CN106034156A - Message authentication method based on distributed cache and apparatus thereof - Google Patents
Message authentication method based on distributed cache and apparatus thereof Download PDFInfo
- Publication number
- CN106034156A CN106034156A CN201510119274.7A CN201510119274A CN106034156A CN 106034156 A CN106034156 A CN 106034156A CN 201510119274 A CN201510119274 A CN 201510119274A CN 106034156 A CN106034156 A CN 106034156A
- Authority
- CN
- China
- Prior art keywords
- message
- authentication
- node
- distributed caching
- customer relationship
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Withdrawn
Links
- 238000000034 method Methods 0.000 title claims abstract description 47
- 238000011144 upstream manufacturing Methods 0.000 claims description 44
- 238000012795 verification Methods 0.000 claims description 16
- 238000003860 storage Methods 0.000 claims description 14
- 238000012544 monitoring process Methods 0.000 claims description 8
- 230000006870 function Effects 0.000 abstract description 13
- 238000001514 detection method Methods 0.000 description 15
- 238000009826 distribution Methods 0.000 description 8
- 238000010586 diagram Methods 0.000 description 7
- 230000003247 decreasing effect Effects 0.000 description 5
- 230000005055 memory storage Effects 0.000 description 4
- 238000012545 processing Methods 0.000 description 4
- 238000004891 communication Methods 0.000 description 3
- 238000000151 deposition Methods 0.000 description 3
- 230000005540 biological transmission Effects 0.000 description 2
- 230000001934 delay Effects 0.000 description 2
- 238000005516 engineering process Methods 0.000 description 2
- 238000000605 extraction Methods 0.000 description 2
- 239000002243 precursor Substances 0.000 description 2
- 230000004044 response Effects 0.000 description 2
- 238000005303 weighing Methods 0.000 description 2
- 238000004804 winding Methods 0.000 description 2
- 230000006399 behavior Effects 0.000 description 1
- 238000004364 calculation method Methods 0.000 description 1
- 238000006243 chemical reaction Methods 0.000 description 1
- 230000003111 delayed effect Effects 0.000 description 1
- 238000011161 development Methods 0.000 description 1
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L65/00—Network arrangements, protocols or services for supporting real-time applications in data packet communication
- H04L65/40—Support for services or applications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/01—Protocols
- H04L67/10—Protocols in which an application is distributed across nodes in the network
- H04L67/1097—Protocols in which an application is distributed across nodes in the network for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Multimedia (AREA)
- Mobile Radio Communication Systems (AREA)
- Telephonic Communication Services (AREA)
Abstract
The invention discloses a message authentication method based on distributed cache. The method comprises the following steps of when a message to be authenticated is received, determining the type of the message to be authenticated; if the message to be authenticated is an uplink message, carrying out a service authentication operation, and generating a corresponding user relationship; and storing the user relationship into a distributed cache node, and when the user relationship is successfully stored in at least two distributed cache nodes, determining that authentication of the uplink message is successful. The invention also discloses is a message authentication apparatus based on distributed cache. In the invention, performance of real-time authentication of messages is improved, and functions of dynamically increasing or reducing service authentication nodes and seamlessly taking over downtime service authentication nodes are realized.
Description
Technical field
The present invention relates to data communication technology field, particularly relate to a kind of message based on distributed caching mirror
Power method and apparatus.
Background technology
Along with developing rapidly of information series business, the information series business authentication platform of enterprise of each operator processes
The performance requirement of data is also with quickly increasing, and merely increasing service authentication node raising performance becomes
The business administration of each operator and the yoke of operation cost.
Enterprise of existing operator builds information series business authentication platform generally by following method.Terminal is used
Family sends a message to industry gateway, and the message that terminal use is sent can be to order the industry of certain operator
Business instruction, described service order is forwarded to service authentication platform by industry gateway, in service authentication platform
Distribution of services module finds concrete service authentication module according to calling number, service authentication module complete
The authentication of message sent to terminal use, generates customer relationship, authenticating result is pressed original route and returns.
Meanwhile, operator can also send a message to industry gateway, and the message that described operator sends can be fortune
The content that battalion business is provided, the content that described operator provides is forwarded to service authentication platform by industry gateway,
Distribution of services module in service authentication platform finds concrete service authentication module according to called number, by
The content that operator is provided by service authentication module authenticates, and verifies customer relationship, by authenticating result
Return by original route.
But, the information series business authentication platform using said method to build is not suitable for enterprise of each operator industry
The further development that business increases.At present, the mode of service authentication module stores customer relationship mainly has two kinds,
One is memory storage, and another kind is database purchase.If using memory storage customer relationship, can deposit
Break down the problem that cannot be taken at limited memory and current business authentication module；If employing data
, can there is the database access time long in library storage customer relationship, it is impossible to Real-time Feedback authenticating result is to industry
The problem of gateway.
Foregoing is only used for auxiliary and understands technical scheme, does not represent and recognizes that foregoing is
Prior art.
Summary of the invention
A kind of message authentication method based on distributed caching of offer and dress are provided
Putting, solve operator's business event authentication degraded performance, breaking down at current business authenticating node cannot
Taken over, it is impossible to the problem of Real-time Feedback authenticating result.
For achieving the above object, a kind of based on distributed caching the message authentication method that the present invention provides,
Including step:
When receiving until authentication message, determine described in treat the classification of authentication message；
Treat described in if that authentication message is upstream message, then carry out service authentication operation, generate corresponding user
Relation；
Described customer relationship is stored in distributed caching node, when described customer relationship is at least two
When distributed caching node stores successfully, it is determined that described upstream message authenticates successfully.
Preferably, described when receiving until authentication message, determine described in treat the step of classification of authentication message
After Zhou, also include:
Treat described in if that authentication message is downstream message, then access distributed caching joint according to described downstream message
Customer relationship in point；
When accessing successfully, it is determined that described downstream message authenticates successfully.
Preferably, treat that authentication message is downstream message if described, then access according to described downstream message
The step of the customer relationship in distributed caching node includes:
If treat described in that authentication message is downstream message, then the user in request verification distributed caching node is closed
System；
According to the request of the customer relationship in described verification distributed caching node, access distributed caching joint
Customer relationship in point.
Preferably, treat that authentication message is upstream message if described, then carry out service authentication operation, raw
After becoming the step of customer relationship of correspondence, also include:
Request stores described customer relationship；
According to the request of the described customer relationship of described storage, submit described customer relationship to.
Preferably, described when receiving until authentication message, determine described in treat the step of classification of authentication message
Before Zhou, also include:
Monitor the load condition of service authentication node in real time；
When the load of described service authentication node is more than the first predetermined threshold value, increase described service authentication joint
Point and distributed caching access node；
When the load of described service authentication node is less than the second predetermined threshold value, reduce described service authentication joint
Point and distributed caching access node.
Additionally, for achieving the above object, the present invention also provides for a kind of message authentication based on distributed caching
Device, this device includes:
Message reception module, for when receiving until authentication message, determine described in treat the class of authentication message
Not；
Service authentication module, if treating described in Yong Yu, authentication message is upstream message, then carry out service authentication behaviour
Make, generate corresponding customer relationship；
Distributed caching module, for storing described customer relationship in distributed caching node；
Determination module, for storing successfully at least two distributed caching node when described customer relationship
Time, it is determined that described upstream message authenticates successfully.
Preferably, described message authentication device based on distributed caching also includes that distributed caching accesses mould
Block, if treating described in Yong Yu, authentication message is downstream message, then access distributed slow according to described downstream message
Deposit the customer relationship in node；
Described determination module, is additionally operable to when accessing successfully, it is determined that described downstream message authenticates successfully.
Preferably, described service authentication module, if treating described in being additionally operable to, authentication message is downstream message, then
Customer relationship in request verification distributed caching node；
Described distributed caching access modules, is additionally operable to according to the use in described verification distributed caching node
The request of family relation, accesses the customer relationship in distributed caching node.
Preferably, described service authentication module, the request that is additionally operable to stores described customer relationship；
Described distributed caching access modules, is additionally operable to the request according to the described customer relationship of described storage,
Submit described customer relationship to.
Preferably, described message authentication device based on distributed caching also includes monitoring modular and adjusts mould
Block,
Described monitoring modular, for the load condition of monitoring service authentication node in real time；
Described adjusting module, for the load condition according to described service authentication node, adjusts described business
Authenticating node and distributed caching access the quantity of node.
The method that the present invention realizes message authentication by distributed caching, make message authentication time, user
Relation can store in multiple service authentication nodes, it is not necessary in fixing or specific service authentication node
Authentication, improves the performance that message authenticates in real time；Meanwhile, service authentication joint can be dynamically increased or decreased
Point, solves the problem that single service authentication node is busy, it is achieved that seamless pipe is delayed machine service authentication node
Function.
Accompanying drawing explanation
Fig. 1 is the flow process signal of the first embodiment of present invention message authentication based on distributed caching method
Figure；
Fig. 2 is the flow process signal of the second embodiment of present invention message authentication based on distributed caching method
Figure；
Fig. 3 is the refinement schematic flow sheet of step S40 mono-embodiment in Fig. 2；
Fig. 4 is the flow process signal of the 3rd embodiment of present invention message authentication based on distributed caching method
Figure；
Fig. 5 is the functional module of the first embodiment of present invention message authentication based on distributed caching device
Schematic diagram；
Fig. 6 is the functional module of the second embodiment of present invention message authentication based on distributed caching device
Schematic diagram；
Fig. 7 is the functional module of the 3rd embodiment of present invention message authentication based on distributed caching device
Schematic diagram.
The realization of the object of the invention, functional characteristics and advantage will in conjunction with the embodiments, do referring to the drawings further
Explanation.
Detailed description of the invention
Should be appreciated that specific embodiment described herein, only in order to explain the present invention, is not used to limit
Determine the present invention.
The primary solutions of the embodiment of the present invention is: when receiving until authentication message, determine described in treat
The classification of authentication message；When receiving until authentication message, determine described in treat the classification of authentication message；If
Described treat that authentication message is upstream message, then carry out service authentication operation, generate corresponding customer relationship；
Described customer relationship is stored in distributed caching node, when described customer relationship is distributed at least two
When formula cache node stores successfully, it is determined that described upstream message authenticates successfully.Come by distributed caching
The method realizing message authentication, makes message when authentication, and customer relationship can be at multiple service authentication nodes
Middle storage, it is not necessary to authenticate in fixing or specific service authentication node, improve what message authenticated in real time
Performance；Meanwhile, solve the problem that single service authentication node is busy, also achieve seamless pipe and delay machine industry
The function of business authenticating node.
Owing to the mode of existing service authentication node storage customer relationship mainly has two kinds, one is internal memory
Storage, another kind is database purchase.If using memory storage customer relationship, limited memory can be there is
Break down the problem that cannot be taken over current business authenticating node；If employing database stores user
, can there is the database access time long in relation, it is impossible to Real-time Feedback authenticating result is to the problem of industry gateway.
Based on the problems referred to above, the present invention provides a kind of message authentication method based on distributed caching.
With reference to the first embodiment that Fig. 1, Fig. 1 are present invention message authentication based on distributed caching method
Schematic flow sheet.
In one embodiment, described message authentication method based on distributed caching includes:
Step S10, when receiving until authentication message, determine described in treat the classification of authentication message；
One service authentication platform has N (N >=3) individual message recipient node, N number of service authentication node,
N number of distributed caching accesses node, N number of distributed caching node.Wait to authenticate when industry gateway receives
During message, by described, industry gateway treats that authentication message is forwarded to service authentication platform, determine described in wait to authenticate
The classification of message, i.e. determine message to be authenticated received by service authentication platform be upstream message or under
Row message, described upstream message is the content that mobile phone users sends, and can be that certain is used for mobile terminal
The a certain business of certain operator is ordered at family, orders weather as mobile phone users 13100000001 sends
The service message of forecast is to operator 10001；Described downstream message is the content that operator sends, such as operation
The service message of the weather forecast that business 10001 orders according to mobile phone users 13100000001, sends
Concrete weather forecast message is to mobile phone users 13100000001.
Step S20, if described in treat that authentication message is upstream message, then carry out service authentication operation, it is right to generate
The customer relationship answered；
If what service authentication platform received treats that authentication message is upstream message, then will by its network switch
Described upstream message is sent to its message recipient node at random.Described message recipient node is according to preset algorithm
Described upstream message is forwarded to its service authentication node, and the business load amount of described service authentication node is
Minimum in service authentication platform all service authentications node at that time, in the industry that described business load amount is minimum
Business authenticating node carries out service authentication operation, and generates corresponding customer relationship according to described upstream message.
Described preset algorithm is load-balancing algorithm, it is also possible to be other algorithms realizing said function.Load is all
Weighing apparatus has both sides implication: first, and substantial amounts of concurrently access or data traffic are shared multiple stage node and set
Process respectively for upper, reduce period of reservation of number；Secondly, multiple stage joint is shared in single heavy duty computing
Do parallel processing on point device, after each node device process terminates, result collected, returns to user,
System processing power is greatly improved.Load balancing can equalize between all of server and application
Traffic load, judge according to the real-time response time, task is transferred to most lightly loaded server come
Process, to realize real intelligent communication management and optimal service performance.Load balancing multinode it
Between load according to certain strategy distribution network or computer disposal, it is provided that one inexpensively and effectively side
Method carrys out expansion service device bandwidth, increases handling capacity, improves data-handling capacity, can avoid again list simultaneously
Point failure.
Such as the reception of service authentication platform is that mobile phone users 13100000001 is sent to operator 10001
Order the service message of weather forecast, by its network switch, the business of described order weather forecast is disappeared
Breath is sent to its message recipient node at random.Described message recipient node is according to load-balancing algorithm, by institute
The service message stating order weather forecast is forwarded to the service authentication node that its business load amount is minimum, described
The service authentication node of business load amount minimum carries out business mirror to the service message of described order weather forecast
Power operation, the service message ordering weather forecast as described in detection is the most legal, described mobile phone users
Whether 13100000001 can be with the weather forecasts services of non-subscribing carrier 10001, when detecting mobile terminal
User 13100000001 defaulting subscriber, or there is no the weather forecast of authority non-subscribing carrier 10001
Business etc., then cannot the weather forecasts services of non-subscribing carrier 10001, mobile phone users
Customer relationship can not be generated between 13100000001 and operator 10001；Also need to detect operator
Whether 10001 can provide weather forecasts services to mobile phone users 13100000001 etc., runs as worked as
Business 10001 does not provide the service of weather forecasts services, then mobile phone users 13100000001 with
Customer relationship can not be generated between operator 10001；Only when all detections are all passed through, could generate
Customer relationship between mobile phone users 13100000001 and operator 10001.
Step S30, stores described customer relationship in distributed caching node, when described customer relationship exists
When at least two distributed caching node stores successfully, it is determined that described upstream message authenticates successfully.
Described customer relationship is stored, when described user is closed in the distributed caching node of service authentication platform
When tying up at least two distributed caching node of service authentication platform stores successfully, service authentication platform
Service authentication node will notify its message recipient node, the success of upstream message authentication operations.Service authentication
After the message recipient node of platform receives the successful message of upstream message authentication operations, notify industry gateway
Upstream message authenticates successfully.Not two or more at service authentication platform when described customer relationship
When distributed caching node stores successfully, the service authentication node of service authentication platform will notify that its message connects
Receiving the failure of node upstream message authentication operations, described message recipient node receives upstream message authentication operations
After failure, notice industry gateway uplink message authentication failure.As by mobile phone users
Customer relationship between 13100000001 and operator 10001 stores two or two of service authentication platform
In individual above distributed caching node, when mobile phone users 13100000001 and operator 10001
Between customer relationship store in two or more distributed caching nodes of service authentication platform
During merit, the service authentication node of service authentication platform will notify its message recipient node, mobile phone users
13100000001 are sent to operator 10001 orders the service message authentication operations success of weather forecast.Industry
The message recipient node of business authentication platform receives the service message authentication operations of described order weather forecast and becomes
After the message of merit, described in notifying messages industry gateway, order the service message authentication operations success of weather forecast,
Described note industry gateway receives the successful message of service message authentication operations of described order weather forecast
After, forward the service message of described order weather forecast to operator 10001；Work as mobile phone users
Customer relationship between 13100000001 and operator 10001 is not at two or two of service authentication platform
When storing successfully in above distributed caching node, the service authentication node of service authentication platform will notify it
Message recipient node, mobile phone users 13100000001 is sent to operator 10001, and to order weather pre-
The service message authentication operations failure of report, the message recipient node of service authentication platform receives described order
After the service message authentication operations failure of weather forecast, described in notifying messages industry gateway, order sky
The service message authentication operations failure of gas forecast.It is pre-that described note industry gateway receives described order weather
After the service message authentication operations failure of report, notice mobile phone users 13100000001 is ordered
The service fail of operator 10001 weather forecast.
Upstream message is authenticated by the present embodiment by distributed caching, make upstream message authentication time,
Customer relationship can store in multiple service authentication nodes, improves the performance that message authenticates in real time；With
Time, solve the problem that single service authentication node is busy, also achieve seamless pipe and delay machine service authentication joint
The function of point.
With reference to the second embodiment that Fig. 2, Fig. 2 are present invention message authentication based on distributed caching method
Schematic flow sheet.First embodiment based on said method, after described step S10, also includes:
Step S40, if described in treat that authentication message is downstream message, then according to described downstream message access distribution
Customer relationship in formula cache node；
Specifically, with reference to Fig. 3, in one embodiment, treat that authentication message is downstream message if described,
Then include according to the step of the customer relationship in described downstream message access distributed caching node:
Step S41, if described in treat that authentication message is downstream message, then request verification distributed caching node in
Customer relationship；
Step S42, according to the request of the customer relationship in described verification distributed caching node, accesses distribution
Customer relationship in formula cache node.
If the message to be authenticated that service authentication platform receives is downstream message, then by its network exchange
Described downstream message is sent to its message recipient node by machine at random, and described message recipient node is according to presetting
Described downstream message is forwarded to its service authentication node by algorithm.The business load of described service authentication node
Amount is minimum in service authentication platform all service authentications node at that time, minimum in described business load amount
Service authentication node in carry out service authentication operation, the distributed caching of request verification service authentication platform
Customer relationship in node, and the verification request of described customer relationship is submitted to the distribution of service authentication platform
Formula cache access node, described distributed caching accesses node visit and is extracted from its distributed caching node
Customer relationship.Described preset algorithm is load-balancing algorithm, it is also possible to be its that realize said function
His algorithm.
Receive such as service authentication platform is that operator 10001 is according to mobile phone users 13100000001
The service message of the weather forecast ordered, sends concrete weather to mobile phone users 13100000001
Precursor messages.After service authentication platform receives described concrete weather forecast message, by its net
Cross winding is changed planes and described concrete weather forecast message is sent to its message recipient node at random.Described message
Described concrete weather forecast message, according to load-balancing algorithm, is forwarded to its business load by receiving node
The service authentication node that amount is minimum, to described tool in the service authentication node that described business load amount is minimum
The weather forecast message of body carries out service authentication operation, and whether weather forecast message concrete as described in detection
Legal, whether detection operator 10001 can send described concrete weather forecast message to mobile terminal
User 13100000001, and whether detection mobile phone users 13100000001 can receive operator
The 10001 concrete weather forecast message sent, detection mobile phone users 13100000001 and operator
Whether there is customer relationship between 10001, described customer relationship is the most legal.If all of detection all
Passing through, the distributed caching of service authentication platform accesses Node extraction mobile phone users 13100000001
And the customer relationship between operator 10001, if extracting mobile phone users 13100000001 and fortune
Customer relationship between battalion business 10001 is unsuccessful, then operator 10001 can not give mobile phone users
13100000001 send concrete weather forecast message.
Step S50, when accessing successfully, it is determined that described downstream message authenticates successfully.
Extracted from its distributed caching node when the distributed caching of service authentication platform accesses node visit
Customer relationship success time, described distributed caching accesses node and notifies its service authentication node, and business is reflected
The access distributed caching node visit success of power platform.The service authentication node of service authentication platform receives
Access the message of its distributed caching node of node successful access to its distributed caching after, notify its message
Receiving node, downstream message authenticates successfully.The message recipient node of service authentication platform receives descending disappearing
After breath authenticates successful message, notice industry gateway downstream message authenticates successfully.As when putting down at service authentication
The distributed caching of platform accesses the mobile phone users that node visit is extracted from its distributed caching node
During customer relationship success between 13100000001 and operator 10001, service authentication platform distributed
Cache access node notifies its service authentication node, and it accesses the success of distributed caching node visit.Business
The service authentication node of authentication platform receives its distributed caching access node successful access, and it is distributed slow
After depositing the message of node, notify its message recipient node, the concrete weather forecast that operator 10001 sends
Message authentication success, described message recipient node receives the concrete weather forecast that operator 10001 sends
After the successful message of message authentication, the concrete weather that notifying messages industry gateway operator 10001 sends is pre-
Report message authentication success.The concrete weather that described note industry gateway receives operator 10001 transmission is pre-
After the report successful message of message authentication, concrete weather forecast message operator 10001 sent is transmitted to
Mobile phone users 13100000001.If described note industry gateway receives what operator 10001 sent
Concrete weather forecast message authentication failure, then its concrete weather of notice operator 10001 is pre-
Report message sends unsuccessfully.
In the present embodiment, the method realizing message authentication by distributed caching, make downstream message exist
During authentication, customer relationship can be accessed in any service authentication node, it is not necessary in fixing or specific industry
Business authenticating node authenticates, improves the performance that message authenticates in real time；Meanwhile, single service authentication is solved
The problem that node is busy, also achieves seamless pipe and delays the function of machine service authentication node.
With reference to the 3rd embodiment stream that Fig. 4, Fig. 4 are present invention message authentication based on distributed caching method
Journey schematic diagram, the second embodiment based on said method, before described step S10, also include:
Step S60, monitors the load condition of service authentication node in real time；
Step S70, according to the load condition of described service authentication node, adjust described service authentication node and
Distributed caching accesses the quantity of node.
The business load state of its service authentication node monitored in real time by service authentication platform, reflects according to its business
The business load state of power node, is increased or decreased its service authentication node and distributed caching accesses node.
As when the business load of its service authentication node is more than the first predetermined threshold value, increase its service authentication node
Node is accessed with distributed caching.Described first predetermined threshold value can the most freely be arranged, Ke Yishe
It is set to 60%, 70%, 80%, it is preferable that be set to 70%.As when 3 business of service authentication platform
When the business load amount of authenticating node has exceeded the 70% of its service authentication node total capacity the most, increase its industry
Service authentication node and the distributed caching of business authentication platform access node；Business when service authentication platform
When the load of authenticating node is less than the second predetermined threshold value, reduces its service authentication node and distributed caching is visited
Ask node.Described first predetermined threshold value is more than the second predetermined threshold value, and described second predetermined threshold value can basis
Need freely arrange, could be arranged to 20%, 30%, 40% etc., it is preferable that be set to 30%, i.e. when
The portfolio of 3 service authentication nodes of service authentication platform is below its service authentication node total capacity
When 30%, the service authentication node and the distributed caching that reduce its service authentication platform access node.
After described step S20, also include:
Step S201, request stores described customer relationship；
Step S202, according to the request of the described customer relationship of described storage, submits described customer relationship to.
The service authentication node of service authentication platform is asked its distributed caching to access node and is stored described user
Relation, after described distributed caching accesses the storage request that node receives described customer relationship, by institute
State customer relationship and submit to its distributed caching node.Service authentication node such as service authentication platform is asked
Its distributed caching access node memory mobile terminal user 13100000001 and operator 10001 it
Between customer relationship, when described distributed caching access node receive mobile phone users 13100000001
And after the storage request of the customer relationship between operator 10001, by mobile phone users 13100000001
And the customer relationship between operator 10001 submits to its distributed caching node.
In the present embodiment, the method realizing message authentication by distributed caching, make upstream message exist
During authentication, customer relationship can store in multiple service authentication nodes, it is not necessary in fixing or specific industry
Business authenticating node authenticates, improves the performance that message authenticates in real time；Industry can also be dynamically increased or decreased
Business authenticating node, meanwhile, solves the problem that single service authentication node is busy, also achieves seamless pipe
Delay the function of machine service authentication node.
Corresponding, based on above-mentioned message authentication method based on distributed caching, the present invention further provides
A kind of message authentication device based on distributed caching.
With reference to the first embodiment that Fig. 5, Fig. 5 are present invention message authentication based on distributed caching device
High-level schematic functional block diagram.
In one embodiment, described message authentication device based on distributed caching includes: message sink mould
Block 10, service authentication module 20, distributed caching module 30 and determination module 40.
Described message reception module 10, for when receiving until authentication message, determine described in treat that authentication disappears
The classification of breath；
One service authentication platform has N (N >=3) individual message recipient node, N number of service authentication node,
N number of distributed caching accesses node, N number of distributed caching node.Wait to authenticate when industry gateway receives
During message, by described, industry gateway treats that authentication message is forwarded to service authentication platform, determine described in wait to authenticate
The classification of message, i.e. determine message to be authenticated received by service authentication platform be upstream message or under
Row message, described upstream message is the content that mobile phone users sends, and can be that certain is used for mobile terminal
The a certain business of certain operator is ordered at family, orders weather as mobile phone users 13100000001 sends
The service message of forecast is to operator 10001；Described downstream message is the content that operator sends, such as operation
The service message of the weather forecast that business 10001 orders according to mobile phone users 13100000001, sends
Concrete weather forecast message is to mobile phone users 13100000001.
Described service authentication module 20, if treating described in Yong Yu, authentication message is upstream message, then carry out business
Authentication operations, generates corresponding customer relationship；
If what service authentication platform received treats that authentication message is upstream message, then will by its network switch
Described upstream message is sent to its message recipient node at random.Described message recipient node is according to preset algorithm
Described upstream message is forwarded to its service authentication node, and the business load amount of described service authentication node is
Minimum in service authentication platform all service authentications node at that time, in the industry that described business load amount is minimum
Business authenticating node carries out service authentication operation, and generates corresponding customer relationship according to described upstream message.
Described preset algorithm is load-balancing algorithm, it is also possible to be other algorithms realizing said function.Load is all
Weighing apparatus has both sides implication: first, and substantial amounts of concurrently access or data traffic are shared multiple stage node and set
Process respectively for upper, reduce period of reservation of number；Secondly, multiple stage joint is shared in single heavy duty computing
Do parallel processing on point device, after each node device process terminates, result collected, returns to user,
System processing power is greatly improved.Load balancing can equalize between all of server and application
Traffic load, judge according to the real-time response time, task is transferred to most lightly loaded server come
Process, to realize real intelligent communication management and optimal service performance.Load balancing multinode it
Between load according to certain strategy distribution network or computer disposal, it is provided that one inexpensively and effectively side
Method carrys out expansion service device bandwidth, increases handling capacity, improves data-handling capacity, can avoid again list simultaneously
Point failure.
Such as the reception of service authentication platform is that mobile phone users 13100000001 is sent to operator 10001
Order the service message of weather forecast, by its network switch, the business of described order weather forecast is disappeared
Breath is sent to its message recipient node at random.Described message recipient node is according to load-balancing algorithm, by institute
The service message stating order weather forecast is forwarded to the service authentication node that its business load amount is minimum, described
The service authentication node of business load amount minimum carries out business mirror to the service message of described order weather forecast
Power operation, the service message ordering weather forecast as described in detection is the most legal, described mobile phone users
Whether 13100000001 can be with the weather forecasts services of non-subscribing carrier 10001, when detecting mobile terminal
User 13100000001 defaulting subscriber, or there is no the weather forecast of authority non-subscribing carrier 10001
Business etc., then cannot the weather forecasts services of non-subscribing carrier 10001, mobile phone users
Customer relationship can not be generated between 13100000001 and operator 10001；Also need to detect operator
Whether 10001 can provide weather forecasts services to mobile phone users 13100000001 etc., runs as worked as
Business 10001 does not provide the service of weather forecasts services, then mobile phone users 13100000001 with
Customer relationship can not be generated between operator 10001；Only when all detections are all passed through, could generate
Customer relationship between mobile phone users 13100000001 and operator 10001.
Described distributed caching module 30, for storing described customer relationship in distributed caching node；
Described determination module 40, for depositing at least two distributed caching node when described customer relationship
When storing up successfully, it is determined that described upstream message authenticates successfully.
Described customer relationship is stored, when described user is closed in the distributed caching node of service authentication platform
When tying up at least two distributed caching node of service authentication platform stores successfully, service authentication platform
Service authentication node will notify its message recipient node, the success of upstream message authentication operations.Service authentication
After the message recipient node of platform receives the successful message of upstream message authentication operations, notify industry gateway
Upstream message authenticates successfully.Not two or more at service authentication platform when described customer relationship
When distributed caching node stores successfully, the service authentication node of service authentication platform will notify that its message connects
Receiving the failure of node upstream message authentication operations, described message recipient node receives upstream message authentication operations
After failure, notice industry gateway uplink message authentication failure.As by mobile phone users
Customer relationship between 13100000001 and operator 10001 stores two or two of service authentication platform
In individual above distributed caching node, when mobile phone users 13100000001 and operator 10001
Between customer relationship store in two or more distributed caching nodes of service authentication platform
During merit, the service authentication node of service authentication platform will notify its message recipient node, mobile phone users
13100000001 are sent to operator 10001 orders the service message authentication operations success of weather forecast.Industry
The message recipient node of business authentication platform receives the service message authentication operations of described order weather forecast and becomes
After the message of merit, described in notifying messages industry gateway, order the service message authentication operations success of weather forecast,
Described note industry gateway receives the successful message of service message authentication operations of described order weather forecast
After, forward the service message of described order weather forecast to operator 10001；Work as mobile phone users
Customer relationship between 13100000001 and operator 10001 is not at two or two of service authentication platform
When storing successfully in above distributed caching node, the service authentication node of service authentication platform will notify it
Message recipient node, mobile phone users 13100000001 is sent to operator 10001, and to order weather pre-
The service message authentication operations failure of report, the message recipient node of service authentication platform receives described order
After the service message authentication operations failure of weather forecast, described in notifying messages industry gateway, order sky
The service message authentication operations failure of gas forecast.It is pre-that described note industry gateway receives described order weather
After the service message authentication operations failure of report, notice mobile phone users 13100000001 is ordered
The service fail of operator 10001 weather forecast.
Upstream message is authenticated by the present embodiment by distributed caching, make upstream message authentication time,
Customer relationship can store in multiple service authentication nodes, improves the performance that message authenticates in real time；With
Time, solve the problem that single service authentication node is busy, also achieve seamless pipe and delay machine service authentication joint
The function of point.
With reference to the second embodiment that Fig. 6, Fig. 6 are present invention message authentication based on distributed caching device
High-level schematic functional block diagram.Described device also includes distributed caching access modules 50.
Described distributed caching access modules 50, if treating described in Yong Yu, authentication message is downstream message, then root
The customer relationship in distributed caching node is accessed according to described downstream message；
The most described service authentication module 20, if treating described in being additionally operable to, authentication message is downstream message,
The then customer relationship in request verification distributed caching node；
Described distributed caching access modules 50, is additionally operable to according in described verification distributed caching node
The request of customer relationship, accesses the customer relationship in distributed caching node.
If the message to be authenticated that service authentication platform receives is downstream message, then by its network exchange
Described downstream message is sent to its message recipient node by machine at random, and described message recipient node is according to presetting
Described downstream message is forwarded to its service authentication node by algorithm.The business load of described service authentication node
Amount is minimum in service authentication platform all service authentications node at that time, minimum in described business load amount
Service authentication node in carry out service authentication operation, the distributed caching of request verification service authentication platform
Customer relationship in node, and the verification request of described customer relationship is submitted to the distribution of service authentication platform
Formula cache access node, described distributed caching accesses node visit and is extracted from its distributed caching node
Customer relationship.Described preset algorithm is load-balancing algorithm, it is also possible to be its that realize said function
His algorithm.
Receive such as service authentication platform is that operator 10001 is according to mobile phone users 13100000001
The service message of the weather forecast ordered, sends concrete weather to mobile phone users 13100000001
Precursor messages.After service authentication platform receives described concrete weather forecast message, by its net
Cross winding is changed planes and described concrete weather forecast message is sent to its message recipient node at random.Described message
Described concrete weather forecast message, according to load-balancing algorithm, is forwarded to its business load by receiving node
The service authentication node that amount is minimum, to described tool in the service authentication node that described business load amount is minimum
The weather forecast message of body carries out service authentication operation, and whether weather forecast message concrete as described in detection
Legal, whether detection operator 10001 can send described concrete weather forecast message to mobile terminal
User 13100000001, and whether detection mobile phone users 13100000001 can receive operator
The 10001 concrete weather forecast message sent, detection mobile phone users 13100000001 and operator
Whether there is customer relationship between 10001, described customer relationship is the most legal.If all of detection all
Passing through, the distributed caching of service authentication platform accesses Node extraction mobile phone users 13100000001
And the customer relationship between operator 10001, if extracting mobile phone users 13100000001 and fortune
Customer relationship between battalion business 10001 is unsuccessful, then operator 10001 can not give mobile phone users
13100000001 send concrete weather forecast message.
Described determination module 40, is additionally operable to when accessing successfully, it is determined that described downstream message authenticates successfully.
Extracted from its distributed caching node when the distributed caching of service authentication platform accesses node visit
Customer relationship success time, described distributed caching accesses node and notifies its service authentication node, and business is reflected
The access distributed caching node visit success of power platform.The service authentication node of service authentication platform receives
Access the message of its distributed caching node of node successful access to its distributed caching after, notify its message
Receiving node, downstream message authenticates successfully.The message recipient node of service authentication platform receives descending disappearing
After breath authenticates successful message, notice industry gateway downstream message authenticates successfully.As when putting down at service authentication
The distributed caching of platform accesses the mobile phone users that node visit is extracted from its distributed caching node
During customer relationship success between 13100000001 and operator 10001, service authentication platform distributed
Cache access node notifies its service authentication node, and it accesses the success of distributed caching node visit.Business
The service authentication node of authentication platform receives its distributed caching access node successful access, and it is distributed slow
After depositing the message of node, notify its message recipient node, the concrete weather forecast that operator 10001 sends
Message authentication success, described message recipient node receives the concrete weather forecast that operator 10001 sends
After the successful message of message authentication, the concrete weather that notifying messages industry gateway operator 10001 sends is pre-
Report message authentication success.The concrete weather that described note industry gateway receives operator 10001 transmission is pre-
After the report successful message of message authentication, concrete weather forecast message operator 10001 sent is transmitted to
Mobile phone users 13100000001.If described note industry gateway receives what operator 10001 sent
Concrete weather forecast message authentication failure, then its concrete weather of notice operator 10001 is pre-
Report message sends unsuccessfully.
In the present embodiment, the method realizing message authentication by distributed caching, make downstream message exist
During authentication, customer relationship can be accessed in any service authentication node, it is not necessary in fixing or specific industry
Business authenticating node authenticates, improves the performance that message authenticates in real time；Meanwhile, single service authentication is solved
The problem that node is busy, also achieves seamless pipe and delays the function of machine service authentication node.
With reference to the 3rd embodiment that Fig. 7, Fig. 7 are present invention message authentication based on distributed caching device
High-level schematic functional block diagram.Described device also includes detection module 60 and adjusting module 70.
Described monitoring modular 60, for the load condition of monitoring service authentication node in real time；
Described adjusting module 70, for the load condition according to described service authentication node, adjusts described industry
Business authenticating node and distributed caching access the quantity of node.
The business load state of its service authentication node monitored in real time by service authentication platform, reflects according to its business
The business load state of power node, is increased or decreased its service authentication node and distributed caching accesses node.
As when the business load of its service authentication node is more than the first predetermined threshold value, increase its service authentication node
Node is accessed with distributed caching.Described first predetermined threshold value can the most freely be arranged, Ke Yishe
It is set to 60%, 70%, 80%, it is preferable that be set to 70%.As when 3 business of service authentication platform
When the business load amount of authenticating node has exceeded the 70% of its service authentication node total capacity the most, increase its industry
Service authentication node and the distributed caching of business authentication platform access node；Business when service authentication platform
When the load of authenticating node is less than the second predetermined threshold value, reduces its service authentication node and distributed caching is visited
Ask node.Described first predetermined threshold value is more than the second predetermined threshold value, and described second predetermined threshold value can basis
Need freely arrange, could be arranged to 20%, 30%, 40% etc., it is preferable that be set to 30%, i.e. when
The portfolio of 3 service authentication nodes of service authentication platform is below its service authentication node total capacity
When 30%, the service authentication node and the distributed caching that reduce its service authentication platform access node.
Further, described service authentication module 20, the request that is additionally operable to stores described customer relationship；
Described distributed caching access modules 50, is additionally operable to the request according to the described customer relationship of described storage,
Submit described customer relationship to.
The service authentication node of service authentication platform is asked its distributed caching to access node and is stored described user
Relation, after described distributed caching accesses the storage request that node receives described customer relationship, by institute
State customer relationship and submit to its distributed caching node.Service authentication node such as service authentication platform is asked
Its distributed caching access node memory mobile terminal user 13100000001 and operator 10001 it
Between customer relationship, when described distributed caching access node receive mobile phone users 13100000001
And after the storage request of the customer relationship between operator 10001, by mobile phone users 13100000001
And the customer relationship between operator 10001 submits to its distributed caching node.
In the present embodiment, the method realizing message authentication by distributed caching, make upstream message exist
During authentication, customer relationship can store in multiple service authentication nodes, it is not necessary in fixing or specific industry
Business authenticating node authenticates, improves the performance that message authenticates in real time；Industry can also be dynamically increased or decreased
Business authenticating node, meanwhile, solves the problem that single service authentication node is busy, also achieves seamless pipe
Delay the function of machine service authentication node.
The invention described above embodiment sequence number, just to describing, does not represent the quality of embodiment.More than by
The description of embodiment, those skilled in the art is it can be understood that can to above-described embodiment method
The mode adding required general hardware platform by software realizes, naturally it is also possible to by hardware, but very
In the case of Duo, the former is more preferably embodiment.Based on such understanding, technical scheme essence
On the part that in other words prior art contributed can embody with the form of software product, this meter
Calculation machine software product is stored in a storage medium (such as ROM/RAM, magnetic disc, CD), including
Some instructions are with so that a station terminal equipment (can be mobile phone, computer, server, or network
Equipment etc.) perform the method described in each embodiment of the present invention.
These are only the preferred embodiments of the present invention, not thereby limit the scope of the claims of the present invention, every
Utilize equivalent structure or equivalence flow process conversion that description of the invention and accompanying drawing content made, or directly or
Connect and be used in other relevant technical fields, be the most in like manner included in the scope of patent protection of the present invention.
Claims (10)
1. a message authentication method based on distributed caching, it is characterised in that described based on distributed
The message authentication method of caching includes step:
When receiving until authentication message, determine described in treat the classification of authentication message；
Treat described in if that authentication message is upstream message, then carry out service authentication operation, generate corresponding user
Relation；
Described customer relationship is stored in distributed caching node, when described customer relationship is at least two
When distributed caching node stores successfully, it is determined that described upstream message authenticates successfully.
2. message authentication method based on distributed caching as claimed in claim 1, it is characterised in that
Described when receiving until authentication message, determine described in treat authentication message the step of classification after, also wrap
Include:
Treat described in if that authentication message is downstream message, then access distributed caching joint according to described downstream message
Customer relationship in point；
When accessing successfully, it is determined that described downstream message authenticates successfully.
3. message authentication method based on distributed caching as claimed in claim 2, it is characterised in that
Treat that authentication message is downstream message if described, then access distributed caching joint according to described downstream message
The step of the customer relationship in point includes:
If treat described in that authentication message is downstream message, then the user in request verification distributed caching node is closed
System；
According to the request of the customer relationship in described verification distributed caching node, access distributed caching joint
Customer relationship in point.
4. message authentication method based on distributed caching as claimed in claim 1, it is characterised in that
Treat that authentication message is upstream message if described, then carry out service authentication operation, generate corresponding user
After the step of relation, also include:
Request stores described customer relationship；
According to the request of the described customer relationship of described storage, submit described customer relationship to.
5. the message authentication method based on distributed caching as described in any one of Claims 1-4, its
Be characterised by, described when receiving until authentication message, determine described in treat the step of classification of authentication message
Before, also include:
Monitor the load condition of service authentication node in real time；
According to the load condition of described service authentication node, adjust described service authentication node and distributed slow
Deposit the quantity accessing node.
6. a message authentication device based on distributed caching, it is characterised in that described based on distributed
The message authentication device of caching includes:
Message reception module, for when receiving until authentication message, determine described in treat the class of authentication message
Not；
Service authentication module, if treating described in Yong Yu, authentication message is upstream message, then carry out service authentication behaviour
Make, generate corresponding customer relationship；
Distributed caching module, for storing described customer relationship in distributed caching node；
Determination module, for storing successfully at least two distributed caching node when described customer relationship
Time, it is determined that described upstream message authenticates successfully.
7. message authentication device based on distributed caching as claimed in claim 6, it is characterised in that
Described message authentication device based on distributed caching also includes distributed caching access modules, if for institute
State and treat that authentication message is downstream message, then access the use in distributed caching node according to described downstream message
Family relation；
Described determination module, is additionally operable to when accessing successfully, it is determined that described downstream message authenticates successfully.
8. message authentication device based on distributed caching as claimed in claim 7, it is characterised in that
Described service authentication module, if treating described in being additionally operable to, authentication message is downstream message, then ask verification
Customer relationship in distributed caching node；
Described distributed caching access modules, is additionally operable to according to the use in described verification distributed caching node
The request of family relation, accesses the customer relationship in distributed caching node.
9. message authentication device based on distributed caching as claimed in claim 7, it is characterised in that
Described service authentication module, the request that is additionally operable to stores described customer relationship；
Described distributed caching access modules, is additionally operable to the request according to the described customer relationship of described storage,
Submit described customer relationship to.
10. the message authentication device based on distributed caching as described in any one of claim 6 to 9,
It is characterized in that, described message authentication device based on distributed caching also includes monitoring modular and adjusts mould
Block,
Described monitoring modular, for the load condition of monitoring service authentication node in real time；
Described adjusting module, for the load condition according to described service authentication node, adjusts described business
Authenticating node and distributed caching access the quantity of node.
Priority Applications (2)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510119274.7A CN106034156A (en) | 2015-03-18 | 2015-03-18 | Message authentication method based on distributed cache and apparatus thereof |
| PCT/CN2015/081877 WO2016145741A1 (en) | 2015-03-18 | 2015-06-18 | Distributed cache-based message authentication method and apparatus |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510119274.7A CN106034156A (en) | 2015-03-18 | 2015-03-18 | Message authentication method based on distributed cache and apparatus thereof |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN106034156A true CN106034156A (en) | 2016-10-19 |
Family
ID=56919515
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201510119274.7A Withdrawn CN106034156A (en) | 2015-03-18 | 2015-03-18 | Message authentication method based on distributed cache and apparatus thereof |
Country Status (2)
| Country | Link |
|---|---|
| CN (1) | CN106034156A (en) |
| WO (1) | WO2016145741A1 (en) |
Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101431659A (en) * | 2008-12-08 | 2009-05-13 | 中兴通讯股份有限公司 | Interactive Web TV system and its processing method |
| CN101834744A (en) * | 2010-05-14 | 2010-09-15 | 中兴通讯股份有限公司 | Convergence service system and implementation method thereof |
| CN102281302A (en) * | 2011-08-24 | 2011-12-14 | 中国联合网络通信集团有限公司 | resource access processing method and system |
-
2015
- 2015-03-18 CN CN201510119274.7A patent/CN106034156A/en not_active Withdrawn
- 2015-06-18 WO PCT/CN2015/081877 patent/WO2016145741A1/en active Application Filing
Patent Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101431659A (en) * | 2008-12-08 | 2009-05-13 | 中兴通讯股份有限公司 | Interactive Web TV system and its processing method |
| CN101834744A (en) * | 2010-05-14 | 2010-09-15 | 中兴通讯股份有限公司 | Convergence service system and implementation method thereof |
| CN102281302A (en) * | 2011-08-24 | 2011-12-14 | 中国联合网络通信集团有限公司 | resource access processing method and system |
Also Published As
| Publication number | Publication date |
|---|---|
| WO2016145741A1 (en) | 2016-09-22 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN108540536B (en) | Block chain-based network mass service processing method, equipment and storage medium | |
| CN113543177B (en) | Communication method, communication device, computer readable medium and electronic equipment | |
| CN108805704A (en) | Block chain service implementation method, audiomonitor, storage medium and system | |
| US9806960B2 (en) | Method and system for adjusting heavy traffic loads between personal electronic devices and external services | |
| CN110149392A (en) | A kind of management method and device of PUSH message | |
| CN108600315B (en) | Block link route processing method, device and storage medium | |
| CN101459836B (en) | Service processing method and system for content distributing network of interactive network television | |
| US8761727B2 (en) | Method and apparatus for pre-caching in a telecommunication system | |
| CN102238201A (en) | Internet of things application module and communication method for Internet of things application and Internet of things terminal | |
| CN104348792A (en) | Data processing method, device and system | |
| Li et al. | Deployment of edge servers in 5G cellular networks | |
| CN113517985B (en) | File data processing method and device, electronic equipment and computer readable medium | |
| CN106302211A (en) | The request amount control method of a kind of Internet resources and device | |
| CN109905863B (en) | Relay access method of distributed cooperative communication based on block chain storage | |
| CN107071020A (en) | Load balancing framework applied to cloud computing server | |
| CN112364365A (en) | Industrial data encryption method, edge server and computer readable storage medium | |
| CN106034156A (en) | Message authentication method based on distributed cache and apparatus thereof | |
| CN106506660B (en) | A kind of online request processing method, server and system | |
| CN111541619B (en) | Self-adaptive active load adjusting method and device for enterprise information networking checking system | |
| CN103493543B (en) | Method and device for controlling user to access system | |
| CN107707383B (en) | Put-through processing method and device, first network element and second network element | |
| Hong et al. | Modeling and design of a Session Initiation Protocol overload control algorithm | |
| CN105550539A (en) | Big data resource protection method | |
| Cao et al. | Stochastic optimization for pricing-aware multimedia services in 5G vehicular networks | |
| CN117768467B (en) | Data transmission method, device, computer equipment and computer readable storage medium |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| WW01 | Invention patent application withdrawn after publication |
Application publication date: 20161019 |
|
| WW01 | Invention patent application withdrawn after publication |