CN110516465B - Resource address management method, device, equipment and computer readable storage medium - Google Patents
Resource address management method, device, equipment and computer readable storage medium Download PDFInfo
- Publication number
- CN110516465B CN110516465B CN201910623795.4A CN201910623795A CN110516465B CN 110516465 B CN110516465 B CN 110516465B CN 201910623795 A CN201910623795 A CN 201910623795A CN 110516465 B CN110516465 B CN 110516465B
- Authority
- CN
- China
- Prior art keywords
- address
- resource
- virtual address
- binary
- virtual
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
- 238000007726 management method Methods 0.000 title claims description 31
- 238000000034 method Methods 0.000 claims abstract description 41
- 238000013507 mapping Methods 0.000 claims abstract description 32
- 238000004422 calculation algorithm Methods 0.000 claims abstract description 14
- 238000006243 chemical reaction Methods 0.000 claims description 6
- 238000013500 data storage Methods 0.000 abstract description 2
- 230000008569 process Effects 0.000 description 7
- 238000004891 communication Methods 0.000 description 6
- 230000006870 function Effects 0.000 description 6
- 238000012545 processing Methods 0.000 description 5
- 238000004364 calculation method Methods 0.000 description 3
- 238000004458 analytical method Methods 0.000 description 2
- 230000008859 change Effects 0.000 description 2
- 238000011161 development Methods 0.000 description 2
- 238000010586 diagram Methods 0.000 description 2
- 230000003068 static effect Effects 0.000 description 2
- 229910002056 binary alloy Inorganic materials 0.000 description 1
- 238000001514 detection method Methods 0.000 description 1
- 238000005516 engineering process Methods 0.000 description 1
- 230000003993 interaction Effects 0.000 description 1
- 230000007246 mechanism Effects 0.000 description 1
- 230000003287 optical effect Effects 0.000 description 1
- 238000004064 recycling Methods 0.000 description 1
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F16/00—Information retrieval; Database structures therefor; File system structures therefor
- G06F16/90—Details of database functions independent of the retrieved data types
- G06F16/901—Indexing; Data structures therefor; Storage structures
- G06F16/9017—Indexing; Data structures therefor; Storage structures using directory or table look-up
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/60—Protecting data
- G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules
- G06F21/6218—Protecting access to data via a platform, e.g. using keys or access control rules to a system of files or objects, e.g. local or distributed file system or database
Landscapes
- Engineering & Computer Science (AREA)
- Theoretical Computer Science (AREA)
- Databases & Information Systems (AREA)
- Software Systems (AREA)
- General Physics & Mathematics (AREA)
- General Engineering & Computer Science (AREA)
- Physics & Mathematics (AREA)
- Bioethics (AREA)
- Computer Security & Cryptography (AREA)
- Computer Hardware Design (AREA)
- General Health & Medical Sciences (AREA)
- Health & Medical Sciences (AREA)
- Data Mining & Analysis (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
- Computer And Data Communications (AREA)
Abstract
The invention relates to the technical field of data storage, and provides a method, a device, equipment and a computer readable storage medium for managing resource addresses, wherein the method comprises the following steps: when detecting that a new resource is stored in a resource server, acquiring a real storage address of the new resource, and distributing a corresponding address number ID for the real storage address; carrying out binary mapping on the address number ID based on a preset binary algorithm, and obtaining a binary virtual address corresponding to the real storage address according to a mapping result; and associating the binary virtual address with the real storage address, and storing the binary virtual address in a corresponding virtual address data table so that a client corresponding to the resource server can apply for resources through the virtual address data table. When the method and the device are used for storing data, the exposure of the real storage address of the resource file to the external client can be avoided, and the safety of resource storage is effectively improved.
Description
Technical Field
The present invention relates to the field of data storage technologies, and in particular, to a method, an apparatus, a device, and a computer readable storage medium for managing a resource address.
Background
With the development of the internet, more and more resource files are stored in the service system. For the current business system, a static resource file is generally stored in a corresponding directory of a resource server, so as to provide resource service for a client. When the resource server provides the resource service for the client, the real storage address corresponding to the resource is generally directly used, namely, when the client obtains the resource from the resource server, the real storage address corresponding to the resource is generally directly used for obtaining the resource, so that a malicious person can easily see the directory structure and the resource storage position of the resource server, and the resource is maliciously crawled by using a crawler tool or other modes, thereby reducing the security of the resource storage.
Disclosure of Invention
The invention mainly aims to provide a method, a device, equipment and a computer readable storage medium for managing resource addresses, and aims to solve the technical problem of low security of the existing resource storage.
In order to achieve the above object, the present invention provides a method for managing a resource address, the method for managing a resource address including:
when detecting that a new resource is stored in a resource server, acquiring a real storage address of the new resource, and distributing a corresponding address number ID for the real storage address;
carrying out binary mapping on the address number ID based on a preset binary algorithm, and obtaining a binary virtual address corresponding to the real storage address according to a mapping result;
and associating the binary virtual address with the real storage address, and storing the binary virtual address in a corresponding virtual address data table so that a client corresponding to the resource server can apply for resources through the virtual address data table.
In addition, to achieve the above object, the present invention also provides a device for managing a resource address, including:
the ID allocation module is used for acquiring a real storage address of the new resource when detecting that the new resource is stored in the resource server, and allocating a corresponding address number ID for the real storage address;
the system mapping module is used for carrying out system mapping on the address number ID based on a preset system algorithm and obtaining a system virtual address corresponding to the real storage address according to a mapping result;
and the address association module is used for associating the binary virtual address with the real storage address, and storing the binary virtual address in a corresponding virtual address data table so that a client corresponding to the resource server can apply for resources through the virtual address data table.
In addition, to achieve the above object, the present invention also provides a resource address management apparatus, which includes a processor, a memory, and a management program stored on the memory and executable by the processor, wherein the management program, when executed by the processor, implements the steps of the resource address management method as described above.
In addition, in order to achieve the above object, the present invention further provides a computer-readable storage medium having a management program stored thereon, wherein the management program of the resource address implements the steps of the management method of the resource address as described above when executed by a processor.
When the resource is stored, the corresponding digital ID is allocated to the real storage address of the resource, then the digital ID is converted into the corresponding binary number based on a binary calculation mode, then the corresponding binary virtual address is allocated to the resource according to the binary number, and resource service is provided for a client (outside the system) through the binary virtual address, so that the exposure of the real storage address of the resource file to the external client is avoided, and the rule is not easy to be seen by malicious personnel because the binary virtual address is obtained through conversion in a binary mapping mode, and the safety of the resource storage is effectively improved.
Drawings
FIG. 1 is a schematic hardware structure of a resource address management device according to an embodiment of the present invention;
FIG. 2 is a flowchart illustrating a first embodiment of a method for managing resource addresses according to the present invention;
FIG. 3 is a flowchart illustrating a second embodiment of a method for managing resource addresses according to the present invention;
fig. 4 is a schematic functional block diagram of a first embodiment of a resource address management device according to the present invention.
The achievement of the objects, functional features and advantages of the present invention will be further described with reference to the accompanying drawings, in conjunction with the embodiments.
Detailed Description
It should be understood that the specific embodiments described herein are for purposes of illustration only and are not intended to limit the scope of the invention.
The method for managing the resource address according to the embodiment of the invention is mainly applied to the equipment for managing the resource address, and the equipment for managing the resource address can be a server, a personal computer (personal computer, PC), a notebook computer and other equipment with a data processing function.
Referring to fig. 1, fig. 1 is a schematic hardware structure of a resource address management device according to an embodiment of the present invention. In an embodiment of the present invention, the resource address management device may include a processor 1001 (e.g., a central processing unit Central Processing Unit, a CPU), a communication bus 1002, a user interface 1003, a network interface 1004, and a memory 1005. Wherein the communication bus 1002 is used to enable connected communications between these components; the user interface 1003 may include a Display screen (Display), an input unit such as a Keyboard (Keyboard); the network interface 1004 may optionally include a standard wired interface, a WIreless interface (e.g., WIreless-FIdelity, WI-FI interface); the memory 1005 may be a high-speed random access memory (random access memory, RAM) or a stable memory (non-volatile memory), such as a disk memory, and the memory 1005 may alternatively be a storage device independent of the processor 1001. Those skilled in the art will appreciate that the hardware configuration shown in fig. 1 is not limiting of the invention and may include more or fewer components than shown, or may combine certain components, or a different arrangement of components.
With continued reference to FIG. 1, memory 1005 in FIG. 1, which is one type of computer-readable storage medium, may include an operating system, a network communication module, and a hypervisor. In fig. 1, a network communication module may be used to connect to a database for data communication therewith; and the processor 1001 may call a management program stored in the memory 1005 and execute the method for managing a resource address provided by the embodiment of the present invention.
The embodiment of the invention provides a method for managing a resource address.
Referring to fig. 2, fig. 2 is a flowchart illustrating a first embodiment of a method for managing resource addresses according to the present invention.
In this embodiment, the method for managing the resource address includes the following steps:
step S10, when detecting that a new resource is stored in a resource server, acquiring a real storage address of the new resource, and distributing a corresponding address number ID for the real storage address;
with the development of the internet, more and more resource files are stored in the service system. For the current business system, a static resource file is generally stored in a corresponding directory of a resource server, so as to provide resource service for a client. When the resource server provides the resource service for the client, the real storage address corresponding to the resource is generally directly used, namely, when the client obtains the resource from the resource server, the real storage address corresponding to the resource is generally directly used for obtaining the resource, so that a malicious person can easily see the directory structure and the resource storage position of the resource server, and the resource is maliciously crawled by using a crawler tool or other modes, thereby reducing the security of the resource storage. In this regard, this embodiment provides a method for managing a resource address, when a resource is stored, a corresponding ID number is allocated to a real storage address of the resource, then the ID number is converted into a corresponding binary number based on a binary calculation manner, and then a binary virtual address is allocated to the resource according to the binary number, and resource service is provided for a client (outside the system) through the binary virtual address, so that the security of resource storage is improved.
The method for managing the resource address of the present embodiment is implemented by a management device for the resource address, which may be a server, a personal computer (personal computer, PC), a notebook computer, or the like; in this embodiment, the resource server is taken as an example of the management device for the resource address. In this embodiment, when detecting that a new resource is stored in a resource server of a service system, the resource server will first acquire a real storage address of the new resource stored in the resource server; the storing of the new resource may be that the related staff manually uploads the resource and stores the resource, or that the resource server downloads the resource from the network and stores the resource based on a certain rule (such as script). When the resource server obtains the real storage address of the new resource, a non-repeated unique address number ID is allocated to the real storage address, the address number ID is a string of numbers corresponding to the real storage address of the new resource one by one, and the address number ID is an integer greater than or equal to 0. In order to quickly allocate the address number ID, the allocation of the ID to each address may be performed in an incremental manner, that is, the address number ID is continuously incremented from 0, for example, after the resources newly put in at time t are stored, the address number ID allocated to the real storage address is x, and for the resources newly put in at time t+1 (the next time of time t), the address number ID allocated to the real storage address is x+1. Of course, the address number ID may be randomly allocated, but the uniqueness of the address number ID needs to be ensured, that is, the detection of the uniqueness of the ID needs to be performed after the address number ID is randomly allocated.
Step S20, carrying out binary mapping on the address number ID based on a preset binary algorithm, and obtaining a binary virtual address corresponding to the real storage address according to a mapping result;
in this embodiment, when the address number ID corresponding to the real storage address is obtained, the resource server performs a binary mapping on the address number ID according to a preset binary algorithm to obtain a binary number, obtains a unique corresponding character string according to the binary number, and replaces part of path characters in the original real resource address with the character string, thereby obtaining a binary virtual address corresponding to the original real storage address. Specifically, step S20 in the present embodiment includes:
performing binary conversion on the address number ID to obtain an address binary number string of the address number ID under a preset system;
in this embodiment, the resource server first needs to preset a binary rule, such as 2, 5, 8, 32, 36, etc.; simultaneously presetting a standard character sequence, wherein the number of characters in the preset standard character sequence is the same as the number of the binary system rule, and the characters in the preset standard character sequence are not repeated and belong to address path characters which can be identified; for example, if the binary rule is set to 36, the number of characters of the preset standard character sequence should also be 36 bits, and the preset standard character sequence may be "0123456789 abcdefghijlmnonoqrstuvwxyz". When the resource server obtains the address number ID corresponding to the real storage address of the new resource, the address number ID can be converted in a system way, so that the address number ID is an address system number string under a preset system. For example, the preset system is 36 bits, the address number ID is 2133, and the address system number string corresponding to the address number ID is 01-23-09; for another example, if the preset number is 32 bits and the address number ID is 10912, the address number string corresponding to the address number ID is 10-21-00.
Performing character selection in a preset standard character string according to each digit of the address system number string, and combining the selection results to obtain a virtual path character string;
in this embodiment, when the resource server obtains the address system number, the resource server may take out the corresponding characters from the preset standard character string according to the digits of the address system number, and then form a character string from the taken out characters, where the character string may be referred to as a virtual path character string. For example, the binary rule is set to be 36 binary, and a preset standard character sequence of 36-bit character number is correspondingly set, and the preset standard character sequence is '01234556789 abcdefghijlmnonoqrstuvwxyz'; the address number ID is 2133, and the corresponding 36-bit address system number string is 01-23-09; according to the address system number string, three characters, namely '1' of the 1 st bit, 'n' of the 23 rd bit and '9' of the 9 th bit, can be taken out from a preset standard character sequence; then, the '1', 'n', '9' can be combined according to the positions of the digits of the address system digit string to obtain a virtual path character string '1 n 9'; of course, other combinations are possible, such as reverse order combination to obtain the virtual path string "9n1".
And replacing the replaceable path character string in the real storage address by the virtual path character string to obtain a binary virtual address corresponding to the real storage address.
In this embodiment, when the resource server obtains the virtual path character string, the resource server may replace the replaceable path character string in the real storage address with the virtual path character, so as to hide a part of the real path in the real storage address, and obtain the binary virtual address corresponding to the real storage address; wherein, for the alternative path character string, it may be a specific part of the real storage address, for example, the content after the first slash "/" of the real storage address (address domain name) may be designated as the alternative path character string. For example, the real storage address (address domain name) of the new resource of the newly stored resource server is 'https:// www.abc:. Com/manager/pu/prd/stg/pamitides', wherein the first slash "/" beginning character of the real storage address (address domain name) is an alternate path string, i.e. the alternate path string is 'manager/pu/prd/stg/pamitides'; and the virtual path character string '1 n 9' replaces the replaceable path character string in the real storage address by the virtual path character string to obtain a binary virtual address 'https:// www.abc:.com/1 n 9' corresponding to the real storage address.
Step S30, the system virtual address is associated with the real storage address, and the system virtual address is stored in a corresponding virtual address data table, so that a client corresponding to the resource server can apply for resources through the virtual address data table.
In this embodiment, when the resource server obtains the virtual address, the virtual address may be associated with the real storage address of the new resource; and simultaneously, storing the binary virtual address in a corresponding virtual address data table so as to enable the client to apply for resources through the binary virtual address according to the virtual address data table. Of course, the virtual address data table also includes contents such as resource names, resource descriptions, and the like. When the client needs to acquire the resource file, the virtual address data table can be queried first to determine the binary virtual address of the resource to be acquired, and then a resource acquisition request is initiated based on the binary virtual address of the virtual address data table, namely, for the client outside the resource server or the service system, only the binary virtual address is exposed, the real storage address of the resource is not exposed, and the client needs to apply for the resource by using the binary virtual address, so that the security of resource storage is improved.
