CN104410644A - Data configuration method and device - Google Patents
Data configuration method and device Download PDFInfo
- Publication number
- CN104410644A CN104410644A CN201410779128.2A CN201410779128A CN104410644A CN 104410644 A CN104410644 A CN 104410644A CN 201410779128 A CN201410779128 A CN 201410779128A CN 104410644 A CN104410644 A CN 104410644A
- Authority
- CN
- China
- Prior art keywords
- client
- configuration information
- information
- routing configuration
- client identification
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/10—Network architectures or network communication protocols for network security for controlling access to devices or network resources
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/01—Protocols
- H04L67/02—Protocols based on web technology, e.g. hypertext transfer protocol [HTTP]
Abstract
The invention discloses a data configuration method and device. The method comprises the following steps: receiving an acquisition request sent by a client for acquiring first routing configuration information; responding to the acquisition request, acquiring the first routing configuration information matched with a first client logo according to the first client logo of the client, wherein the first routing configuration information is at least configured according to access authority information of the client under the first client logo; configuring the obtained first routing configuration information to the client, so that the client under the first client logo carries out page access through the first routing configuration information. The invention solves the technical problem of lower configuration safety caused by adoption of a data configuration method in the prior art, so that the page access is carried out through the routing configuration information dynamically configured according to the access authority information to achieve the effect of improving the safety of data configuration.
Description
Technical field
The present invention relates to computer realm, in particular to a kind of data configuration method and device.
Background technology
At present, when client loads Website page, usually can comprise following two kinds to the way to manage of URL(uniform resource locator) (Uniform Resource Locator, URL), be front end routing configuration and rear end routing configuration respectively.Wherein, by the management of front end route to URL, be by the routing rule of front end JavaScr ipt script according to the URL configured in advance and the page, the data in different URL are directly carried out playing up in the client of front end load and show; And rear end route is to the management of URL, be by the response of controller in the server of rear end from the request of the client of front end, different URL request is routed on different controllers, then returns to the client of front end again after being rendered into the page.
But, if adopt front end routing configuration mode, because above-mentioned routing rule is configured in the client of front end in advance, and server cannot control it again, such as, if server needs the page controlling to return user's access based on user right, or when activity is done in certain website, need server to return different loose-leaf according to different time, above-mentioned situation all cannot pass through front end route implementing.Further, because routing rule is placed on front end, user directly by checking that source file sees all configurations, then can may make website under attack or invasion according to this configuration.That is, the configuration mode controllability of front end route, flexibility are poor, and fail safe is also not enough.
In addition, if adopt rear end routing configuration mode, owing to needing for controller corresponding to different URL request configuration, thus the request that often increase by is different, just be required to be the controller that this request increases a route mapping and processes this request, which adds time and the cost of configuration, and along with the increase of asking, the also corresponding increase of process code, operation complexity also raises gradually; In addition, once go wrong, modify from back-end server, cost is also higher.
For the problem in correlation technique, at present effective solution is not yet proposed.
Summary of the invention
Main purpose of the present invention is to provide a kind of data configuration method and device, at least to solve the problem owing to adopting data configuration method causes in prior art configuration fail safe lower.
According to an aspect of the present invention, provide a kind of data configuration method, the method comprises: receive the acquisition request for obtaining the first routing configuration information that client sends; Respond above-mentioned acquisition request and obtain above-mentioned first routing configuration information of mating with above-mentioned first client identification according to the first client identification of above-mentioned client, wherein, above-mentioned first routing configuration information is at least according to the access authority information configuration of above-mentioned client under above-mentioned first client identification; Above-mentioned first routing configuration information got is configured to above-mentioned client, carries out page access to make the above-mentioned client under above-mentioned first client identification by above-mentioned first routing configuration information.
Alternatively, above-mentioned response above-mentioned acquisition request obtains above-mentioned first routing configuration information of mating with above-mentioned first client identification according to the first client identification of above-mentioned client and comprises: search the above-mentioned access authority information of above-mentioned client under above-mentioned first client identification according to above-mentioned first client identification, wherein, above-mentioned access authority information comprises and is used to indicate whether above-mentioned client has access rights under above-mentioned first client identification indication information to accessed accession page; According to above-mentioned first routing configuration information of above-mentioned access authority information configuration.
Alternatively, above-mentionedly to comprise according to above-mentioned first routing configuration information of above-mentioned access authority information configuration: judge whether above-mentioned client has above-mentioned access rights to above-mentioned accession page under above-mentioned first client identification according to above-mentioned access authority information; If judge, above-mentioned client has above-mentioned access rights to above-mentioned accession page under above-mentioned first client identification, then above-mentioned accession page and the reference address corresponding with above-mentioned accession page are configured in above-mentioned first routing configuration information, obtain above-mentioned accession page to make the above-mentioned client under above-mentioned first client identification according to above-mentioned reference address.
Alternatively, above-mentioned to judge that according to above-mentioned access authority information whether above-mentioned client has above-mentioned access rights to above-mentioned accession page under above-mentioned first client identification after, also comprise: if judge, above-mentioned client does not have above-mentioned access rights to above-mentioned accession page under above-mentioned first client identification, then perform following at least one configuration operation: in above-mentioned first routing configuration information, state accession page and the above-mentioned reference address corresponding with above-mentioned accession page by being unworthy of being set up; To only configure above-mentioned reference address corresponding to above-mentioned accession page in above-mentioned first routing configuration information, above-mentioned accession page is configured to sky; To only configure above-mentioned reference address corresponding to above-mentioned accession page in above-mentioned first routing configuration information, above-mentioned accession page is configured to the information for pointing out configuration failure.
Alternatively, above-mentioned above-mentioned first routing configuration information got is configured to above-mentioned client after, also comprise: receive above-mentioned client send the acquisition request for obtaining secondary route configuration information; Respond above-mentioned acquisition request and obtain according to the second client identification of above-mentioned client the above-mentioned secondary route configuration information mated with above-mentioned second client identification, wherein, above-mentioned secondary route configuration information is at least according to the access authority information configuration of above-mentioned client under above-mentioned second client identification; The above-mentioned secondary route configuration information got is configured to above-mentioned client, carries out page access to make the above-mentioned client under above-mentioned second client identification by above-mentioned secondary route configuration information.
Alternatively, above-mentioned above-mentioned first routing configuration information got configuration comprises to above-mentioned client: above-mentioned first routing configuration information is sent to the above-mentioned client under above-mentioned first client identification.
According to a further aspect in the invention, provide a kind of data configuration device, this device comprises: the first receiving element, for receiving the acquisition request for obtaining the first routing configuration information that client sends; First acquiring unit, above-mentioned first routing configuration information of mating with above-mentioned first client identification is obtained according to the first client identification of above-mentioned client for responding above-mentioned acquisition request, wherein, above-mentioned first routing configuration information is at least according to the access authority information configuration of above-mentioned client under above-mentioned first client identification; First dispensing unit, for configuring to above-mentioned client by above-mentioned first routing configuration information got, carries out page access to make the above-mentioned client under above-mentioned first client identification by above-mentioned first routing configuration information.
Alternatively, above-mentioned first acquiring unit comprises: search module, for searching the above-mentioned access authority information of above-mentioned client under above-mentioned first client identification according to above-mentioned first client identification, wherein, above-mentioned access authority information comprises and is used to indicate whether above-mentioned client has access rights under above-mentioned first client identification indication information to accessed accession page; Configuration module, for configuring above-mentioned first routing configuration information according to above-mentioned access authority information.
Alternatively, above-mentioned configuration module comprises: judge submodule, for judging according to above-mentioned access authority information whether client has above-mentioned access rights to above-mentioned accession page under above-mentioned first client identification; First configuration submodule, for when judging that above-mentioned client has above-mentioned access rights to above-mentioned accession page under above-mentioned first client identification, above-mentioned accession page and the reference address corresponding with above-mentioned accession page are configured in above-mentioned first routing configuration information, obtain above-mentioned accession page to make the above-mentioned client under above-mentioned first client identification according to above-mentioned reference address.
Alternatively, above-mentioned configuration module also comprises: the second configuration submodule, for above-mentioned to judge that according to above-mentioned access authority information whether above-mentioned client has above-mentioned access rights to above-mentioned accession page under above-mentioned first client identification after, judging that above-mentioned client does not have above-mentioned access rights to above-mentioned accession page under above-mentioned first client identification, then performing following at least one configuration operation: in above-mentioned first routing configuration information, stating accession page and the above-mentioned reference address corresponding with above-mentioned accession page by being unworthy of being set up; To only configure above-mentioned reference address corresponding to above-mentioned accession page in above-mentioned first routing configuration information, above-mentioned accession page is configured to sky; To only configure above-mentioned reference address corresponding to above-mentioned accession page in above-mentioned first routing configuration information, above-mentioned accession page is configured to the information for pointing out configuration failure.
Alternatively, said apparatus also comprises: the second receiving element, for above-mentioned above-mentioned first routing configuration information got is configured to above-mentioned client after, receive above-mentioned client send the acquisition request for obtaining secondary route configuration information; Second acquisition unit, obtain according to the second client identification of above-mentioned client the above-mentioned secondary route configuration information mated with above-mentioned second client identification for responding above-mentioned acquisition request, wherein, above-mentioned secondary route configuration information is at least according to the access authority information configuration of above-mentioned client under above-mentioned second client identification; Second dispensing unit, for configuring to above-mentioned client by the above-mentioned secondary route configuration information got, carries out page access to make the above-mentioned client under above-mentioned second client identification by above-mentioned secondary route configuration information.
Alternatively, above-mentioned first dispensing unit comprises: sending module, for above-mentioned first routing configuration information is sent to the above-mentioned client under above-mentioned first client identification.
By the embodiment that the application provides, by the acquisition request for obtaining the first routing configuration information that customer in response end sends under the first client identification, Dynamic Acquisition is at least according to the first routing configuration information that the access authority information of the first client identification configures, make client when utilizing above-mentioned first routing configuration information to carry out page loading, only can load the page with authority access, and the accession page without access rights can not be loaded, thus reach for the protection of different users realization to the heterogeneous networks page, avoid all pages to open to all clients and the lower problem of the fail safe caused, and then reach the object improving Information Security.In addition, because the routing configuration information in the present embodiment according to the configuration of acquisition request dynamic, thus can realize the routing configuration information of adjustment client in real time, and then controllability and the flexibility ratio of data configuration is also improved.
Accompanying drawing explanation
The accompanying drawing forming a application's part is used to provide a further understanding of the present invention, and schematic description and description of the present invention, for explaining the present invention, does not form inappropriate limitation of the present invention.In the accompanying drawings:
Fig. 1 is the flow chart of a kind of optional data configuration method according to the embodiment of the present invention;
Fig. 2 is the flow chart according to the optional data configuration method of the another kind of the embodiment of the present invention; And
Fig. 3 is the schematic diagram of a kind of optional data configuration device according to the embodiment of the present invention.
Embodiment
It should be noted that, when not conflicting, the embodiment in the application and the feature in embodiment can combine mutually.Below with reference to the accompanying drawings and describe the present invention in detail in conjunction with the embodiments.
Embodiment 1
According to the embodiment of the present invention, provide a kind of data configuration method, as shown in Figure 1, the method comprises:
S102, receives the acquisition request for obtaining the first routing configuration information that client sends;
S104, response obtains request and obtains first routing configuration information of mating with the first client identification according to the first client identification of client, and wherein, the first routing configuration information is at least according to the access authority information configuration of client under the first client identification;
S106, configures to client by the first routing configuration information got, and carries out page access to make the client under the first client identification by the first routing configuration information.
Alternatively, in the present embodiment, above-mentioned data configuration method can be, but not limited to be applied in the routing configuration process of client, before client loads the accession page that will access under the first client identification, need first configure corresponding routing configuration information.Such as, the front end route provided in prior art, namely the page address of the page and the correspondence that will load first is obtained, and be cached to client, directly can play up the page of display institute request of loading when loading, but existing front end routing mode opens due to routing configuration information to all clients, client can, directly by checking that source file views corresponding routing configuration information, thus cause the fail safe of routing configuration information lower.
Further; in order to solve this technical problem; propose data configuration method described in the present embodiment; by the first routing configuration information that the access authority information at least according to the first client identification configures; make client when utilizing above-mentioned routing configuration information to load; the page without access rights cannot be loaded, thus reach for the protection of different users realization to the heterogeneous networks page, and then reach the object improving Information Security.
It should be noted that, above-mentioned access authority information can include but not limited to following one of at least: to the loading authority of the page, corresponding region language authority information, corresponding time controling authority information.Such as, for corresponding region language authority information, then server is after receiving the acquisition request of client under the first client identification, will according to the first client identification region (such as, China) judge that this client has Chinese access rights under the first client identification, thus the language page that matches with this region will be returned (such as, Chinese the page) routing configuration information, to make the data of client loaded and displayed under the first client identification for the Chinese page.Further, above-mentioned access authority information can include but not limited to be used to indicate whether client has access rights under the first client identification indication information to accessed accession page.Such as, indicate and this accession page is had permission, represent with indication information " 1 ", indicate and do not have authority then to represent with indication information " 0 " to this accession page.Above-mentioned citing is a kind of example, and the present embodiment is not construed as limiting this.
Alternatively, in the present embodiment, above-mentioned client can include but not limited to one or more, and wherein, each client can be, but not limited to log in multiple different account respectively and carries out Data import.Further, above-mentioned client can be, but not limited to be positioned in terminal, wherein, above-mentioned terminal can include but not limited to following one of at least: mobile phone, notebook computer, panel computer, PC, Digital Television.Alternatively, in the present embodiment, above-mentioned client identification can include but not limited to following one of at least: log in the account of this client, the identification number of client place terminal, the IP address of client.
Be described shown in concrete composition graphs 2, client identification, for logged in account, supposes existing customer 202 login account ID-1, then in order to obtain the routing configuration information of mating with account, will perform following steps with server 204:
S202, client 202 sends the acquisition request for obtaining the routing configuration information of mating with account ID-1 to server 204;
S204, server 204 responds above-mentioned acquisition request and searches the access authority information of mating with above-mentioned account ID-1, and at least according to this access authority information configuration routing configuration information;
S206, server 204 sends above-mentioned routing configuration information to client 202.
By the embodiment that the application provides, by the acquisition request for obtaining the first routing configuration information that customer in response end sends under the first client identification, Dynamic Acquisition is at least according to the first routing configuration information that the access authority information of the first client identification configures, make client when utilizing above-mentioned first routing configuration information to carry out page loading, only can load the page with authority access, and the accession page without access rights can not be loaded, thus reach for the protection of different users realization to the heterogeneous networks page, avoid all pages to open to all clients and the lower problem of the fail safe caused, and then reach the object improving Information Security.In addition, because the routing configuration information in the present embodiment according to the configuration of acquisition request dynamic, thus can realize the routing configuration information of adjustment client in real time, and then controllability and the flexibility ratio of data configuration is also improved.
As the optional scheme of one, response acquisition request obtains first routing configuration information of mating with the first client identification according to the first client identification of client and comprises:
S1, the access authority information of client under the first client identification is searched according to the first client identification, wherein, access authority information comprises and is used to indicate whether client has access rights under the first client identification indication information to accessed accession page;
S2, configures the first routing configuration information according to access authority information.
Alternatively, in the present embodiment, after receiving the request of acquisition, respond this acquisition request and will search the access authority information of this client under the first client identification.Wherein, can include but not limited in above-mentioned access authority information be used to indicate whether client has access rights under the first client identification indication information to accessed accession page.Such as, have permission this accession page with indication information " 1 " instruction, indication information " 0 " instruction does not have authority to this accession page.Specifically, table 1 shows the access authority information of client account ID-1.
Table 1
| Client account | Page iden-tity | Access authority information |
| ID-1 | Page A | 1 |
| ID-1 | Page B | 0 |
| ID-1 | Page C | 0 |
| ID-1 | Page D | 1 |
Further, utilize above-mentioned access authority information to configure the first routing configuration information, the mode of configuration can include but not limited to: the reference address determining whether the configuration access page and correspondence in the first routing configuration information according to access authority information.
It should be noted that, when judging that there are access rights, can the page of configuration access simultaneously and corresponding reference address.And when judging that not there are access rights, then can be unworthy of being set up the reference address stating accession page and correspondence.Then do not send corresponding accession page and the reference address of correspondence to client owing to not having access rights, thus realize the effect of saving data transfer bandwidth.In addition, when judging that not there are access rights, only reference address corresponding for accession page can also be configured to the first routing configuration information and send to client, and accession page can be configured to sky, or be configured to the information of configuration failure, when accessing this accession page to make client by reference address, cannot load page due to authority restriction.
By the embodiment that the application provides, by first finding at server and the access authority information of client under the first client identification, and then according to the corresponding routing configuration information of this access authority information dynamic-configuration.That is, the routing configuration information configured each time is all just dynamically generate after response acquisition request finds corresponding information, thus achieves the flexibility ratio of data configuration.
As the optional scheme of one, configure the first routing configuration information according to access authority information and comprise:
According to access authority information, S1, judges whether client has access rights to accession page under the first client identification;
S2, if judge, client has access rights to accession page under the first client identification, then accession page and the reference address corresponding with accession page are configured in the first routing configuration information, obtain accession page to make the client under the first client identification according to reference address.
Alternatively, in the present embodiment, after judging that according to access authority information whether client has access rights to accession page under the first client identification, also comprise:
S3, if judge, client does not have access rights to accession page under the first client identification, then perform following at least one configuration operation:
1) accession page and the reference address corresponding with accession page will do not configured in the first routing configuration information;
2) in the first routing configuration information by reference address corresponding for the only configuration access page, accession page is configured to sky;
3) in the first routing configuration information by reference address corresponding for the only configuration access page, accession page is configured to the information for pointing out configuration failure.
Specifically be described in conjunction with following example, suppose that client logs is to account ID-1, server finds access authority information corresponding to this account according to this account, such as, table 1 is depicted as this account and has access rights to page A and page D, and to page B and page C, not there are access rights, then by the reference address of the data in page A and page A, and in the reference address configuration routing configuration information of data in page B and page B, and then this routing configuration information is configured to client, directly the data in the corresponding page can be loaded according to above-mentioned reference address to make client.
Further, for the page B and the page C that there is no access rights, then selecting not configure the data in the page of page B and page C and reference address in the first routing configuration information of client configuration, to avoid wasting limited bandwidth resources.
By the embodiment that the application provides, by judging whether have access rights to accessed accession page under the first client identification, thus the routing configuration information realized needed for dynamic-configuration client, to make client can according to the corresponding page of corresponding authority limiting access, thus avoid because client can check that source file configuration cannot carry out the lower problem of Information Security that priority assignation neatly causes in front end, and then while the fail safe that improve data, also improve controllability and the flexibility ratio of data configuration.
As the optional scheme of one, after the get first routing configuration information is configured to client, also comprise:
S1, receives the acquisition request for obtaining secondary route configuration information that client sends;
S2, response obtains request and obtains according to the second client identification of client the secondary route configuration information mated with the second client identification, and wherein, secondary route configuration information is at least according to the access authority information configuration of client under the second client identification;
S3, configures to client by the secondary route configuration information got, and carries out page access to make the client under the second client identification by secondary route configuration information.
Alternatively, in the present embodiment, above-mentioned client identification can include but not limited to following one of at least: log in the account of this client, the identification number of client place terminal, the IP address of client.Alternatively, in the present embodiment, above-mentioned first client identification and above-mentioned second client identification can be, but not limited to be the identification information to same client, such as, log in the different accounts of same client, or, use the different terminals of same client, above-mentioned citing is a kind of example, and the present embodiment is not limited only to this.
By the embodiment that the application provides, client sends the acquisition request for obtaining secondary route configuration information under the second client identification, thus make server can the secondary route configuration information that mates with above-mentioned second client identification of Dynamic Acquisition, to make server after getting corresponding secondary route configuration information, the secondary route configuration information got is sent to client.That is, server obtains the routing configuration information corresponding with account according to the listed account of client in real time by realizing, thus realize server can according to client send acquisition request, dynamic-configuration generates corresponding routing configuration information, and then configures the routing configuration information obtained to corresponding client.
As the optional scheme of one, the first routing configuration information got is configured and comprises to client:
S1, sends to the client under the first client identification by the first routing configuration information.
Alternatively, in the present embodiment, above-mentioned routing configuration information sends to the client be under the first client identification, and that is, routing configuration information sends to corresponding user account, instead of all unifiedly send to all clients.
By the embodiment that the application provides, by the first routing configuration information being sent to client corresponding under the first client identification, thus ensure client access rights access respective page according to the first client identification under the first client identification, corresponding routing configuration information can be got flexibly according to different accounts to make client, avoid different account to the invasion of the page or attack simultaneously, ensure the safety of the page further.
It should be noted that, can perform in the computer system of such as one group of computer executable instructions in the step shown in the flow chart of accompanying drawing, and, although show logical order in flow charts, but in some cases, can be different from the step shown or described by order execution herein.
Embodiment 2
According to the embodiment of the present invention, additionally provide a kind of data configuration device for implementing above-mentioned data configuration method, as shown in Figure 3, this device comprises:
1) the first receiving element 302, for receiving the acquisition request for obtaining the first routing configuration information that client sends;
2) the first acquiring unit 304, first routing configuration information of mating with the first client identification is obtained according to the first client identification of client for responding the request of acquisition, wherein, the first routing configuration information is at least according to the access authority information configuration of client under the first client identification;
3) the first dispensing unit 306, for configuring to client by the get first routing configuration information, carries out page access to make the client under the first client identification by the first routing configuration information.
Alternatively, in the present embodiment, above-mentioned data configuration device can be, but not limited to be applied in the routing configuration process of client, before client loads the accession page that will access under the first client identification, need first configure corresponding routing configuration information.Such as, the front end route provided in prior art, namely the page address of the page and the correspondence that will load first is obtained, and be cached to client, directly can play up the page of display institute request of loading when loading, but existing front end routing mode opens due to routing configuration information to all clients, client can, directly by checking that source file views corresponding routing configuration information, thus cause the fail safe of routing configuration information lower.
Further; in order to solve this technical problem; propose data configuration method described in the present embodiment; by the first routing configuration information that the access authority information at least according to the first client identification configures; make client when utilizing above-mentioned routing configuration information to load; the page without access rights cannot be loaded, thus reach for the protection of different users realization to the heterogeneous networks page, and then reach the object improving Information Security.
It should be noted that, above-mentioned access authority information can include but not limited to following one of at least: to the loading authority of the page, corresponding region language authority information, corresponding time controling authority information.Such as, for corresponding region language authority information, then server is after receiving the acquisition request of client under the first client identification, will according to the first client identification region (such as, China) judge that this client has Chinese access rights under the first client identification, thus the language page that matches with this region will be returned (such as, Chinese the page) routing configuration information, to make the data of client loaded and displayed under the first client identification for the Chinese page.Further, above-mentioned access authority information can include but not limited to be used to indicate whether client has access rights under the first client identification indication information to accessed accession page.Such as, indicate and this accession page is had permission, represent with indication information " 1 ", indicate and do not have authority then to represent with indication information " 0 " to this accession page.Above-mentioned citing is a kind of example, and the present embodiment is not construed as limiting this.
Alternatively, in the present embodiment, above-mentioned client can include but not limited to one or more, and wherein, each client can be, but not limited to log in multiple different account respectively and carries out Data import.Further, above-mentioned client can be, but not limited to be positioned in terminal, wherein, above-mentioned terminal can include but not limited to following one of at least: mobile phone, notebook computer, panel computer, PC, Digital Television.Alternatively, in the present embodiment, above-mentioned client identification can include but not limited to following one of at least: log in the account of this client, the identification number of client place terminal, the IP address of client.
Be described shown in concrete composition graphs 2, client identification, for logged in account, supposes existing customer 202 login account ID-1, then in order to obtain the routing configuration information of mating with account, will perform following steps with server 204:
S202, client 202 sends the acquisition request for obtaining the routing configuration information of mating with account ID-1 to server 204;
S204, server 204 responds above-mentioned acquisition request and searches the access authority information of mating with above-mentioned account ID-1, and at least according to this access authority information configuration routing configuration information;
S206, server 204 sends above-mentioned routing configuration information to client 202.
By the embodiment that the application provides, by the acquisition request for obtaining the first routing configuration information that customer in response end sends under the first client identification, Dynamic Acquisition is at least according to the first routing configuration information that the access authority information of the first client identification configures, make client when utilizing above-mentioned first routing configuration information to carry out page loading, only can load the page with authority access, and the accession page without access rights can not be loaded, thus reach for the protection of different users realization to the heterogeneous networks page, avoid all pages to open to all clients and the lower problem of the fail safe caused, and then reach the object improving Information Security.In addition, because the routing configuration information in the present embodiment according to the configuration of acquisition request dynamic, thus can realize the routing configuration information of adjustment client in real time, and then controllability and the flexibility ratio of data configuration is also improved.
As the optional scheme of one, the first acquiring unit 304 comprises:
1) module is searched, for searching the access authority information of client under the first client identification according to the first client identification, wherein, access authority information comprises and is used to indicate whether client has access rights under the first client identification indication information to accessed accession page;
2) configuration module, for configuring the first routing configuration information according to access authority information.
Alternatively, in the present embodiment, after receiving the request of acquisition, respond this acquisition request and will search the access authority information of this client under the first client identification.Wherein, can include but not limited in above-mentioned access authority information be used to indicate whether client has access rights under the first client identification indication information to accessed accession page.Such as, have permission this accession page with indication information " 1 " instruction, indication information " 0 " instruction does not have authority to this accession page.Specifically, table 1 shows the access authority information of client account ID-1.
Table 2
| Client account | Page iden-tity | Access authority information |
| ID-1 | Page A | 1 |
| ID-1 | Page B | 0 |
| ID-1 | Page C | 0 |
| ID-1 | Page D | 1 |
Further, utilize above-mentioned access authority information to configure the first routing configuration information, the mode of configuration can include but not limited to: the reference address determining whether the configuration access page and correspondence in the first routing configuration information according to access authority information.
It should be noted that, when judging that there are access rights, can the page of configuration access simultaneously and corresponding reference address.And when judging that not there are access rights, then can be unworthy of being set up the reference address stating accession page and correspondence.Then do not send corresponding accession page and the reference address of correspondence to client owing to not having access rights, thus realize the effect of saving data transfer bandwidth.In addition, when judging that not there are access rights, only reference address corresponding for accession page can also be configured to the first routing configuration information and send to client, and accession page can be configured to sky, or be configured to the information of configuration failure, when accessing this accession page to make client by reference address, cannot load page due to authority restriction.
By the embodiment that the application provides, by first finding at server and the access authority information of client under the first client identification, and then according to the corresponding routing configuration information of this access authority information dynamic-configuration.That is, the routing configuration information configured each time is all just dynamically generate after response acquisition request finds corresponding information, thus achieves the flexibility ratio of data configuration.
As the optional scheme of one, configuration module comprises:
1) submodule is judged, for judging according to access authority information whether client has access rights to accession page under the first client identification;
2) the first configuration submodule, for when judging that client has access rights to accession page under the first client identification, accession page and the reference address corresponding with accession page are configured in the first routing configuration information, obtain accession page to make the client under the first client identification according to reference address.
Alternatively, in the present embodiment, configuration module also comprises:
3) the second configuration submodule, for described to judge that according to described access authority information whether described client has described access rights to described accession page under described first client identification after, judging that described client does not have described access rights to described accession page under described first client identification, then performing following at least one configuration operation:
Accession page and the reference address corresponding with accession page will do not configured in (1) first routing configuration information;
By reference address corresponding for the only configuration access page in (2) first routing configuration information, accession page is configured to sky;
By reference address corresponding for the only configuration access page in (3) first routing configuration information, accession page is configured to the information for pointing out configuration failure.
Specifically be described in conjunction with following example, suppose that client logs is to account ID-1, server finds access authority information corresponding to this account according to this account, such as, table 1 is depicted as this account and has access rights to page A and page D, and to page B and page C, not there are access rights, then by the reference address of the data in page A and page A, and in the reference address configuration routing configuration information of data in page B and page B, and then this routing configuration information is configured to client, directly the data in the corresponding page can be loaded according to above-mentioned reference address to make client.
Further, for the page B and the page C that there is no access rights, then selecting not configure the data in the page of page B and page C and reference address in the first routing configuration information of client configuration, to avoid wasting limited bandwidth resources.
By the embodiment that the application provides, by judging whether have access rights to accessed accession page under the first client identification, thus the routing configuration information realized needed for dynamic-configuration client, to make client can according to the corresponding page of corresponding authority limiting access, thus avoid because client can check that source file configuration cannot carry out the lower problem of Information Security that priority assignation neatly causes in front end, and then while the fail safe that improve data, also improve controllability and the flexibility ratio of data configuration.
As the optional scheme of one, said apparatus also comprises:
1) the second receiving element, for after configuring to client by the get first routing configuration information, receives the acquisition request for obtaining secondary route configuration information that client sends;
2) second acquisition unit, obtain according to the second client identification of client the secondary route configuration information mated with the second client identification for responding the request of acquisition, wherein, secondary route configuration information is at least according to the access authority information configuration of client under the second client identification;
3) the second dispensing unit, for configuring to client by the secondary route got configuration information, carries out page access to make the client under the second client identification by secondary route configuration information.
Alternatively, in the present embodiment, above-mentioned client identification can include but not limited to following one of at least: log in the account of this client, the identification number of client place terminal, the IP address of client.Alternatively, in the present embodiment, above-mentioned first client identification and above-mentioned second client identification can be, but not limited to be the identification information to same client, such as, log in the different accounts of same client, or, use the different terminals of same client, above-mentioned citing is a kind of example, and the present embodiment is not limited only to this.
By the embodiment that the application provides, client sends the acquisition request for obtaining secondary route configuration information under the second client identification, thus make server can the secondary route configuration information that mates with above-mentioned second client identification of Dynamic Acquisition, to make server after getting corresponding secondary route configuration information, the secondary route configuration information got is sent to client.That is, server obtains the routing configuration information corresponding with account according to the listed account of client in real time by realizing, thus realize server can according to client send acquisition request, dynamic-configuration generates corresponding routing configuration information, and then configures the routing configuration information obtained to corresponding client.
As the optional scheme of one, the first dispensing unit 306 comprises:
1) sending module, for sending to the client under the first client identification by the first routing configuration information.
Alternatively, in the present embodiment, above-mentioned routing configuration information sends to the client be under the first client identification, and that is, routing configuration information sends to corresponding user account, instead of all unifiedly send to all clients.
By the embodiment that the application provides, by the first routing configuration information being sent to client corresponding under the first client identification, thus ensure client access rights access respective page according to the first client identification under the first client identification, corresponding routing configuration information can be got flexibly according to different accounts to make client, avoid different account to the invasion of the page or attack simultaneously, ensure the safety of the page further.
Obviously, those skilled in the art should be understood that, above-mentioned of the present invention each module or each step can realize with general calculation element, they can concentrate on single calculation element, or be distributed on network that multiple calculation element forms, alternatively, they can realize with the executable program code of calculation element, thus, they can be stored and be performed by calculation element in the storage device, or they are made into each integrated circuit modules respectively, or the multiple module in them or step are made into single integrated circuit module to realize.Like this, the present invention is not restricted to any specific hardware and software combination.
The foregoing is only the preferred embodiments of the present invention, be not limited to the present invention, for a person skilled in the art, the present invention can have various modifications and variations.Within the spirit and principles in the present invention all, any amendment done, equivalent replacement, improvement etc., all should be included within protection scope of the present invention.
Claims (12)
1. a data configuration method, is characterized in that, comprising:
Receive the acquisition request for obtaining the first routing configuration information that client sends;
Respond described acquisition request and obtain described first routing configuration information of mating with described first client identification according to the first client identification of described client, wherein, described first routing configuration information is at least according to the access authority information configuration of described client under described first client identification;
Described first routing configuration information got is configured to described client, carries out page access to make the described client under described first client identification by described first routing configuration information.
2. method according to claim 1, is characterized in that, the described acquisition request of described response obtains described first routing configuration information of mating with described first client identification according to the first client identification of described client and comprises:
The described access authority information of described client under described first client identification is searched according to described first client identification, wherein, described access authority information comprises and is used to indicate whether described client has access rights under described first client identification indication information to accessed accession page;
According to described first routing configuration information of described access authority information configuration.
3. method according to claim 2, is characterized in that, describedly comprises according to described first routing configuration information of described access authority information configuration:
Judge whether described client has described access rights to described accession page under described first client identification according to described access authority information;
If judge, described client has described access rights to described accession page under described first client identification, then described accession page and the reference address corresponding with described accession page are configured in described first routing configuration information, obtain described accession page to make the described client under described first client identification according to described reference address.
4. method according to claim 3, is characterized in that, described to judge that according to described access authority information whether described client has described access rights to described accession page under described first client identification after, also comprise:
If judge, described client does not have described access rights to described accession page under described first client identification, then perform following at least one configuration operation:
Described accession page and the described reference address corresponding with described accession page will do not configured in described first routing configuration information;
To only configure described reference address corresponding to described accession page in described first routing configuration information, described accession page is configured to sky;
To only configure described reference address corresponding to described accession page in described first routing configuration information, described accession page is configured to the information for pointing out configuration failure.
5. method according to claim 1, is characterized in that, described described first routing configuration information got is configured to described client after, also comprise:
Receive the acquisition request for obtaining secondary route configuration information that described client sends;
Respond described acquisition request and obtain according to the second client identification of described client the described secondary route configuration information mated with described second client identification, wherein, described secondary route configuration information is at least according to the access authority information configuration of described client under described second client identification;
The described secondary route configuration information got is configured to described client, carries out page access to make the described client under described second client identification by described secondary route configuration information.
6. method according to claim 1, is characterized in that, described described first routing configuration information got configuration comprises to described client:
Described first routing configuration information is sent to the described client under described first client identification.
7. a data configuration device, is characterized in that, comprising:
First receiving element, for receiving the acquisition request for obtaining the first routing configuration information that client sends;
First acquiring unit, described first routing configuration information of mating with described first client identification is obtained according to the first client identification of described client for responding described acquisition request, wherein, described first routing configuration information is at least according to the access authority information configuration of described client under described first client identification;
First dispensing unit, for configuring to described client by described first routing configuration information got, carries out page access to make the described client under described first client identification by described first routing configuration information.
8. device according to claim 7, is characterized in that, described first acquiring unit comprises:
Search module, for searching the described access authority information of described client under described first client identification according to described first client identification, wherein, described access authority information comprises and is used to indicate whether described client has access rights under described first client identification indication information to accessed accession page;
Configuration module, for configuring described first routing configuration information according to described access authority information.
9. device according to claim 8, is characterized in that, described configuration module comprises:
Judge submodule, for judging according to described access authority information whether client has described access rights to described accession page under described first client identification;
First configuration submodule, for when judging that described client has described access rights to described accession page under described first client identification, described accession page and the reference address corresponding with described accession page are configured in described first routing configuration information, obtain described accession page to make the described client under described first client identification according to described reference address.
10. device according to claim 9, is characterized in that, described configuration module also comprises:
Second configuration submodule, for described to judge that according to described access authority information whether described client has described access rights to described accession page under described first client identification after, judging that described client does not have described access rights to described accession page under described first client identification, then performing following at least one configuration operation:
Described accession page and the described reference address corresponding with described accession page will do not configured in described first routing configuration information;
To only configure described reference address corresponding to described accession page in described first routing configuration information, described accession page is configured to sky;
To only configure described reference address corresponding to described accession page in described first routing configuration information, described accession page is configured to the information for pointing out configuration failure.
11. devices according to claim 7, is characterized in that, also comprise:
Second receiving element, for described described first routing configuration information got is configured to described client after, receive described client send the acquisition request for obtaining secondary route configuration information;
Second acquisition unit, obtain according to the second client identification of described client the described secondary route configuration information mated with described second client identification for responding described acquisition request, wherein, described secondary route configuration information is at least according to the access authority information configuration of described client under described second client identification;
Second dispensing unit, for configuring to described client by the described secondary route configuration information got, carries out page access to make the described client under described second client identification by described secondary route configuration information.
12. devices according to claim 7, is characterized in that, described first dispensing unit comprises:
Sending module, for sending to the described client under described first client identification by described first routing configuration information.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201410779128.2A CN104410644A (en) | 2014-12-15 | 2014-12-15 | Data configuration method and device |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201410779128.2A CN104410644A (en) | 2014-12-15 | 2014-12-15 | Data configuration method and device |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN104410644A true CN104410644A (en) | 2015-03-11 |
Family
ID=52648242
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201410779128.2A Pending CN104410644A (en) | 2014-12-15 | 2014-12-15 | Data configuration method and device |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN104410644A (en) |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN109376316A (en) * | 2018-11-05 | 2019-02-22 | 珠海格力电器股份有限公司 | Method, system and the server of dynamically load routing |
Citations (10)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101030175A (en) * | 2006-02-28 | 2007-09-05 | 国际商业机器公司 | Universal serial bus storage device and access control method thereof |
| CN101056178A (en) * | 2007-05-28 | 2007-10-17 | 中兴通讯股份有限公司 | A method and system for controlling the user network access right |
| CN101552989A (en) * | 2009-05-20 | 2009-10-07 | 中国电信股份有限公司 | A user data configuration method, system and mobile line configuration gateway |
| CN101651697A (en) * | 2009-09-21 | 2010-02-17 | 杭州华三通信技术有限公司 | Method and equipment for managing network access authority |
| CN101686458A (en) * | 2008-09-28 | 2010-03-31 | 华为技术有限公司 | Terminal configuration, management method and terminal device |
| EP2180758A1 (en) * | 2008-02-04 | 2010-04-28 | Huawei Technologies Co., Ltd. | Configuration method and device of terminal equipment |
| CN101764742A (en) * | 2009-12-30 | 2010-06-30 | 福建星网锐捷网络有限公司 | Network resource visit control system and method |
| CN101917398A (en) * | 2010-06-28 | 2010-12-15 | 北京星网锐捷网络技术有限公司 | Method and equipment for controlling client access authority |
| CN101977187A (en) * | 2010-10-20 | 2011-02-16 | 中兴通讯股份有限公司 | Firewall policy distribution method, client, access server and system |
| CN103823815A (en) * | 2012-11-19 | 2014-05-28 | 中国联合网络通信集团有限公司 | Server and database access method |
-
2014
- 2014-12-15 CN CN201410779128.2A patent/CN104410644A/en active Pending
Patent Citations (10)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101030175A (en) * | 2006-02-28 | 2007-09-05 | 国际商业机器公司 | Universal serial bus storage device and access control method thereof |
| CN101056178A (en) * | 2007-05-28 | 2007-10-17 | 中兴通讯股份有限公司 | A method and system for controlling the user network access right |
| EP2180758A1 (en) * | 2008-02-04 | 2010-04-28 | Huawei Technologies Co., Ltd. | Configuration method and device of terminal equipment |
| CN101686458A (en) * | 2008-09-28 | 2010-03-31 | 华为技术有限公司 | Terminal configuration, management method and terminal device |
| CN101552989A (en) * | 2009-05-20 | 2009-10-07 | 中国电信股份有限公司 | A user data configuration method, system and mobile line configuration gateway |
| CN101651697A (en) * | 2009-09-21 | 2010-02-17 | 杭州华三通信技术有限公司 | Method and equipment for managing network access authority |
| CN101764742A (en) * | 2009-12-30 | 2010-06-30 | 福建星网锐捷网络有限公司 | Network resource visit control system and method |
| CN101917398A (en) * | 2010-06-28 | 2010-12-15 | 北京星网锐捷网络技术有限公司 | Method and equipment for controlling client access authority |
| CN101977187A (en) * | 2010-10-20 | 2011-02-16 | 中兴通讯股份有限公司 | Firewall policy distribution method, client, access server and system |
| CN103823815A (en) * | 2012-11-19 | 2014-05-28 | 中国联合网络通信集团有限公司 | Server and database access method |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN109376316A (en) * | 2018-11-05 | 2019-02-22 | 珠海格力电器股份有限公司 | Method, system and the server of dynamically load routing |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| EP3389219B1 (en) | Access request conversion method and device | |
| CN106330844B (en) | Cross-terminal login-free method and device | |
| CN104335523B (en) | A kind of authority control method, client and server | |
| CN103051630B (en) | Method, the Apparatus and system of third-party application mandate is realized based on open platform | |
| CN107635027B (en) | Domain name resolution method, medium, device and computing equipment | |
| CN106254451B (en) | Embedded device web menu control system and method | |
| CN104079543A (en) | Method, device and system for obtaining intelligent home system monitoring permissions | |
| CN104102537A (en) | Application calling method and user terminal | |
| CN104660409B (en) | The method of system login and certificate server cluster under cluster environment | |
| RU2651159C1 (en) | Method and device for marking unknown number | |
| CN105100263A (en) | Reverse proxy method and apparatus | |
| CN106453349B (en) | Account login method and device | |
| CN102904765A (en) | Method and equipment for data reporting | |
| CN105610993A (en) | Method, device and system for domain name resolution | |
| CN112291384B (en) | Information processing method for domain name resolution and electronic equipment | |
| CN104618388A (en) | Quick registration and login method and corresponding reset server and information server | |
| CN108494870B (en) | CDN-based dynamic data loading method and device | |
| CN106302400A (en) | The processing method and processing device of access request | |
| CN104202432A (en) | Remote web management system and method | |
| CN104410644A (en) | Data configuration method and device | |
| CN104320456B (en) | A kind of page push method and relevant device | |
| CN103428171A (en) | Session processing method, application server and system | |
| CN105245535A (en) | Multi-client uniform management method and system | |
| CN105939367A (en) | Method and device for pushing Web page | |
| CN108933794B (en) | Method, device, equipment and server for joining enterprise policy |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| RJ01 | Rejection of invention patent application after publication | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20150311 |