CN104753774B - A kind of distributed enterprise comprehensive access gate - Google Patents
A kind of distributed enterprise comprehensive access gate Download PDFInfo
- Publication number
- CN104753774B CN104753774B CN201310739420.7A CN201310739420A CN104753774B CN 104753774 B CN104753774 B CN 104753774B CN 201310739420 A CN201310739420 A CN 201310739420A CN 104753774 B CN104753774 B CN 104753774B
- Authority
- CN
- China
- Prior art keywords
- subsystem
- message
- unified
- access gate
- network
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Landscapes
- Mobile Radio Communication Systems (AREA)
Abstract
The invention discloses a kind of distributed enterprise comprehensive access gates, including：It is managed collectively subsystem, carries out operation monitoring for other subsystems to distributed enterprise comprehensive access gate, and uniform registration management is carried out to external application system；The initiator for accessing request application system carries out unified subscription authentication, and the authority distribution of corresponding application system；Unified message scheduler subsystem, for providing unified service message interface to external application system；Network-driven subsystem, for being docked with mobile radio communication and mobile internet.In the present invention, the unified management of the access to outer application system is realized, and support is provided for business on-line rapid estimation.
Description
Technical field
The present invention relates to field of communication technology more particularly to a kind of distributed enterprise comprehensive access gates.
Background technology
With IT（Information Technology, information technology）Technology is merged with the deep of the communication technology, various
Enterprise application system is from traditional PC（Personal Computer, personal computer）, mobile terminal is also extended to gradually.It moves
The middleware Technologies such as dynamic proxy server, play a crucial role wherein.
With Mobile Agent Server（Mobile Agent Server, abbreviation MAS）For the implementation of the middleware of representative
It is as follows：
1, Mobile Agent Server position in a network：Mobile Agent Server is located at Enterprise IT System and mobile radio communication
Between network；
2, downlink business：Multiple application systems submit message, Mobile Agent Server to receive to Mobile Agent Server
After carrying out protocol conversion after message, according to type of message, mobile communications network is forwarded the messages to, to reach user mobile phone；
3, uplink service：After Mobile Agent Server receives the message of mobile communications network, message is subjected to agreement and is turned
It changes, and is forwarded to operation system；
4, Mobile Agent Server accessing mobile communication network, such as when industry gateway, unique service generation can only be used
Code, business code and service code, when user has multiple service code（Or service code）When, it can only be multiple in side administration of enterprise
Mobile Agent Server；
5, Mobile Agent Server, the main protocol translation service that data communication is provided；
6, existing Mobile Agent Server, usually single device cannot be disposed independently between each module, when system occurs
It when performance bottleneck, can only open an account again, redeploy a set of Mobile Agent Server.
7, Mobile Agent Server inserts the form of part using pedestal, and pedestal provides all network communications capabilities and management
Ability, plug-in unit can be operation systems, can also be the interface card of adaptation service system：Such as DB（Data Base, data
Library）Plug-in unit, PushMail（Cell phone mailbox）Plug-in unit etc..Managerial ability includes：The services such as the access of plug-in unit.
In the implementation of the present invention, inventor has found to have at least the following problems in the prior art：
1, in an enterprise, since multiple applications are needed from mobile proxy system access to mobile network, communication
The data such as record and user data, which exist, to be largely coupled, and fails to carry out address list data and user data in existing scheme
It is shared；
2, the operation system based on the exploitation of mobile agent service system, user can not accomplish that single-point is stepped between multiple systems
Record, needs to log on when user is switched to operation system B from operation system A；
3, when there are multiple-limb mechanisms for enterprise, when having different service Number for access, traditional mobile proxy system solution party
Case, which is that deployment, covers system, this brings a degree of waste to resource use；
4, when bottleneck occurs in performance, traditional mobile agent service system can not accomplish business on-line rapid estimation；
5, the pedestal of Mobile Agent Server can not dynamically increase communication capacity.
Invention content
The embodiment of the present invention provides a kind of distributed enterprise comprehensive access gate, is connect for realizing to outer application system
The unified management entered, and provide support for business on-line rapid estimation.
In order to achieve the above object, the embodiment of the present invention provides a kind of distributed enterprise comprehensive access gate, is applied to packet
The system for including the unitary service platform for being deployed in carrier side, the unitary service platform are used for being deployed in described in enterprise side
Distributed enterprise comprehensive access gate carries out telesecurity management and control；The distributed enterprise comprehensive access gate includes：Unified pipe
Manage subsystem, unified message scheduler subsystem, network-driven subsystem；Wherein：
The unified management subsystem is transported for other subsystems to the distributed enterprise comprehensive access gate
Row monitoring, and uniform registration management is carried out to external application system；The initiator for accessing request application system unites
One subscription authentication, and the authority distribution of application system accordingly；
The unified message scheduler subsystem, for providing unified service message interface to external application system；Root
The message is forwarded to the application system or network-driven of corresponding outside according to the uplink and downlink type of message of the message received
The drive plug of subsystem；
The network-driven subsystem dispatches unified message for being docked with mobile radio communication and mobile internet
The message that subsystem is sent is converted into the message of mobile communications network or the required format of mobile internet, or will be mobile logical
The upstream message of letter net or mobile Internet carries out transcoding according to the agreement of the distributed enterprise comprehensive access gate and forwards
To the unified message scheduler subsystem.
In the above embodiment of the present invention, by disposing distributed enterprise comprehensive access gate, realize to applications system
The unified management of the access of system, and provide support for business on-line rapid estimation.
Description of the drawings
Fig. 1 is a kind of structural schematic diagram of distributed enterprise comprehensive access gate provided in an embodiment of the present invention；
Fig. 2 is the flow diagram that a kind of service message provided in an embodiment of the present invention calls.
Specific implementation mode
The problems in for the above-mentioned prior art, an embodiment of the present invention provides a kind of distributed enterprise synthesis access networks
It closes.In embodiments of the present invention, distributed enterprise comprehensive access gate is to enterprise's side IT system and other third party's operation systems
Communication access service, data sharing service and management service are provided.Wherein：
Communication access service：Comprehensive access gate provides the service interface of standard to external application system, by outside
The communication request that application system is submitted, is converted into the interface packets for meeting mobile communications network or mobile internet requirement；Enterprise
Communication capacity system is divided into independent drive plug one by one by the distributed structure/architecture of industry comprehensive access gate, new when having
When ability need, increase a drive plug online, other existing parts are without change.
Data sharing service：Comprehensive access gate provides data service to operation system：Address list service, index clothes
Business, communications records inquiry service and log query service；It can be with shared data between multiple operation systems.
Management service：Comprehensive access gate provide management service include：User management, access-in management, alarm management and
Remote control service.User can easily realize single-sign-on.
Below in conjunction with the attached drawing in the embodiment of the present invention, the technical solution in the embodiment of the present invention is carried out clear
Chu, complete description, it is clear that the embodiments described below are only a part of the embodiment of the present invention, rather than whole realities
Apply example.Based on the embodiments of the present invention, those of ordinary skill in the art are obtained under the premise of not making the creative labor
Every other embodiment, belong to the embodiment of the present invention protection range.
It is a kind of configuration diagram of distributed enterprise comprehensive access gate provided in an embodiment of the present invention referring to Fig. 1, it should
Distributed enterprise comprehensive access gate is applied to include the unitary service platform for being deployed in carrier side, which uses
In the Distributed Integration access gateway progress telesecurity management and control to being deployed in enterprise side, the distributed enterprise synthesis access network
Pass may include：It is managed collectively subsystem 11, unified message scheduler subsystem 12, network-driven subsystem 13；Wherein：
It is managed collectively subsystem 11, for distributed enterprise Integrated access network（Hereinafter referred to as comprehensive access gate）'s
Other subsystems carry out operation monitoring, and carry out uniform registration management to external application system；Application system is accessed to request
The initiator of system carries out unified subscription authentication, and the authority distribution of corresponding application system；
Unified message scheduler subsystem 12, for providing unified service message interface to external application system；According to
The message is forwarded to the application system or network-driven of corresponding outside by the uplink and downlink type of message of the message received
The drive plug of system 13；
Network-driven subsystem 13, for being docked with mobile radio communication and mobile internet, by unified message scheduling sublayer
The message that system 12 is sent is converted into the message of mobile communications network or the required format of mobile internet, or will be mobile logical
The upstream message of letter net or mobile Internet carries out transcoding according to the agreement of the distributed enterprise comprehensive access gate and forwards
To the unified message scheduler subsystem 12.
Specifically, in the embodiment of the present invention, system for unified management 11 belongs to the administrative center of comprehensive access gate, this is unified
Management subsystem 11 function may include：
1, system management function, such as user management, Role Management, rights management and safety management.
Wherein, by taking user management as an example.In enterprise, each user would generally use multiple application systems, apply at this time
If system manages user respectively, user data usually has mass of redundancy data.In embodiments of the present invention, pass through synthesis
Unified management subsystem 11 in access gateway is managed collectively user data.Application system based on comprehensive access gate exploitation
System can use the user data of the comprehensive access gate, be carried out by the unified management subsystem 12 in the synthesis access network Central Shanxi Plain
Unified subscription authentication, and the authority distribution of application system accordingly.
