CN1494022A - A Method of Accessing Database Through Protocol Proxy - Google Patents

Abstract

The invention provides a method for accessing a database through a protocol proxy mode. In the method, a client computer communicates with a database system through a protocol proxy module, and the protocol proxy module is responsible for managing the communication connection with the database system. Queue control and timeout control are performed on the request of the database, and it is responsible for the conversion of the protocol format between the client computer and the database system. Because the client computer's access to the database is managed by the protocol proxy mode, the security performance of the database system is improved, and malicious attacks by illegal users are effectively prevented. In addition, in the software implementation of the protocol proxy module, the configuration file is used to describe the communication protocol between the protocol proxy module and the database system and the protocol format conversion method between the client computer and the database system in a specific format, so it only needs to be modified The configuration file can modify the business, which facilitates the system upgrade and business expansion.

Description

A Method of Accessing Database Through Protocol Proxy

technical field

The invention relates to a computer database system, in particular to a method for accessing a database through a protocol agent.

Background technique

Enterprises in service industries such as telecommunications and finance generally set up customer service systems to handle daily customer business. Among them, the customer service center interacting with customers is connected to the system database as a client device to access data in the database according to business requirements. For industries and departments with high security requirements such as banking and finance, on the one hand, it is necessary to ensure that the system database storing data is absolutely safe and reliable, to ensure that it is not illegally attacked from the outside; on the other hand, it is necessary to provide access to the client Database permissions.

Under the existing system, the client computer generally accesses the database by calling a stored procedure. In this way, the system needs to provide the visitor with the data table structure of the entire database and open the read and write permissions of the database, and the client computer directly performs read and write operations on the database through stored procedures. Obviously, since the database is directly operated in this way, malicious users can easily obtain confidential data from the database or tamper with the stored data in the database very easily through the client computer, so there is a greater security risk. In addition, when accessing the database in the form of stored procedures, the access process is closely related to the database format, and the code of the client implementation program or module will be greatly changed with the change of the data format, which makes business expansion and modification very inconvenient.

Contents of the invention

The purpose of the present invention is to provide a method for accessing a database through a protocol agent, which can provide business services to the client under the premise of ensuring the security of the database.

In the method for accessing the database system by the client computer according to the present invention, the client computer communicates with the database system through the protocol agent module, and when the application process in the client computer accesses the database, the following steps are included:

(1) The application process of the client computer transmits a request message for accessing the database to the protocol proxy module;

(2) The protocol proxy module converts the request message into a protocol format that can be handled by the accessed database, and controls the sending of the request message to the database system after format conversion;

(3) The database system operates the database according to the request message sent by the protocol agent module, and if the operation result needs to be sent back to the application process of the client computer, then a response message containing the operation result is sent to the protocol agent module; and

(4) The protocol proxy module converts the response message into a protocol format that can be processed by the application process in the client computer and transmits it to the client computer.

In the above method, it is better that the connection between the protocol agent module and the database system is established and communicated according to the TCP protocol. Even better, the database system can perform IP verification and login password verification on the protocol proxy module to ensure the security of the database system, and can control the authority of the protocol proxy module to operate the database system.

In the above method, preferably, in step (2), the control of the protocol agent module on sending the format-converted message to the database system includes message sending queue control and message sending timeout control.

In the above method, preferably, the protocol proxy module includes a protocol proxy execution unit and a protocol format conversion unit, wherein the protocol proxy execution unit is responsible for establishing a communication connection with the database system, receiving operation results from the database and sending access messages to the database , and perform queue control and timeout control on the sending of the access database message to the database system, and the protocol format conversion unit is responsible for the conversion of the protocol format between the client computer and the database system.

In the above implementation, it is better that all the settings that can be configured or modified are written into the configuration file in a preset format, and the protocol proxy execution unit determines the communication between the protocol proxy module and the database system by reading the configuration file The protocol and the protocol format conversion method between the client computer and the database call the protocol format conversion unit to complete the protocol format conversion.

As can be seen from the above, in the present invention, the protocol proxy mode is adopted to manage the client computer's access to the database, which prevents the client computer from directly operating the database, and the communication between the protocol proxy module and the database system can adopt a higher security method. Therefore, it improves the security performance of the database system and effectively prevents malicious attacks by illegal users. In addition, since the function of the protocol proxy module is realized by software, and the communication protocol between the protocol proxy module and the database system and the protocol format conversion method between the client computer and the database are described in a specific format by using a special configuration file, so The service can be modified only by modifying the configuration file, which facilitates system upgrade and service expansion.

Description of drawings

FIG. 1 is a flowchart of a method for accessing a database according to the present invention.

Fig. 2 is a schematic diagram of a protocol proxy interface module in a typical application environment according to a preferred embodiment of the present invention.

Detailed ways

A flowchart of the method for accessing a database according to the invention is described below with reference to FIG. 1 . As shown in Figure 1, when the application process of the client computer accesses the database, it first transmits a request message requesting access to the database to the protocol agent module, and the request message includes the operation type and operation parameters for the database. Subsequently, the protocol proxy module converts the received message into a protocol format that can be processed by the accessed database, and controls the way the message is sent to the database system after format conversion. The following embodiments can be used for protocol format conversion and request message sending in the specific way. Next, the database system operates the database according to the format-converted message, and if the operation result needs to be sent back to the application process of the client computer, the database system sends a response message containing the operation result to the protocol agent module. Finally, the protocol proxy module converts the received response message into a protocol format that can be processed by the application process in the client computer and transmits it to the application process of the client computer. It is worth pointing out that the protocol proxy module of the present invention should be understood as a functional entity, which can be realized in software, hardware and a combination thereof, and its physical location can be located in the client computer, or in the database system, or in the database system. Exists independently of client computers and database systems. However, all the above-mentioned changes in the implementation manner will not have a substantial impact on the effect of the present invention.

Fig. 2 is a schematic diagram of a protocol proxy interface module in a typical application environment according to a preferred embodiment of the present invention. In Fig. 2, the bureau side system front-end machine and the bureau side system database constitute the tent system, and the front-end machine is used to handle various operations to the database; SMS billing server, automatic voice response (IVR) service server, application server, The call service server, fax server and voice server constitute the customer service system, and various application services are completed by these servers. In the above-mentioned networking structure, the tent system can be regarded as a database system that provides data access, and various servers in the above-mentioned customer service system need to access the data stored in the bureau’s system database when providing services, so they can be regarded as customer service systems. terminal computer. Under the prior art, these client computers directly access the camp account system, thus bringing a larger security risk to the bureau system database, and in the present invention, as shown in Figure 2, all these client computers are connected with the following The protocol proxy module to be described in detail is connected, and the database system must be accessed through the protocol proxy module. As mentioned above, the protocol proxy module should be understood as a functional entity, so although the protocol proxy module in Figure 2 is independent of the customer service system and the camp system, it does not mean that the module must be independent in physical location, on the contrary , which can be located in the front-end computer of the bureau system or in various servers of the customer service system.

The functions completed by the above-mentioned protocol proxy module mainly include:

(1) Protocol format conversion function

Various server applications in the customer service system need to access the accounting system to read and write the bureau system database, but because the software and hardware environment of the customer service system is often quite different from that of the accounting system, the way the two systems access the database is Not uniform, for example, the message command words for operating the database are different, and the data format is also different. Therefore, when various servers transmit messages requesting access to the database to the protocol agent module, the protocol agent module will use the information contained in the message. The database operation commands and parameters are converted into operation commands and parameters that the camp system can recognize, and the operation results of the camp system accessing the database are converted into formats that can be processed by various server applications.

(2) Communication management function

The protocol agent module is responsible for establishing a communication connection with the database system, sending the server's access request to the database after protocol format conversion to the database system, and receiving the database access result from the database system. In a preferred embodiment of the present invention, considering security, the protocol proxy module communicates with the front-end computer of the office system in the tent system using the TCP protocol. When the communication is established, the protocol proxy module can be set according to a predetermined method. Set the connection mode, IP address, connection port number and listening port number of both parties. In addition, in order to further improve the security of the system, the database system can verify the IP and login password of the protocol proxy module and control the authority of the protocol proxy module to operate the database system.

(3) Message control sending function

The protocol proxy module controls the request access messages sent to the database system to meet various needs, for example, it can perform queue control and timeout control on the request access messages to be sent. Specifically, in this embodiment, when the central office system front-end processor of the tent system is busy (that is, cannot process new access requests), the protocol agent module starts queue control processing, and performs queue processing on request access messages to Avoid message loss; when a message or request has been waiting in the queue for too long to get a response, the protocol proxy module can start timeout control to process and discard such messages.

The functions of the above-mentioned protocol agent module can be realized by software or hardware, but in a preferred embodiment of the present invention, it is preferably realized by software, which will be further described below.

The interface program for realizing the above-mentioned functions of the protocol proxy module includes a protocol proxy execution unit and a protocol format conversion unit. The sending of database messages to the database system is subject to queue control and timeout control, and the protocol format conversion unit is responsible for the conversion of the protocol format between the client computer and the database system. The reason why the interface program for implementing the protocol agent is divided into two relatively independent parts is to consider that the modification of the program should be minimized when the customer service system is connected with different offices. Specifically, since the customer service system and the bureau system are generally only different in the protocol format, the communication management process between the two parties is the same or similar, so the protocol agent execution unit mainly responsible for the communication management function can be used as a general program. The protocol format conversion unit is provided to different office systems.

As shown in FIG. 2 , in this embodiment, the protocol proxy execution unit is the executable program DtProxy.exe and the protocol format conversion unit is the dynamic link library DtProxyDll.dll that can be called by DtProxy.exe.

In order to flexibly configure the communication protocol between the DtProxy.exe program and the front-end processor of the local system, in this embodiment, all configurable or modifiable settings are written in a configuration file DtProxy.ini in a preset format , the DtProxy.exe program formulates a communication protocol with the front-end processor by reading the configuration file. The content of the configuration file includes: 1) the setting of the connection mode, the configuration of the connection port and the listening port, etc.; 2) the timeout period of each message transmitted and the configuration of the connection used; 3) the process of communicating with other internal programs ID settings and data source configuration, etc.

Through the configuration of the configuration file DtProxy.ini, the protocol proxy module can send a message requesting access to the database to the front-end computer of the office system in the tent system through the following connection methods:

1. Long connection, asynchronous (non-blocking) mode

In this way, when the DtProxy.exe program receives a request message from the customer service system to access the tent system, if the front-end processor can handle it after the protocol format conversion, it will send it immediately; otherwise, it will perform queue control, that is, the report will be The text is put into a request queue and sent when the front-end processor can process it. Due to the different processing speeds of various messages, the order of the response messages returned by the camping system may be different from the order of the request messages.

2. Long connection, synchronous (blocking) mode

In this way, after the DtProxy.exe program sends a request message from the customer service system to the front-end processor of the office system, it must wait for the response message to be received or the response message is not received at the end of the preset time. The next request message can only be sent when the message time (that is, timeout) is reached. If there are too many request packets, the request packets that have been waiting for a long time can be discarded in this way.

3. Short connection, synchronous (blocking) mode

In this way, before sending the request message, the DtProxy.exe program first establishes a socket (Socket) connection with the front-end processor of the office system, and then sends the message, and only when the response message is received or in advance The connection is disconnected when no response message is received at the end of the set time.

Similarly, in order to flexibly configure protocol format conversion, in this embodiment, all configurable or modifiable settings are written in a configuration file DtProxyDll. Before format conversion, the protocol format conversion method is determined by reading the configuration file. The configuration content includes the corresponding relationship between the message command word and the converted data when the protocol format is converted, and the specific setting is related to the specific protocol.

In addition, since various interface protocols are implemented in different ways, configuration files may need to be added according to actual conditions.

Claims (9)

1. A method for a client computer to access a database system, characterized in that, between the client computer and the database system, through the protocol agent module communication, when the application process in the client computer accesses the database, the following steps are included: (1) The application process of the client computer transmits a request message for accessing the database to the protocol proxy module; (2) The protocol proxy module converts the request message into a protocol format that can be handled by the accessed database, and controls the sending of the request message to the database system after format conversion; (3) The database system operates the database according to the request message sent by the protocol agent module, and if the operation result needs to be sent back to the application process of the client computer, then a response message containing the operation result is sent to the protocol agent module; and (4) The protocol proxy module converts the response message into a protocol format that can be processed by the application process in the client computer and transmits it to the client computer. 2. The method according to claim 1, wherein the request message for accessing the database includes an operation type and operation parameters for the database. 3. The method according to claim 2, wherein the protocol proxy module comprises a protocol proxy execution unit and a protocol format conversion unit, wherein the protocol proxy execution unit is responsible for establishing a communication connection with the database system, receiving the operation result from the database and sending the data to the database system. The database sends access messages, and performs queue control and timeout control on sending the access messages to the database system, and the protocol format conversion unit is responsible for the conversion of the protocol format between the client computer and the database system. 4. The method according to claim 3, characterized in that all configurable or modifiable settings are written in the configuration file in a preset format, and the protocol proxy execution unit determines the agreement between the protocol proxy module and the database system by reading the configuration file The communication protocol between the client computer and the protocol format conversion method between the client computer and the database, and the protocol format conversion unit is called to complete the protocol format conversion. 5. The method according to any one of claims 1-4, characterized in that, the connection between the protocol agent module and the database system is established and communicated according to the TCP protocol. 6. The method according to claim 5, wherein the database system performs IP verification and login password verification on the protocol proxy module, and controls the operation authority of the protocol proxy module to the database system. 7. the method for claim 6 is characterized in that, in step (2), protocol agent module is when receiving the request message of client computer access database system, it is done protocol format conversion and in database system When it can be processed, it will be sent immediately, otherwise, it will be processed by queue control. 8. The method according to claim 6, wherein, in step (2), the protocol agent module must wait to receive a request message from the database system after sending a request message transmitted by the guest computer to the database system. The next request message can only be sent after the response message or when no response message is received at the end of the preset time. 9. The method according to claim 6, wherein, in step (2), before sending the request message, the protocol agent module first establishes a socket (Socket) connection with the database system, and then sends the request message , and disconnect the socket connection only when a response message is received or a response message is not received at the end of the preset time.

Images