CN107196954A - A kind of service access method, apparatus and system - Google Patents

Abstract

The invention discloses a service access method, device and system. The method includes: a consumer application server sends a request to a configuration center to subscribe to a service on a provider application server; the consumer application server receives the authentication certificate sent by the configuration center As a result, the authentication result is generated after the provider application server authenticates the request, and is used to indicate whether the consumer application server has the right to access the service; the consumer application server according to the When it is determined that the authentication result has the right to access the service, the service on the application server of the provider is accessed. This method can realize the problem of service communication between heterogeneous systems.

Description

A service access method, device and system

technical field

The present invention relates to the communication field, in particular to a service access method, device and system.

Background technique

With the continuous development of enterprises, there are more and more internal systems in enterprises, and the interaction between systems is becoming more and more frequent. Different systems not only provide services internally, but also provide services externally. Different systems provide external services by defining interaction formats and communication rules. Services lead to more and more ways of interacting between different systems, and the interface description documents are also diversified and difficult to understand. Some of the common basic modules, such as: interface format definition, communication methods, and log records cannot be uniformly defined and standardized .

In order to solve the problem of interaction between systems, the present invention provides a service access system, which can realize the problem of communication between heterogeneous systems.

Contents of the invention

Embodiments of the present invention provide a service access method, device and system to realize the communication problem between heterogeneous systems.

The method of the present invention includes a service access method, the method comprising:

The consumer application server sends a request to subscribe to the service on the provider application server to the configuration center;

The consumer application server receives the authentication result sent by the configuration center, the authentication result is generated after the provider application server authenticates the request, and is used to indicate whether the consumer application server has access to the When the consumer application server determines that it has the permission to access the service according to the authentication result, it accesses the service on the provider application server.

Based on the same inventive concept, an embodiment of the present invention provides a server, including:

A sending unit, configured to send a request for subscribing to the service on the application server of the provider to the configuration center;

The receiving unit is configured to receive the authentication result sent by the configuration center, the authentication result is generated after the provider application server authenticates the request, and is used to indicate whether the consumer application server has access to the service permissions;

An access unit, configured to access the service on the application server of the provider when it is determined to have the right to access the service according to the authentication result.

In addition, an embodiment of the present invention also provides a service access system, which includes: a consumer application server, a configuration center, and a provider application server;

The consumer application server is configured to send a request for subscribing to the service on the provider application server to the configuration center;

The configuration center is configured to send the request to the provider application server;

The provider application server is configured to authenticate the consumer application server according to the request, and send the generated authentication result to the configuration center, where the authentication result is used to indicate whether the consumer application server have permission to access the Services;

The configuration center is further configured to send the authentication result to the consumer application server;

The consumer application server is further configured to access the service on the provider application server when it is determined to have access to the service according to the authentication result.

In the embodiment of the present invention, through the configuration center, the configuration center, as a service platform, defines the data interaction mode between various components by standardizing the interface format. Specifically, the service provider application server pre-registers its own machine information and the services it provides to the configuration center, and then the consumer application server needs to First complete the authentication on the configuration center, that is, send a request to the configuration center to subscribe to the service on the provider's application server, and the configuration center sends the authentication result to it. Only when the consumer's application server passes the authentication can it access the provider's application server. In this way, the service on the consumer application server and the service on the provider application server can interact through the configuration center, so as to realize the communication problem between heterogeneous systems.

Description of drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the drawings that need to be used in the description of the embodiments will be briefly introduced below. Obviously, the drawings in the following description are only some embodiments of the present invention. For Those of ordinary skill in the art can also obtain other drawings based on these drawings without making creative efforts.

FIG. 1 is a schematic diagram of an access system architecture provided by an embodiment of the present invention;

FIG. 2 is a schematic diagram of heterogeneous system access interaction provided by an embodiment of the present invention;

FIG. 3 is a first schematic flow diagram of a service access method provided by an embodiment of the present invention;

FIG. 4 is a schematic diagram of a streaming data packet protocol provided by an embodiment of the present invention;

FIG. 5 is a schematic diagram of the principle of port multiplexing provided by an embodiment of the present invention;

FIG. 6 is a second schematic flow diagram of a service access method provided by an embodiment of the present invention;

FIG. 7 is a third schematic flow diagram of a service access method provided by an embodiment of the present invention;

Fig. 8 is a schematic diagram of an access device provided by an embodiment of the present invention.

detailed description

In order to make the object, technical solution and advantages of the present invention clearer, the present invention will be further described in detail below in conjunction with the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, rather than all embodiments . Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without making creative efforts belong to the protection scope of the present invention.

An embodiment of the present invention provides a service access system, the system includes: a consumer application server, a configuration center, and a provider application server; wherein:

The consumer application server sends a request to subscribe to the service on the provider application server to the configuration center;

The configuration center sends the request to the provider application server;

The provider application server authenticates the consumer application server according to the request, and sends the generated authentication result to the configuration center, where the authentication result is used to indicate whether the consumer application server has access permissions for the Services;

The configuration center sends the authentication result to the consumer application server;

When the consumer application server passes the authentication, it accesses the service on the provider application server.

Specifically, as shown in Figure 1, in the system shown in Figure 1, the consumer application server is the server where the Consumer-App is located, the provider application server is the server where the Provider-App is located, the configuration center, and the DNA console ( Design and Architect platform, service platform). Among them, the function description of each component of the system is as follows:

1. DNA console: mainly responsible for service release, subscription, review and provider management, and regularly obtains reported data information from the big data platform, and forms reports after statistics and summary. The development tool of the DNA console is DNA-SDK, which currently supports java and C++. Developers can quickly publish services or call services of other components through the API interface provided by the SDK.

2. Configuration Center: It is mainly responsible for collecting the address information reported by the provider, and pushing the user configuration in the DNA console to the designated machine. Currently, it supports sdn or http to push the configuration.

3. Big data platform: mainly responsible for the collection of log data and alarm data, providing a basis for later log analysis and data statistics.

The interaction process of each component of the above system is shown in Figure 2, and the specific steps are as follows:

Step a. Register service information: The service provided by the provider's application server needs to be registered by the configuration center. The main registration information includes the application name, service name, version number, and upload the interface format of the service definition.

Step b. Apply for a subscription service: the consumer application server logs in to the configuration center, selects the service registered by the provider application server from the configuration center, and then the user of the consumer application server fills in a subscription application form for a service, and the consumer application server Generates a request to subscribe to a service on a provider application server.

Step c. Reviewing the consumer's subscription: the provider's application server has the right to decide whether to pass the service subscription request of the consumer's application server, and limit the IP address accessed by the consumer.

Step d. Publish provider information: the provider application server publishes its own service address to the configuration center, and the configuration center monitors the status of the provider application in real time through the heartbeat information. The provider application server for .

Step e, pulling configuration information: the configuration center integrates the authorization information of the service subscribed by the consumer application server and the address information of the provider application server to generate configuration information and save it locally.

Step f. Invoking services: the consumer application server can directly access the services provided by the provider application server through the tools provided by the service platform according to the configuration information from step e.

In order to describe the processing process of each component in the system in FIG. 1 and FIG. 2 in more detail, the embodiment of the present invention is described from the side of the consumer application server, the side of the provider application server, and the side of the configuration center.

As shown in Figure 3, the embodiment of the present invention provides a schematic flow diagram of a service access method, and the specific implementation method includes:

S101. The consumer application server sends a request for subscribing to the service on the provider application server to the configuration center.

S102. The consumer application server receives the authentication result sent by the configuration center, the authentication result is generated after the provider application server authenticates the request, and is used to indicate whether the consumer application server has The authority to access the service; when the consumer application server determines that it has the authority to access the service according to the authentication result, access the service on the provider application server.

In the above steps, the consumer application server is the consumer application server, and the provider application server is the provider application server. In other words, to access the service of the provider application server, the consumer application server must first complete the subscription, that is, subscribe to the service on the provider application server through the configuration center, and the provider application server will authenticate the subscription request according to the authorization information. Only after passing the authentication can the destination address of the provider's application server be obtained from the configuration center, and an access request can be sent to the provider's application server to obtain services.

Further, if the destination address of the provider application server changes, the consumer application server can obtain a configuration file from the configuration center, and the configuration file includes the first address after the change of the destination address of the provider application server. A destination address, and access the service on the provider application server according to the first destination address.

Specifically, assuming that the provider's application service is a SaaS (Software-as-a-service, software as a service) application server, the process of synchronously updating the destination address of the SaaS application server is as follows:

In step a, the user corresponding to the SaaS application server registers the machine address information of the consumer and the provider in the configuration management center through the console.

Step b. After the SaaS application server is started, report the IP address of the own machine to the configuration center by calling the SDK (Software Development Kit, software development kit) plug-in.

Step c. When the configuration center finds that the address of the SaaS application server has changed, it will regenerate the consumer's configuration information in time, and actively push the configuration data to the consumer's application server by looking up the list of associated machines that have been configured.

Step d, the consumer application server directly monitors the configuration file of the local machine, immediately loads a new configuration file when the configuration file is found to be changed, and uses the destination address of the new configuration file to access the SaaS server.

It should be noted that the consumer application server may successively use the previously memorized destination address to access the SaaS application server. If the access fails, it will further obtain the latest destination address information of the provider application server from the configuration file. The purpose of this is It prevents the consumer application server from repeatedly reading the configuration file and improves access efficiency.

In addition, if the authentication fails, the configuration center may send an authentication result of authentication failure to the consumer application server, and if the authentication passes, the configuration center may send an authentication result of successful authentication to the consumer application server.

Further, the consumer application server generates logs about accessing the provider application server, and sends the logs to the big data platform.

Furthermore, the embodiment of the present invention further provides a port multiplexing logic, wherein the consumer application server sends a service access request message to the provider application server through a unified port on the provider application server, wherein, The header in the service access request message includes a protocol identifier, and the protocol identifier is used to instruct the provider's application server to use a preset resolution strategy to analyze the data packet. If the protocol identifier includes encryption mark, it indicates that the preset resolution strategy is the encrypted stream protocol; if the protocol mark includes the hypertext transfer protocol http header mark, then it indicates that the preset resolution policy is the http management protocol; if the data packet has no head mark , indicating that the default parsing strategy is the common streaming protocol. That is to say, the stream communication protocol is customized on the upper layer of TCP, which supports simultaneous communication of multiple data packets in different formats, and can integrate RPC data packet communication, data stream communication, http console access, and SSL encrypted communication. Different communication types provide separate ports, so that consumers do not need to re-select the provider's access port when choosing different protocols of the provider, which is convenient for the client to switch between different protocols. That is to say, data packets of different formats have corresponding data packet headers to distinguish them.

Therefore, when the consumer application server sends a streaming data packet to the provider application server, because the streaming data packet includes a stream data identifier, the provider application server can use a preset streaming protocol for processing. The streaming data packet is parsed until the data of the service to be provided generated when the stream data end identifier in the streaming data packet is read.

Wherein, when defining the streaming data packet, a special header byte 0A8 is used to indicate the beginning of the data packet. As shown in Figure 4, if the sender's data is encrypted by SSL, a few bytes of SSL-specific headers will be generated, which are different from the specific 0A8 headers, so the receiver can distinguish whether to encrypt the data based on the headers. Decryption is performed to achieve the effect of port multiplexing.

Further, the embodiment of the present invention further provides the flowchart shown in FIG. 5 to illustrate the principle of port multiplexing, specifically as follows:

S201, the consumer application server sends an access request message to the provider application server.

S202, the provider application server monitors the request, and judges the data packet type according to the received header bytes of the request and the data content.

In step 203, the application server of the provider judges that if the request contains an encrypted header, it will go through the stream encryption protocol to decrypt until the end identifier of the stream is read.

In step 204, the provider application server determines if the request is an RPC (Remote Procedure Call Protocol, remote procedure call protocol), and then directly sends the requested service to the consumer application server.

Step 205, if there is no encryption, the provider application server uses the common stream protocol to decrypt, and after decryption, the second application server sends the requested service to the consumer application server.

Step 206, if the packet header is an http header, then go through the http console management protocol of the sdk.

For the consumer application server, you can choose whether the data is encrypted and then connect to the server according to your needs. There is no need to additionally require the SaaS application server to provide SSL monitoring services. The entire encryption process is for both the server and the client. is transparent.

Based on the same technical concept, the embodiment of the present invention provides a schematic flow diagram of a service access method from the provider application server side, as shown in Figure 6, and the specific implementation method includes:

S301. The provider application server receives a request sent by the configuration center to subscribe to a service on the provider application server, where the request is a request received by the configuration center and sent by a consumer application server;

S302. The provider application server authenticates the request, and sends an authentication result to the configuration center, where the authentication result is used to indicate whether the consumer application server has permission to access the service;

S303. The provider application server receives the service access request sent by the consumer application server, and sends the service to the consumer application server. The service access request is determined by the consumer application server The result is sent when the authentication is successful.

Further, the provider application server sends a configuration file to the configuration center, and the configuration file includes the first destination address after the destination address of the provider application server is changed;

The provider application server receives the service access request sent by the consumer application server according to the first destination address.

Further, the provider application server uses a preset parsing strategy to parse the packet corresponding to the service access request, wherein the header in the packet includes a protocol identifier, and the protocol identifier is used to indicate the The application server of the provider uses a preset analysis strategy to analyze the data packet, and if the protocol identifier includes an encryption identifier, it indicates that the preset resolution strategy is an encrypted stream protocol; if the protocol identifier includes a hypertext transmission If the protocol http header identifier indicates that the default resolution strategy is the http management protocol; if the data packet has no header identifier, it indicates that the preset resolution strategy is the common stream protocol.

Since the actions performed by the configuration center correspond to the above methods, the specific interaction process will not be repeated here.

Based on the same technical concept, the embodiment of the present invention provides a schematic flow diagram of a service access method from the configuration center side, as shown in Figure 7, and the specific implementation method includes:

S401. The configuration center receives a request from the application server of the consumer to subscribe to the service on the application server of the provider;

S402. The configuration center sends an authentication result to the consumer application server, the authentication result is generated after the provider application server authenticates the request, and is used to indicate whether the consumer application server has access Permissions for said service.

Further, the configuration center receives the configuration file sent by the provider application server, and the configuration file includes the first destination address after the destination address of the provider application server is changed;

The configuration center receives the configuration file acquisition request sent by the consumer application server, and sends the configuration file to the consumer application server, so that the consumer application server A destination address accesses the provider application server.

In addition, when the configuration center determines that the heartbeat message sent by the provider application server has not been received within a set time period, it determines that the provider application server has failed, and stops communicating with the provider application server. This helps identify failed provider application servers.

Based on the same technical concept, the embodiment of the present invention also provides a server, which can execute the method embodiment executed by the consumer application server side. The server provided by the embodiment of the present invention is shown in FIG. 8, and includes: a sending unit 401, a receiving unit 402, and an accessing unit 403, wherein:

A sending unit 401, configured to send a request for subscribing to a service on the application server of the provider to the configuration center;

The receiving unit 402 is configured to receive the authentication result sent by the configuration center, the authentication result is generated after the provider application server authenticates the request, and is used to indicate whether the consumer application server has access to the requested access to the services described above;

The accessing unit 403 is configured to access the service on the application server of the provider when it is determined according to the authentication result that the service has the right to access the service.

Further, the provider application server further includes: a registration unit 404, configured to register the service on the provider application server with the configuration center, the registration information includes the service address information of the provider application server, and regularly reports to The configuration center sends the message.

Further, the consumer application server further includes: an obtaining unit 405, configured to obtain a configuration file from the configuration center, and the configuration file includes the first service address of the provider application server changed. Destination address;

The access unit 403 is specifically configured to: access the service on the application server of the provider according to the first destination address.

Further, the access unit 403 is specifically configured to: send a service access request message to the provider application server through a unified port on the provider application server, wherein the header in the service access request message Including a protocol identifier, the protocol identifier is used to instruct the provider application server to use a preset resolution strategy to analyze the data packet, if the protocol identifier includes an encryption identifier, it indicates that the preset resolution strategy is encryption stream protocol; if the protocol identifier includes a hypertext transfer protocol http header identifier, it indicates that the preset resolution strategy is the http management protocol; if the data packet has no header identifier, it indicates that the preset resolution strategy is an ordinary flow protocol.

Further, the server further includes a generation unit 406, configured to generate a log about accessing the application server of the provider, and send the log to the data management server.

Further, the configuration center further includes a deletion unit 407, configured to determine whether to delete the provider application server according to the message information sent periodically.

To sum up, in the embodiment of the present invention, a new configuration center is added, and as a service platform, the configuration center defines the data interaction mode between various components by standardizing the interface format. Specifically, the provider server of the service registers its own machine information and the services provided by the configuration center in advance, and then the consumer application server, that is, the consumer application server, accesses the service on the provider server (ie, the provider application server) , you need to complete the authentication on the configuration center first, that is, send a request to the configuration center to subscribe to the service on the provider's application server, and the configuration center will send it the authentication result. When the consumer's application server passes the authentication, it will access the In this way, both the consumer application server and the provider server can use the configuration center to interact with each other, so as to realize the problem of service communication between heterogeneous systems.

The present invention is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the invention. It should be understood that each procedure and/or block in the flowchart and/or block diagram, and a combination of procedures and/or blocks in the flowchart and/or block diagram can be realized by computer program instructions. These computer program instructions may be provided to a general purpose computer, special purpose computer, embedded processor, or processor of other programmable data processing equipment to produce a machine such that the instructions executed by the processor of the computer or other programmable data processing equipment produce a An apparatus for realizing the functions specified in one or more procedures of the flowchart and/or one or more blocks of the block diagram.

These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing apparatus to operate in a specific manner, such that the instructions stored in the computer-readable memory produce an article of manufacture comprising instruction means, the instructions The device realizes the function specified in one or more procedures of the flowchart and/or one or more blocks of the block diagram.

These computer program instructions can also be loaded onto a computer or other programmable data processing device, causing a series of operational steps to be performed on the computer or other programmable device to produce a computer-implemented process, thereby The instructions provide steps for implementing the functions specified in the flow chart or blocks of the flowchart and/or the block or blocks of the block diagrams.

While preferred embodiments of the invention have been described, additional changes and modifications to these embodiments can be made by those skilled in the art once the basic inventive concept is appreciated. Therefore, it is intended that the appended claims be construed to cover the preferred embodiment as well as all changes and modifications which fall within the scope of the invention.

Obviously, those skilled in the art can make various changes and modifications to the present invention without departing from the spirit and scope of the present invention. Thus, if these modifications and variations of the present invention fall within the scope of the claims of the present invention and their equivalent technologies, the present invention also intends to include these modifications and variations.

Claims (13)

1. A service access method, characterized in that the method comprises: The consumer application server sends a request to subscribe to the service on the provider application server to the configuration center; The consumer application server receives the authentication result sent by the configuration center, the authentication result is generated after the provider application server authenticates the request, and is used to indicate whether the consumer application server has access to the When the consumer application server determines that it has the permission to access the service according to the authentication result, it accesses the service on the provider application server. 2. The method according to claim 1, wherein before the consumer application server accesses the service on the provider application server, further comprising: The service on the application server of the provider registers with the configuration center, the registration information includes the service address information of the application server of the provider, and periodically sends messages to the configuration center. 3. The method according to claim 2, wherein before the consumer application server accesses the service on the provider application server, further comprising: The consumer application server obtains a configuration file from the configuration center, and the configuration file includes the first destination address after the change of the service address of the provider application server; The consumer application server accesses the service on the provider application server, including: The consumer application server accesses the service on the provider application server according to the first destination address. 4. The method according to claim 1 or 2, wherein the access of the consumer application server to the service on the provider application server comprises: The consumer application server sends a service access request message to the provider application server through a unified port on the provider application server, wherein the header in the service access request message includes a protocol identifier, and the The protocol identifier is used to instruct the provider application server to use a preset parsing strategy to parse the data packet, if the protocol identifier includes an encryption identifier, it indicates that the preset parsing strategy is an encrypted stream protocol; if the If the protocol identifier includes the HTTP header identifier, it indicates that the preset resolution strategy is the http management protocol; if the data packet has no header identifier, it indicates that the preset resolution strategy is the common stream protocol. 5. The method according to claim 1 or 2, wherein after the consumer application server accesses the service on the provider application server, further comprising: The consumer application server generates a log about access to the provider application server, and sends the log to a data management server. 6 . The method according to claim 2 , wherein the configuration center determines whether to delete the provider application server according to the periodically sent message information. 7. A service access system, characterized in that the system includes: a consumer application server, a configuration center, and a provider application server; The consumer application server is configured to send a request for subscribing to the service on the provider application server to the configuration center; The configuration center is configured to send the request to the provider application server; The provider application server is configured to authenticate the consumer application server according to the request, and send the generated authentication result to the configuration center, where the authentication result is used to indicate whether the consumer application server have permission to access the Services; The configuration center is further configured to send the authentication result to the consumer application server; The consumer application server is further configured to access the service on the provider application server when it is determined to have access to the service according to the authentication result. 8. A server, characterized in that, comprising: A sending unit, configured to send a request for subscribing to the service on the application server of the provider to the configuration center; The receiving unit is configured to receive the authentication result sent by the configuration center, the authentication result is generated after the provider application server authenticates the request, and is used to indicate whether the consumer application server has access to the service permissions; An access unit, configured to access the service on the application server of the provider when it is determined to have the right to access the service according to the authentication result. 9. The server according to claim 8, further comprising: The registration unit is configured to register the service on the provider application server with the configuration center, the registration information includes the service address information of the provider application server, and periodically send messages to the configuration center. 10. The server according to claim 8, further comprising: An acquisition unit, configured to acquire a configuration file from the configuration center, the configuration file including the first destination address after the change of the service address of the provider application server; The access unit is specifically configured to: access the service on the provider application server according to the first destination address. 11. The server according to claim 8 or 9, wherein the access unit is specifically used for: Send a service access request message to the provider application server through a unified port on the provider application server, wherein the header in the service access request message includes a protocol identifier, and the protocol identifier is used to indicate the The application server of the provider uses a preset analysis strategy to analyze the data packet, and if the protocol identifier includes an encryption identifier, it indicates that the preset resolution strategy is an encrypted stream protocol; if the protocol identifier includes a hypertext transmission If the protocol http header identifier indicates that the default resolution strategy is the http management protocol; if the data packet has no header identifier, it indicates that the preset resolution strategy is the common stream protocol. 12. The server according to claim 8 or 9, further comprising: A generating unit, configured to generate a log about accessing the application server of the provider, and send the log to the data management server. 13. The server according to claim 9, wherein the deleting unit is configured to determine whether to delete the provider application server according to the message information sent periodically.