2, the registration management function of business plug-in unit
Specifically, in embodiments of the present invention, the application system of all outsides is considered as business plug-in unit by comprehensive access gate.
When external application system is needed using the communication capacity of comprehensive access gate, data service capabilities and managerial ability, need
11 application for registration of unified management subsystem to comprehensive access gate.After application for registration passes through, business plug-in unit（I.e. external answers
Use system）It can use every ability of comprehensive access gate, long-range unitary service platform that can pass through comprehensive access gate
Business plug-in unit initiating capacity is controlled.
Wherein, the corresponding register list information of the business plug-in unit registered through can be safeguarded by being managed collectively in subsystem 11.
3, to other subsystems（Unified message scheduler subsystem 12, network-driven subsystem 13 etc.）Monitoring management function
Specifically, in embodiments of the present invention, unified management subsystem 11 is the control axis of comprehensive access gate, timing
Heartbeat detection message, which is sent, to other subsystems of comprehensive access gate determines corresponding subsystem when heartbeat detection exception
It is abnormal.
4, alarm management function
Specifically, in embodiments of the present invention, unified management subsystem 11 can be also used for receiving each subsystem and outside
The warning information that application system reports, and corresponding position is carried out to corresponding subsystem or outer application system according to the warning information
Reason.
5, with unitary service platform interactive function
Specifically, in embodiments of the present invention, unified management subsystem 11 can be interacted with unitary service platform, receive system
The instruction of one service platform controls other subsystems and outer application system in the synthesis access network Central Shanxi Plain according to the instruction
System.
6, portal function
Unified management subsystem 11 also provides comprehensive access gate and the application system developed based on comprehensive access gate
United portal function.
In practical applications, user inputs portal address, after logging in portal success, sees an enterprise work platform first,
Workbench lists user and plug-in unit can be used.The icon of user's click-to-call service plug-in unit can enter corresponding function.Synthesis is clicked to connect
Function Access Gateway icon, then can carry out into the comprehensive access gate page, be managed and attended operation
Wherein, in embodiments of the present invention, unified message scheduler subsystem 12 can also be provided sends out to unitary service platform
Play the audit of business plug-in content and business plug-in unit APID, IP, ability authentication（Whether i.e. corresponding business plug-in unit has use
The permission of the comprehensive access gate）Function.
Preferably, in embodiments of the present invention.Multiple network-driven subsystems 13 can be needed to dispose according to enterprise.
In practical applications, network-driven subsystem can be made of all kinds of drive plugs that can independently dispose, wherein：
Short message plug-in unit：It is docked with the note service system of mobile communications network so that comprehensive access gate has short message clothes
Business ability；
Multimedia message plug-in unit：With the multimedia message service system docking of mobile communications network so that comprehensive access gate has multimedia message clothes
Business ability；
Internet of Things plug-in unit：It is docked with the internet of things service system of mobile communications network so that comprehensive access gate has object
The Internet services ability；
Position plug-in unit：It is docked with the position service system of mobile communications network so that comprehensive access gate has position clothes
Business ability；
Internet plug-in unit：With mobile internet service system docking so that comprehensive access gate has mobile Internet clothes
Business ability.
According to foregoing description it is found that in embodiments of the present invention, when needing carry out business on-line rapid estimation, can by
The drive plug for increasing corresponding function in network-driven subsystem 13 is realized.
For example, when in certain time, short message service data amount is excessive, existing short message plug-in unit in network-driven subsystem 13
When there is performance bottleneck, new short message plug-in unit can be increased in network-driven subsystem in real time.
On the other hand, for enterprise there are the scene of multiple-limb mechanism, if certain enterprise is in Beijing and Shanghai Jun You branch companies,
For the same business of the difference branch company of enterprise, such as short message service does not need to dispose two respectively in embodiments of the present invention
The comprehensive access gate in set corresponding Beijing and Shanghai branch company, and only need to be arranged in network-driven subsystem corresponding respectively be somebody's turn to do
The drive plug in Beijing and Shanghai branch company（Short message plug-in unit）.
Further, in embodiments of the present invention, comprehensive access gate can also include：Statistical fractals subsystem 14.Its
In：
Statistical fractals subsystem 14, the data generated for summarizing the other subsystems of comprehensive access gate（Journal file leads to
Letter record）, business plug-in unit and unitary service platform is supplied to acquire；Data caused by comprehensive access gate are carried out simple
Analysis, for user and business plug-in unit query statistic.
Further, in embodiments of the present invention, comprehensive access gate can also include：Address list service subsystem 15.
Wherein：
Address list service subsystem 15, for providing unified communication recording function, each outside to the application system of each outside
Application system without developing the communication recording function of oneself.
Further, in embodiments of the present invention, comprehensive access gate can also include：Index service subsystem 16.Its
In：
Index subsystem 16, for providing index service to the drive plug of business plug-in unit and network-driven subsystem 13.
It should be noted that comprehensive access gate provided in an embodiment of the present invention is an open system, when there is new work(
When energy demand, according to the standard interface of comprehensive access gate requires that new subsystem can be increased, service is externally provided.
Integrated access network provided in an embodiment of the present invention is carried out in further detail with reference to specific application scenarios
Description.
Embodiment one, System Expansion embodiment
In embodiments of the present invention, when drive system and scheduling performance deficiency, dynamic on-line rapid estimation may be implemented, and
On business without influence.
Network-driven subsystem dilatation realization method is as follows：
1, corporate client fills in business demand on unitary service platform；
2, administrator audits demand, the preset newly-increased network-driven subsystem data on unitary service platform；
3, the newly-increased network-driven subsystem is disposed；
4, the newly-increased network-driven subsystem is run, which sends out from trend unified management subsystem
Play registration；
5, unified management subsystem forwards registration request to unitary service platform；
6, unitary service platform audits registration request, and forwards the result to unified management subsystem；
7, unified management subsystem notifies registering result to give unified message scheduler subsystem；
8, it is managed collectively the interface message of subsystem automatic generating network drives subsystem and unified message scheduler subsystem,
And it notifies to newly-increased network-driven subsystem；
9, it increases network-driven subsystem newly and connects unified message scheduler subsystem automatically according to interface message；
10, unified message scheduler subsystem audits newly-increased network-driven subsystem, completes to increase network-driven newly
System is connect with unified message scheduler subsystem.
Unified message scheduler subsystem dilatation realization method is as follows：
1, corporate client fills in business demand on unitary service platform；
2, administrator audits demand, the preset newly-increased unified message scheduler subsystem data on unitary service platform；
3, the newly-increased unified message scheduler subsystem is disposed；
4, the newly-increased unified message scheduler subsystem is run, which is managed collectively from trend
Subsystem initiates registration；
5, unified management subsystem forwards registration request to unitary service platform；
6, unitary service platform audits registration request, and forwards the result to unified management subsystem；
7, unified management subsystem notifies registering result to newly-increased unified message scheduler subsystem；
8, it is managed collectively the interface of subsystem automatic generating network drives subsystem and newly-increased unified message scheduler subsystem
Information, and notify network-driven subsystem；
9, drives subsystem connects newly-increased unified message scheduler subsystem according to interface message automatically；
10, it increases unified message scheduler subsystem newly to audit network-driven subsystem, completes network-driven subsystem
It is connect with newly-increased unified message scheduler subsystem.
Embodiment two, address list service use embodiment
This address list service provided in an embodiment of the present invention includes：Increase, modification, delete group and contact data clothes
Business, and search contact person's service.Use process is as follows：
1, business plug-in unit initiates to call address list service to comprehensive access gate, and the ID of business plug-in unit is included in call request
Information and user's id information；
2, address list service subsystem tests to the ID of business plug-in unit, and inspection content includes：The ID whether there is, be
It is no that there is corresponding access right, do not pass through if examining, offer service is provided；If upchecking, carry out in next step；
3, address list service subsystem tests to the IP address of business plug-in unit, does not pass through if examining, refuses to service；
If upchecking, carry out in next step；
4, address list service subsystem tests to User ID, if ID is not present, refuses to service；If ID exists,
Examine whether user if there are respective contacts access rights to refuse to service without permission；If having permission, carry out next
Step；
5, address list service subsystem is operated according to the request of business plug-in unit, and is returned the result.
Embodiment three, index service use embodiment
In the embodiment of the present invention, index service subsystem is provided to the drive plug of business plug-in unit and network-driven subsystem
Index service.Use process is as follows：
1, business plug-in unit initiates setting index request to index service subsystem, and indexed format includes：
IndexID is unique index value,
Value, for the corresponding key message of index value of business plug-in unit setting；
2, index relative is arranged in index service subsystem；
3, index service subsystem returns to successful respond to business plug-in unit；
4, business plug-in unit initiates indexed search request to index service subsystem, and request is carried in indexed search request
The corresponding IndexID of index of retrieval；
5, index service subsystem is retrieved according to IndexID, and the Value searched is returned to business plug-in unit.
Example IV, plug-in registration management service embodiment
Initialization operation：When first time running comprehensive access gate equipment, each subsystem in comprehensive access gate equipment
Initialization is had to carry out, the registration on unitary service platform is completed.
Register service feature condition stub：
If 1, being managed collectively subsystem registration failure, comprehensive access gate cannot integrally be run；
2, other subsystem plug-in units complete registration as far as possible；
3, after other business plug-in units and subsystem plug-in registration are successful, unified management subsystem is required to identification plug-in unit
Type, and generate the configuration data of acquiescence；Unified management subsystem is required to the registration reply information of analyzing platform return, and
By presentation of information such as plug-in unit ID therein, plug-in unit description, package types in front page layout；
4, unified management subsystem register message includes：Current time in system, plug-in unit mark, plug-in version, inserts MASID
Part IP address；
5, comprehensive access gate is wanted when being mounted with new plug-in unit, modification plug-in parameter or when changing machine device is reinstalled
It initiates to register to platform in real time.The KEY of registration is APID.After registration is initiated, MAS unitary service platforms respond registering result.Note
After volume success, business plug-in unit can open communication capacity, the business plug-in unit that do not register, it is not possible to use；
It 6,, can be in Integrated access if enterprise has applied for multiple mobile network's Number for access after the success of business plug-in registration
Gateway configures different Number for access based on different business；
When 7, registering, it is managed collectively subsystem, need the APID of verification business plug-in unit and passes through encrypted encrypted message.Add
Close algorithm is as follows：
When business plug-in unit is registered for the first time, password default（password）For the APID of business plug-in unit.Business plug-in registration is complete
At later, password can modify in comprehensive access gate.Business plug-in unit is non-to be registered for the first time, and password needs and comprehensive access gate
Configuration Values it is consistent.
Password is not transmitted in network plaintext.Password encryption mode is as follows
Identifying code algorithm is：
AuthCode=MD5（APID+password+ plug-in units IP）
Comprehensive access gate after the requests have been received, is needed according to the APID in message, the IP address of opposite end, Yi Jisuo
The password of configuration calculates AuthCode.Only AuthCode is consistent, and comprehensive access gate just receives call request.
Embodiment five, service message call embodiment
Referring to Fig. 2, service message call flow provided in an embodiment of the present invention may comprise steps of：
1, business plug-in unit submits request message to unified message scheduler subsystem, and business plug-in unit is carried in the request message
APID and use message type information；
Wherein, the function of being used to identify business plug-in request calling using message type information, i.e. network-driven
Drive plug in system, such as short message plug-in unit, multimedia message plug-in unit.
2, unified message scheduler subsystem judges whether to provide service to the business plug-in unit, and whether carries out flow control
System；
Wherein, unified message scheduler subsystem can determine whether the business plug-in unit is registration according to the APID of business plug-in unit
By business plug-in unit, and when determine the business plug-in registration by when, further determined using type of message message according to this
Whether the business plug-in unit has the permission for calling corresponding function.
3, unified message scheduler subsystem distributes MASMsgID to request message, and MASMsgID is the request message in synthesis
Unique mark in access gateway；
4, unified message scheduler subsystem returns to business plug-in unit and submits acknowledgement messaging, wherein carrying MASMsgID information；
5, unified message scheduler subsystem fills enterprise attributes information in the message；
Wherein, enterprise attributes information authenticates corresponding business plug-in unit for network-driven subsystem, that is, determining should
Whether enterprise attributes information, which has, is called corresponding function（Drive plug）Permission.
6, unified message scheduler subsystem forwards message according to routing policy to network-driven subsystem, wherein carrying business
The APID information of plug-in unit, the APID information of unified message scheduler subsystem, MASMsgID information；
7, network-driven subsystem is returned to unified message scheduler subsystem receives response message, and unified message dispatches subsystem
System goes out former message according to SeqID information matches.Unified message scheduler subsystem generates a statistics metadata, and is sent to statistics
Service subsystem；
Wherein, in this embodiment, unified message scheduler subsystem sends message using asynchronous to network drives subsystem
After pattern, i.e. unified message scheduler subsystem send message to drives subsystem to network-driven subsystem, do not need to wait for
Network-driven subsystem returns to the reception response of the message, you can sends next message.Wherein, it needs to carry in the message
SeqID, when network-driven subsystem receives message, the reception response message returned to unified message scheduler subsystem is unified
Scheduling message subsystem inquires corresponding according to the SeqID received in response message（SeqID is identical）Former message（It is i.e. unified
Scheduling message subsystem is sent to the message of network-driven subsystem）, and the statistics metadata of the corresponding original message is generated, such as disappear
Breath sends successfully, message transmission unsuccessfully etc..
8, network-driven subsystem recompiles the message that unified message scheduler subsystem forwards, to mobile communication system
（Such as：Short Message Service Gateway）It initiates to submit request message；
9, mobile communication system return accepts result；
Wherein, it after mobile communication system receives the request message that network-driven subsystem forwards, needs to disappear for the request
Breath distribution GWMsgID, which is the unique mark of the request message in mobile communication system, and the GWMsgID is returned
Back to unified message scheduler subsystem, the correspondence of corresponding GWMsgID and MASMsgID are recorded by unified message scheduler subsystem
Relationship.
Message is accepted result and feeds back to unified message scheduler subsystem, wherein carrying business by 10, network-driven subsystem
The APID and GWMsgID of plug-in unit；
Wherein, unified message scheduler subsystem receives accept result after, determined and corresponded to according to the GWMsgID that wherein carries
MASMsgID, and then determine corresponding request message accepts result.
11, mobile communication system sends status report to network-driven subsystem, is carried in the state report
GWMsgID；
Wherein, state report include message send successfully, subscriber absent etc..
12, state report is forwarded to unified message scheduler subsystem by network-driven subsystem；
13, upstream message is forwarded to business plug-in unit by unified message scheduler subsystem.
By above description as can be seen that compared with prior art, comprehensive access gate provided in an embodiment of the present invention has
It has the advantage that：
1, unified management subsystem, which is provided to external application system, provides unified management service：It is provided based on the present invention
The application system of outside of comprehensive access gate exploitation carried out by comprehensive access gate woth no need to development of user management again
Unified customer management and authentication；
2, unified address list service：Comprehensive access gate provides unified address list clothes to external application system plug-in unit
Business；The increase of address list, modification, deletion, browsing can be carried out by obtaining the application system of the outside authorized；
3, the application system of the outside based on comprehensive access gate provided by the invention exploitation, can be based on comprehensive access gate
Index service subsystem, secondary development index related application；
4, it is based on comprehensive access gate provided by the invention, woth no need to pay close attention to the System Interface Protocol of carrier side, by comprehensive
Splice grafting function Access Gateway provides simple consistent Webservice interfaces；And the drives subsystem of comprehensive access gate can be arbitrarily online
Increase the drive plug of new ability；
5, comprehensive access gate can distributed deployment, on-line rapid estimation such as increases network-driven subsystem, unified message in real time
Scheduler subsystem etc.；
6, multiple mobile Number for access, which for different business, are being forwarded to network-driven subsystem, is applied for for an enterprise
Before, filling in for business information is carried out by unified message scheduler subsystem, avoids the pressure binding with network interface, it can be light
Realize that a gateway uses multiple Number for access accessing mobile communication networks.
By the description of embodiment of above, those skilled in the art can be understood that the present invention can be by soft
Part adds the mode of required general hardware platform to realize, naturally it is also possible to which by hardware, but the former is more preferably in many cases
Embodiment.Based on this understanding, the portion that technical scheme of the present invention substantially in other words contributes to the prior art
Dividing can be expressed in the form of software products, which is stored in a storage medium, including several
Instruction is used so that a computer equipment（Can be personal computer, server or the network equipment etc.）Execute the present invention
Method described in each embodiment.
It will be appreciated by those skilled in the art that attached drawing is the schematic diagram of a preferred embodiment, the module in attached drawing or stream
Journey is not necessarily implemented necessary to the present invention.
It will be appreciated by those skilled in the art that the module in device in embodiment can describe be distributed according to embodiment
In the device of embodiment, respective change can also be carried out and be located in one or more devices different from the present embodiment.Above-mentioned reality
The module for applying example can be merged into a module, can also be further split into multiple submodule.
The embodiments of the present invention are for illustration only, can not represent the quality of embodiment.
Disclosed above is only several specific embodiments of the present invention, and still, the present invention is not limited to this, any ability
What the technical staff in domain can think variation should all fall into protection scope of the present invention.
Claims (6)
1. a kind of distributed enterprise comprehensive access gate, which is characterized in that applied to the unified clothes including being deployed in carrier side
The system of business platform, the unitary service platform is for putting the distributed enterprise synthesis access network for being deployed in enterprise side into
Row telesecurity management and control；The distributed enterprise comprehensive access gate includes：It is managed collectively subsystem, unified message dispatches subsystem
System, network-driven subsystem, statistical fractals subsystem, Directory service subsystem, index service subsystem；Wherein：
The unified management subsystem carries out operation prison for other subsystems to the distributed enterprise comprehensive access gate
Control, and uniform registration management is carried out to external application system；The initiator of request access application system is unified
Subscription authentication, and the authority distribution of application system accordingly；
The unified message scheduler subsystem, for providing unified service message interface to external application system；According to connecing
The message is forwarded to the application system or network-driven subsystem of corresponding outside by the uplink and downlink type of message of the message received
The drive plug of system；
Unified message is dispatched subsystem by the network-driven subsystem for being docked with mobile radio communication and mobile internet
The message that system is sent is converted into the message of mobile communications network or the required format of mobile internet, or by mobile radio communication
Or the upstream message of mobile Internet carries out transcoding according to the agreement of the distributed enterprise comprehensive access gate and is forwarded to institute
State unified message scheduler subsystem；
The statistical fractals subsystem, the number that other subsystems for summarizing the distributed enterprise comprehensive access gate generate
According to being supplied to external application system and unitary service platform acquisition；Produced by the distributed enterprise comprehensive access gate
Data analyzed, for user and external application system query statistic；
The address list service subsystem, for providing unified communication recording function to external application system.
The index service subsystem, for providing index to the drive plug of external application system and network-driven subsystem
Service；
Wherein, the unified message scheduler subsystem sends message to the network drives subsystem and uses asynchronous mode.
2. distributed enterprise comprehensive access gate as described in claim 1, which is characterized in that
The unified management subsystem is specifically used for, and is periodically sent out to other subsystems of the distributed enterprise comprehensive access gate
Heartbeat detection message is sent, whether is abnormal with other subsystems of the determination distributed enterprise comprehensive access gate.
3. distributed enterprise comprehensive access gate as described in claim 1, which is characterized in that
The unified management subsystem is specifically used for, and receives the control instruction that the unitary service platform is sent, and according to described
Control instruction controls other subsystems of the distributed enterprise comprehensive access gate.
4. distributed enterprise comprehensive access gate as described in claim 1, which is characterized in that
The unified management subsystem is specifically used for, and safeguards the register list information of the application system of the outside registered through.
5. distributed enterprise comprehensive access gate as described in claim 1, which is characterized in that
The unified message scheduler subsystem is specifically used for, will when receiving the downstream message that external application system is sent
The downstream message is sent to the drive plug of corresponding network-driven subsystem；
The network-driven subsystem is specifically used for, will when receiving the message that the unified message scheduler subsystem is sent
The down conversion and is transmitted to correspondence at the message of corresponding mobile communications network or the required format of mobile internet
Mobile communications network or mobile internet.
6. distributed enterprise comprehensive access gate as described in claim 1, which is characterized in that
The network-driven subsystem is specifically used for, and disappears when receiving the uplink that mobile communications network or mobile internet are sent
When breath, transcoding is carried out to the upstream message according to the agreement of the distributed enterprise comprehensive access gate, and be forwarded to the system
One scheduling message subsystem；
The unified message scheduler subsystem is specifically used for, will when receiving the message of the network-driven subsystem forwarding
The message is transmitted to the application system of corresponding outside.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201310739420.7A CN104753774B (en) | 2013-12-26 | 2013-12-26 | A kind of distributed enterprise comprehensive access gate |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201310739420.7A CN104753774B (en) | 2013-12-26 | 2013-12-26 | A kind of distributed enterprise comprehensive access gate |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN104753774A CN104753774A (en) | 2015-07-01 |
| CN104753774B true CN104753774B (en) | 2018-07-24 |
Family
ID=53592916
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201310739420.7A Active CN104753774B (en) | 2013-12-26 | 2013-12-26 | A kind of distributed enterprise comprehensive access gate |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN104753774B (en) |
Families Citing this family (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN105376155B (en) * | 2015-10-14 | 2018-11-02 | 北京无线天利移动信息技术股份有限公司 | A kind of Intelligent routing system and method based on distributed type assemblies framework |
| CN108390917B (en) * | 2018-01-25 | 2021-02-02 | 珠海金山网络游戏科技有限公司 | Intelligent message sending method and device |
| CN111464509B (en) * | 2020-03-18 | 2022-02-01 | 珠海市鸿瑞信息技术股份有限公司 | Network security isolation system for double-processing system |
Citations (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101072129A (en) * | 2007-06-25 | 2007-11-14 | 北京邮电大学 | JMX based network service management method and its application system |
| CN101227470A (en) * | 2008-01-30 | 2008-07-23 | 中兴通讯股份有限公司 | System and method of business management |
| CN101415144A (en) * | 2008-12-10 | 2009-04-22 | 中国电信股份有限公司 | Mobile medium information synthesis business platform system and implementing method thereof |
| CN101437002A (en) * | 2007-11-16 | 2009-05-20 | 中国移动通信集团公司 | Mobile proxy server system |
| CN102694926A (en) * | 2011-03-22 | 2012-09-26 | 中兴通讯股份有限公司 | Comprehensive value-added service system supporting multi-service integration and method thereof |
| CN103312766A (en) * | 2011-11-15 | 2013-09-18 | 华为技术有限公司 | Method, system and device for supporting permanent online of application client |
| US8549300B1 (en) * | 2010-02-23 | 2013-10-01 | Juniper Networks, Inc. | Virtual single sign-on for certificate-protected resources |
-
2013
- 2013-12-26 CN CN201310739420.7A patent/CN104753774B/en active Active
Patent Citations (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101072129A (en) * | 2007-06-25 | 2007-11-14 | 北京邮电大学 | JMX based network service management method and its application system |
| CN101437002A (en) * | 2007-11-16 | 2009-05-20 | 中国移动通信集团公司 | Mobile proxy server system |
| CN101227470A (en) * | 2008-01-30 | 2008-07-23 | 中兴通讯股份有限公司 | System and method of business management |
| CN101415144A (en) * | 2008-12-10 | 2009-04-22 | 中国电信股份有限公司 | Mobile medium information synthesis business platform system and implementing method thereof |
| US8549300B1 (en) * | 2010-02-23 | 2013-10-01 | Juniper Networks, Inc. | Virtual single sign-on for certificate-protected resources |
| CN102694926A (en) * | 2011-03-22 | 2012-09-26 | 中兴通讯股份有限公司 | Comprehensive value-added service system supporting multi-service integration and method thereof |
| CN103312766A (en) * | 2011-11-15 | 2013-09-18 | 华为技术有限公司 | Method, system and device for supporting permanent online of application client |
Non-Patent Citations (2)
| Title |
|---|
| 基于移动网络的聚合应用的研究与设计;高超;《中国优秀硕士学位论文全文数据库》;20100415;全文 * |
| 综合业务接入网关(ISAG)Web Service接口研究;黄旭;《中国优秀硕士学位论文全文数据库》;20110115;正文第4页第1-4行、第7-11页 * |
Also Published As
| Publication number | Publication date |
|---|---|
| CN104753774A (en) | 2015-07-01 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US8375360B2 (en) | Provision of services over a common delivery platform such as a mobile telephony network | |
| US20130019291A1 (en) | Service opening method and system, and service opening server | |
| CN110839087B (en) | Interface calling method and device, electronic equipment and computer readable storage medium | |
| EP1116388A1 (en) | Operating system for telecommunications | |
| CN101005503A (en) | Method and data processing system for intercepting communication between a client and a service | |
| GB2422218A (en) | A system for providing services | |
| GB2422217A (en) | A system for providing services | |
| US20060161616A1 (en) | Provision of services over a common delivery platform such as a mobile telephony network | |
| CN104753774B (en) | A kind of distributed enterprise comprehensive access gate | |
| CN110012322A (en) | A kind of method and system that view networking service is initiated | |
| CN109274699A (en) | Method for authenticating, device, server and storage medium | |
| CN107645474A (en) | Log in the method for open platform and log in the device of open platform | |
| US20050111363A1 (en) | Operating system for telecommunications | |
| US7353405B2 (en) | Method and systems for sharing network access capacities across internet service providers | |
| EP1681832A1 (en) | Provision of services over a common delivery platform such as a mobile telephony network | |
| CN110347718A (en) | A kind of REDIS sharding method, device, computer equipment and storage medium | |
| US20050091376A1 (en) | Apparatus and method for optimized and secured reflection of network services to remote locations | |
| CN115378645A (en) | Verification method and system based on unified authentication of electric power marketing management system | |
| GB2422216A (en) | A software development system | |
| KR20090069707A (en) | Device for relaying open source using enterprise service bus, and method and system equipped therewith, and the recording media storing the program performing the said method | |
| CN106533716A (en) | Method and system for managing northbound interface | |
| CN111935125B (en) | Authentication method and device based on distributed architecture and micro-service system | |
| EP2284721B1 (en) | Apparatus and method for optimized and secured reflection of network services to remote locations | |
| Karthick et al. | Exploring a security protocol for secure service migration in commercial cloud environments | |
| GB2422219A (en) | A software development system |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |