CN116541184A - Multi-protocol application framework system - Google Patents
Multi-protocol application framework system Download PDFInfo
- Publication number
- CN116541184A CN116541184A CN202310446821.7A CN202310446821A CN116541184A CN 116541184 A CN116541184 A CN 116541184A CN 202310446821 A CN202310446821 A CN 202310446821A CN 116541184 A CN116541184 A CN 116541184A
- Authority
- CN
- China
- Prior art keywords
- application
- subunit
- app
- framework
- application app
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
- 238000013500 data storage Methods 0.000 claims abstract description 49
- 238000007726 management method Methods 0.000 claims abstract description 43
- 238000000034 method Methods 0.000 claims abstract description 22
- 238000012986 modification Methods 0.000 claims abstract description 7
- 230000004048 modification Effects 0.000 claims abstract description 7
- 238000012544 monitoring process Methods 0.000 claims description 28
- 230000006870 function Effects 0.000 claims description 18
- 238000012545 processing Methods 0.000 claims description 16
- 238000013475 authorization Methods 0.000 claims description 12
- 238000009434 installation Methods 0.000 claims description 12
- 230000008569 process Effects 0.000 claims description 10
- 230000009466 transformation Effects 0.000 claims description 10
- 238000004891 communication Methods 0.000 claims description 8
- 238000010276 construction Methods 0.000 claims description 8
- 230000002093 peripheral effect Effects 0.000 claims description 8
- 238000013508 migration Methods 0.000 claims description 5
- 230000005012 migration Effects 0.000 claims description 5
- 238000004458 analytical method Methods 0.000 claims description 4
- 230000003993 interaction Effects 0.000 claims description 4
- 238000002955 isolation Methods 0.000 claims description 4
- 230000002688 persistence Effects 0.000 claims description 4
- 238000007639 printing Methods 0.000 claims description 4
- 238000013515 script Methods 0.000 claims description 4
- 238000012795 verification Methods 0.000 claims description 4
- 230000002045 lasting effect Effects 0.000 claims description 3
- 239000000306 component Substances 0.000 description 32
- 238000011161 development Methods 0.000 description 7
- 230000002159 abnormal effect Effects 0.000 description 2
- 230000008859 change Effects 0.000 description 2
- 230000007812 deficiency Effects 0.000 description 2
- 238000013461 design Methods 0.000 description 2
- 238000006467 substitution reaction Methods 0.000 description 2
- 101100217298 Mus musculus Aspm gene Proteins 0.000 description 1
- 230000009286 beneficial effect Effects 0.000 description 1
- 230000008901 benefit Effects 0.000 description 1
- 230000000903 blocking effect Effects 0.000 description 1
- 238000004422 calculation algorithm Methods 0.000 description 1
- 239000008358 core component Substances 0.000 description 1
- 230000007547 defect Effects 0.000 description 1
- 238000010586 diagram Methods 0.000 description 1
- 238000005516 engineering process Methods 0.000 description 1
- 230000007246 mechanism Effects 0.000 description 1
- 230000002085 persistent effect Effects 0.000 description 1
- 238000011160 research Methods 0.000 description 1
- 230000004044 response Effects 0.000 description 1
- 238000012360 testing method Methods 0.000 description 1
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/46—Multiprogramming arrangements
- G06F9/54—Interprogram communication
- G06F9/541—Interprogram communication via adapters, e.g. between incompatible applications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/60—Protecting data
- G06F21/602—Providing cryptographic facilities or services
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/44—Arrangements for executing specific programs
- G06F9/4401—Bootstrapping
- G06F9/4411—Configuring for operating with peripheral devices; Loading of device drivers
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/44—Arrangements for executing specific programs
- G06F9/455—Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
- G06F9/45533—Hypervisors; Virtual machine monitors
- G06F9/45558—Hypervisor-specific management and integration aspects
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/46—Multiprogramming arrangements
- G06F9/50—Allocation of resources, e.g. of the central processing unit [CPU]
- G06F9/5061—Partitioning or combining of resources
- G06F9/5072—Grid computing
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/46—Multiprogramming arrangements
- G06F9/54—Interprogram communication
- G06F9/547—Remote procedure calls [RPC]; Web services
-
- G—PHYSICS
- G16—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR SPECIFIC APPLICATION FIELDS
- G16Y—INFORMATION AND COMMUNICATION TECHNOLOGY SPECIALLY ADAPTED FOR THE INTERNET OF THINGS [IoT]
- G16Y30/00—IoT infrastructure
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/01—Protocols
- H04L67/10—Protocols in which an application is distributed across nodes in the network
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/01—Protocols
- H04L67/12—Protocols specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/44—Arrangements for executing specific programs
- G06F9/455—Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
- G06F9/45533—Hypervisors; Virtual machine monitors
- G06F9/45558—Hypervisor-specific management and integration aspects
- G06F2009/45587—Isolation or security of virtual machine instances
-
- Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
- Y02—TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
- Y02D—CLIMATE CHANGE MITIGATION TECHNOLOGIES IN INFORMATION AND COMMUNICATION TECHNOLOGIES [ICT], I.E. INFORMATION AND COMMUNICATION TECHNOLOGIES AIMING AT THE REDUCTION OF THEIR OWN ENERGY USE
- Y02D10/00—Energy efficient computing, e.g. low power processors, power management or thermal management
Abstract
The invention provides a multi-protocol application framework system, which belongs to the technical field of Internet of things and comprises the following components: the multi-protocol framework base library module is used for integrating various hardware interfaces and hardware drivers, generating a universal standard interface and providing the universal standard interface for the framework service assembly module to call; the framework service component module is used for providing a service component for the operation of the multi-protocol framework system and the application APP by calling the multi-protocol framework base library module; and the cross-platform application execution engine module is used for carrying out embedded lightweight modification on the application APP to generate a lightweight application, and the integrated open source language engine generates an execution engine of the cross-platform application. The method solves the problem that terminal equipment software of the cloud-based internet of things system cannot be matched in time at different times, realizes unified management of edge setup, containers and applications, generates a standardized interface, and realizes sharing of local data storage and different business data.
Description
Technical Field
The invention belongs to the technical field of the Internet of things, and particularly relates to a multi-protocol application framework system.
Background
Along with the development of digitization and internet of things, a large number of applications need to be integrated on the cloud, a cloud-based internet of things system needs to be connected with a large number of online terminals, meanwhile, the development of the network accelerates the connection of the large number of terminals and applications to the internet of things system, intelligent connection becomes a new form of data flow of the current internet of things system, the technical architecture of the current internet of things system mainly develops different structures according to different terminal equipment software, but aiming at the cloud-based internet of things system accessed by the large number of terminals and the large number of applications, the existing internet of things system architecture has the problem that different terminal equipment software are not communicated with each other and cannot be matched in time. Moreover, the current architecture of the internet of things aims at the problem that local data storage and different service data cannot be shared for massive terminal applications.
In summary, the current architecture of the internet of things cannot meet the requirement of accessing mass terminals and applications based on cloud, cannot realize intercommunication between different device software, cannot realize sharing between local data storage and different service data, and is in urgent need of an application framework form of the internet of things supporting multiple protocols, which can be compatible with mass online terminals and mass application connection.
This is a deficiency of the prior art, and therefore, it is highly desirable to provide a multi-protocol application framework system that addresses the above-described deficiencies in the prior art.
Disclosure of Invention
Aiming at the defects that the current Internet of things architecture in the prior art cannot meet the requirement of access of mass terminals and applications based on cloud, cannot realize intercommunication among different device software and cannot realize sharing between local data storage and different service data, the invention provides a multi-protocol application framework system, and aims to solve the technical problems.
The invention provides a multi-protocol application framework system, comprising:
the multi-protocol framework base library module is used for integrating various hardware interfaces and hardware drivers, generating a universal standard interface and providing the universal standard interface for the framework service assembly module to call;
the framework service component module is used for providing a service component for the operation of the multi-protocol framework system and the application APP by calling the multi-protocol framework base library module;
and the cross-platform application execution engine module is used for carrying out embedded lightweight modification on the application APP to generate a lightweight application, and the integrated open source language engine generates an execution engine of the cross-platform application.
Further, the multi-protocol framework base library module includes:
the cross-application communication base unit is used for establishing a communication providing interaction channel between the data storage service base and each application;
the data storage base unit is used for providing data storage and data service of the application of the whole system;
and the peripheral interface basic library unit is used for standardizing the bottom hardware use interfaces of the hardware devices and providing the standardized bottom hardware use interfaces for the application APP of the upper layer. The multi-protocol framework base library module is a dynamic library developed based on a C language, and is used for realizing a response base function according to the drive of hardware and the difference characteristic of the hardware, and providing a standard interface for a system core component of a framework to call. The multi-protocol framework base library module is used for decoupling the framework from the kernel, and different manufacturers can shield the influence of the difference of the operating system on hardware and add personalized functions by modifying the multi-protocol framework base library.
Further, the data storage base unit includes:
the data storage service subunit is used for providing data storage service for the application APP and classifying according to whether the data file is stored in a lasting mode or not;
the data access service subunit is used for providing data access service for the application APP, providing accurate and fuzzy query interfaces, and preloading terminal parameter files of which the access times of the application APP exceed a threshold value;
the data backup and checking subunit is used for backing up the volatile data when a system-level event occurs and recovering the volatile data after the system is normal;
the data storage service subunit is used for regularly backing up volatile data in the running process of the data storage service subunit;
the method comprises the steps of deleting data exceeding a storage duration at fixed time according to a first-in first-out rule;
the method is used for automatically counting the access frequency of the application APP and combining with a preset security policy to prevent malicious attacks of the application APP.
Further, the peripheral interface base library unit includes:
the hardware abstraction framework subunit is used for providing core data structure definition of an external interface and an external unified interface, managing and using the hardware abstraction module library subunit in a dynamic loading mode, acquiring a module instance according to the equipment ID, further acquiring the equipment instance, and providing corresponding attribute for the APP operation of each application to realize the use of hardware equipment;
and the hardware abstraction module library subunit is used for generating the drive of the external interface of each hardware device and providing each drive for each application APP in a dynamic connection library mode.
Further, the framework service assembly module includes:
the application management component unit is used for receiving a user request and managing downloading, analysis, installation, verification, registration, updating and upgrading of the application APP by calling the multi-protocol framework base library module;
the data storage component unit is used for storing the APP data of each application in a database with the storage volume lower than a set threshold value, dynamically encrypting and decrypting the whole file data, and providing standard data storage, inquiry and update interfaces according to the file read-write permission;
the security management component unit is used for isolating each application APP through a container and ensuring the security of the multi-protocol framework base library module by matching encryption, authorization, access control and signature;
the resource management component unit is used for monitoring and scheduling hardware resources, virtualizing a hardware interface and IO and providing the hardware interface and IO for an application APP;
the cross-platform light application management component unit is used for selecting an open source running engine to perform parameter transformation, embedding an engine AP I for performing engine processing request, and returning a processing result to the application APP.
Further, the application management component unit includes:
an application automatic deployment subunit, configured to automatically deploy a single application or an application APP container cluster, and view nodes deployed by the application APP or the application container cluster through an application query function;
an application automatic update subunit, configured to receive an automatic user update request, automatically check and analyze a deployed application APP, load an application update package configuration file, download an application installation package used for application update from a mirror image warehouse, delete an old application APP before update, and perform application APP update;
and the application migration subunit is used for migrating the application APP which is completed to be deployed to the node with idle resources from the node with high resource utilization rate in a mode of synchronously generating the application through an application container.
Further, the security management component unit includes:
the application isolation subunit is used for isolating data and codes among the application APPs through the container;
a file encryption subunit, configured to protect data of the device through an encrypted file system;
an application authorization subunit, configured to limit a system function and a user function of an application APP by using an authorization module;
the access authority setting subunit is used for controlling the access of each application APP to the application APP according to the authority level specified by the application APP;
and the digital signature subunit is used for limiting the trust relationship between the developer and the application APP by using the digital signature.
Further, the resource management component unit includes:
the resource monitoring subunit is used for monitoring CPU, memory and network throughput resources;
the resource scheduling subunit is used for distributing CPU, memory and network throughput resources in nodes and application containers based on the same network environment, so as to ensure balanced performance;
and the hardware interface management subunit is used for virtualizing the hardware interface and IO and providing the hardware interface and IO with authorized application APP access.
Further, the cross-platform light application management component unit includes:
the engine type selection subunit is used for acquiring, improving and increasing parameter transformation of the JS engine according to requirements;
the engine interface embedding subunit is used for transmitting the script of the processing request to the engine through embedding the AP I of the selection engine;
and the information return subunit is used for outputting state information and a return value to the application APP after the engine processing request is received.
Further, the cross-platform application execution engine module includes:
the dynamic loading management unit is used for managing the application APP installation running package according to the configuration information and dynamically loading and unloading the application APP software package smaller than the set size threshold;
the system comprises a runtime environment construction unit, a context execution unit and a control unit, wherein the runtime environment construction unit is used for constructing a multi-process context runtime environment for each application APP and dynamically creating a runtime environment for application APP execution smaller than a set threshold value;
the runtime interface unit is used for constructing a runtime interface according to the service function requirement and the general standard interface specification of the multi-protocol framework base library module and providing the runtime interface for the application APP dynamic call smaller than the set threshold value;
the runtime monitoring unit is used for providing monitoring management for the start, the trigger, the stop and the pause of the light application, counting error information and outputting printing information;
and the persistence unit is used for managing the running files and the configuration files of the light application and uniformly managing and storing the files needing to be solidified in the running process.
The invention has the beneficial effects that:
the multi-protocol application framework system solves the problem that terminal equipment software of a cloud-based internet of things system cannot be matched in time at different times, realizes unified management of edge devices, containers and applications, generates a standardized interface, and realizes sharing between local data storage and different service data.
In addition, the invention has reliable design principle, simple structure and very wide application prospect.
It can be seen that the present invention has outstanding substantial features and significant advances over the prior art, as well as the benefits of its implementation.
Drawings
In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings that are required to be used in the description of the embodiments or the prior art will be briefly described below, and it will be obvious to those skilled in the art that other drawings can be obtained from these drawings without inventive effort.
Fig. 1 is a schematic diagram of a multi-protocol application framework system of the present invention.
Detailed Description
In order to make the technical solution of the present invention better understood by those skilled in the art, the technical solution of the present invention will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present invention, and it is apparent that the described embodiments are only some embodiments of the present invention, not all embodiments. All other embodiments, which can be made by those skilled in the art based on the embodiments of the present invention without making any inventive effort, shall fall within the scope of the present invention.
Example 1:
as shown in fig. 1, the present invention provides a multiprotocol application framework system, including:
the multi-protocol framework base library module is used for integrating various hardware interfaces and hardware drivers, generating a universal standard interface and providing the universal standard interface for the framework service assembly module to call; the multi-protocol framework base library module comprises:
the cross-application communication base unit is used for establishing a communication providing interaction channel between the data storage service base and each application;
the data storage base unit is used for providing data storage and data service of the application of the whole system;
the peripheral interface basic library unit is used for standardizing the bottom hardware use interface of each hardware device and providing the standardized bottom hardware use interface for each application APP of the upper layer;
the framework service component module is used for providing a service component for the operation of the multi-protocol framework system and the application APP by calling the multi-protocol framework base library module; the framework service assembly module includes:
the application management component unit is used for receiving a user request and managing downloading, analysis, installation, verification, registration, updating and upgrading of the application APP by calling the multi-protocol framework base library module;
the data storage component unit is used for storing the APP data of each application in a database with the storage volume lower than a set threshold value, dynamically encrypting and decrypting the whole file data, and providing standard data storage, inquiry and update interfaces according to the file read-write permission;
the security management component unit is used for isolating each application APP through a container and ensuring the security of the multi-protocol framework base library module by matching encryption, authorization, access control and signature;
the resource management component unit is used for monitoring and scheduling hardware resources, virtualizing a hardware interface and IO and providing the hardware interface and IO for an application APP;
the cross-platform light application management component unit is used for selecting an open source operation engine to perform parameter transformation, embedding an engine AP I for performing engine processing request, and returning a processing result to an application APP;
the cross-platform application execution engine module is used for carrying out embedded lightweight modification on the application APP to generate a light application, and the integrated open source language engine generates an execution engine of the cross-platform application; the cross-platform application execution engine module comprises:
the dynamic loading management unit is used for managing the application APP installation running package according to the configuration information and dynamically loading and unloading the application APP software package smaller than the set size threshold;
the system comprises a runtime environment construction unit, a context execution unit and a control unit, wherein the runtime environment construction unit is used for constructing a multi-process context runtime environment for each application APP and dynamically creating a runtime environment for application APP execution smaller than a set threshold value;
the runtime interface unit is used for constructing a runtime interface according to the service function requirement and the general standard interface specification of the multi-protocol framework base library module and providing the runtime interface for the application APP dynamic call smaller than the set threshold value;
the runtime monitoring unit is used for providing monitoring management for the start, the trigger, the stop and the pause of the light application, counting error information and outputting printing information;
and the persistence unit is used for managing the running files and the configuration files of the light application and uniformly managing and storing the files needing to be solidified in the running process.
Example 2:
as shown in fig. 1, the present invention provides a multiprotocol application framework system, comprising:
the multi-protocol framework base library module is used for integrating various hardware interfaces and hardware drivers, generating a universal standard interface and providing the universal standard interface for the framework service assembly module to call; the multi-protocol framework base library module comprises:
the cross-application communication base unit is used for establishing a communication providing interaction channel between the data storage service base and each application;
the data storage base unit is used for providing data storage and data service of the application of the whole system; the data storage base unit includes:
the data storage service subunit is used for providing data storage service for the application APP and classifying according to whether the data file is stored in a lasting mode or not; the data storage base provides data storage service for application APP, and supports data file mode storage based on SQLI TE3 and non-persistent data storage based on memory files according to a classified storage mechanism;
the data access service subunit is used for providing data access service for the application APP, providing accurate and fuzzy query interfaces, preloading terminal parameter files with the access times of the application APP exceeding a threshold value and realizing high-speed correspondence;
the data backup and checking subunit is used for backing up the volatile data when a system-level event occurs and recovering the volatile data after the system is normal; the data storage base library unit can subscribe a system level event to the system manager, when the event occurs, the system manager notifies the data center, when the system level event such as emergency power failure, system reset and system power-on is received, the backup of volatile data is carried out, and the volatile data is recovered after the system is recovered to be normal;
the data storage service subunit is used for regularly backing up volatile data in the running process of the data storage service subunit; in the running process of the data storage base library, the volatile data are backed up regularly, so that the data are ensured not to be lost in an abnormal state;
the method comprises the steps of deleting data exceeding a storage duration at fixed time according to a first-in first-out rule; the data storage base library periodically deletes the expiration data according to the first-in first-out rule, so that the system is ensured to have sufficient data storage space to store the data;
the method is used for automatically counting the access frequency of the application APP and combining a preset security policy to prevent malicious attack of the application APP; the data storage base has data security assurance strategies and measures to ensure that data files are not damaged and lost; the data storage base automatically counts the access frequency of other apps, and prevents other apps from being attacked maliciously through a security policy;
the peripheral interface basic library unit is used for standardizing the bottom hardware use interface of each hardware device and providing the standardized bottom hardware use interface for each application APP of the upper layer; the peripheral interface basic library unit comprises:
the hardware abstraction framework subunit is used for providing core data structure definition of an external interface and an external unified interface, managing and using the hardware abstraction module library subunit in a dynamic loading mode, acquiring a module instance according to the equipment ID, further acquiring the equipment instance, and providing corresponding attribute for the APP operation of each application to realize the use of hardware equipment;
the hardware abstraction module library subunit is used for generating the drive of the external interface of each hardware device and providing each drive for each application APP in a dynamic connection library mode;
the common hardware interface comprises USB, GPIO, UART, bluetooth, LCD, keys and LED, and based on the difference of the common hardware interface and the drive thereof, the common interface standard is designed to provide the bottom layer withstanding function, and a unified system call interface is provided for the frame service assembly module to realize the compatibility of the frame service assembly module to different hardware;
the external interface basic library unit is called a HAL layer for short and is positioned between the hardware driving layer and the application program layer and is used for standardizing a calling interface provided by the bottom hardware upwards so as to shield the difference of the bottom hardware;
the peripheral interface basic library unit realizes that the change of the bottom hardware does not affect the upward supply of the change of the hardware call interface and the program of the application layer, thereby reducing the repeatability of the development of the application software;
the framework service component module is used for providing a service component for the operation of the multi-protocol framework system and the application APP by calling the multi-protocol framework base library module; the framework service component module is the core of the framework, and can ensure the safe, stable and convenient operation of the application APP besides ensuring the safe, stable and stable operation of the support framework by calling the multi-protocol framework base library module; the framework service assembly module includes:
the application management component unit is used for receiving a user request and managing downloading, analysis, installation, verification, registration, updating and upgrading of the application APP by calling the multi-protocol framework base library module; the application management component unit includes:
an application automatic deployment subunit, configured to automatically deploy a single application or an application APP container cluster, and view nodes deployed by the application APP or the application container cluster through an application query function;
an application automatic update subunit, configured to receive an automatic user update request, automatically check and analyze a deployed application APP, load an application update package configuration file, download an application installation package used for application update from a mirror image warehouse, delete an old application APP before update, and perform application APP update; the application automatic updating subunit is used for ensuring that the phenomenon of blocking or downtime caused by too high application resource utilization rate is avoided when the application is updated, distributing resources for updating the application through resource scheduling, and ensuring the running continuity of the application APP in the updating process;
selecting an application update package to be downloaded through an application APP warehouse, clicking automatic update, analyzing and loading an application update package configuration file by a system, downloading an application update application installation package from a mirror image warehouse, and automatically deleting old application before update by the system;
an application migration subunit, configured to migrate, from a node with high resource usage rate to a node with idle resources, the deployed application APP through an application container in a manner of synchronously generating an application;
after application deployment is completed, the phenomenon that part of node resources are too high in utilization rate and more resources cannot be redistributed to the nodes through resource scheduling often occurs, and the phenomenon that some application containers are required to be considered to be migrated from the nodes with high utilization rate to the relatively idle nodes, so that normal operation of all applications is ensured; application migration is realized by adopting a mode of synchronously generating the application, and smooth migration of the application is realized on the premise of ensuring stable operation of the application;
the data storage component unit is used for storing the APP data of each application in a database with the storage volume lower than a set threshold value, dynamically encrypting and decrypting the whole file data, and providing standard data storage, inquiry and update interfaces according to the file read-write permission;
the security management component unit is used for isolating each application APP through a container and ensuring the security of the multi-protocol framework base library module by matching encryption, authorization, access control and signature; the security management component unit includes:
the application isolation subunit is used for isolating data and codes among the application APPs through the container;
a file encryption subunit, configured to protect data of the device through an encrypted file system;
an application authorization subunit, configured to limit a system function and a user function of an application APP by using an authorization module;
the access authority setting subunit is used for controlling the access of each application APP to the application APP according to the authority level specified by the application APP;
a digital signature subunit, configured to limit trust relationship between a developer and an application APP using digital signature;
the application framework provides a powerful security measure in application development in conjunction with the system kernel. In the system kernel level, a dock can realize isolation between applications, and prevent data and codes of one application from being accessed by other unauthorized applications; the encrypted file system may protect the data on the lost device from leakage. In the application development aspect, an application program framework constructed by adopting measures such as encryption, authorization, security IPC and the like has strong security characteristics; the authorization mode may limit access of the application to system functions and user data; the authority level specified by the application can control the access of other applications to the application; the digital signature ensures a trust relationship between the program developer and the application.
In an operating system, file system permissions can ensure that one application APP cannot modify or read the file of another application APP; each application APP in the system is allocated an application ID, and the application exists as a user, so that other applications cannot read or modify a file created by one application unless the APP explicitly specifies that the file can be accessed by other applications; the file system encryption function may encrypt the entire file system; the kernel creates an encrypted file system by using the dm-crypt technology; the dm-crypt technique is built on the device-mapper feature of the Linux kernel version; the device-mapper is a virtual layer on the actual block device, so that a developer can conveniently realize the processes of mirroring, snapshot, cascading, encryption and the like; in order to prevent the attack of the system password, the password is stored by adopting an SHA1 encryption algorithm. To prevent password dictionary attacks, the system provides password complexity rules, which are formulated by the device administrator and enforced by the operating system;
the resource management component unit is used for monitoring and scheduling hardware resources, virtualizing a hardware interface and IO and providing the hardware interface and IO for an application APP; the resource management component unit includes:
the resource monitoring subunit is used for monitoring CPU, memory and network throughput resources; the CPU monitoring specifically comprises total usage monitoring, single kernel usage monitoring and usage fault monitoring; the memory monitoring specifically comprises total usage monitoring and usage fault monitoring; the network throughput monitoring specifically comprises throughput monitoring and use fault monitoring;
the resource scheduling subunit is used for distributing CPU, memory and network throughput resources in the nodes and the application containers based on the same network environment, so that the performances of the nodes and the application containers in the whole system are kept in an equilibrium state;
the hardware interface management subunit is used for virtualizing a hardware interface and IO and providing the hardware interface and IO with authorized Application (APP) access to solve the problem of interface resource sharing conflict;
the cross-platform light application management component unit is used for selecting an open source operation engine to carry out parameter transformation, embedding an engine API for carrying out engine processing request and returning a processing result to an application APP; the cross-platform light application management component unit comprises:
the engine type selection subunit is used for acquiring, improving and increasing parameter transformation of the JS engine according to requirements;
an engine interface embedding subunit for transmitting the script of the processing request to the engine through the API of the embedding selection engine;
the information return subunit is used for outputting state information and a return value to the application APP after the engine processing request is received;
the cross-platform application execution engine module supports development of application APP in cross-platform languages such as python, java, js and the like, and is intended to adopt an open source operation engine for reference transformation; the operation engine supports cross-platform and supports one-time development, one-time compiling and multi-place operation of the cross-platform light application APP;
according to the design target and feasibility test of the research stage, determining to adopt a more mature JS engine as a JS engine of a cross-platform light application management component by cutting and improving according to actual requirements; by embedding the JS engine API in the cross-platform light application management component application program, a request for processing related scripts can be transmitted to the JS engine; correspondingly, after the engine processing request is finished, returning a return value or state information to the application program;
the cross-platform application execution engine module is used for carrying out embedded lightweight modification on the application APP to generate a light application, and the integrated open source language engine generates an execution engine of the cross-platform application; the lightweight open source engine based on the C language is selected as a transformation basis, and embedded lightweight transformation is carried out on the lightweight open source engine, so that a multi-language cross-platform execution engine of j s language is realized; the cross-platform application execution engine module comprises:
the dynamic loading management unit is used for managing the application APP installation running package according to the configuration information and dynamically loading and unloading the application APP software package smaller than the set size threshold;
the system comprises a runtime environment construction unit, a context execution unit and a control unit, wherein the runtime environment construction unit is used for constructing a multi-process context runtime environment for each application APP and dynamically creating a runtime environment for application APP execution smaller than a set threshold value;
the runtime interface unit is used for constructing a runtime interface according to the service function requirement and the general standard interface specification of the multi-protocol framework base library module and providing the runtime interface for the application APP dynamic call smaller than the set threshold value;
the runtime monitoring unit is used for providing monitoring management for the start, the trigger, the stop and the pause of the light application, counting error information and outputting printing information;
and the persistence unit is used for managing the running files and the configuration files of the light application, uniformly managing and storing the files needing to be solidified in the running process, and ensuring that the data loss caused by abnormal exit and power failure is avoided.
Although the present invention has been described in detail by way of preferred embodiments with reference to the accompanying drawings, the present invention is not limited thereto. Various equivalent modifications and substitutions may be made in the embodiments of the present invention by those skilled in the art without departing from the spirit and scope of the present invention, and it is intended that all such modifications and substitutions be within the scope of the present invention/be within the scope of the present invention as defined by the appended claims. Therefore, the protection scope of the present invention shall be subject to the protection scope of the claims.
Claims (10)
1. A multi-protocol application framework system, comprising:
the multi-protocol framework base library module is used for integrating various hardware interfaces and hardware drivers, generating a universal standard interface and providing the universal standard interface for the framework service assembly module to call;
the framework service component module is used for providing a service component for the operation of the multi-protocol framework system and the application APP by calling the multi-protocol framework base library module;
and the cross-platform application execution engine module is used for carrying out embedded lightweight modification on the application APP to generate a lightweight application, and the integrated open source language engine generates an execution engine of the cross-platform application.
2. The multi-protocol application framework system of claim 1 wherein the multi-protocol framework base library module comprises:
the cross-application communication base unit is used for establishing a communication providing interaction channel between the data storage service base and each application;
the data storage base unit is used for providing data storage and data service of the application of the whole system;
and the peripheral interface basic library unit is used for standardizing the bottom hardware use interfaces of the hardware devices and providing the standardized bottom hardware use interfaces for the application APP of the upper layer.
3. The multi-protocol application framework system of claim 2 wherein the data storage base library unit comprises:
the data storage service subunit is used for providing data storage service for the application APP and classifying according to whether the data file is stored in a lasting mode or not;
the data access service subunit is used for providing data access service for the application APP, providing accurate and fuzzy query interfaces, and preloading terminal parameter files of which the access times of the application APP exceed a threshold value;
the data backup and checking subunit is used for backing up the volatile data when a system-level event occurs and recovering the volatile data after the system is normal;
the data storage service subunit is used for regularly backing up volatile data in the running process of the data storage service subunit;
the method comprises the steps of deleting data exceeding a storage duration at fixed time according to a first-in first-out rule;
the method is used for automatically counting the access frequency of the application APP and combining with a preset security policy to prevent malicious attacks of the application APP.
4. The multi-protocol application framework system of claim 2 wherein the peripheral interface base library unit comprises:
the hardware abstraction framework subunit is used for providing core data structure definition of an external interface and an external unified interface, managing and using the hardware abstraction module library subunit in a dynamic loading mode, acquiring a module instance according to the equipment ID, further acquiring the equipment instance, and providing corresponding attribute for the APP operation of each application to realize the use of hardware equipment;
and the hardware abstraction module library subunit is used for generating the drive of the external interface of each hardware device and providing each drive for each application APP in a dynamic connection library mode.
5. The multi-protocol application framework system of claim 1 wherein the framework service component module comprises:
the application management component unit is used for receiving a user request and managing downloading, analysis, installation, verification, registration, updating and upgrading of the application APP by calling the multi-protocol framework base library module;
the data storage component unit is used for storing the APP data of each application in a database with the storage volume lower than a set threshold value, dynamically encrypting and decrypting the whole file data, and providing standard data storage, inquiry and update interfaces according to the file read-write permission;
the security management component unit is used for isolating each application APP through a container and ensuring the security of the multi-protocol framework base library module by matching encryption, authorization, access control and signature;
the resource management component unit is used for monitoring and scheduling hardware resources, virtualizing a hardware interface and IO and providing the hardware interface and IO for an application APP;
the cross-platform light application management component unit is used for selecting an open source running engine to carry out parameter transformation, embedding an engine API for carrying out engine processing request, and returning a processing result to the application APP.
6. The multi-protocol application framework system of claim 5 wherein the application management component unit comprises:
an application automatic deployment subunit, configured to automatically deploy a single application or an application APP container cluster, and view nodes deployed by the application APP or the application container cluster through an application query function;
an application automatic update subunit, configured to receive an automatic user update request, automatically check and analyze a deployed application APP, load an application update package configuration file, download an application installation package used for application update from a mirror image warehouse, delete an old application APP before update, and perform application APP update;
and the application migration subunit is used for migrating the application APP which is completed to be deployed to the node with idle resources from the node with high resource utilization rate in a mode of synchronously generating the application through an application container.
7. The multi-protocol application framework system of claim 5 wherein the security management component unit comprises:
the application isolation subunit is used for isolating data and codes among the application APPs through the container;
a file encryption subunit, configured to protect data of the device through an encrypted file system;
an application authorization subunit, configured to limit a system function and a user function of an application APP by using an authorization module;
the access authority setting subunit is used for controlling the access of each application APP to the application APP according to the authority level specified by the application APP;
and the digital signature subunit is used for limiting the trust relationship between the developer and the application APP by using the digital signature.
8. The multi-protocol application framework system of claim 5 wherein the resource management component unit comprises:
the resource monitoring subunit is used for monitoring CPU, memory and network throughput resources;
the resource scheduling subunit is used for distributing CPU, memory and network throughput resources in nodes and application containers based on the same network environment, so as to ensure balanced performance;
and the hardware interface management subunit is used for virtualizing the hardware interface and IO and providing the hardware interface and IO with authorized application APP access.
9. The multi-protocol application framework system of claim 5 wherein the cross-platform light application management component unit comprises:
the engine type selection subunit is used for acquiring, improving and increasing parameter transformation of the JS engine according to requirements;
an engine interface embedding subunit for transmitting the script of the processing request to the engine through the API of the embedding selection engine;
and the information return subunit is used for outputting state information and a return value to the application APP after the engine processing request is received.
10. The multi-protocol application framework system of claim 1 wherein the cross-platform application execution engine module comprises:
the dynamic loading management unit is used for managing the application APP installation running package according to the configuration information and dynamically loading and unloading the application APP software package smaller than the set size threshold;
the system comprises a runtime environment construction unit, a context execution unit and a control unit, wherein the runtime environment construction unit is used for constructing a multi-process context runtime environment for each application APP and dynamically creating a runtime environment for application APP execution smaller than a set threshold value;
the runtime interface unit is used for constructing a runtime interface according to the service function requirement and the general standard interface specification of the multi-protocol framework base library module and providing the runtime interface for the application APP dynamic call smaller than the set threshold value;
the runtime monitoring unit is used for providing monitoring management for the start, the trigger, the stop and the pause of the light application, counting error information and outputting printing information;
and the persistence unit is used for managing the running files and the configuration files of the light application and uniformly managing and storing the files needing to be solidified in the running process.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202310446821.7A CN116541184A (en) | 2023-04-23 | 2023-04-23 | Multi-protocol application framework system |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202310446821.7A CN116541184A (en) | 2023-04-23 | 2023-04-23 | Multi-protocol application framework system |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN116541184A true CN116541184A (en) | 2023-08-04 |
Family
ID=87446192
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202310446821.7A Pending CN116541184A (en) | 2023-04-23 | 2023-04-23 | Multi-protocol application framework system |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN116541184A (en) |
Cited By (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN116760812A (en) * | 2023-08-17 | 2023-09-15 | 福建博思软件股份有限公司 | Function component-based local resource access method and system |
| CN117270955A (en) * | 2023-11-17 | 2023-12-22 | 福建天创信息科技有限公司 | Unified management system of equipment based on websocket |
-
2023
- 2023-04-23 CN CN202310446821.7A patent/CN116541184A/en active Pending
Cited By (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN116760812A (en) * | 2023-08-17 | 2023-09-15 | 福建博思软件股份有限公司 | Function component-based local resource access method and system |
| CN117270955A (en) * | 2023-11-17 | 2023-12-22 | 福建天创信息科技有限公司 | Unified management system of equipment based on websocket |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US11720393B2 (en) | Enforcing compliance rules using guest management components | |
| US10025612B2 (en) | Enforcing compliance rules against hypervisor and host device using guest management components | |
| US10664592B2 (en) | Method and system to securely run applications using containers | |
| US20170270313A1 (en) | Managing applications in non-cooperative environments | |
| US20070245334A1 (en) | Methods, media and systems for maintaining execution of a software process | |
| CN116541184A (en) | Multi-protocol application framework system | |
| US8843926B2 (en) | Guest operating system using virtualized network communication | |
| US11477247B2 (en) | Systems and methods for authenticating platform trust in a network function virtualization environment | |
| US9917862B2 (en) | Integrated application scanning and mobile enterprise computing management system | |
| CN108604187B (en) | Hosted virtual machine deployment | |
| US10171502B2 (en) | Managed applications | |
| US9805197B2 (en) | Secure host operating system running a virtual guest operating system | |
| US20150067761A1 (en) | Managing security and compliance of volatile systems | |
| WO2019135133A1 (en) | Dynamic delivery of software functions | |
| CN113544675A (en) | Secure execution of client owner environment control symbols | |
| US20220277071A1 (en) | Enforcing policies for unmanaged applications | |
| US20190251255A1 (en) | Malicious code avoidance using transparent containers | |
| US10992713B2 (en) | Method of and system for authorizing user to execute action in electronic service | |
| US20160342788A1 (en) | Generating packages for managed applications | |
| CN108628620B (en) | POS application development implementation method and device, computer equipment and storage medium | |
| US20180069859A1 (en) | Mobile terminal and control method thereof | |
| CN115136133A (en) | Single use execution environment for on-demand code execution | |
| US11882123B2 (en) | Kernel level application data protection | |
| US20240103818A1 (en) | Annotation driven just in time and state-based rbac policy control | |
| US11481502B2 (en) | Technology for adaptive software discovery scan |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination |