CN111241173B - Method and system for data interaction among multiple systems - Google Patents

Method and system for data interaction among multiple systems Download PDF

Info

Publication number
CN111241173B
CN111241173B CN201911385933.6A CN201911385933A CN111241173B CN 111241173 B CN111241173 B CN 111241173B CN 201911385933 A CN201911385933 A CN 201911385933A CN 111241173 B CN111241173 B CN 111241173B
Authority
CN
China
Prior art keywords
rights
data interaction
data
needing
parameters
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN201911385933.6A
Other languages
Chinese (zh)
Other versions
CN111241173A (en
Inventor
吕婉莹
朱兴
熊林欣
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Aisino Corp
Original Assignee
Aisino Corp
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Aisino Corp filed Critical Aisino Corp
Priority to CN201911385933.6A priority Critical patent/CN111241173B/en
Publication of CN111241173A publication Critical patent/CN111241173A/en
Application granted granted Critical
Publication of CN111241173B publication Critical patent/CN111241173B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F16/00Information retrieval; Database structures therefor; File system structures therefor
    • G06F16/20Information retrieval; Database structures therefor; File system structures therefor of structured data, e.g. relational data
    • G06F16/25Integrating or interfacing systems involving database management systems
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F16/00Information retrieval; Database structures therefor; File system structures therefor
    • G06F16/20Information retrieval; Database structures therefor; File system structures therefor of structured data, e.g. relational data
    • G06F16/25Integrating or interfacing systems involving database management systems
    • G06F16/258Data format conversion from or to a database
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/10Network architectures or network communication protocols for network security for controlling access to devices or network resources
    • H04L63/101Access control lists [ACL]

Landscapes

  • Engineering & Computer Science (AREA)
  • Databases & Information Systems (AREA)
  • Theoretical Computer Science (AREA)
  • General Engineering & Computer Science (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Data Mining & Analysis (AREA)
  • Computer Hardware Design (AREA)
  • Computer Security & Cryptography (AREA)
  • Computing Systems (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Storage Device Security (AREA)

Abstract

The invention discloses a method and a system for data interaction among a plurality of systems, and belongs to the technical field of data processing. The method of the invention comprises the following steps: generating a rights key corresponding to the rights number, and storing the rights key into a database; a common parameter list is used for determining unified docking interfaces among a plurality of systems, and a call data request of the system needing data interaction is received through the unified docking interfaces; replacing system parameters of a system to be subjected to data interaction by using system core information parameters to be subjected to data interaction, and generating rights and interests plaintext data; generating an access right address, and controlling a system needing data interaction to perform data interaction with a target system by using the access right address. The invention has the advantages that the docking data format is configurable, the docking process is more flexible, the constraint on the docking party is reduced, and the research and development cost of the data docking party is reduced.

Description

Method and system for data interaction among multiple systems
Technical Field
The present invention relates to the field of data processing technology, and more particularly, to a method and system for data interaction between multiple systems.
Background
The "rights bridge" is one of core products of a space information member system (hereinafter referred to as "member system") and functions to interface with a plurality of systems to complete data transfer between the systems.
The member system is a platform system developed for improving the utilization rate of the aerospace information resources based on a product system of aerospace information stock limited (hereinafter referred to as "aerospace information"). In order to provide more various services for users, a plurality of external software (including software developed by the self-service of the aeronautical information and software developed by the outside of the aeronautical information system) is introduced on the basis of products developed by the self-service of the member system, and the software is collectively called as 'rights'. In order to unify the docking scheme of the avigation member system and the rights and interests, a set of docking modes taking a calling party-unified docking interface-rights and interests as a data stream chain are formed.
The butt joint process is roughly divided into three steps: firstly, analyzing data, and obtaining detailed information in a calling party secret through decryption and data analysis; secondly, data replacement, namely analyzing user characteristics in the data according to the obtained decrypted data, performing data matching and replacement in different modes, assembling a new message, and encrypting; thirdly, according to the characteristic value in the data of the calling party, acquiring the related information of the calling party needing access rights and interests, splicing the related information into corresponding jump data, and jumping.
The second step and the third step can carry out different operation logics according to the information transmitted by the calling party.
The technology is not perfect in the aspects of data acquisition and replacement, the data processing flow is slow and unstable, the functions are not various, and the pressure of a database is high.
Disclosure of Invention
In view of the above problems, the present invention proposes a method for data interaction between a plurality of systems, comprising:
acquiring system parameters of a plurality of systems, determining a public parameter list according to the system parameters, numbering rights and interests of the systems according to the system parameters, generating rights and interests keys corresponding to the rights and interests numbers, and storing the rights and interests keys into a database;
a common parameter list is used for determining unified docking interfaces among a plurality of systems, and a call data request of the system needing data interaction is received through the unified docking interfaces;
checking the call data request, generating core information parameters of a system needing data interaction after the call data request passes the check, and replacing system parameters of the system needing data interaction by using the system core information parameters needing data interaction to generate rights and interests plaintext data;
invoking a rights key of a system needing data interaction, accessing rights plaintext data, replacing core information parameters in the rights plaintext data with preset information parameters, generating an access rights address, and controlling the system needing data interaction to conduct data interaction with a target system by using the access rights address.
Optionally, the method further comprises:
and generating a system rights white list needing data interaction, wherein the system needing data interaction in the rights white list is not checked.
Optionally, checking, specifically:
acquiring the rights and interests number of the system needing data interaction according to the call data request, consulting whether a secret key corresponding to the rights and interests number exists in the database according to the rights and interests number, decrypting the call data request, and acquiring the system information parameters of the system needing data interaction;
and determining whether the system needing data interaction has access rights or not according to the system information parameters.
Optionally, when the system needing to perform data interaction has access rights, checking passes, and when the system does not have the access rights, checking does not pass;
and when the verification fails, returning error information, and rejecting the system call data needing data interaction.
Optionally, decrypting the call data request, and if the decryption fails, returning error information, and rejecting the system call data needing data interaction.
The invention also proposes a system for data interaction between a plurality of systems, comprising:
the acquisition module acquires system parameters of a plurality of systems, determines a public parameter list according to the system parameters, performs right numbering on the systems according to the system parameters, generates right keys corresponding to the right numbers, and stores the right keys in the database;
the data transmission module is used for determining unified docking interfaces among a plurality of systems by using the public parameter list, and receiving a data calling request of a system needing data interaction through the unified docking interfaces;
the verification module is used for verifying the call data request, generating core information parameters of a system needing data interaction after the call data request passes the verification, and replacing the system parameters of the system needing data interaction by using the system core information parameters needing data interaction to generate rights and interests plaintext data;
the processing module calls a rights key of a system needing data interaction, accesses rights plaintext data, replaces core information parameters in the rights plaintext data with preset information parameters, generates an access rights address, and controls the system needing data interaction to conduct data interaction with a target system by using the access rights address.
Optionally, the verification module is further configured to:
and generating a system rights white list needing data interaction, wherein the system needing data interaction in the rights white list is not checked.
Optionally, checking, specifically:
acquiring the rights and interests number of the system needing data interaction according to the call data request, consulting whether a secret key corresponding to the rights and interests number exists in the database according to the rights and interests number, decrypting the call data request, and acquiring the system information parameters of the system needing data interaction;
and determining whether the system needing data interaction has access rights or not according to the system information parameters.
Optionally, when the system needing to perform data interaction has access rights, checking passes, and when the system does not have the access rights, checking does not pass;
and when the verification fails, returning error information, and rejecting the system call data needing data interaction.
Optionally, decrypting the call data request, and if the decryption fails, returning error information, and rejecting the system call data needing data interaction.
The invention has the advantages that the docking data format is configurable, the docking process is more flexible, the constraint on the docking party is reduced, the research and development cost of the data docking party is reduced, the data safety is ensured, the interaction flow is reduced, the independence and the safety of the data can be ensured, the invention is not limited to the user system of the member system, under the specific condition, the user can be allowed to access the system, and the system safety can be ensured.
Drawings
FIG. 1 is a flow chart of a method for data interaction between multiple systems in accordance with the present invention;
FIG. 2 is a block diagram of a system for data interaction between multiple systems in accordance with the present invention.
Detailed Description
The exemplary embodiments of the present invention will now be described with reference to the accompanying drawings, however, the present invention may be embodied in many different forms and is not limited to the examples described herein, which are provided to fully and completely disclose the present invention and fully convey the scope of the invention to those skilled in the art. The terminology used in the exemplary embodiments illustrated in the accompanying drawings is not intended to be limiting of the invention. In the drawings, like elements/components are referred to by like reference numerals.
Unless otherwise indicated, terms (including technical and scientific terms) used herein have the same meaning as commonly understood by one of ordinary skill in the art. In addition, it will be understood that terms defined in commonly used dictionaries should be interpreted as having a meaning that is consistent with their meaning in the context of the relevant art and will not be interpreted in an idealized or overly formal sense.
The invention provides a method for data interaction among a plurality of systems, which comprises the following steps:
acquiring system parameters of a plurality of systems, determining a public parameter list according to the system parameters, numbering rights and interests of the systems according to the system parameters, generating rights and interests keys corresponding to the rights and interests numbers, and storing the rights and interests keys into a database;
a common parameter list is used for determining unified docking interfaces among a plurality of systems, and a call data request of the system needing data interaction is received through the unified docking interfaces;
and verifying the call data request, decrypting the call data request according to the decrypted call data request, and if the decryption fails, returning error information to reject the system call data needing data interaction.
Acquiring the rights and interests number of the system needing data interaction, consulting the database according to the rights and interests number to judge whether the key corresponding to the rights and interests number exists or not, decrypting the request for the call data, and acquiring the system information parameters of the system needing data interaction;
and determining whether the system needing data interaction has access rights or not according to the system information parameters.
When the system needing data interaction has access rights, checking passes, and when the system does not have the access rights, checking does not pass;
and when the verification fails, returning error information, and rejecting the system call data needing data interaction.
When the data calling request passes the verification, generating core information parameters of a system needing data interaction, and replacing the system parameters of the system needing data interaction by using the system core information parameters needing data interaction to generate rights and plaintext data;
invoking a rights key of a system needing data interaction, accessing rights plaintext data, replacing core information parameters in the rights plaintext data with preset information parameters, generating an access rights address, and controlling the system needing data interaction to conduct data interaction with a target system by using the access rights address.
Before checking the call data request, a system interest white list needing data interaction can be generated, and the system needing data interaction in the interest white list is not checked.
The present invention also provides a system 200 for data interaction between a plurality of systems, comprising:
the acquisition module 201 acquires system parameters of a plurality of systems, determines a public parameter list according to the system parameters, performs right numbering on the systems according to the system parameters, generates right keys corresponding to the right numbers, and stores the right keys in the database;
the data transmission module 202 uses the public parameter list to determine a unified docking interface among a plurality of systems, and receives a data calling request of a system needing data interaction through the unified docking interface;
the verification module 203 verifies the call data request, decrypts the call data request, returns error information if decryption fails, and refuses the system call data needing data interaction.
Acquiring the rights and interests number of the system needing data interaction according to the decrypted call data request, consulting whether a key corresponding to the rights and interests number exists in the database according to the rights and interests number, decrypting the call data request, and acquiring the system information parameters of the system needing data interaction;
and determining whether the system needing data interaction has access rights or not according to the system information parameters.
When the system needing data interaction has access rights, checking passes, and when the system does not have the access rights, checking does not pass;
and when the verification fails, returning error information, and rejecting the system call data needing data interaction.
When the data calling request passes the verification, generating core information parameters of a system needing data interaction, and replacing the system parameters of the system needing data interaction by using the system core information parameters needing data interaction to generate rights and plaintext data;
and generating a system rights white list needing data interaction, wherein the system needing data interaction in the rights white list is not checked.
The processing module 204 invokes a rights key of the system needing data interaction, accesses the rights plaintext data, replaces the core information parameter in the rights plaintext data with the preset information parameter, generates an access rights address, and controls the system needing data interaction to use the access rights address to perform data interaction with the target system.
It will be appreciated by those skilled in the art that embodiments of the present application may be provided as a method, system, or computer program product. Accordingly, the present application may take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present application may take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, and the like) having computer-usable program code embodied therein.
The present application is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems) and computer program products according to embodiments of the application. It will be understood that each flow and/or block of the flowchart illustrations and/or block diagrams, and combinations of flows and/or blocks in the flowchart illustrations and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
These computer program instructions may also be stored in a computer-readable memory that can direct a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer-readable memory produce an article of manufacture including instruction means which implement the function specified in the flowchart flow or flows and/or block diagram block or blocks.
These computer program instructions may also be loaded onto a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer implemented process such that the instructions which execute on the computer or other programmable apparatus provide steps for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
Finally, it should be noted that: the above embodiments are only for illustrating the technical aspects of the present invention and not for limiting the same, and although the present invention has been described in detail with reference to the above embodiments, it should be understood by those of ordinary skill in the art that: modifications and equivalents may be made to the specific embodiments of the invention without departing from the spirit and scope of the invention, which is intended to be covered by the claims.

Claims (10)

1. A method for data interaction between a plurality of systems, the method comprising:
acquiring system parameters of a plurality of systems, determining a public parameter list according to the system parameters, numbering rights and interests of the systems according to the system parameters, generating rights and interests keys corresponding to the rights and interests numbers, and storing the rights and interests keys into a database;
a common parameter list is used for determining unified docking interfaces among a plurality of systems, and a call data request of the system needing data interaction is received through the unified docking interfaces;
checking the call data request, generating core information parameters of a system needing data interaction after the call data request passes the check, and replacing system parameters of the system needing data interaction by using the system core information parameters needing data interaction to generate rights and interests plaintext data;
invoking a rights key of a system needing data interaction, accessing rights plaintext data, replacing core information parameters in the rights plaintext data with preset information parameters, generating an access rights address, and controlling the system needing data interaction to conduct data interaction with a target system by using the access rights address.
2. The method of claim 1, the method further comprising:
and generating a system rights white list needing data interaction, wherein the system needing data interaction in the rights white list is not checked.
3. The method according to claim 1, said checking being in particular:
acquiring the rights and interests number of the system needing data interaction according to the call data request, consulting whether a secret key corresponding to the rights and interests number exists in the database according to the rights and interests number, decrypting the call data request, and acquiring the system information parameters of the system needing data interaction;
and determining whether the system needing data interaction has access rights or not according to the system information parameters.
4. The method of claim 3, wherein when the system requiring data interaction has access rights, the verification is passed, and when the system does not have access rights, the verification is not passed;
and when the verification fails, returning error information, and rejecting the system call data needing data interaction.
5. A method according to claim 3, wherein the request for call data is decrypted, and if the decryption fails, an error message is returned, and the system call data requiring data interaction is rejected.
6. A system for data interaction between a plurality of systems, the system comprising:
the acquisition module acquires system parameters of a plurality of systems, determines a public parameter list according to the system parameters, performs right numbering on the systems according to the system parameters, generates right keys corresponding to the right numbers, and stores the right keys in the database;
the data transmission module is used for determining unified docking interfaces among a plurality of systems by using the public parameter list, and receiving a data calling request of a system needing data interaction through the unified docking interfaces;
the verification module is used for verifying the call data request, generating core information parameters of a system needing data interaction after the call data request passes the verification, and replacing the system parameters of the system needing data interaction by using the system core information parameters needing data interaction to generate rights and interests plaintext data;
the processing module calls a rights key of a system needing data interaction, accesses rights plaintext data, replaces core information parameters in the rights plaintext data with preset information parameters, generates an access rights address, and controls the system needing data interaction to conduct data interaction with a target system by using the access rights address.
7. The system of claim 6, the verification module further to:
and generating a system rights white list needing data interaction, wherein the system needing data interaction in the rights white list is not checked.
8. The system according to claim 6, wherein the verification is specifically:
acquiring the rights and interests number of the system needing data interaction according to the call data request, consulting whether a secret key corresponding to the rights and interests number exists in the database according to the rights and interests number, decrypting the call data request, and acquiring the system information parameters of the system needing data interaction;
and determining whether the system needing data interaction has access rights or not according to the system information parameters.
9. The system of claim 8, wherein the system requiring data interaction is checked to pass when the system has access rights, and is checked to fail when the system does not have access rights;
and when the verification fails, returning error information, and rejecting the system call data needing data interaction.
10. The system of claim 8, wherein the system call data request is decrypted, and if the decryption fails, an error message is returned to reject the system call data that needs to be interacted with.
CN201911385933.6A 2019-12-29 2019-12-29 Method and system for data interaction among multiple systems Active CN111241173B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201911385933.6A CN111241173B (en) 2019-12-29 2019-12-29 Method and system for data interaction among multiple systems

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201911385933.6A CN111241173B (en) 2019-12-29 2019-12-29 Method and system for data interaction among multiple systems

Publications (2)

Publication Number Publication Date
CN111241173A CN111241173A (en) 2020-06-05
CN111241173B true CN111241173B (en) 2024-03-12

Family

ID=70875792

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201911385933.6A Active CN111241173B (en) 2019-12-29 2019-12-29 Method and system for data interaction among multiple systems

Country Status (1)

Country Link
CN (1) CN111241173B (en)

Families Citing this family (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN111767330B (en) * 2020-06-12 2022-02-25 杭州数梦工场科技有限公司 Data interaction method and device, electronic equipment and storage medium

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US9465857B1 (en) * 2013-09-26 2016-10-11 Groupon, Inc. Dynamic clustering for streaming data
CN107222457A (en) * 2017-04-14 2017-09-29 弘成科技发展有限公司 A kind of interface access system and method for interaction between system
WO2018000379A1 (en) * 2016-06-30 2018-01-04 华为技术有限公司 Data transmission control method, communication device and core network device
CN108600389A (en) * 2018-05-10 2018-09-28 山东浪潮通软信息科技有限公司 A kind of data transmission method and device based on common interface platform
CN110493347A (en) * 2019-08-26 2019-11-22 重庆邮电大学 Data access control method and system in large-scale cloud storage based on block chain

Family Cites Families (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US9116975B2 (en) * 2013-10-18 2015-08-25 Palantir Technologies Inc. Systems and user interfaces for dynamic and interactive simultaneous querying of multiple data stores
US9876636B2 (en) * 2016-01-07 2018-01-23 Empire Technology Development Llc Homomorphic public-key encryption scheme
CN105657456A (en) * 2016-03-10 2016-06-08 腾讯科技(深圳)有限公司 Processing method, device and system for multimedia data
RU2634211C1 (en) * 2016-07-06 2017-10-24 Общество с ограниченной ответственностью "Траст" Method and system of protocols analysis of harmful programs interaction with control centers and detection of computer attacks
US10452540B2 (en) * 2017-10-20 2019-10-22 International Business Machines Corporation Memory-mapped interface for message passing computing systems

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US9465857B1 (en) * 2013-09-26 2016-10-11 Groupon, Inc. Dynamic clustering for streaming data
WO2018000379A1 (en) * 2016-06-30 2018-01-04 华为技术有限公司 Data transmission control method, communication device and core network device
CN107222457A (en) * 2017-04-14 2017-09-29 弘成科技发展有限公司 A kind of interface access system and method for interaction between system
CN108600389A (en) * 2018-05-10 2018-09-28 山东浪潮通软信息科技有限公司 A kind of data transmission method and device based on common interface platform
CN110493347A (en) * 2019-08-26 2019-11-22 重庆邮电大学 Data access control method and system in large-scale cloud storage based on block chain

Non-Patent Citations (2)

* Cited by examiner, † Cited by third party
Title
一种基于国产密码算法的粮食数据交换方案;梁宵;耿方;杜悦琨;;食品安全导刊;20161125(第33期);全文 *
跨域单点登录解决方案研究;伍孟轩;李伟;易叔海;程蒙;刘川;;网络安全技术与应用;20180215(第02期);全文 *

Also Published As

Publication number Publication date
CN111241173A (en) 2020-06-05

Similar Documents

Publication Publication Date Title
CN109067528B (en) Password operation method, work key creation method, password service platform and equipment
CN110659206A (en) Simulation architecture establishing method, device, medium and electronic equipment based on microservice
CN102799815B (en) A kind of method and apparatus of safe loading procedure storehouse
US20230308290A1 (en) Data sharing method and electronic device
CN107196761A (en) A kind of method of core function in protection application program
CN111241173B (en) Method and system for data interaction among multiple systems
CN112989422B (en) Block chain system assembling method, device, electronic equipment and storage medium
US20220083630A1 (en) Protecting an item of software
CN114780982A (en) Flow business circulation method, device and system
JP2022100243A (en) Method and device for controlling execution of task in computing system
CN114239026A (en) Information desensitization conversion processing method, device, computer equipment and storage medium
CN109657167A (en) Collecting method, device, server and storage medium
JP7331714B2 (en) Information processing device, information processing method and program
CN109977692B (en) Data processing method and device, storage medium and electronic equipment
US11245701B1 (en) Authorization pre-processing for network-accessible service requests
CN108471411B (en) Key processing method and device
CN115941279A (en) Encryption and decryption method, system and equipment for user identification in data
CN107451435B (en) Management and control method, management and control machine and management and control system of hardware encryption machine
US9424543B2 (en) Authenticating a response to a change request
CN116248253A (en) Method and system for deriving database table keys based on domestic crypto-engine
CN111191216B (en) OFD signature client with JAVA interface and method and system for signature verification
CN114896635A (en) Data processing method and device, electronic equipment and storage medium
CN114611129A (en) Data privacy protection method and system
CN107463808A (en) The call method for the functional module being integrated in operating system
CN107122678A (en) Protect the method and device of product parameters

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant