, and obtain the authenticated first access request set; and the second system service can be requested to authenticate the second access request set in the data access request set within the first time window, and obtain the first access request result set corresponding to the first access request set.

[0068] Furthermore, the application can send a second access request set from the data access request set to both the first and second system services. Within a second time window, the first system service can be requested to authenticate the second access request set to obtain the authenticated second access request set. Similarly, within the second time window, the second system service can be requested to authenticate the second access request set to obtain the corresponding second access request result set. Thus, this application performs dual authentication on data access requests, which enhances the security of subsequent upstream systems. Moreover, in the face of such dual authentication, this application also provides corresponding degradation methods in subsequent processes, demonstrating the versatility of the technical solution implemented in this application.

[0069] Understandably, in this application, the authentication of the first access request set and the second access request set within the first time window is not performed simultaneously. Instead, within the first time window (i.e., within 10 seconds), the first access request set is authenticated first to obtain an authenticated first access request set. Then, within the same first time window (i.e., within 10 seconds), the second access request set is authenticated to obtain the first access request result set corresponding to the first access request set. Similarly, the authentication of the first and second access request sets within the second time window is performed in the same manner, and will not be elaborated further here.

[0070] It should be noted that some data access requests in the data access request set may be sent only to the first system service in the third-party system, while all data access requests in the data access request set may be sent to both the first and second system services in the third-party system; no specific limitation is made here. It should also be noted that the server may choose one or combine multiple of the above optional implementation methods; this application does not impose any restrictions on this.

[0071] S303: If the number of failed requests to the third-party system in the first access request result set is greater than a preset number, and the number of failed requests to the third-party system in the second access request result set is greater than the preset number, the data access request set is downgraded to obtain a downgraded data access request set.

[0072] It should be noted that before executing step S303 in this application, it is also necessary to determine whether the number of failed access requests to third-party systems in the first access request result set is greater than a preset number, and whether the number of failed access requests to third-party systems in the second access request result set is greater than a preset number. If the number of failed access requests to third-party systems in the first access request result set is greater than the preset number, and the number of failed access requests to third-party systems in the second access request result set is greater than the preset number, then step S303 is executed; if the number of failed access requests to third-party systems in the first access request result set is not greater than the preset number, and / or the number of failed access requests to third-party systems in the second access request result set is not greater than the preset number, then it means that no downgrade processing is required in the subsequent process, i.e., step S303 is not executed.

[0073] like Figure 5 As shown, Figure 5 This is a schematic diagram illustrating the time window degradation in a data access method provided in an embodiment of this application. Figure 5 The diagram illustrates the process of performing degradation handling when request failures occur within a time window. The first scenario: In time window 1, the number of failed requests to the third-party system in the access request result set does not exceed a preset number (e.g., 80%). In time window 2, the number of failed requests to the third-party system in the access request result set does not exceed the preset number (e.g., 80%). In time window 3, the number of failed requests to the third-party system in the access request result set exceeds the preset number (e.g., 80%). Each time window can be 10 seconds long. In this case, only one time window has request anomalies, so subsequent degradation handling is not performed; this time window is discarded, and the request status of the next time window is acquired.

[0074] The second scenario: In time window 2, the number of failed requests to the third-party system in the access request result set is not greater than the preset number; in time window 3, the number of failed requests to the third-party system in the access request result set is greater than the preset number; and in time window 4, the number of failed requests to the third-party system in the access request result set is not greater than the preset number (e.g., 80%). In this case, there is only one time window with an abnormal request situation, and subsequent downgrade processing can be omitted.

[0075] The third scenario: In time window 3, the number of failed requests to the third-party system in the access request result set is greater than the preset number; in time window 4, the number of failed requests to the third-party system in the access request result set is not greater than the preset number; and in time window 5, the number of failed requests to the third-party system in the access request result set is greater than the preset number (e.g., 80%). In this case, there are two time windows with abnormal request situations, but these two time windows are not consecutive, so subsequent downgrade processing can be omitted.

[0076] The fourth scenario: In time window 4, the number of failed requests to the third-party system in the access request result set is not greater than the preset number; in time window 5, the number of failed requests to the third-party system in the access request result set is greater than the preset number; and in time window 6, the number of failed requests to the third-party system in the access request result set is greater than the preset number (e.g., 80%). In this case, there are two consecutive time windows with abnormal request situations, so it is determined that there is an abnormality in the third-party system, and subsequent downgrade processing can be performed.

[0077] Specifically, there are multiple possible implementations of S303 mentioned above in the embodiments of this application, which will be described below. It should be noted that the implementations given below are only illustrative examples and do not represent all implementations of the embodiments of this application.

[0078] The first optional implementation of S303 is (wherein this first optional implementation corresponds to the first optional implementation of S302 above):

[0079] It should be noted that before performing degradation processing on the data access request set and obtaining the degraded data access request set, this application can also obtain the backup system service corresponding to the first system service. The execution operation of the backup system service is the same as that of the first system service. That is, when the first system service fails to make a request, the backup system service can be called to support the processing of data access requests.

[0080] Subsequently, the gateway in the server can forward the data access request set to the backup system service, requesting the backup system service to authenticate the data access request set. The authenticated data access request set is then used as the degraded data access request set, meaning this degraded data access request set can be accessed and processed by the upstream system in subsequent processes. Thus, this application achieves degradation by forwarding requests to the backup system service, thereby improving the client's object experience.

[0081] The second optional implementation of S303 is (wherein this second optional implementation corresponds to the second optional implementation of S302 above):

[0082] Specifically, the gateway in the server can allow the first and second access request sets after authentication to pass through, thereby obtaining the allowed first and second access request sets. The allowed first and second access request sets are then used as the downgraded data access request sets. In other words, the first and second access request sets after authentication are marked to indicate that they can be directly allowed in subsequent processes and sent directly to the upstream system.

[0083] Since the first and second access request sets have already been authenticated by the first system service, we do not need to authenticate them further. Instead, we directly send them to the upstream system. This approach ensures the security of the upstream system to some extent. Furthermore, this application achieves degradation through direct access, which also improves the client's object experience. It should be noted that the server can choose one or combine multiple implementation methods from the above options; this application does not impose any restrictions on this.

[0084] S304: Send the degraded data access request set to the upstream system so that the upstream system can process the degraded data access request set and obtain the access dataset corresponding to the degraded data access request set.

[0085] In this step, each degraded data access request corresponds to one set of access data. That is, each data access request sent to the upstream system will receive access data returned by the upstream system. It's understandable that each object may initiate a different data access request, and therefore the access data returned by the upstream system for each request will also be different. Furthermore, after obtaining the access dataset corresponding to the degraded data access request set, this application can return the access dataset to the client, allowing objects on the client to view the access data.

[0086] In one feasible implementation, after executing step S304, this application can further determine whether the access dataset corresponding to the downgraded data access request set is an empty set or a partial dataset. If the access dataset corresponding to the downgraded data access request set is an empty set or a partial dataset, it indicates that the authentication processing operation of the backup system service is abnormal. At this time, an access compensation page can be generated based on the authentication abnormality of the backup system service. The access compensation page is used to prompt the object corresponding to the data access request to wait for the service response. That is, the access compensation page can be returned to the object with the words "Object needs to wait for response" so that the access compensation page can be returned to the object corresponding to the empty access data in the subsequent process.

[0087] like Figure 6 As shown, Figure 6 This is a schematic diagram illustrating access to a compensation page in a data access method provided in an embodiment of this application. Figure 6 The access compensation page may display the message "You do not currently have permission to access this page." It should be noted that... Figure 6 This is merely a partial example of the application; the access compensation page may also display the message "Please wait for network response." This is not a specific limitation, and the displayed message on the access compensation page can be customized in actual applications. Thus, this application avoids the security issues caused by direct circuit breaking, provides user-friendly exception messages for client objects, and to a certain extent decouples third-party and upstream systems, improving the client's object experience.

[0088] It should be noted that since different system services may correspond to the same main service—that is, system service 1 and system service 2 are both supported by third-party system A—in the relevant technical solutions, when system service 1 processes data access requests and encounters a service exception, the circuit breaker can only be applied to the data access requests that need to be processed under system service 1, thereby cutting off the data access requests from calling system service 1. At this time, if system service 1 encounters a service exception, system service 2 should also encounter a service exception. However, the relevant technical solutions do not apply the circuit breaker to the data access requests that need to be processed under system service 2. Therefore, processing the data access requests that need to be processed under system service 2 may also affect the client's object request operations and waste subsequent computation processes.

[0089] Furthermore, after executing step S304, this application can also obtain a third system service to be configured from a third-party system and configure the third system service to obtain the third system service. The configuration process for the third system to be configured in this application is similar to the configuration process for the first and second systems to be configured in step S301. Figure 7 As shown, Figure 7 This is a schematic diagram illustrating access to a compensation page in another data access method provided in an embodiment of this application. Figure 7 The process of configuring a third system service to be configured is shown. Specifically, the service address of the third system service to be configured can first be configured as http: / / serverA.com / Z. After that, the number of consecutive time windows can be set to 2, the window duration of each time window can be 10 seconds, the preset number of failed system service requests can be set to 80%, and the degradation method of the third system service to be configured can be configured to allow access to the upstream system.

[0090] Finally, the third service to be configured can be added to the existing group - Group A. The third service to be configured can also be added to a newly created group; no specific limitation is made here. During the system service configuration process, the automatic degradation duration can be set to 2 minutes, the manual degradation duration can be set to 2 minutes, and the degradation duration can be set to 3 minutes; no specific limitation is made here. This process can then be named Strategy 3. Strategy 3 allows the third system service to be configured as a third system service.

[0091] It should also be noted that when configuring the first system service to be configured as the first system service using strategy 1, the first system service to be configured can be added to the existing group - group A. At this time, the third system service and the first system service are in the same system service group. Furthermore, this application can obtain target data access requests within a preset time period, which includes the time period during which the degradation processing operation has not stopped.

[0092] Specifically, within this preset time period, the target data access request can be parsed to determine that the destination of the target data access request is a third-party system service in a third-party system, and at this time, the first system service and the third system service are in the same group - Group A. Since the data access request set under the first system service has undergone a degradation processing operation, the target data access request can be degraded according to the degradation processing operation for the data access request set, that is, the target data access request can be forwarded to the backup system service to request the backup system service to authenticate the target data access request and obtain the degraded target data access request. In this way, different system services corresponding to the same main service can be divided into the same system group in this application, so that when the system service under the same group is undergoing a degradation operation, the other system services under the same group are also subjected to degradation operations, thereby reducing access latency and reducing the computation process.

[0093] Table 1

[0094]

[0095] As shown in Table 1, Table 1 is an illustration of degradation in a data access method provided in this application embodiment. In Table 1, under strategy 1, the first system service to be configured in the third-party services can be configured as a first system service with a service address of http: / / serverA.com / X and a group ID of group A. Under strategy 3, the third system service to be configured in the third-party services can be configured as a third system service with a service address of http: / / serverA.com / Z and a group ID of group A. Since the first system service and the third system service are in the same system group, data access requests under the first system service trigger a degradation operation, and a degradation operation is also performed on data access requests under the third system service to achieve same-group degradation. The degradation time is 2024-01-01, 11:11:11. This saves memory and computing resources. Furthermore, under Strategy 4, the fourth system service to be configured in the third-party service can be configured as the fourth system service with the service address http: / / serverB.com and the group ID group B. At this time, the data access request under the fourth system service does not trigger the degradation operation and still performs the original authentication processing operation.

[0096] like Figure 8 As shown, Figure 8 This is a complete flowchart of data access in a data access method provided in an embodiment of this application. Figure 8First, the gateway on the server configures the system service to be configured in the third-party system to obtain the system service. At this time, the gateway on the server can receive data access request sets initiated by objects in the client, allowing authentication processing of the data access request sets by the system service in the third-party system within consecutive first and second time windows, thus obtaining the access request result sets corresponding to the data access request sets within the consecutive first and second time windows. If the number of failed access request results in the access request result set exceeds a preset number, the data access request set is downgraded, allowing the upstream system to access and process the downgraded data access request set to obtain the access dataset corresponding to the downgraded data access request set. Furthermore, the gateway on the server can also perform downgrade recovery operations on the system service in the third-party system. This avoids the security issues of the upstream system caused by direct circuit breaking in related technical solutions, realizing data access and improving the object experience to a certain extent.

[0097] like Figure 9 As shown, Figure 9 This is a flowchart illustrating the data access interaction in a data access method provided in an embodiment of this application. Figure 9 First, the server can receive a set of data access requests initiated by a client object. At this time, the gateway in the server can determine whether the set of data access requests needs to be sent to a third-party system. If the set of data access requests does not need to be sent to a third-party system, it will be sent directly to the upstream system. If the set of data access requests needs to be sent to a third-party system, it will be sent to the third-party system.

[0098] At this point, it is determined whether data access requests in the third-party system's system service have undergone degradation processing. If data access requests in the third-party system's system service have undergone degradation processing and are within a preset time period, then degradation processing is performed on the data access request set, so that the degraded data access request set can be accessed in the upstream system. If data access requests in the third-party system's system service have not undergone degradation processing, it is determined whether data access requests in system services within the same service group as the third-party system's system service have undergone degradation processing. If data access requests in system services within the same service group as the third-party system's system service have undergone degradation processing and are within a preset time period, then degradation processing is performed on the data access request set, so that the degraded data access request set can be accessed in the upstream system.

[0099] If a data access request from a system service in the same service group as a third-party system's system service is not subject to degradation processing, the data access request set is sent to the third-party system's system service, allowing the third-party system's system service to perform authentication processing on the data access request set. Subsequently, within a continuous time window, it can be determined whether the number of failed access requests to the third-party system in the access request result set corresponding to the data access request set exceeds a preset number. If the number of failed access requests to the third-party system exceeds the preset number, degradation processing is performed on the data access request set, allowing the degraded data access request set to be processed in the upstream system; if the number of failed access requests to the third-party system does not exceed the preset number, the data access request set is sent to the upstream system, allowing it to be processed in the upstream system, and this process is repeated cyclically. This allows for interactive page responses in this application, thereby improving the client's user experience.

[0100] In summary, this application embodiment can determine whether subsequent data access request sets need to be downgraded by analyzing the request status of third-party systems within continuous time windows, thereby enabling upstream systems to access and process the downgraded data access request sets. Thus, this application avoids the security issues of upstream systems caused by direct circuit breaking in related technical solutions, achieves data access and improves the user experience to a certain extent, and reduces misjudgment problems caused by sudden fluctuations in third-party systems, thereby improving downgrade fault tolerance. Furthermore, this application can also save computing resources and memory by grouping system services in third-party systems.

[0101] Based on the data access method provided in the foregoing embodiments, this application also provides a corresponding data access device. The data access device provided in the embodiments of this application will be described in detail below.

[0102] See Figure 10 This figure is a schematic diagram of the structure of a data access device provided in an embodiment of this application. Figure 10 As shown, the data access device specifically includes:

[0103] Access request receiving unit 1001 is used to receive a set of data access requests;

[0104] The authentication processing unit 1002 is used to send the data access request set to a third-party system to request the third-party system to perform authentication processing on the data access request set, and obtain a first access request result set corresponding to the first access request set in the data access request set within a first time window, and a second access request result set corresponding to the second access request set in the data access request set within a second time window, wherein the first time window and the second time window are consecutive time windows.

[0105] The request downgrade processing unit 1003 is used to downgrade the data access request set if the number of failed requests to the third-party system in the first access request result set is greater than a preset number, and the number of failed requests to the third-party system in the second access request result set is greater than the preset number, to obtain a downgraded data access request set.

[0106] The request access processing unit 1004 is used to send the degraded data access request set to the upstream system so that the upstream system can perform access processing on the degraded data access request set to obtain the access dataset corresponding to the degraded data access request set, wherein one degraded data access request corresponds to one access dataset.

[0107] In one feasible implementation, the device further includes:

[0108] The request parsing and processing unit is used to parse and process the data access request set to obtain the access address set corresponding to the data access request set, wherein one data access request corresponds to one access address;

[0109] The destination set determination unit is used to determine the sending destination set corresponding to the data access request set based on the access address set corresponding to the data access request set, wherein one data access request corresponds to one sending destination, and the sending destination is used to indicate the receiving end of the data access request.

[0110] In one feasible implementation, the request authentication processing unit 1002 is specifically used for:

[0111] According to the destination set corresponding to the data access request set, the data access request set is sent to the first system service in the third-party system;

[0112] Within the first time window, the first system service is requested to authenticate the first access request set in the data access request set, and the first access request result set corresponding to the first access request set in the data access request set within the first time window is obtained.

[0113] Within the second time window, the first system service is requested to authenticate the second access request set in the data access request set, and obtain the second access request result set corresponding to the second access request set in the data access request set within the second time window.

[0114] In one feasible implementation, the device further includes:

[0115] A backup system acquisition unit is used to acquire a backup system service corresponding to the first system service, wherein the execution operation of the backup system service is the same as the execution operation of the first system service.

[0116] The request downgrade processing unit 1003 is specifically used for:

[0117] The data access request set is forwarded to the backup system service to request the backup system service to authenticate the data access request set and obtain the authenticated data access request set.

[0118] The authenticated data access request set is used as the downgraded data access request set.

[0119] In one feasible implementation, the request authentication processing unit 1002 is specifically used for:

[0120] According to the destination set corresponding to the data access request set, the data access request set is sent to the first system service and the second system service in the third-party system;

[0121] Within a first time window, the system requests the first system service to authenticate the first access request set in the data access request set, and obtains the authenticated first access request set. Within the first time window, the system requests the second system service to authenticate the authenticated first access request set, and obtains the first access request result set corresponding to the first access request set.

[0122] Within a second time window, the system requests the first system service to authenticate the second access request set in the data access request set, thereby obtaining the authenticated second access request set. Within the second time window, the system also requests the second system service to authenticate the authenticated second access request set, thereby obtaining the second access request result set corresponding to the second access request set.

[0123] In one feasible implementation, the request downgrade processing unit 1003 is specifically used for:

[0124] The first and second access request sets after authentication are allowed to proceed, resulting in the first and second access request sets after being allowed to proceed.

[0125] The first set of access requests that has been granted and the second set of access requests that have been granted are used as the data access request set after the downgrade.

[0126] In one feasible implementation, the device further includes:

[0127] The configuration system acquisition unit is used to acquire the third system service to be configured in the third-party system, and to acquire the target data access request within a preset time period, wherein the preset time period includes the time period during which the degradation processing operation is not stopped;

[0128] The system service configuration unit is used to configure the third system service to be configured to obtain the third system service, wherein the third system service and the first system service are in the same system service group;

[0129] The system service determination unit is used to parse and process the target data access request and determine that the destination of the target data access request is a third system service in the third-party system.

[0130] The target request degradation processing unit is used to perform degradation processing on the target data access request according to the degradation processing operation for the data access request set, so as to obtain the degraded target data access request.

[0131] In one feasible implementation, the device further includes:

[0132] The access compensation page generation unit is used to indicate that the authentication processing operation of the backup system service is abnormal if the access dataset corresponding to the downgraded data access request set is an empty set, and to generate an access compensation page, wherein the access compensation page is used to prompt the object corresponding to the data access request to wait for the service response.

[0133] The data access device provided in this application embodiment has the same beneficial effects as the data access method provided in the above embodiments, and therefore will not be described again.

[0134] This application provides a computer device, which can be a server. Figure 11This is a schematic diagram of a server structure provided in an embodiment of this application. The server 900 can vary significantly due to different configurations or performance. It may include one or more central processing units (CPUs) 922 (e.g., one or more processors) and memory 932, and one or more storage media 930 (e.g., one or more mass storage devices) for storing application programs 942 or data 944. The memory 932 and storage media 930 can be temporary or persistent storage. The program stored in the storage media 930 may include one or more modules (not shown in the diagram), each module may include a series of instruction operations on the server. Furthermore, the CPU 922 may be configured to communicate with the storage media 930 and execute the series of instruction operations in the storage media 930 on the server 900.

[0135] Server 900 may also include one or more power supplies 926, one or more wired or wireless network interfaces 950, one or more input / output interfaces 958, and / or one or more operating systems 941, such as Windows Server™, Mac OS X™, Unix™, Linux™, FreeBSD™, etc.

[0136] CPU 922 is used to perform the following steps:

[0137] Receive a set of data access requests;

[0138] The data access request set is sent to a third-party system to request the third-party system to perform authentication processing on the data access request set, and to obtain a first access request result set corresponding to the first access request set in the data access request set within a first time window, and a second access request result set corresponding to the second access request set in the data access request set within a second time window, wherein the first time window and the second time window are consecutive time windows;

[0139] If the number of failed requests to the third-party system in the first access request result set is greater than a preset number, and the number of failed requests to the third-party system in the second access request result set is greater than the preset number, the data access request set is downgraded to obtain a downgraded data access request set.

[0140] The degraded data access request set is sent to the upstream system so that the upstream system can process the degraded data access request set and obtain the access dataset corresponding to the degraded data access request set, wherein one degraded data access request corresponds to one access dataset.

[0141] This application also provides another computer device, which can be a terminal device. For example... Figure 12 As shown, for ease of explanation, only the parts related to the embodiments of this application are shown. For specific technical details not disclosed, please refer to the method section of the embodiments of this application. Taking a mobile phone as an example:

[0142] Figure 12 The diagram shown is a block diagram of a portion of the structure of a mobile phone provided in an embodiment of this application. (Reference) Figure 12 The mobile phone includes: a radio frequency (RF) circuit 1010, a memory 1020, an input unit 1030, a display unit 1040, a sensor 1050, an audio circuit 1060, a wireless fidelity (WiFi) module 1070, a processor 1080, and a power supply 1090, etc. Those skilled in the art will understand that... Figure 12 The mobile phone structure shown does not constitute a limitation on the mobile phone and may include more or fewer components than shown, or combine certain components, or have different component arrangements.

[0143] The following is combined Figure 12 A detailed introduction to each component of a mobile phone:

[0144] The RF circuit 1010 can be used for receiving and transmitting signals during information transmission or calls. Specifically, it receives downlink information from the base station and processes it with the processor 1080; additionally, it transmits uplink data to the base station. Typically, the RF circuit 1010 includes, but is not limited to, an antenna, at least one amplifier, a transceiver, a coupler, a low-noise amplifier (LNA), a duplexer, etc. Furthermore, the RF circuit 1010 can also communicate wirelessly with networks and other devices. The aforementioned wireless communications may use any communication standard or protocol, including but not limited to Global System for Mobile Communications (GSM), General Packet Radio Service (GPRS), Code Division Multiple Access (CDMA), Wideband Code Division Multiple Access (WCDMA), Long Term Evolution (LTE), email, and Short Messaging Service (SMS).

[0145] The memory 1020 can be used to store software programs and modules. The processor 1080 executes various mobile phone functions and data processing by running the software programs and modules stored in the memory 1020. The memory 1020 may mainly include a program storage area and a data storage area. The program storage area may store the operating system, applications required for at least one function (such as sound playback function, image playback function, etc.), etc.; the data storage area may store data created according to the use of the mobile phone (such as audio data, phonebook, etc.). In addition, the memory 1020 may include high-speed random access memory, and may also include non-volatile memory, such as at least one disk storage device, flash memory device, or other volatile solid-state storage device.

[0146] The input unit 1030 can be used to receive input numerical or character information, and to generate key signal inputs related to user settings and function control of the mobile phone. Specifically, the input unit 1030 may include a touch panel 1031 and other input devices 1032. The touch panel 1031, also known as a touch screen, can collect touch operations performed by the user on or near it (such as operations performed by the user using a finger, stylus, or any suitable object or accessory on or near the touch panel 1031), and drive the corresponding connection devices according to a pre-set program. Optionally, the touch panel 1031 may include two parts: a touch detection device and a touch controller. The touch detection device detects the user's touch position and the signal generated by the touch operation, and transmits the signal to the touch controller; the touch controller receives touch information from the touch detection device, converts it into touch point coordinates, and sends it to the processor 1080, and can also receive and execute commands sent by the processor 1080. In addition, the touch panel 1031 can be implemented using various types such as resistive, capacitive, infrared, and surface acoustic wave. In addition to the touch panel 1031, the input unit 1030 may also include other input devices 1032. Specifically, other input devices 1032 may include, but are not limited to, one or more of the following: physical keyboard, function keys (such as volume control buttons, power buttons, etc.), trackball, mouse, joystick, etc.

[0147] The display unit 1040 can be used to display information input by the user or information provided to the user, as well as various menus of the mobile phone. The display unit 1040 may include a display panel 1041, which may optionally be configured as a Liquid Crystal Display (LCD), Organic Light-Emitting Diode (OLED), or similar display panel 1041. Further, a touch panel 1031 may cover the display panel 1041. When the touch panel 1031 detects a touch operation on or near it, it transmits the information to the processor 1080 to determine the type of touch event. Subsequently, the processor 1080 provides corresponding visual output on the display panel 1041 according to the type of touch event. Although in Figure 12 In this embodiment, the touch panel 1031 and the display panel 1041 are two separate components to realize the input and output functions of the mobile phone. However, in some embodiments, the touch panel 1031 and the display panel 1041 can be integrated to realize the input and output functions of the mobile phone.

[0148] The mobile phone may also include at least one sensor 1050, such as a light sensor, a motion sensor, and other sensors. Specifically, the light sensor may include an ambient light sensor and a proximity sensor. The ambient light sensor can adjust the brightness of the display panel 1041 according to the ambient light level, and the proximity sensor can turn off the display panel 1041 and / or the backlight when the phone is moved to the ear. As a type of motion sensor, an accelerometer sensor can detect the magnitude of acceleration in various directions (generally three axes). When stationary, it can detect the magnitude and direction of gravity and can be used for applications that recognize the phone's posture (such as landscape / portrait switching, related games, magnetometer posture calibration), vibration recognition-related functions (such as pedometer, taps), etc. Other sensors that may be configured in the mobile phone, such as gyroscopes, barometers, hygrometers, thermometers, and infrared sensors, will not be described in detail here.

[0149] The audio circuit 1060, speaker 1061, and microphone 1062 provide an audio interface between the user and the mobile phone. The audio circuit 1060 converts the received audio data into electrical signals and transmits them to the speaker 1061, where the speaker 1061 converts them into sound signals for output. On the other hand, the microphone 1062 converts the collected sound signals into electrical signals, which are then received by the audio circuit 1060, converted into audio data, and then processed by the processor 1080 before being transmitted via the RF circuit 1010 to, for example, another mobile phone, or the audio data can be output to the memory 1020 for further processing.

[0150] WiFi is a short-range wireless transmission technology. Through the WiFi module 1070, mobile phones can help users send and receive emails, browse web pages, and access streaming media, providing users with wireless broadband internet access. Although Figure 12 The WiFi module 1070 is shown, but it is understood that it is not an essential component of a mobile phone and can be omitted as needed without changing the essence of the invention.

[0151] The processor 1080 is the control center of the mobile phone, connecting various parts of the phone through various interfaces and lines. It executes software programs and / or modules stored in the memory 1020 and calls data stored in the memory 1020 to perform various functions and process data, thereby collecting overall data and information from the phone. Optionally, the processor 1080 may include one or more processing units; preferably, the processor 1080 may integrate an application processor and a modem processor, wherein the application processor mainly handles the operating system, user interface, and applications, and the modem processor mainly handles wireless communication. It is understood that the modem processor may not be integrated into the processor 1080.

[0152] The mobile phone also includes a power supply 1090 (such as a battery) that supplies power to various components. Preferably, the power supply can be logically connected to the processor 1080 through a power management system, thereby enabling functions such as charging, discharging, and power consumption management through the power management system.

[0153] Although not shown, mobile phones may also include a camera, Bluetooth module, etc., which will not be described in detail here.

[0154] In this embodiment of the application, the processor 1080 included in the mobile phone also has the following functions:

[0155] Receive a set of data access requests;

[0156] The data access request set is sent to a third-party system to request the third-party system to perform authentication processing on the data access request set, and to obtain a first access request result set corresponding to the first access request set in the data access request set within a first time window, and a second access request result set corresponding to the second access request set in the data access request set within a second time window, wherein the first time window and the second time window are consecutive time windows;

[0157] If the number of failed requests to the third-party system in the first access request result set is greater than a preset number, and the number of failed requests to the third-party system in the second access request result set is greater than the preset number, the data access request set is downgraded to obtain a downgraded data access request set.

[0158] The degraded data access request set is sent to the upstream system so that the upstream system can process the degraded data access request set and obtain the access dataset corresponding to the degraded data access request set, wherein one degraded data access request corresponds to one access dataset.

[0159] This application also provides a computer-readable storage medium for storing a computer program that, when run on a computer device, causes the computer device to perform any one of the data access methods described in the foregoing embodiments.

[0160] This application also provides a computer program product including a computer program, which, when run on a computer device, causes the computer device to execute any one of the implementation methods of a data access method described in the foregoing embodiments.

[0161] Those skilled in the art will understand that, for the sake of convenience and brevity, the specific working process of the system and equipment described above can be referred to the corresponding process in the foregoing method embodiments, and will not be repeated here.

[0162] In the several embodiments provided in this application, it should be understood that the disclosed systems and methods can be implemented in other ways. For example, the system embodiments described above are merely illustrative. For instance, the division of the system is only a logical functional division, and in actual implementation, there may be other division methods. For example, multiple systems may be combined or integrated into another system, or some features may be ignored or not executed. Furthermore, the coupling or direct coupling or communication connection shown or discussed may be an indirect coupling or communication connection through some interfaces, devices, or units, and may be electrical, mechanical, or other forms.

[0163] The system described as separate components may or may not be physically separate. Components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the units can be selected to achieve the purpose of this embodiment, depending on actual needs.

[0164] Furthermore, the functional units in the various embodiments of this application can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit. The integrated unit can be implemented in hardware or as a software functional unit.

[0165] If the integrated unit is implemented as a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, or all or part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of this application. The aforementioned storage medium includes: USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, optical disks, and other media capable of storing computer programs.

[0166] In this application embodiment, the terms "module" or "unit" refer to a computer program or part of a computer program that has a predetermined function and works with other related parts to achieve a predetermined goal, and can be implemented wholly or partially using software, hardware (such as processing circuitry or memory), or a combination thereof. Similarly, a processor (or multiple processors or memory) can be used to implement one or more modules or units. Furthermore, each module or unit can be part of an overall module or unit that includes the functionality of that module or unit.

[0167] The above embodiments are only used to illustrate the technical solutions of this application, and are not intended to limit them. Although this application has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that modifications can still be made to the technical solutions described in the foregoing embodiments, or equivalent substitutions can be made to some of the technical features. Such modifications or substitutions do not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the embodiments of this application.

Claims

1. A data access method, characterized in that, include: Receive a set of data access requests; The data access request set is sent to a third-party system to request the third-party system to perform authentication processing on the data access request set, and to obtain a first access request result set corresponding to the first access request set in the data access request set within a first time window, and a second access request result set corresponding to the second access request set in the data access request set within a second time window, wherein the first time window and the second time window are consecutive time windows; If the number of failed requests to the third-party system in the first access request result set is greater than a preset number, and the number of failed requests to the third-party system in the second access request result set is greater than the preset number, the data access request set is downgraded to obtain a downgraded data access request set. The degraded data access request set is sent to the upstream system so that the upstream system can process the degraded data access request set and obtain the access dataset corresponding to the degraded data access request set, wherein one degraded data access request corresponds to one access dataset.

2. The method according to claim 1, characterized in that, Following the set of received data access requests, the following is also included: The data access request set is parsed to obtain the access address set corresponding to the data access request set, where one data access request corresponds to one access address. Based on the set of access addresses corresponding to the set of data access requests, determine the set of sending destinations corresponding to the set of data access requests, wherein one data access request corresponds to one sending destination, and the sending destination is used to indicate the receiving end of the data access request.

3. The method according to claim 2, characterized in that, The third-party system includes a first system service. Sending the data access request set to the third-party system to request authentication processing of the data access request set, and obtaining a first access request result set corresponding to the first access request set within a first time window, and a second access request result set corresponding to the second access request set within the data access request set within a second time window, includes: According to the destination set corresponding to the data access request set, the data access request set is sent to the first system service in the third-party system; Within the first time window, the first system service is requested to authenticate the first access request set in the data access request set, and the first access request result set corresponding to the first access request set in the data access request set within the first time window is obtained. Within the second time window, the first system service is requested to authenticate the second access request set in the data access request set, and obtain the second access request result set corresponding to the second access request set in the data access request set within the second time window.

4. The method according to claim 3, characterized in that, Before performing degradation processing on the data access request set to obtain the degraded data access request set, the method further includes: Obtain the backup system service corresponding to the first system service, wherein the execution operation of the backup system service is the same as the execution operation of the first system service; The step of downgrading the data access request set to obtain a downgraded data access request set includes: The data access request set is forwarded to the backup system service to request the backup system service to authenticate the data access request set and obtain the authenticated data access request set. The authenticated data access request set is used as the downgraded data access request set.

5. The method according to claim 2, characterized in that, The third-party system includes a first system service and a second system service, wherein the second system service is a downstream service of the first system service; the step of sending the data access request set to the third-party system to request the third-party system to perform authentication processing on the data access request set, and obtaining a first access request result set corresponding to the first access request set in the data access request set within a first time window, and a second access request result set corresponding to the second access request set in the data access request set within a second time window, includes: According to the destination set corresponding to the data access request set, the data access request set is sent to the first system service and the second system service in the third-party system; Within a first time window, the system requests the first system service to authenticate the first access request set in the data access request set, and obtains the authenticated first access request set. Within the first time window, the system requests the second system service to authenticate the authenticated first access request set, and obtains the first access request result set corresponding to the first access request set. Within a second time window, the system requests the first system service to authenticate the second access request set in the data access request set, thereby obtaining the authenticated second access request set. Within the second time window, the system also requests the second system service to authenticate the authenticated second access request set, thereby obtaining the second access request result set corresponding to the second access request set.

6. The method according to claim 5, characterized in that, The step of downgrading the data access request set to obtain a downgraded data access request set includes: The first and second access request sets after authentication are allowed to proceed, resulting in the first and second access request sets after being allowed to proceed. The first set of access requests that has been granted and the second set of access requests that have been granted are used as the data access request set after the downgrade.

7. The method according to claim 4, characterized in that, After sending the degraded data access request set to the upstream system for access processing by the upstream system to obtain the access dataset corresponding to the degraded data access request set, the method further includes: Obtain the third system service to be configured in the third-party system, and obtain the target data access request within a preset time period, wherein the preset time period includes the time period during which the degradation processing operation is not stopped; Configure the third system service to be configured to obtain the third system service, wherein the third system service and the first system service are in the same system service group; The target data access request is parsed and processed to determine that the destination of the target data access request is a third-party system service in the third-party system. According to the degradation processing operation for the set of data access requests, the target data access request is downgraded to obtain the downgraded target data access request.

8. The method according to claim 4, characterized in that, After sending the degraded data access request set to the upstream system for access processing by the upstream system to obtain the access dataset corresponding to the degraded data access request set, the method further includes: If the access dataset corresponding to the downgraded data access request set is an empty set, it indicates that the authentication processing operation of the backup system service is abnormal and generates an access compensation page, wherein the access compensation page is used to prompt the object corresponding to the data access request to wait for the service response.

9. A data access device, characterized in that, include: The access request receiving unit is used to receive sets of data access requests; The authentication processing unit is used to send the data access request set to a third-party system to request the third-party system to perform authentication processing on the data access request set, and to obtain a first access request result set corresponding to the first access request set in the data access request set within a first time window, and a second access request result set corresponding to the second access request set in the data access request set within a second time window, wherein the first time window and the second time window are consecutive time windows. The request downgrade processing unit is used to downgrade the data access request set if the number of failed requests to the third-party system in the first access request result set is greater than a preset number, and the number of failed requests to the third-party system in the second access request result set is greater than the preset number, to obtain a downgraded data access request set. The request access processing unit is used to send the degraded data access request set to the upstream system so that the upstream system can perform access processing on the degraded data access request set to obtain the access dataset corresponding to the degraded data access request set, wherein one degraded data access request corresponds to one access dataset.

10. A computer device, characterized in that, The device includes a processor and a memory: The memory is used to store computer programs and to transfer the computer programs to the processor; The processor is configured to execute the steps of the data access method according to any one of claims 1 to 8, based on instructions in the computer program.

11. A computer-readable storage medium, characterized in that, The computer-readable storage medium is used to store a computer program that, when executed by a computer device, implements the steps of the data access method according to any one of claims 1 to 8.

12. A computer program product, characterized in that, Includes a computer program that, when executed by a computer device, implements the steps of the data access method according to any one of claims 1 to 8.

Images