Furthermore, in this embodiment, the change may be performed on the binary virtual address periodically, so as to avoid the potential danger caused by the fixed resource address as much as possible. Specifically, when a binary virtual address of a new resource is associated with a real storage address and the binary virtual address is stored in a corresponding virtual address data table, the resource server counts time; after a preset time, the resource server reassigns a unique corresponding secondary address number ID for the real storage address to replace the original address number ID; then, carrying out binary mapping on the secondary address number ID based on a preset binary algorithm, and obtaining a secondary virtual address according to a mapping result, wherein the obtaining process of the secondary virtual address is similar to that of the step S20, and the description is omitted here; when the secondary virtual address is obtained, the secondary virtual address can be associated with the real storage address of the new resource, and the secondary virtual address is stored in a virtual address data table; meanwhile, the resource server also removes the association between the original virtual address and the real storage address, and deletes the original virtual address from the virtual address data table, namely replaces the original virtual address by the secondary virtual address. And so on, after a preset time, the resource server can change the virtual address again in the system as described above, so that the virtual address of the resource is in a periodically changed state, and the potential danger caused by the fixed resource address is avoided as much as possible. Of course, besides the passing time as the changing condition of the binary virtual address, the requested times of the resource file can be used as the binary virtual address; for example, when the binary virtual address of the new resource is associated with the real storage address, the resource server counts the number of times of the request of the new resource, and when the number of times of the request reaches a certain threshold, a unique corresponding secondary address number ID is reassigned to the real storage address of the new resource, and the corresponding secondary virtual address is reacquired according to the secondary address number ID.
Still further, in this embodiment, because the service or other service needs to replace the new resource with the storage location, the real address of the new resource in the resource server is not exposed to the external client, and thus the virtual address of the new resource can be kept unchanged. Specifically, when the resource server detects the new resource replacement address, a secondary real address after the new resource replacement storage position can be obtained; and then canceling the association of the binary virtual address and the original real storage address, and associating the binary virtual address with the secondary real address, so that the association relationship between the binary virtual address and the real address of the new resource is updated under the condition that the binary virtual address is not changed, and the client can normally apply for the resource after the storage position of the new resource is replaced.
In addition, as can be seen from the preset binary algorithm in step S20, the larger the address number ID, the more the number of characters of the binary virtual address may be, and the longer the length of the binary virtual address may be; in order to save system resources, the resource server may detect whether any resource files are deleted; if so, the address number ID originally allocated to the resource files can be released for recycling. Specifically, when detecting that an expired resource is deleted in the resource server, the resource server deletes an expired virtual address corresponding to the expired resource in a virtual address data table, and releases an expired address number ID corresponding to the expired resource so as to reassign the expired address number ID to other newly stored resource files, thereby realizing the reuse of the address number ID and saving system resources.
It should be noted that, for the resource server or the service system, the real storage address of the resource file can still be used for data interaction and resource call, so as to achieve quick acquisition of the resource file.
In this embodiment, when a new resource is detected to be stored in a resource server, a real storage address of the new resource is obtained, and a corresponding address number ID is allocated to the real storage address; carrying out binary mapping on the address number ID based on a preset binary algorithm, and obtaining a binary virtual address corresponding to the real storage address according to a mapping result; and associating the binary virtual address with the real storage address, and storing the binary virtual address in a corresponding virtual address data table so that a client corresponding to the resource server can apply for resources through the virtual address data table. Through the above manner, when the resource is stored, the embodiment allocates the corresponding digital ID for the real storage address of the resource, converts the digital ID into the corresponding binary number based on the binary calculation manner, allocates the corresponding binary virtual address for the resource according to the binary number, and provides resource service for the client (outside the system) through the binary virtual address, so that the exposure of the real storage address of the resource file to the external client is avoided, and the rule is not easy to be seen by malicious personnel because the binary virtual address is obtained through the conversion of the binary mapping manner, thereby effectively improving the security of the resource storage.
Referring to fig. 3, fig. 3 is a flowchart illustrating a second embodiment of a method for managing a resource address according to the present invention.
Based on the embodiment shown in fig. 2, in this embodiment, step S30 further includes:
step S40, when a resource acquisition request sent by the client based on the virtual address data table is received, acquiring a target virtual address in the resource request, and determining an associated target real address according to the target virtual address;
in this embodiment, when a client needs to acquire a certain target resource, the virtual address data table may be queried first to determine the binary virtual address of the current resource to be acquired; a resource acquisition request is then initiated based on the target virtual address of the virtual address data table. When the resource server receives the resource acquisition request, the resource server acquires a target virtual address in the resource request; and because the target virtual address is not the real position of the target resource in the resource server, the resource server also determines the target real address associated with the target virtual address according to the target virtual address, so that the corresponding target resource is found according to the target real address.
And step S50, obtaining corresponding target resources according to the target real address, and returning the target resources to the client.
In this embodiment, when determining the target real address associated with the target virtual address, the resource server may acquire the corresponding target resource according to the target real address, and return the target resource to the client. By the above mode, for the resource server or the client outside the service system, only the virtual address of the system is exposed, and the real storage address of the resource is not exposed; the client needs to apply for the resources by using the binary virtual address, so that the security of the resource storage is improved.
Further, considering that malicious personnel can continuously send a binary virtual address to acquire a resource request in an exhaustion mode, so that resource leakage is caused; in this embodiment, the resource acquisition record of the client may be analyzed, and when it is detected that the resource acquisition record meets a certain exhaustion rule, a security prompt may be timely performed, so as to improve the security of resource storage. Specifically, after the step S50, the method further includes:
counting the resource request times of the client in a preset period, and judging whether the resource request times are larger than a preset safety threshold or not;
in this embodiment, after the target resource is returned to the client, the management server counts the resource request situation of the client, and obtains the number of resource requests of the client in a preset period (for example, within 10 minutes, 24 hours, etc.). When the resource request times of the client in the preset time period are obtained, the management server compares the resource request times with a preset safety threshold; if the number of resource requests of the client in the preset time period is greater than the preset safety threshold, the client can be considered to have the condition of exhaustion request of resources and needs to be further analyzed; if the number of resource requests of the client in the preset period is less than or equal to the preset security threshold, the client can be considered to have no related risk operation temporarily, and the subsequent analysis can be omitted.
If the number of the resource requests is larger than the preset safety threshold, acquiring a history request record of the client in a preset period, wherein the history request record comprises the request time and the history virtual address of each history request;
in this embodiment, if the number of resource requests of the client in the preset period is greater than the preset security threshold, it may be considered that the client may have an exhaustive request for resources, and at this time, the resource server may obtain history request records of the client in the preset period, where the history request records include a request time of each history request and a history virtual address used for the request.
Arranging the historical virtual addresses according to the request time, and judging whether the arranged historical virtual addresses accord with a preset ordering rule or not;
in this embodiment, when the resource server obtains the history request record, the history virtual addresses are arranged according to the request time of each history request. For example, according to the history request record of the client, the client performs four history requests within a predetermined period, where the times are "2017, 5, 6, 3, 13, 16 seconds", "2017, 5, 6, 3, 13, 26 seconds", "2017, 5, 6, 3, 13, 36 seconds" and "2017, 5, 6, 3, 13, 46 seconds", respectively, and the corresponding history virtual addresses are "https:// www.abc:.com.cn/1 n14", "https:// www.abc:.com.cn/1 n15", "https:// www.abc:.com/1 n16" and "https:// www.abc:.com/1 n17", respectively. After the historical virtual addresses are arranged, the resource server judges whether the arranged historical virtual addresses accord with a preset ordering rule or not; if yes, the client can be considered to continuously send the binary virtual address in an exhaustion mode to acquire the resources in the period; if the operation is not met, the client can be considered to have no related risk operation for a while, and the subsequent operation can be omitted. The preset ordering rule may be set according to a related empirical mode, for example, the number characters increment in an arithmetic mode, the number characters increment in a quotient mode, the english characters are continuously changed in a 26 english character ordering mode, etc. For example, for "https:// www.abc:, com/1 n14", "https:// www.abc:, com/1 n15", "https:// www.abc:. Com/1 n16" and "https:// www.abc:. Com/1 n17", the rule of "numerical character increment in equal difference" ordering rules is satisfied, and the client can be considered to perform resource acquisition by sending the binary virtual address continuously in an exhaustive manner during the period.
And if the arranged historical virtual addresses accord with the preset ordering rule, determining the client as a malicious client, and sending a corresponding security prompt to a management terminal.
In this embodiment, if it is determined that the arranged historical virtual addresses conform to the preset ordering rule, the client may be considered to continuously send the binary virtual addresses in an exhaustive manner to perform resource acquisition in the period, and at this time, the resource server may send a corresponding security prompt to the corresponding management end to prompt the relevant management personnel to perform further analysis and/or processing in time. Of course, the resource server may also set a certain processing mechanism to process the situation in time, for example, may reject the resource acquisition request of the client in a certain time. By the method, the resource server can analyze the resource request record of the client and timely carry out safety prompt when detecting that the resource acquisition record accords with a certain exhaustion rule, so that the safety of resource storage is improved.
In addition, the embodiment of the invention also provides a device for managing the resource address.
Referring to fig. 4, fig. 4 is a schematic functional block diagram of a first embodiment of a resource address management device according to the present invention.
In this embodiment, the device for managing a resource address includes:
the ID allocation module 10 is used for acquiring a real storage address of a new resource when detecting that the new resource is stored in the resource server, and allocating a corresponding address number ID for the real storage address;
the binary mapping module 20 is configured to perform binary mapping on the address number ID based on a preset binary algorithm, and obtain a binary virtual address corresponding to the real storage address according to a mapping result;
and the address association module 30 is configured to associate the binary virtual address with the real storage address, and store the binary virtual address in a corresponding virtual address data table, so that a client corresponding to the resource server applies for resources through the virtual address data table.
Wherein, each virtual function module of the resource address management device is stored in the memory 1005 of the resource address management device shown in fig. 1, and is used for implementing all functions of the management program; when executed by the processor 1001, each module may implement a resource address related management function.
Further, the device for managing resource addresses further includes:
the address determining module is used for acquiring a target virtual address in the resource request when receiving the resource acquisition request sent by the client based on the virtual address data table, and determining an associated target real address according to the target virtual address;
and the resource return module is used for acquiring the corresponding target resource according to the target real address and returning the target resource to the client.
Further, the device for managing resource addresses further includes:
the first judging module is used for counting the resource request times of the client in a preset period and judging whether the resource request times are larger than a preset safety threshold or not;
the record acquisition module is used for acquiring a history request record of the client in a preset period if the resource request times are greater than the preset safety threshold, wherein the history request record comprises the request time and the history virtual address of each history request;
the second judging module is used for arranging the historical virtual addresses according to the request time and judging whether the arranged historical virtual addresses accord with a preset ordering rule or not;
and the prompt sending module is used for determining the client as a malicious client and sending a corresponding safety prompt to the management end if the arranged historical virtual addresses accord with the preset ordering rule.
Further, the binary mapping module 20 includes:
the system conversion unit is used for carrying out system conversion on the address number ID to obtain an address system number string of the address number ID under a preset system;
the character selection unit is used for selecting characters in a preset standard character sequence according to digits of the address system digit string, and combining the selection results to obtain a virtual path character string;
and the character string replacement unit is used for replacing the replaceable path character string in the real storage address by the virtual path character string to obtain a binary virtual address corresponding to the real storage address.
Further, the device for managing resource addresses further includes:
the secondary distribution module is used for re-distributing the unique corresponding secondary address number ID for the real storage address after the preset time;
the secondary mapping module is used for carrying out binary mapping on the secondary address number ID based on the preset binary algorithm and obtaining a secondary virtual address according to a mapping result;
the secondary association module is used for associating the secondary virtual address with the real storage address and storing the secondary virtual address into the virtual address data table;
and the association canceling module is used for canceling the association of the system virtual address and the real storage address and deleting the system virtual address from the virtual address data table.
Further, the device for managing resource addresses further includes:
the address replacement module is used for acquiring a secondary real address after the new resource replacement storage position when the new resource replacement storage position is detected; and canceling the association of the binary virtual address and the real storage address, and associating the binary virtual address with the secondary real address.
Further, the device for managing resource addresses further includes:
and the ID releasing module is used for deleting the expired virtual address corresponding to the expired resource in the virtual address data table when detecting that the expired resource in the resource server is deleted, and releasing the expired address number ID corresponding to the expired resource so as to reassign the expired address number ID.
The function implementation of each module in the resource address management device corresponds to each step in the resource address management method embodiment, and the function and implementation process of each module are not described here in detail.
In addition, the embodiment of the invention also provides a computer readable storage medium.
The computer readable storage medium of the present invention stores therein a management program which, when executed by a processor, implements the steps of the resource address management method as described above.
The method implemented when the hypervisor is executed may refer to various embodiments of the method for managing a resource address according to the present invention, which are not described herein.
It should be noted that, in this document, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or system that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or system. Without further limitation, an element defined by the phrase "comprising one … …" does not exclude the presence of other like elements in a process, method, article, or system that comprises the element.
The foregoing embodiment numbers of the present invention are merely for the purpose of description, and do not represent the advantages or disadvantages of the embodiments.
From the above description of the embodiments, it will be clear to those skilled in the art that the above-described embodiment method may be implemented by means of software plus a necessary general hardware platform, but of course may also be implemented by means of hardware, but in many cases the former is a preferred embodiment. Based on such understanding, the technical solution of the present invention may be embodied essentially or in a part contributing to the prior art in the form of a software product stored in a storage medium (e.g. ROM/RAM, magnetic disk, optical disk) as described above, comprising instructions for causing a terminal device (which may be a mobile phone, a computer, a server, an air conditioner, or a network device, etc.) to perform the method according to the embodiments of the present invention.
The foregoing description is only of the preferred embodiments of the present invention, and is not intended to limit the scope of the invention, but rather is intended to cover any equivalents of the structures or equivalent processes disclosed herein or in the alternative, which may be employed directly or indirectly in other related arts.
Claims (8)
1. A method for managing a resource address, the method comprising:
when detecting that a new resource is stored in a resource server, acquiring a real storage address of the new resource, and distributing a corresponding address number ID for the real storage address;
carrying out binary mapping on the address number ID based on a preset binary algorithm, and obtaining a binary virtual address corresponding to the real storage address according to a mapping result;
associating the binary virtual address with the real storage address, and storing the binary virtual address in a corresponding virtual address data table so that a client corresponding to the resource server can apply for resources through the virtual address data table;
the step of associating the binary virtual address with the real storage address, and storing the binary virtual address in a corresponding virtual address data table, so that the client corresponding to the resource server applies for resources through the virtual address data table, further includes:
when a resource acquisition request sent by the client based on the virtual address data table is received, acquiring a target virtual address in the resource request, and determining an associated target real address according to the target virtual address;
acquiring a corresponding target resource according to the target real address, and returning the target resource to the client;
counting the resource request times of the client in a preset period, and judging whether the resource request times are larger than a preset safety threshold or not;
if the number of the resource requests is larger than the preset safety threshold, acquiring a history request record of the client in a preset period, wherein the history request record comprises the request time and the history virtual address of each history request;
arranging the historical virtual addresses according to the request time, and judging whether the arranged historical virtual addresses accord with a preset ordering rule or not;
and if the arranged historical virtual addresses accord with the preset ordering rule, determining the client as a malicious client, and sending a corresponding security prompt to a management terminal.
2. The method for managing a resource address according to claim 1, wherein the step of performing a binary mapping on the address number ID based on a preset binary algorithm and obtaining a binary virtual address corresponding to the real storage address according to a mapping result comprises:
performing binary conversion on the address number ID to obtain an address binary number string of the address number ID under a preset system;
performing character selection in a preset standard character sequence according to each digit of the address system digit string, and combining the selection results to obtain a virtual path character string;
and replacing the replaceable path character string in the real storage address by the virtual path character string to obtain a binary virtual address corresponding to the real storage address.
3. The method for managing resource addresses according to claim 1, wherein after the step of associating the binary virtual address with the real storage address and storing the binary virtual address in the corresponding virtual address data table for the client to apply for resources through the virtual address data table, further comprising:
after the preset time, reassigning the corresponding secondary address number ID for the real storage address;
carrying out binary mapping on the secondary address number ID based on the preset binary algorithm, and obtaining a secondary virtual address according to a mapping result;
associating the secondary virtual address with the real storage address, and storing the secondary virtual address in the virtual address data table;
and canceling the association of the system virtual address and the real storage address, and deleting the system virtual address from the virtual address data table.
4. The method for managing resource addresses according to claim 1, wherein after the step of associating the binary virtual address with the real storage address and storing the binary virtual address in the corresponding virtual address data table, the step of applying for resources by the client corresponding to the resource server through the virtual address data table, further comprises:
when the new resource replacement storage position is detected, acquiring a secondary real address after the new resource replacement storage position;
and canceling the association of the binary virtual address and the real storage address, and associating the binary virtual address with the secondary real address.
5. The method for managing a resource address according to any one of claims 1 to 4, characterized in that the method for managing a resource address further comprises:
when detecting that the expired resources in the resource server are deleted, deleting the expired virtual addresses corresponding to the expired resources in the virtual address data table, and releasing the expired address number IDs corresponding to the expired resources so as to reassign the expired address number IDs.
6. A management apparatus for a resource address, the management apparatus comprising:
the ID allocation module is used for acquiring a real storage address of the new resource when detecting that the new resource is stored in the resource server, and allocating a corresponding address number ID for the real storage address;
the system mapping module is used for carrying out system mapping on the address number ID based on a preset system algorithm and obtaining a system virtual address corresponding to the real storage address according to a mapping result;
the address association module is used for associating the binary virtual address with the real storage address, and storing the binary virtual address in a corresponding virtual address data table so that a client corresponding to the resource server can apply for resources through the virtual address data table;
the address determining module is used for acquiring a target virtual address in the resource request when receiving the resource acquisition request sent by the client based on the virtual address data table, and determining an associated target real address according to the target virtual address;
the resource return module is used for acquiring corresponding target resources according to the target real address and returning the target resources to the client;
the first judging module is used for counting the resource request times of the client in a preset period and judging whether the resource request times are larger than a preset safety threshold or not;
the record acquisition module is used for acquiring a history request record of the client in a preset period if the resource request times are greater than the preset safety threshold, wherein the history request record comprises the request time and the history virtual address of each history request;
the second judging module is used for arranging the historical virtual addresses according to the request time and judging whether the arranged historical virtual addresses accord with a preset ordering rule or not;
and the prompt sending module is used for determining the client as a malicious client and sending a corresponding safety prompt to the management end if the arranged historical virtual addresses accord with the preset ordering rule.
7. A management device for resource addresses, characterized in that the management device for resource addresses comprises a processor, a memory, and a management program stored on the memory and executable by the processor, wherein the management program, when executed by the processor, implements the steps of the management method for resource addresses according to any one of claims 1 to 5.
8. A computer-readable storage medium, wherein a management program is stored on the computer-readable storage medium, wherein the management program of the resource address, when executed by a processor, implements the steps of the method of managing a resource address according to any one of claims 1 to 5.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201910623795.4A CN110516465B (en) | 2019-07-11 | 2019-07-11 | Resource address management method, device, equipment and computer readable storage medium |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201910623795.4A CN110516465B (en) | 2019-07-11 | 2019-07-11 | Resource address management method, device, equipment and computer readable storage medium |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN110516465A CN110516465A (en) | 2019-11-29 |
| CN110516465B true CN110516465B (en) | 2024-03-01 |
Family
ID=68622911
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201910623795.4A Active CN110516465B (en) | 2019-07-11 | 2019-07-11 | Resource address management method, device, equipment and computer readable storage medium |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN110516465B (en) |
Families Citing this family (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN113779074A (en) * | 2020-10-23 | 2021-12-10 | 北京沃东天骏信息技术有限公司 | Data query method and data query platform |
| CN112364268A (en) * | 2020-11-13 | 2021-02-12 | 微医云(杭州)控股有限公司 | Resource acquisition method and device, electronic equipment and storage medium |
| CN112487317A (en) * | 2020-11-23 | 2021-03-12 | 中国人寿保险股份有限公司 | Uniform Resource Locator (URL) conversion method, device, equipment and medium |
| CN114979119A (en) * | 2022-05-23 | 2022-08-30 | 深圳市云语科技有限公司 | Method for supporting multiple storages through virtual path in file transmission system |
Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| JP2013161383A (en) * | 2012-02-08 | 2013-08-19 | Sony Corp | Information processing device, information processing method, program and information processing system |
| CN105262856A (en) * | 2015-10-30 | 2016-01-20 | 南京秦杜明视信息技术有限公司 | Network data access encryption system and method |
| CN105830059A (en) * | 2014-11-28 | 2016-08-03 | 华为技术有限公司 | Fine pitch connector socket |
| CN105989304A (en) * | 2015-03-06 | 2016-10-05 | 深圳酷派技术有限公司 | File storage method, file reading method, file storage apparatus and file reading apparatus |
| CN109450858A (en) * | 2018-10-15 | 2019-03-08 | 杭州迪普科技股份有限公司 | Method, apparatus, equipment and the storage medium of resource request |
-
2019
- 2019-07-11 CN CN201910623795.4A patent/CN110516465B/en active Active
Patent Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| JP2013161383A (en) * | 2012-02-08 | 2013-08-19 | Sony Corp | Information processing device, information processing method, program and information processing system |
| CN105830059A (en) * | 2014-11-28 | 2016-08-03 | 华为技术有限公司 | Fine pitch connector socket |
| CN105989304A (en) * | 2015-03-06 | 2016-10-05 | 深圳酷派技术有限公司 | File storage method, file reading method, file storage apparatus and file reading apparatus |
| CN105262856A (en) * | 2015-10-30 | 2016-01-20 | 南京秦杜明视信息技术有限公司 | Network data access encryption system and method |
| CN109450858A (en) * | 2018-10-15 | 2019-03-08 | 杭州迪普科技股份有限公司 | Method, apparatus, equipment and the storage medium of resource request |
Also Published As
| Publication number | Publication date |
|---|---|
| CN110516465A (en) | 2019-11-29 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN110516465B (en) | Resource address management method, device, equipment and computer readable storage medium | |
| CN107689966B (en) | Account resource sharing method, system, equipment and computer readable storage medium | |
| CN109495467B (en) | Method and device for updating interception rule and computer readable storage medium | |
| CN113179222A (en) | Current-limiting control method, device and equipment for hotspot data and storage medium | |
| US20190138749A1 (en) | Total periodic de-identification management apparatus and method | |
| KR102490529B1 (en) | Total periodic non-identification management apparatus and method | |
| US11126607B1 (en) | Memory-aware system and method for identifying matching portions of two sets of data in a multiprocessor system | |
| US8793802B2 (en) | System, method, and computer program product for preventing data leakage utilizing a map of data | |
| JP6692454B2 (en) | Continuous integration system and resource control method | |
| CN110572451A (en) | Data processing method, device and storage medium | |
| US20180331924A1 (en) | System monitoring device | |
| CN112433792A (en) | Interface loading method and device, computer equipment and storage medium | |
| CN110286996B (en) | Container instance IP switching method, device, computer equipment and storage medium | |
| US7564466B2 (en) | System and method for managing memory for color transforms | |
| US10936968B2 (en) | Ticket routing | |
| CN109391658B (en) | Account data synchronization method and equipment, storage medium and terminal thereof | |
| CN113938430A (en) | Flow control method, device, equipment and storage medium | |
| CN112084021A (en) | Interface configuration method, device and equipment of education system and readable storage medium | |
| CN111736761A (en) | Data distribution method, device, storage system and computer readable storage medium | |
| CN107679871B (en) | List management method, device, system and computer readable storage medium | |
| US20210367943A1 (en) | Method and system for providing access to data stored in a security data zone of a cloud platform | |
| CN112822306B (en) | Proxy IP dynamic management method, device and computer readable storage medium | |
| CN110321290B (en) | Test environment construction method, device, equipment and computer readable storage medium | |
| KR101508273B1 (en) | Method for assigning resource using cloud application programming interface key and apparatus therefor | |
| JP2011257907A (en) | License management method and information system |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| TA01 | Transfer of patent application right | ||
| TA01 | Transfer of patent application right |
Effective date of registration: 20240201 Address after: 518000 World Trade Plaza 101-1, Funan Community, Futian Street, Futian District, Shenzhen, Guangdong Province Applicant after: SHENZHEN XINGHAI IOT TECHNOLOGY Co.,Ltd. Country or region after: China Address before: 518000 Room 201, building A, No. 1, Qian Wan Road, Qianhai Shenzhen Hong Kong cooperation zone, Shenzhen, Guangdong (Shenzhen Qianhai business secretary Co., Ltd.) Applicant before: PING AN PUHUI ENTERPRISE MANAGEMENT Co.,Ltd. Country or region before: China |
|
| GR01 | Patent grant | ||
| GR01 | Patent grant |