CN104410651B - A kind of Enterprise information system architecture under mobile internet environment - Google Patents

A kind of Enterprise information system architecture under mobile internet environment Download PDF

Info

Publication number
CN104410651B
CN104410651B CN201410823090.4A CN201410823090A CN104410651B CN 104410651 B CN104410651 B CN 104410651B CN 201410823090 A CN201410823090 A CN 201410823090A CN 104410651 B CN104410651 B CN 104410651B
Authority
CN
China
Prior art keywords
information system
gateway
service
enterprise
access
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN201410823090.4A
Other languages
Chinese (zh)
Other versions
CN104410651A (en
Inventor
李远贵
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Inspur General Software Co Ltd
Original Assignee
Inspur General Software Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Inspur General Software Co Ltd filed Critical Inspur General Software Co Ltd
Priority to CN201410823090.4A priority Critical patent/CN104410651B/en
Publication of CN104410651A publication Critical patent/CN104410651A/en
Application granted granted Critical
Publication of CN104410651B publication Critical patent/CN104410651B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00Network arrangements or protocols for supporting network services or applications
    • H04L67/01Protocols
    • H04L67/02Protocols based on web technology, e.g. hypertext transfer protocol [HTTP]
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/02Network architectures or network communication protocols for network security for separating internal from external traffic, e.g. firewalls
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/08Network architectures or network communication protocols for network security for authentication of entities
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00Network arrangements or protocols for supporting network services or applications
    • H04L67/01Protocols
    • H04L67/12Protocols specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks

Abstract

The invention discloses the Enterprise information system architectures under a kind of mobile internet environment, belong to mobile communication technology field.The framework realizes the isolation of the enterprise information system of public network environmental system and intranet environment by being deployed in the gateway of public network in hardware and software level;The technology and service adaptation under the service logic multiplexing of Legacy System and mixed deployment environment are realized by adapter assembly;Separate mobile terminal interface and the PC terminal interfaces towards business operation, and improve facing moving terminal interface configurations field default value and by way of calculating automatically according to service logic the ease for use of mobile terminal accessing information system;The security control of gateway switching Intranet Legacy System is carried out by security configuration strategy in gateway.Compared with prior art, information system structure of the invention enables enterprise to protect and leaves IT system investment, balance the security of Enterprise IT System and system accessibility demand, have good application value.

Description

A kind of Enterprise information system architecture under mobile internet environment
Technical field
The present invention relates to mobile communication technology field, the company information system under specifically a kind of mobile internet environment System framework.
Background technology
Internet, 3G mobile communication technologies, mobile terminal are fast-developing, make the mobile application of enterprise information system become existing It is real.Mobile enterprise application can promote enterprise's flattened management and Work Flow Optimizing, so as to significantly improve enterprise management efficiency, And promote commercial mode of enterprise, operation mode and management mode innovation, improve Chinese Enterprises international competitiveness.The demand of business is drawn The development of dynamic and technology promotes the enterprise information system that has triggered enterprise's deployment that can operate under mobile internet environment jointly Active demand.But mobile office demand proposes new challenge for enterprise information system:Mobile Internet requirement enterprise letter System deployment is ceased in public network, but it for security consideration is all to be deployed in Intranet that corporate boss, which wants information system, is resulted in addressable The contradiction of property and security;The enterprise information system of tradition towards PC are not suitable for the interactive mode of mobile terminal, towards movement eventually The application at end can not meet service-user functional requirements, and which results in ease for use and functional contradiction;Traditional enterprise's letter Breath system improves the contradiction of IT rates of return on investment and technical advance towards higher result in of mobile Internet improvement cost.
In addition cloud computing flourishes but also the deployed environment of enterprise information system is more complicated, more and more look forward to Industry possesses the legacy application being deployed under traditional IT environment, the SaaS being deployed under privatization environment applications, is deployed in public affairs simultaneously There are the SaaS applications of cloud environment and application is integrated by the third party system of proprietary integrated channel.
For mobile family internet and the IT environment of mixing cloud computing, all it disclosure satisfy that company information is pacified there is an urgent need to one kind Quan Xing, information accessibility is functional, the system architecture method of ease for use and economy, so that enterprise can be with minimum Cost reply IT environment variation.
The research of this respect at present is concentrated mainly on IT infrastructure structure(The hardware such as tide, Huawei, IBM, HP and Dell Manufacturer is leading), middleware platform research and development(The platform softwares such as VmWare, Redhat, IBM company)It is virtual with hardware device Change(VMWare, EMC)On, and towards in terms of Enterprise information system architecture research not yet propose relative maturity research into Fruit.Bang lotus is published in《Communications World》On research " enterprise's cloud environmental structure technology application practice " emphasis be research computer room Cloud computing environment upgrades and the promotion of network quality." how enterprise, which builds open mixed cloud, " proposes soft for the research of medium cloud net The hierarchical structure of part component level, do not relate to enterprise how on the basis of this general hierarchical structure framework is suitble to mix The enterprise information system of cloud environment and mobile internet environment.IBM is inquired into Chinese cloud computing conference from the angle of methodology Mixed cloud application system how is built, but does not relate to the research in terms of specific system architecture and functional unit.
The content of the invention
The technical assignment of the present invention is in view of the above shortcomings of the prior art, to provide the enterprise under a kind of mobile internet environment Industry information system structure.This method enterprise to protect to leave IT system investment, balance the security of Enterprise IT System with System accessibility demand solves service-user and manages contradiction of the user in functional and ease for use, help enterprise with compared with Low cost realizes upgrading of the information system in technology and information consumption pattern.
The technical assignment of the present invention is realized in the following manner:A kind of enterprise information system under mobile internet environment Framework, its main feature is that:
Gateway is deployed in public network, the gateway is used to realize public network environmental system in hardware and software level With the isolation of the enterprise information system of intranet environment;
Technology and industry under the service logic multiplexing of Legacy System and mixed deployment environment is realized by adapter assembly Business adaptation;
Separate mobile terminal interface and the PC terminal interfaces towards business operation, and pass through facing moving terminal interface configurations Field default value and the mode calculated automatically according to service logic improve the ease for use of mobile terminal accessing information system, and keep The functional requirements of business operation user;
The security control of gateway switching Intranet Legacy System is carried out by security configuration strategy in gateway, Mobile terminal is enabled to access deployment in interior network service information by gateway while ensuring information security.
The gateway includes HTTP access requests access layer, service access control with dispatching adaptation module and communicating suitable Adapter frame:
Request data is converted to the number that lower floor can identify by HTTP access requests access layer for receiving http request According to;
Service access is controlled with scheduling adaptation module for the access control asked and safety management, and Internet access Request carries out service dispatch and data adaptation;
Communication adapter frame is used to be adapted in technological layer and communication level.
Preferably, service access control includes with scheduling adaptation module:
1)Session and access control components:For verifying whether client's request is initiated by the user of a mandate, and handle Possible session data caching, authority checking can check whether after according to security configuration strategy meets additional access control Strategy, completely by request continue subsequent processing;
2)Service routing component:It is found for the system information according to registration and the business service registered in calling The API of portion's management information system;
3)Data adaptation component:The data adaptation before the business API of the management information system inside actual call is carried out, It is supplemented including default value, the logical operation of calculated field and the input/output argument matching of API Calls.
The session includes access control expansion plugin with access control components.If security configuration strategy cannot meet spirit The demand of security control living, can also further be checked by access control expansion plugin.
Preferably, data adaptation component is by providing the adapter towards different technologies in data Layer and API Calls layer Mode realize for different system technology calling.
Compared with prior art, the Enterprise information system architecture under mobile internet environment of the invention passes through gateway Solve the contradiction of enterprise information system Information Security and accessibility under mobile internet environment, and under mixing cloud environment Complicated Enterprise information system architecture also provide directive function;Pass through the represent layer of mobile terminal and Business User-oriented point From simplifying mobile terminal using field default value and field calculating logic and operate, and be multiplexed background business logic and solve movement Functional contradiction of ease for use and the Business User-oriented application of application;By being deployed in the software view on gateway Security configuration strategy and access control extension logic enhance the security control that gateway pair forwards access internal server with request, The security of built-in system is improved, is laid a good foundation for enterprise mobile application.
Specifically, there is advantageous effect following prominent:
(One)It proposes and realizes that the isolation of Intranet sensitive information and mobile terminal pass through by the gateway for being deployed in public network Public network accesses the method for enterprise information system, and devises the functional unit of gateway, i.e.,:It is used as by introducing gateway The unified entrance of mobile terminal accessing enterprise information system under mobile internet environment.It is accessed by gateway including disposing The SaaS of the Legacy System of net and privately owned cloud environment services, the SaaS services for being deployed in public cloud and other third party's services.It is logical It crosses gateway and realizes tertiary-structure network, access control, service adapter, service dispatch, Service Assembly, and solve mobile application With difference of the legacy application in technology and consumption mode.
(Two)It proposes and accesses Legacy System by disposing adapter in service gateway server, be so as to reduce to leave The improvement cost of system technology realizes that mobile terminal can also be transferred by gateway and accesses the business information of legacy information, i.e.,: By be deployed on gateway towards the adapter of different technologies and integration mode by the company information of complicated deployed environment Systematic unity facing moving terminal or other-end in a manner of Web service provide business information and business service, reduce The improvement cost of Legacy System and the basic cost of complication system have continued the viability of Legacy System, and from consumption mode It is transformed with system upgrade is realized on access technique.
(Three)For mobile terminal interactive capability is weak and the limited feature of displaying interface ability, it is contemplated that mobile application Generally operated with simple information typing, single system(Such as examination & approval)Based on comprehensive information searching, and enterprise information system is main Meeting a large number of services user routine work processing, simple interaction can not meet Functional Requirement of the service-user for system, It proposes and the interface of mobile terminal towards management level and general user and the PC terminal interfaces towards business operation is provided respectively, with Mobile terminal is configured based on PC terminal interfaces and configuration field default value and by way of calculating automatically according to service logic Interface so as to ensure the functional requirements at PC interfaces, while simplifies the interaction of mobile terminal, i.e.,:Mobile application is multiplexed existing letter The business logic codes of breath system, mobile application only need to provide limited function button and input field, other business information It is provided by way of business rule calculating or allocating default value, so as to solve Business User-oriented and facing moving terminal Apply the contradiction in functional and ease for use.
(Four)Propose the peace for carrying out gateway switching Intranet Legacy System by security configuration strategy in gateway Full property control enables mobile terminal to access deployment by gateway while ensuring information security and believes in interior network service Breath, i.e.,:On the basis of the safety measure isolated in gateway authentication in itself and intranet and extranet by double netcard, taking During the service logic for the information system that business gateway switching deployment is netted inside, by security configuration strategy or access control plug-in unit also More stringent and flexible security control can be realized, so as to ensure the safety of the enterprise information system under mixed deployment environment Property, the contradiction of active balance system accessibility and security of system.
Description of the drawings
Attached drawing 1 is the Enterprise information system architecture figure under mobile internet environment in the method for the present invention;
Attached drawing 2 is the functional unit of gateway and logical architecture figure in the method for the present invention.
Specific embodiment
With reference to Figure of description with specific embodiment to the enterprise information system frame under the mobile internet environment of the present invention Structure is described in detail below.
Embodiment:
As shown in Figure 1, particular content includes Enterprise information system architecture under the mobile internet environment of the present invention:
For the environment of mobile Internet, mobile application is in order to adapt to the mobile interaction capabilities of equipment and displaying interface ability Requirement, provide simplified function and simple information input.The operation and input of user is sent to by mobile communications network Gateway, communication access layer extract the data of application-oriented layer, after necessary authentication is carried out, check whether and meet volume Outer security configuration strategy either whether meet additional security control logical check and pass through the field default value configured or The extraneous information that the calculating logic plug-in unit of mounting is needed for background system is supplemented, and is then based on service configuration and routing is true Surely which server for being deployed in intranet environment should be sent a request to and which is called apply.If background system is not Service interface in the form of Web service is externally provided, then the adaptation of technological layer is programmed by adapter framework so that clothes Business request can correctly be processed.Gateway is according to IP address by connecting the network interface card of Intranet and being deployed in LAN Either Legacy System is serviced or application call privately owned cloud system, is returned the result and is carried out opposite adaptation by adapter After return to terminal and shown.
If the system that mobile terminal needs access is to be deployed in the SaaS applications of publicly-owned cloud environment, gateway uses The network interface card for connecting public network carries out service call with publicly-owned cloud service and returns result to terminal.It is realized by gateway Additional security control, unified service routing and scheduling and the extraneous information supplement towards mobile application.The present invention's Under system architecture, mobile terminal can access the various enterprise information systems of mixed cloud deployed environment in a uniform manner, meet The demand that user accesses whenever and wherever possible for business event information, while the cost that existed system technological transformation or adaptation integrate It is relatively low, the IT of Legacy System can effectively be protected to invest.
For mixing cloud environment, the SaaS applications being deployed in public cloud need and are deployed in the private of intra-company's LAN When having cloud application or leaving traditional IT system progress business integration, service request is equally sent to gateway.Service network It closes after carrying out additional access control and checking, internal information system is forwarded a request to according to service routing, when inside is When system only provides API or data access, adapter carries out technology adaptation, and last call result returns to the SaaS of public cloud Using.By the Enterprise information system architecture invented, can in the case where not carrying out big technological transformation to legacy system, It realizes the various businesses system integration of mixed cloud deployed environment and information fusion, meets the comprehensive information integration of enterprise and deployment ring The multifarious demand in border.
On the basis of above-mentioned framework, designed for the functional unit of gateway.The function group of gateway Part and logical architecture are as shown in Figure 2.
First, HTTP access requests access layer:In view of the demand of gateway access various terminals, gateway uniformly makes Service call is externally carried out with http protocol.The major function of the component is exactly to receive http request, and request data is converted The data that can be identified for lower floor.
2nd, service access control is adapted to scheduling:The part is substantially carried out access control and the safety management of request, and handle The request of Internet access carries out service dispatch and data adaptation.There are three major function compositions for the department:
1) session and access control:Whether component verification client request is initiated by the user of a mandate, and processing can The session data caching of energy.Authority checking can check whether after according to security configuration strategy meets additional access control plan Slightly.If security configuration strategy has not been met the demand of flexible security control, can also be carried out by access control expansion plugin It is further to check.Completely by request continue subsequent processing.
2) service routing:The component finds the inside that call according to the system information of registration and the business service of registration The API of management information system.
3) data adaptation:Data before the component carries out the business API of the management information system inside actual call are fitted Match somebody with somebody.These adaptations include default value supplement, the logical operation of calculated field and the input/output argument matching of API Calls.
3rd, communication adapter frame:The component is mainly adapted in technological layer and communication level.It is deployed in private clound Environment or traditional IT system are applied there may be difference on technical implementation way, the integration calling mode provided there is also Difference.This component is realized by way of providing the adapter towards different technologies in data Layer and API Calls layer for difference The technology of system is called.
Above-mentioned gateway, hardware are a Web servers that can handle http request, the hardware index of server Depending on the terminal quantity of enterprise's intervention, concurrent number and data amount.In the case where data access amount is big, service can be passed through Device cluster provides ability extending transversely plus the mode of preposition responsible equalizing equipment.

Claims (4)

1. a kind of Enterprise information system architecture under mobile internet environment, it is characterised in that:
Gateway is deployed in public network, and the gateway is used to realize public network environmental system and interior in hardware and software level The isolation of the enterprise information system of net environment;
It is fitted by the technology under the service logic multiplexing of adapter assembly realization Legacy System and mixed deployment environment and business Match somebody with somebody;
Separate mobile terminal interface and the PC terminal interfaces towards business operation, and pass through facing moving terminal interface configurations field Default value and the mode calculated automatically according to service logic improve the ease for use of mobile terminal accessing information system, and keep business Operate the functional requirements of user;
The security control of gateway switching Intranet Legacy System is carried out by security configuration strategy in gateway, is being ensured Mobile terminal is enabled to access by gateway while information security to dispose in interior network service information,
The gateway includes HTTP access requests access layer, service access control and scheduling adaptation module and communication adapter Frame:
Request data is converted to the data that lower floor can identify by HTTP access requests access layer for receiving HTTP requests;
Service access is controlled with scheduling adaptation module for the access control asked and safety management, and the request of Internet access Carry out service dispatch and data adaptation;
Communication adapter frame is used to be adapted in technological layer and communication level.
2. the Enterprise information system architecture under mobile internet environment according to claim 1, it is characterised in that service is visited Ask that control includes with scheduling adaptation module:
1)Session and access control components:For verifying whether client's request is initiated by the user of a mandate, and handle possibility Session data caching, authority checking can check whether according to security configuration strategy after and meets additional access control plan Slightly, completely by request continue subsequent processing;
2)Service routing component:Business service for the system information according to registration and registration finds the inner tube that call Manage the API of information system;
3)Data adaptation component:The data adaptation before the business API of the management information system inside actual call is carried out, including Default value supplements, the logical operation of calculated field and the input/output argument matching of API Calls.
3. the Enterprise information system architecture under mobile internet environment according to claim 2, it is characterised in that the meeting Words include access control expansion plugin with access control components.
4. the Enterprise information system architecture under mobile internet environment according to claim 2, it is characterised in that data are fitted Distribution assembly is realized by way of providing the adapter towards different technologies in data Layer and API Calls layer for different system Technology is called.
CN201410823090.4A 2014-12-26 2014-12-26 A kind of Enterprise information system architecture under mobile internet environment Active CN104410651B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201410823090.4A CN104410651B (en) 2014-12-26 2014-12-26 A kind of Enterprise information system architecture under mobile internet environment

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201410823090.4A CN104410651B (en) 2014-12-26 2014-12-26 A kind of Enterprise information system architecture under mobile internet environment

Publications (2)

Publication Number Publication Date
CN104410651A CN104410651A (en) 2015-03-11
CN104410651B true CN104410651B (en) 2018-06-01

Family

ID=52648249

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201410823090.4A Active CN104410651B (en) 2014-12-26 2014-12-26 A kind of Enterprise information system architecture under mobile internet environment

Country Status (1)

Country Link
CN (1) CN104410651B (en)

Families Citing this family (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN107147637B (en) * 2017-05-05 2019-01-08 腾讯科技(深圳)有限公司 A kind of task execution request processing method, device and computer storage medium
CN109635570B (en) * 2018-12-20 2023-01-03 国家电网有限公司 Information system security function using method based on security component
CN110740187B (en) * 2019-10-25 2021-12-28 家乡互动(厦门)网络科技有限公司 Method for realizing micro-service architecture

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101917461A (en) * 2010-07-22 2010-12-15 朱建华 Interface simulation system of mobile terminal and method
CN102082992A (en) * 2009-11-30 2011-06-01 中国移动通信集团山西有限公司 Mobile office system and implementation method thereof

Family Cites Families (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US8381253B2 (en) * 2010-05-14 2013-02-19 Cox Communications, Inc. Content placeholder markers

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102082992A (en) * 2009-11-30 2011-06-01 中国移动通信集团山西有限公司 Mobile office system and implementation method thereof
CN101917461A (en) * 2010-07-22 2010-12-15 朱建华 Interface simulation system of mobile terminal and method

Also Published As

Publication number Publication date
CN104410651A (en) 2015-03-11

Similar Documents

Publication Publication Date Title
US9112836B2 (en) Management of secure data in cloud-based network
CN105024865B (en) Cloud joint services
CN106357609B (en) A kind of method and system, public network server and private clound equipment creating user
CN102984159B (en) Based on secure accessing logic control method and the Platform Server of terminal access behavior
CN109995713A (en) Service processing method and relevant device in a kind of micro services frame
CN103269344B (en) Based on the pure IP calling system of cloud computing platform and IMS network architecture
CN103916296B (en) A kind of communication system for merging LAN
CN103200215A (en) Method achieving XenServer virtual machine remote control on https
CN104410651B (en) A kind of Enterprise information system architecture under mobile internet environment
CN103546571A (en) Platform-as-a-service (PaaS) realizing method and device
CN106384028A (en) Method for supporting unified identity authentication service realization of multiple tenants
CN204695386U (en) Towards the management information system of many tenants
CN112202744B (en) Multi-system data communication method and device
CN108170510A (en) A kind of managing computing resources system based on virtualization technology
KR101085744B1 (en) Enterprise platform system and server based cloud computing, and method for sevice the same
CN102542368B (en) Cache system access method and device
CN112804193A (en) Unified account system for realizing multi-platform service intercommunication
CN103428357B (en) Realize the method and device that the local service on mobile terminal operating system is shared
CN101834902A (en) Front-end processor system and method for comprehensive management of remote power distribution room
US9977761B2 (en) Virtualizing TCP/IP services with shared memory transport
CN104869172B (en) The data interactive method and data interaction system more applied under heterogeneous system
CN110290035A (en) A kind of wisdom family data storage access method and system based on K3S
KR102232951B1 (en) Back-end service platform device
CN111711672A (en) Big data sharing method and system
CN110019415A (en) Cloud computing big data digging system based on mobile terminal

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant