CN113242229B - Quotation data distribution method and device crossing physical address authentication and password encryption login - Google Patents

Abstract

The invention discloses a market data distribution method and device for encrypting login crossing physical address authentication and password, which realizes an authentication proxy module through an API provided by a transaction center, receives encrypted gateway data through a login client module, sends the encrypted gateway data to the authentication proxy module, enables the authentication proxy module to process the encrypted data, monitors the data replied by the authentication proxy module and sends the encrypted data to the gateway, can well avoid the encrypted authentication of the physical address and the network card address of the gateway, can acquire login messages containing an encrypted user name and an encrypted password processed by the authentication proxy module and directly send the login messages to the market gateway, and can well cross the decryption step of an encryption algorithm of the gateway, thereby being more convenient to receive and process the market data and being convenient to expand the connection of other applications and use the market data.

Description

Quotation data distribution method and device crossing physical address authentication and password encryption login

Technical Field

The invention relates to the technical field of computer software and stock market authentication, in particular to a market data distribution method and device crossing physical address authentication and password encryption login.

Background

In order to limit the number of lower nodes and prohibit the same account from logging in different physical machines, some conventional market gateways basically adopt a method of encrypting physical address authentication and encrypting account name logging in. The method limits the user to flexibly arrange the subordinate nodes according to the own needs, and if too many nodes are connected under the same node, the requirement on network bandwidth is higher.

Disclosure of Invention

In order to overcome the defects in the prior art, the invention aims to provide a market data distribution method and device crossing physical address authentication and password encryption login so as to realize the purpose of market data distribution crossing physical address authentication and password encryption login.

In order to achieve the above purpose, the present invention provides a market data distribution method crossing physical address authentication and password encryption login, comprising the following steps:

step S1, a current node sends a message for acquiring version information of an upper node to an upper node through a login client module, judges whether the connected upper node is a quotation gateway node according to a configuration file, and starts an authentication proxy module to start an authentication proxy thread for proxy authentication monitoring after receiving the version information message replied by the upper node if the upper node is the quotation gateway node;

Step S2, if the upper node is a quotation gateway node, the login client module of the current node sends an encrypted version information message replied by the quotation gateway to the authentication proxy module, generates an encrypted authentication reply message carrying a local client ID and a physical address through the authentication proxy module and sends the encrypted authentication reply message to the quotation gateway, receives a reply confirmation message returned by the quotation gateway, generates a real login message through the authentication proxy module and sends the real login message to the quotation gateway, and ends an authentication proxy thread after receiving the login confirmation message returned by the quotation gateway, and starts a quotation receiving client module to receive the quotation message of the upper node;

step S3, if the upper node is not a quotation gateway node, the login client module of the current node replies a fixed encryption authentication reply message to the upper node after receiving a fixed encryption authentication message sent by the upper node, sends a fixed encryption login message after receiving a fixed confirmation authentication pass message replied by the upper node, and starts a quotation receiving client to receive the quotation message of the upper node after receiving a confirmation login message sent by the upper node;

and S4, starting the quotation receiving client module to receive the quotation message issued by the upper node in real time, and sending the quotation message to the quotation receiving server module after receiving the quotation message so as to be distributed to the lower node in real time after the lower node is connected.

Preferably, if the current node is a login gateway master node, an upper node of the current node is a quotation gateway node, a login client module of the current node sends a request message to the quotation gateway node, the request message is a message in a specific format for acquiring relevant version information of the quotation gateway, a version information message which is returned by the quotation gateway and carries own version information is received, and the version information message is an encrypted message containing version information of the quotation gateway and physical address authentication information.

Preferably, if the current node is a child node, its upper node is a login gateway master node or other child nodes, and the login client module of the current node sends a request message to the upper node, and the upper node replies a fixed encrypted authentication message carrying the version of the current node to the login client module of the current node.

Preferably, if the current node is a third party client, the upper node is a login gateway master node or a slave node, the login client module of the current node sends a request message to the upper node, and the upper node replies a fixed encryption authentication message to the login client module of the current node after receiving the message.

Preferably, step S2 further comprises:

Step S200, the login client module sends the encrypted version information message replied by the quotation gateway to the authentication proxy server module, and the authentication proxy server module forwards the encrypted version information message to the authentication proxy client module;

step S201, after receiving the version information message, the authentication proxy client module calculates an encrypted authentication reply message according to the local physical address and the network card address, and sends the encrypted authentication reply message to the authentication server module, the authentication proxy server module sends the authentication reply message to the login client module, and the login client module forwards the authentication reply message to the quotation gateway;

step S202, after receiving a reply confirmation message returned by the quotation gateway, forwarding the reply confirmation message to the authentication proxy server side module, and then sending the reply confirmation message to the authentication proxy client side module by the authentication proxy server side module, generating a real login message to be sent to the authentication proxy server side module after the authentication proxy client side module receives the reply confirmation message which is successfully authenticated, and sending the encrypted login message to the login client side module by the authentication proxy server side module, and sending the encrypted login message to the quotation gateway by the login client side module;

Step S203, after receiving the login confirmation message replied by the quotation gateway, the login client module ends the work of the authentication proxy module, releases the related resources, and opens the login server module to receive the quotation message of the quotation gateway.

Preferably, in step S202, after receiving the version information message, the authentication proxy client module calculates an encrypted authentication reply message according to the local physical address and the network card address, and sends the encrypted authentication reply message to the authentication proxy server module, and the authentication proxy server module sends the encrypted authentication reply message to the login client module after receiving the authentication reply message.

Preferably, in step S3, if the current node is a child node, the login client module of the current node replies an encrypted authentication reply message carrying a physical address and a network card address to the upper node after receiving a fixed encrypted authentication message of the upper node, the upper node directly authenticates the current node without decrypting the encrypted authentication reply message, replies a fixed confirmed authentication pass message to the login client module of the current node, the login client module of the current node sends an encrypted login message with an account name and a password being empty to the upper node after receiving the confirmed authentication pass message, the upper node directly authenticates the validity of a user name password after receiving the fixed encrypted login message without decrypting the encrypted authentication reply message, and sends a confirmed login reply message to the login client module of the current node, and the current node starts the quotation receiving client module after receiving the confirmed login reply message.

Preferably, if the current node is a third party client, the login client module of the current node decrypts the encrypted authentication message after receiving the encrypted authentication message, and sends an encrypted authentication reply message carrying the physical address and the network card address of the current node to the upper node, the upper node directly replies a confirmation authentication message without decrypting the encrypted authentication reply message after receiving the encrypted authentication reply message, the login client module of the current node considers that the current node passes authentication after receiving the confirmation authentication message, sends a login message carrying the user name and the password encrypted by the current node to the upper node, and the upper node directly considers that the encrypted login message is legal after receiving the encrypted login message, replies the confirmation login message to the current node, and starts the quotation receiving client module to receive quotation data issued by the upper node in real time.

In order to achieve the above object, the present invention also provides a market data distribution device for logging in across physical address authentication and cryptographic encryption, comprising:

the login client module is used for sending a request message to the upper node, receiving a version information message replied by the upper node, judging whether the connected upper node is a quotation gateway node according to a preset configuration file, if the connected upper node is the quotation gateway node, starting an authentication proxy module to start an authentication proxy thread, generating an encrypted authentication reply message carrying a local client ID and a physical address through the authentication proxy module, sending the encrypted authentication reply message to the quotation gateway, receiving a reply confirmation message returned by the quotation gateway, generating a real login message through the authentication proxy module, sending the real login message to the quotation gateway, ending the authentication proxy thread after receiving the login confirmation message returned by the quotation gateway, and starting the quotation receiving client module to receive the quotation message issued by the quotation gateway in real time; if the connected upper node is not a quotation gateway node, after receiving a version information message sent by the upper node, replying a fixed encryption authentication reply message to the upper node, after receiving a fixed confirmation authentication passing message replied by the upper node, sending a fixed encryption login message, and when receiving a confirmation login message sent by the upper node, starting a quotation receiving client to receive the quotation information message;

The authentication proxy module is used for starting an authentication proxy thread, acquiring a version information message replied by the quotation gateway, calculating an encrypted authentication reply message according to the local physical address and the network card address, and sending the encrypted authentication reply message to the quotation gateway by the login client module, generating a real login message when receiving a reply confirmation message sent by the login client module, and sending the real login message to the login client module by the login client module;

the login server side module is used for receiving a request message sent by the lower node login client side module, replying a fixed encryption message carrying the node version to the lower node login client side module according to the request message, replying a fixed authentication passing message to the lower node login client side module when receiving a fixed encryption authentication reply message sent by the lower node login client side module, and sending a confirmation login message to the lower node login client side module when receiving a fixed encryption login message sent by the lower node login client side module;

the quotation receiving client is used for starting under the control of the login server module, receiving a quotation message issued by an upper node in real time, and sending the received quotation data to the quotation receiving server module;

And the quotation receiving server is used for receiving quotation data forwarded by the quotation receiving client.

Preferably, the device further comprises a local configuration module, which is used for configuring configuration files to configure related information such as an IP port and a user password of the connection gateway or the superior node.

Compared with the prior art, the market data distribution method and device crossing physical address authentication and password encryption login realize the authentication proxy module through the API (authentication proxy client module) provided by the transaction, receive the data of the encryption gateway through the login client module, send the data to the authentication proxy module, enable the authentication proxy module to process the encrypted data, then monitor the data replied by the authentication proxy module and send the data to the gateway, can well avoid the encryption authentication of the physical address and the network card address of the gateway, and can acquire the login message containing the encrypted user name and the encrypted password processed by the authentication proxy module and directly send the login message to the market gateway, can well cross the decryption step of the encryption algorithm of the gateway, can more conveniently receive and process the market data through the invention, and is convenient for expanding the connection of other applications and using the market data.

Drawings

FIG. 1 is a flow chart of steps of a method for distributing market data across physical address authentication and cryptographically encrypted login in accordance with the present invention;

FIG. 2 is a system architecture diagram of a market data distribution device of the present invention logging in across physical address authentication and cryptographic encryption;

FIG. 3 is a system architecture diagram of a market data distribution device for logging across physical address authentication and cryptographic encryption in accordance with an embodiment of the present invention;

FIG. 4 is a topology diagram of a login process of the market data distribution of the login crossing physical address authentication and password encryption in the embodiment of the invention;

FIG. 5 is a call diagram among modules in a node distributing the market data logged in by crossing physical address authentication and password encryption in the embodiment of the invention;

FIG. 6 is a complete node topology for the distribution of market data across physical address authentication and cryptographically encrypted logins in an embodiment of the invention.

Detailed Description

Other advantages and effects of the present invention will become readily apparent to those skilled in the art from the following disclosure, when considered in light of the accompanying drawings, by describing embodiments of the present invention with specific embodiments thereof. The invention may be practiced or carried out in other embodiments and details within the scope and range of equivalents of the various features and advantages of the invention.

FIG. 1 is a flow chart of steps of a method for distributing market data across physical address authentication and cryptographically encrypted logins of the present invention. As shown in fig. 1, the invention relates to a market data distribution method crossing physical address authentication and password encryption login, which comprises the following steps:

step S1, a current node sends a message for acquiring version information of an upper node to an upper node through a login client module, judges whether the connected upper node is a quotation gateway node according to a configuration file, and starts an authentication proxy module to start an authentication proxy thread for proxy authentication monitoring after receiving the version information message replied by the upper node if the upper node is the quotation gateway node.

In the present invention, the current node may be a logging gateway master node, the upper node thereof is a quotation gateway node, for the logging gateway master node, it needs to be preconfigured with a user name and a password and an IP and a port of the quotation gateway to log in the quotation gateway, specifically, a logging client module firstly sends a request message A0 to the quotation gateway node according to a requirement of the logging quotation gateway, the main content of the request message A0 is a message in a specific format for obtaining relevant version information of the quotation gateway N, then the quotation gateway replies a version information message carrying own version information to the logging gateway master node as the current node, the message is A1, the A1 message at least contains an encrypted message of version information of the quotation gateway and physical address authentication information (IP address information of a machine of the logging gateway), and after receiving the message A1, a logging client module of the current node starts an authentication proxy module.

The current node may also be a child node, and its upper node may be a login gateway master node or a child node, specifically, the child node serving as the current node sends a request message B0 to the upper node (login gateway master node or child node), where the upper node replies a login client module carrying a fixed encrypted authentication message B1 of the node version to the current child node.

The current node may also be a third party client, the upper node may be a login gateway master node or a sub node, the third party client may be a third party client customized and developed according to an API provided by a transaction by using the same account number with different physical addresses, and the same account number may receive a quotation on different physical addresses as long as the third party client replies a fixed authentication message and a login reply confirmation message to the third party client, specifically, the third party client as the current node sends a request message C1 through a login client module in the process of initiating login, and the upper node (the login gateway master node or the sub node) replies a fixed encrypted authentication message C2 to the login client module of the third party client after receiving the request message.

Step S2, if the upper node is a quotation gateway node, the login client module of the current node sends an encrypted version information message A1 replied by the quotation gateway node to the authentication proxy module, generates an encrypted authentication reply message A2 carrying a local client ID and a physical address through the authentication proxy module and sends the encrypted authentication reply message A2 to the quotation gateway, receives a reply confirmation message returned by the quotation gateway N, generates a real login message through the authentication proxy module and sends the real login message to the quotation gateway N, and ends the authentication proxy thread after receiving the login confirmation message returned by the quotation gateway N.

Specifically, step S2 further includes:

step S200, the encrypted version information message A1 replied by the quotation gateway is sent to the authentication proxy server-side module, and is forwarded to the authentication proxy client-side module by the authentication proxy server-side module.

In a specific embodiment of the present invention, the authentication proxy module includes an authentication proxy client module and an authentication proxy server module, where the authentication proxy client module is connected to the authentication proxy server module first, and the authentication proxy server module first obtains a version information message replied by the quotation gateway and then sends the version information message to the authentication proxy client module.

Step S201, after receiving the version information message A1, the authentication proxy client module calculates an encrypted authentication reply message A2 according to the local physical address and the network card address, and sends the encrypted authentication reply message A2 to the authentication server module, and the authentication proxy server module sends the authentication reply message A2 to the login client module, and the login client module forwards the message to the quotation gateway.

Specifically, after receiving the version information message, the authentication proxy client module calculates an encrypted authentication reply message according to the local physical address and the network card address and sends the encrypted authentication reply message to the authentication proxy server module, and the authentication proxy server module sends the authentication reply message A2 to the login client module as is; and the login client module sends the authentication reply message A2 to the quotation gateway.

After receiving the message A2, the quotation gateway decrypts whether the physical address and the network card address in the message A2 are legal, and if so, returns a reply confirmation message A3 to the login client module.

Step S202, after receiving the reply confirmation message A3 returned by the quotation gateway, forwarding the reply confirmation message A3 to the authentication proxy server side module, sending the reply confirmation message A3 to the authentication proxy client side module by the authentication proxy server side module, generating a real login message A4 to the authentication proxy server side module after the authentication proxy client side module receives the message A3 which is successfully authenticated, sending the encrypted login message A4 to the login client side module by the authentication proxy server side module, and sending the encrypted login message A4 to the quotation gateway by the login client side module.

Specifically, the login client module receives the reply confirmation message A3 and then sends the reply confirmation message A3 to the authentication proxy server module, the authentication proxy server module sends the reply confirmation message A3 to the authentication proxy client module, the authentication proxy client module assembles the reply confirmation message A3 into an encrypted login message A4 according to the preset user name and password information in the configuration file and sends the encrypted login message A4 to the authentication proxy server module, the authentication proxy server sends the real encrypted login message A4 to the login client module as it is, and the login client module sends the real encrypted login message A4 to the quotation gateway as it is after receiving the real encrypted login message.

In step S203, after receiving the encrypted login message A4, the quotation gateway decrypts the user name and password information therein to verify the validity thereof, and if the user name and password information is legal, the login client module sends a login confirmation message A5, and after receiving the login confirmation message A5, the login client module ends the operation of the authentication proxy module, releases the related resources, and opens the login server module to receive the quotation message of the quotation gateway.

And S3, if the upper node is not the quotation gateway, the login client module of the current node replies a fixed encryption authentication reply message to the upper node after receiving the fixed encryption authentication message sent by the upper node, sends the fixed encryption login message after receiving the fixed confirmation authentication pass message replied by the upper node, and starts the quotation receiving client to receive the quotation message of the upper node after receiving the confirmation login message sent by the upper node. It should be noted that, in the present invention, when for each node of the non-quotation gateway, its login server module is multiplexed, the lower node does not need to distinguish whether it is a child node or a third party node.

Specifically, if the current node is a child node and the upper node is a login gateway master node or a child node, the login client module of the current node replies an encrypted authentication reply message B2 carrying a physical address and a network card address to the login server module of the upper node after receiving a fixed encrypted authentication message B1 of the upper node, the login server module of the upper node does not decrypt the direct authentication after receiving the encrypted authentication reply message B2, replies a fixed confirmation authentication to the login client module of the current node through a message B3, the login client module of the current node sends an encrypted login message B4 with an account name and a password empty to the login server module of the upper node after receiving the confirmation authentication through a message B3, the login server module of the upper node does not decrypt a direct authentication user name password after receiving the fixed encrypted login message B5, the login client module of the current node receives the confirmation reply message B5, the login client module of the current node sends a message to the login client module of the current node, and the current node can send a real-time message to the upper node after receiving the current node receives the login client module, and the current node can send the login data to the current node in real-time after receiving the current node receives the login data.

If the current node is a third party client, the upper node is a login gateway master node or a slave node, after receiving the encrypted authentication message C2, a login client module of the third party client decrypts the message and sends an encrypted authentication reply message C3 carrying a physical address and a network card address of the user to a login server module of the upper node, the login server module of the upper node does not decrypt a direct reply confirmation authentication message C4 which is directly considered legal after receiving the encrypted authentication reply message C3, the login client module of the third party client considers that the user passes authentication after receiving the C4 message, then the third party client sends a login message C5 carrying an encrypted user name and a password to the login server module of the upper node, the login server module of the upper node does not decrypt a direct judgment and replies a confirmation login message C6 to the third party client after receiving the encrypted login message C5, and the third party client receives the successful confirmation login message C6, and then the third party client receives the login server receives data from the client.

And S4, receiving a real-time downlink message sent by the upper node by using a quotation receiving client module, and sending the received downlink message to a quotation receiving server module by the quotation receiving client module so as to be distributed to the lower node in real time after the lower node is connected.

FIG. 2 is a system architecture diagram of a market data distribution device of the present invention logging in across physical address authentication and cryptographic encryption. As shown in fig. 2, the present invention is a market data distribution device for logging in across physical address authentication and cryptographic encryption, applied to each node in a system, comprising:

the login client module 10 is configured to send a request message to an upper node, receive a version information message replied by the upper node, judge whether the connected upper node is a quotation gateway node according to a pre-configured configuration file, if the connected upper node is the quotation gateway node, start an authentication proxy module to start an authentication proxy thread, generate an encrypted authentication reply message carrying a local client ID and a physical address through the authentication proxy module, send the encrypted authentication reply message to the quotation gateway, receive a reply acknowledgement message returned by the quotation gateway, generate a real login message through the authentication proxy module, send the real login message to the quotation gateway, end the authentication proxy thread after receiving the login acknowledgement message returned by the quotation gateway, and start the quotation receiving client module to receive a quotation message issued by the quotation gateway in real time; if the connected upper node is not the quotation gateway node, after receiving the version information message sent by the upper node, replying a fixed encryption authentication reply message to the upper node, after receiving the fixed confirmation authentication passing message replied by the upper node, sending a fixed encryption login message, and when receiving the confirmation login message sent by the upper node, starting a quotation receiving client to receive the quotation information message.

Specifically, login client module 10 further includes:

the request message sending and receiving processing unit 101 is configured to send a request message to an upper node, receive a version information message replied by the upper node, determine whether the connected upper node is a market gateway node according to a pre-configured configuration file, if the connected upper node is the market gateway node, enter the authentication proxy thread start control unit 102 to start the authentication proxy module to start the authentication proxy thread, and if the connected upper node is not the market gateway node, enter the common authentication processing unit 103.

In a specific embodiment of the present invention, if the current node of the application of the market data distribution device of the present invention is a login gateway master node, and its upper node is a market gateway node, for the login gateway master node, a user name and a password and an IP and a port of the market gateway need to be preconfigured to log on the market gateway, the request message sending and receiving processing unit 101 of the login client module 10 first sends a request message A0 to the market gateway node according to a requirement of the login market gateway, the main content of the request message A0 is a message in a specific format for obtaining relevant version information of the market gateway, then the market gateway replies a version information message carrying own version information to the login gateway master node as the current node, the message is A1, the message A1 is an encrypted message containing the version information of the market gateway and the physical address authentication information, and after the login client module of the current node receives the message A1, the authentication proxy module 20 is started according to the preconfigured information.

If the current node of the application of the present invention is a child node, its upper node may be a login gateway master node or a child node, specifically, the request message sending and receiving processing unit 101 of the child node serving as the current node sends a request message B0 to the upper node (login gateway master node or child node), and the upper node replies a request message sending and receiving processing unit 101 carrying a fixed encrypted authentication message B1 of the version of the current node to the current child node.

If the current node of the application of the quotation data distribution device of the invention is a third party client, the upper node of the current node can be a login gateway master node or a sub node, the third party client can be a third party client which is customized and developed according to the API provided by the transaction and has the same account number and different physical addresses, and the third party client can receive quotations on different physical addresses as long as the third party client replies a fixed authentication message and a login reply confirmation message, specifically, the third party client as the current node firstly sends a request message C1 through the request message sending and receiving processing unit 101 in the process of initiating login, and the upper node (the login gateway master node or the sub node) replies the fixed encryption authentication message C2 to the request message sending and receiving processing unit 101 of the login client module 10 after receiving the request message.

The authentication proxy thread start control unit 102 is configured to start the authentication proxy module 20, send a version information message replied by the upper node to the authentication proxy module 20, obtain an encrypted authentication reply message carrying a local client ID and a physical address generated by the authentication proxy module 20, send the encrypted authentication reply message to the quotation gateway, receive a reply acknowledgement message returned by the quotation gateway, obtain a real login message generated by the authentication proxy module, send the real login message to the quotation gateway, end the authentication proxy thread after receiving the login acknowledgement message returned by the quotation gateway, and start the quotation receiving client module to receive the quotation message issued by the quotation gateway in real time.

Specifically, the authentication proxy module 20 obtains a version information message A1 replied by the market gateway from the login client module 10, calculates an encrypted authentication reply message A2 according to a local physical address and a network card address after receiving the version information message A1, sends the encrypted authentication reply message A2 to the authentication proxy thread start control unit 102 of the login client module 10, the authentication proxy thread start control unit 102 forwards the message to the market gateway, the market gateway decrypts whether the physical address and the network card address in the message A2 are legal after receiving the message A2, returns a reply acknowledgement message A3 to the authentication proxy thread start control unit 102 of the login client module if the physical address and the network card address are legal, the authentication proxy thread start control unit 102 forwards the reply acknowledgement message A3 to the authentication proxy module 20, and the authentication proxy module 20 receives the reply acknowledgement message A3 which is successful in authentication, assembles the encrypted login message A4 according to a preset user name and password information in a configuration file and sends the encrypted login message A4 to the authentication proxy thread start control unit 102 of the login client module, and sends the encrypted login gateway to the market gateway by the authentication proxy thread start control unit 102; after receiving the encrypted login message A4, the quotation gateway decrypts the user name and password information in the encrypted login message A4 to verify the validity, if the encrypted login message A5 is legal, the authentication proxy thread start control unit 102 of the login client module 10 finishes the work of the authentication proxy module after receiving the login confirmation message A5, releases related resources, and starts the login server module 30 to receive the quotation message of the quotation gateway.

The common authentication processing unit 103 is configured to reply a fixed encrypted authentication reply message to the upper node after receiving a fixed encrypted authentication message sent by the upper node, send a fixed encrypted login message after receiving a fixed confirmation authentication pass message replied by the upper node, and start the quotation receiving client to receive a quotation message of the upper node when receiving a confirmation login message sent by the upper node.

If the current node applied by the market data distributing device is a child node and the upper node is a login gateway master node or a child node, the common authentication processing unit 103 of the login client module 10 of the current node replies an encrypted authentication reply message B2 carrying a physical address and a network card address to the login server module of the upper node after receiving the encrypted authentication reply message B2, the login server module of the upper node does not decrypt the direct authentication legal, replies a fixed confirmation authentication to the common authentication processing unit 103 of the login client module of the current node through the message B3, the common authentication processing unit 103 of the current node sends an encrypted login message B4 with an account name and a password of empty to the login server module of the upper node after receiving the confirmation authentication through the message B3, the login server module of the upper node does not decrypt the legal of the direct authentication user name and password after receiving the fixed encrypted login reply message B2, sends a confirmation reply message B5 to the common authentication processing unit 103 of the current node, and the common authentication processing unit of the current node receives the login data after receiving the confirmation authentication through the message B3, and the common authentication processing unit of the current node receives the login data, and the common authentication processing unit of the current node receives the current data after opening the current node.

If the current node of the application of the market data distribution device of the present invention is a third party client, the upper node is a login gateway master node or a slave node, the common authentication processing unit 103 of the login client module of the third party client decrypts the message after receiving the encrypted authentication message C2, and sends an encrypted authentication reply message C3 carrying its own physical address and network card address to the login server module of the upper node, the login server module of the upper node does not decrypt the encrypted authentication reply message C3 and directly considers that the login server module is legal and directly replies with an authentication message C4, the common authentication processing unit 103 of the third party client considers that the login server module of the third party client has passed authentication after receiving the C4 message, then the common authentication processing unit 103 of the third party client sends a login message C5 carrying its own encrypted user name and password to the login server module of the upper node, and the login server module of the upper node does not decrypt the encrypted authentication reply message C6 and confirms that the login server module is legal after receiving the encrypted login message C5, and the common authentication processing unit 103 receives the common authentication message C6 of the third party client receives the login message after receiving the common authentication message C4 message, and the common authentication processing unit of the third party client receives the login message C6 and considers that the login data of the third party client has been successfully received.

The authentication proxy module 20 is configured to start an authentication proxy thread, obtain a version information message replied by the market gateway, calculate an encrypted authentication reply message according to a local physical address and a network card address, send the encrypted authentication reply message to the login client module 10, send the encrypted authentication reply message to the market gateway by the login client module 10, and generate a real login message when receiving a reply confirmation message sent by the login client module 10, and send the real login message to the login client module 10, so that the login client module 10 sends the encrypted authentication reply message to the market gateway N or a superordinate node.

Specifically, the authentication proxy module 20 includes an authentication proxy client module and an authentication proxy server module, where the authentication proxy client module needs to connect with the authentication proxy server module first, the authentication proxy server module obtains a version information message A1 replied by the quotation gateway from the login client module, sends the version information message A1 to the authentication proxy client module, the authentication proxy client calculates an encrypted authentication reply message A2 according to a local physical address and a network card address and sends the encrypted authentication reply message A2 to the authentication proxy server module, the authentication proxy server module sends the authentication reply message to the login client module as it is after receiving the authentication reply message, the login client module 10 sends the authentication reply message to the quotation gateway N or an upper node after receiving the authentication reply message, the quotation gateway decrypts specific data according to an encryption algorithm in the quotation gateway after receiving the authentication reply message, determines whether the machine of the physical address and the network card address is qualified to receive the quotation data, and the quotation gateway returns a reply confirmation message A3 to the login client module 10 after successful determination; the login client module 10 receives the reply confirmation message A3 and then sends the reply confirmation message A3 to the authentication proxy server module, the authentication proxy server module sends the reply confirmation message A3 to the authentication client module, the authentication client module assembles the reply confirmation message A3 into a real login message A4 according to a user name and a password configured in a configuration file, the real login message A4 is sent to the authentication proxy server module, the authentication proxy server sends the real login message A4 to the login client module 10 as it is, the login client module 10 receives the real login message and then sends the real login message to a quotation gateway, the quotation gateway judges whether the account name password is legal according to a decryption algorithm in the quotation gateway, if the quotation gateway is legal, the login confirmation message A5 is replied to the login client module 10, the login client module 10 can judge that the login client module is logged in to the quotation gateway at the moment after receiving the login confirmation message A5, and the login client module 10 can end the authentication proxy thread of the authentication proxy module 20.

The login server module 30 is configured to receive a request message sent by the lower node login client module, reply a fixed encrypted message carrying the node version to the lower node login client module according to the request message, reply a fixed authentication passing message to the lower node login client module when receiving a fixed authentication reply message sent by the lower node login client module, and send a confirmation login message to the lower node login client module when receiving a fixed encrypted login message sent by the lower node login client module.

Specifically, if the lower node is a child node, after receiving the request message B0 sent by the lower node login client module, the login server module 30 replies a fixed encrypted message B1 carrying the version of the node to the lower node login client module, after receiving the message B1, the lower node login client module replies an encrypted message B2 carrying the physical address and the network card address to the login server module 30, the login server module 30 replies a fixed confirmation authentication passing the message B3 to the login client module of the lower node, after receiving the confirmation authentication passing the message B3, the lower node sends an encrypted login message B4 with an account name and a password to the login server module 30, after receiving the encrypted login message B4, the login server module sends a confirmation login message B5 to the lower node login client module, after receiving the confirmation login message B5, the lower node login client module opens the receiving client module 40 to receive the messages transmitted by the upper node and simultaneously sends the data to the lower node receiving client module 50 after receiving the data messages received by the lower node, and the lower node receiving the data messages can be transmitted by the lower node receiving the lower node in real time.

If the lower node is a third party client, after receiving the request message C1 sent by the third party client login client module, the login server module 30 replies a fixed encrypted authentication message C2 to the third party client login client module, when the third party client login client module receives the message C2, it decrypts and then sends the message C3 of its own physical address and network card address to the login server module 30, the login server module 30 does not decrypt the message C3 and directly considers that the legal direct reply authentication passes the message C4 to the third party client login client module, the third party client sends a login message C5 carrying its encrypted user name and password to the login server module 30 after receiving the confirmation authentication passes the message C4, the login server module 30 does not decrypt and directly considers that the legal reply authentication login message C6 is sent to the third party client login client module after receiving the encrypted login message C5, and the third party client module starts up the receiving client 40 to send the data to the receiving node 50.

The quotation receiving client 40 is configured to start under the control of the login server module 30, receive a quotation message issued by the upper node in real time, and send the received quotation data to the quotation receiving server module 50

That is, when the login client module 10 of the lower node receives the login confirmation message, the market receiving client 40 is started to receive market data issued by the upper node in real time, and send the market data to the market receiving server module 50 of the client to allow the lower node to issue the login confirmation message to the lower node in real time after the connection.

The quotation receiving server 50 is configured to receive quotation data forwarded by the quotation receiving client 40.

Preferably, a market data distribution device for logging in across physical address authentication and cryptographic encryption according to the present invention further comprises:

and the local configuration module is used for configuring configuration files so as to configure related information such as IP ports, user passwords and the like of the connection gateway or the upper node. Specifically, the local configuration module configures a configuration file, which includes the related upper node IP and port information, and monitors port information and the proxy authentication module monitors port information. That is, the main node and the sub node in the system are configured with local configuration modules, but the configuration of the main node and the sub node is different, because the main node needs to be connected with the gateway, the data format needs to conform to the external specification, the sub node is responsible for interacting with the main node in the system, the self-defining data format is allowed among the internal nodes of the system, and the configuration modes are different.

Examples

FIG. 3 is a system architecture diagram of a market data distribution device for logging across physical address authentication and cryptographic encryption in accordance with an embodiment of the present invention. In this embodiment, as shown in fig. 4 and 5, a market data distribution flow for logging across physical address authentication and cryptographic encryption includes:

in step S1, the login gateway master node F firstly configures a user name and a password and an IP and a port of the quotation gateway N to log in the quotation gateway N, and firstly, according to the requirement of logging in the quotation gateway N, the login client module sends a request message A0 to the quotation gateway N, where the main content of the request message A0 is a message in a specific format for acquiring the relevant version information of the quotation gateway N. And then the quotation gateway N replies own version information message to the login client module of the login gateway main node F, wherein the message is A1. The A1 message is an encrypted message containing the version information of the quotation gateway and the authentication information of the physical address. After receiving the message A1, the login client module starts an authentication proxy module, where the authentication proxy module includes an authentication proxy client module and an authentication proxy server module, and the authentication proxy client module is mainly a set of APIs (provided by a transaction center) embedded in the login gateway N. After the authentication proxy module is started, the authentication proxy client is firstly connected with the authentication proxy server, the authentication proxy server takes a message A1 from the login client module and sends the message A1 to the authentication proxy client, the authentication proxy client (namely an exchange API) receives the message A1, an encrypted authentication reply message A2 is calculated according to a local physical address and a network card address and sent to the authentication server module, the authentication server module receives the message A2 and sends the message A2 to the login client module as it is, the login client takes the A2 message and sends the message to a quotation gateway N, the quotation gateway receives the A2 and decrypts specific data according to an encryption algorithm in the machine to judge whether the machine with the physical address and the network card address is qualified to receive quotation data, the quotation gateway N replies the message A3 to the login client module after judging the message A2 is successful, the login client module receives A3 and then sends the A3 message to the authentication client module, the authentication client module replies to the authentication client module, the authentication client module assembles a real login message A4 according to the user name and the password configured in the login gateway main node F after receiving the A3 message, the user name and the password in the login message A4 are both encrypted messages, the authentication client module sends the A4 message to the authentication client module, the authentication server sends the A4 message to the login client module as it is, the login client receives the A4 message and then sends the A4 message to the quotation gateway N as it is, the quotation gateway judges whether the account name and the password are legal according to a decryption algorithm in the quotation gateway, if the account name and the password are legal, the login client module replies to the login confirmation message A5 to the login client module, and can judge that the quotation gateway N is logged in after receiving the A5 message, at the moment, the login client module finishes the authentication proxy thread, the authentication proxy client module and the authentication proxy server module already finish own work, directly release related resources to finish own life cycle, and wait for the next call again; meanwhile, after receiving the message A5, starting a quotation receiving client module to receive a quotation message A6 issued by a quotation gateway in real time, and after receiving the quotation message A6, the quotation receiving client module sends the quotation message A6 to a quotation receiving server module for connecting a subordinate node and distributing the quotation message A6 to the subordinate node in real time;

Step S2, the sub-node D logs in to the main node F of the receiving quotation gateway, because the logging in is to the main node F, the proxy authentication function is not required to be started at this time, but in order to be compatible with the connection function of the third party application program (the third party application program is custom developed according to the API given by the transaction), so the message sending sequence at this time should accord with the message sequence in the step S1, firstly, the logging client module of the sub-node D sends a B0 message to the logging server module of the main node F, the logging server module of the main node F replies a fixed encryption message B1 carrying the version to the logging client module of the sub-node 1, the logging client module of the sub-node D replies an encryption message B2 carrying a physical address and a network card address to the logging server module of the main node F after the main node F receives the message again, the sub-node F replies a fixed logging-on message B3 to the client module of the sub-node F after the sub-node F receives the message, the sub-node B3 sends a password to the logging-node F after the main node F receives the message, the logging-node F receives the logging-on data from the main node F, and the logging-node F can be started in real time after the sub-node F receives the logging-node F receives the password, and the logging-data from the logging-node F is confirmed to be a real-time after the logging-end is received by the main node F;

Step S3, for the third party clients with different physical addresses of the same account, the third party clients are logged in to the main node F or the sub-node D, logic is consistent, firstly, the third party clients P are clients customized and developed according to an API provided by a transaction, the login logic accords with logic of the authentication proxy client and the service end in the step one, but because the third party clients P are not directly connected to the quotation gateway N, the same account can be used for receiving quotation by the non-passing physical address, only the authentication messages and the login reply confirming messages which are returned to the third party clients are sequentially sent to the third party clients at first, the login service end module of the sub-node D returns the fixed encrypted authentication messages C2 to the third party client module after receiving the messages, the third party client module receives the encrypted authentication messages, then the third party client C3 which sends own physical addresses and addresses to the login service end module of the sub-node D, the sub-node D can be directly received by the third party client, namely, the third party client C4 which receives the login authentication messages and the login reply messages which are received by the sub-node D, and the third party client C4 which is received by the sub-node D is considered to be received by the third party client module after the third party client is received, namely, the login request messages C4 which is received by the third party client C4 which is directly received by the client after the third party client is received by the client after the client is received by the node D, and the login confirming the password module, the login request message is received by the client 4.

Fig. 6 is a complete node topology diagram of the distribution of market data crossing physical address authentication and password encryption login in the embodiment of the present invention, in this embodiment, first, node 1 needs to log in to a market gateway of a trade exchange according to information such as a user name, a password, an IP, a Port, etc., and nodes 2, 3, or 4 may not depend on a specific account, a physical address and a network card address to connect to a master node, nodes 5, 6, 7, or may depend on a specific account, a physical address and a network card address to connect to nodes 2, 3, 4, and a third party node service may connect to nodes 5, 6, 7.

In summary, the market data distribution method and device for encrypting and logging across physical address authentication and password realize the authentication proxy module through the API (authentication proxy client module) provided by the transaction, receive the data of the encrypted gateway through the login client module, send the data to the authentication proxy module, enable the authentication proxy module to process the encrypted data, then monitor the data replied by the authentication proxy module and send the data to the gateway, can well bypass the limitation of the encryption authentication of the physical address and the network card address of the gateway, and can acquire the login message containing the encrypted user name and the encrypted password processed by the authentication proxy module and directly send the login message to the market gateway, can well cross the decryption step of the encryption algorithm of the gateway, can more conveniently receive and process the market data through the invention, and is convenient for expanding the connection of other applications and using the market data.

The above embodiments are merely illustrative of the principles of the present invention and its effectiveness, and are not intended to limit the invention. Modifications and variations may be made to the above-described embodiments by those skilled in the art without departing from the spirit and scope of the invention. Accordingly, the scope of the invention is to be indicated by the appended claims.

Claims (8)

1. A market data distribution method crossing physical address authentication and password encryption login comprises the following steps:

step S1, a current node sends a message for acquiring version information of an upper node to an upper node through a login client module, judges whether the connected upper node is a quotation gateway node according to a configuration file, and starts an authentication proxy module to start an authentication proxy thread for proxy authentication monitoring after receiving the version information message replied by the upper node if the upper node is the quotation gateway node;

step S2, if the upper node is a quotation gateway node, the login client module of the current node sends an encrypted version information message replied by the quotation gateway to the authentication proxy module, generates an encrypted authentication reply message carrying a local client ID and a physical address through the authentication proxy module and sends the encrypted authentication reply message to the quotation gateway, receives a reply confirmation message returned by the quotation gateway, generates a real login message through the authentication proxy module and sends the real login message to the quotation gateway, and ends an authentication proxy thread after receiving the login confirmation message returned by the quotation gateway, and starts a quotation receiving client module to receive the quotation message of the upper node;

Step S3, if the upper node is not a quotation gateway node, the login client module of the current node replies a fixed encryption authentication reply message to the upper node after receiving a fixed encryption authentication message sent by the upper node, sends a fixed encryption login message after receiving a fixed confirmation authentication pass message replied by the upper node, and starts a quotation receiving client to receive the quotation message of the upper node after receiving a confirmation login message sent by the upper node;

if the current node is a child node, the login client module of the current node replies an encryption authentication reply message carrying a physical address and a network card address to the upper node after receiving a fixed encryption authentication message of the upper node, the upper node directly authenticates legal without decryption after receiving the encryption authentication reply message, replies a fixed confirmation authentication passing message to the login client module of the current node, the login client module of the current node sends an encryption login message with an account name and a password being empty to the upper node after receiving the confirmation authentication passing message, the upper node directly authenticates legal of a user name password after receiving the fixed encryption login message and sends a confirmation login reply message to the login client module of the current node, and the current node starts a market receiving client module after receiving the confirmation login reply message;

If the current node is a third party client, the login client module of the current node decrypts the encrypted authentication message after receiving the encrypted authentication message, and sends an encrypted authentication reply message carrying a physical address and a network card address of the current node to an upper node, the upper node directly replies a confirmation authentication message without decrypting the encrypted authentication reply message after receiving the encrypted authentication reply message, the login client module of the current node considers that the current node passes authentication after receiving the confirmation authentication message, sends a login message carrying a user name and a password encrypted by the current node to the upper node, and the upper node directly considers that the encrypted login message is legal after receiving the encrypted login message, replies the confirmation login message to the current node, and starts a quotation receiving client module to receive quotation data issued by a quotation receiving server of the upper node in real time;

and S4, starting the quotation receiving client module to receive the quotation message issued by the upper node in real time, and sending the quotation message to the quotation receiving server module after receiving the quotation message so as to be distributed to the lower node in real time after the lower node is connected.

2. A market data distribution method for logging across physical address authentication and cryptographic encryption as recited in claim 1, wherein: if the current node is a login gateway main node, an upper node is a quotation gateway node, a login client module of the current node sends a request message to the quotation gateway node, the request message is a message in a specific format for acquiring relevant version information of the quotation gateway, a version information message which is returned by the quotation gateway and carries own version information is received, and the version information message is an encrypted message containing version information of the quotation gateway and physical address authentication information.

3. A market data distribution method for logging across physical address authentication and cryptographic encryption as recited in claim 2, wherein: if the current node is a child node, the upper node is a login gateway master node or other child nodes, the login client module of the current node sends a request message to the upper node, and the upper node replies a fixed encryption authentication message carrying the version of the current node to the login client module of the current node.

4. A market data distribution method for logging across physical address authentication and cryptographic encryption as recited in claim 3, wherein: if the current node is a third party client, the upper node is a login gateway master node or a slave node, the login client module of the current node sends a request message to the upper node, and the upper node replies a fixed encryption authentication message to the login client module of the current node after receiving the message.

5. The method for distributing market data across physical address authentication and cryptographically encrypted logins of claim 4, wherein step S2 further comprises:

step S200, the login client module sends the encrypted version information message replied by the quotation gateway to the authentication proxy server module, and the authentication proxy server module forwards the encrypted version information message to the authentication proxy client module;

Step S201, after receiving the version information message, the authentication proxy client module calculates an encrypted authentication reply message according to the local physical address and the network card address, and sends the encrypted authentication reply message to the authentication server module, the authentication proxy server module sends the authentication reply message to the login client module, and the login client module forwards the authentication reply message to the quotation gateway;

step S202, after receiving a reply confirmation message returned by the quotation gateway, forwarding the reply confirmation message to the authentication proxy server side module, and then sending the reply confirmation message to the authentication proxy client side module by the authentication proxy server side module, generating a real login message to be sent to the authentication proxy server side module after the authentication proxy client side module receives the reply confirmation message which is successfully authenticated, and sending the encrypted login message to the login client side module by the authentication proxy server side module, and sending the encrypted login message to the quotation gateway by the login client side module;

step S203, after receiving the login confirmation message replied by the quotation gateway, the login client module ends the work of the authentication proxy module, releases the related resources, and opens the login server module to receive the quotation message of the quotation gateway.

6. A method of distributing marketing data across physical address authentication and cryptographically encrypted logins as recited in claim 5, wherein: in step S202, the authentication proxy client module calculates an encrypted authentication reply message according to the local physical address and the network card address after receiving the version information message, and sends the encrypted authentication reply message to the authentication proxy server module, and the authentication proxy server module sends the authentication reply message to the login client module after receiving the authentication reply message.

7. A market data distribution device for logging in across physical address authentication and cryptographic encryption, comprising:

the login client module is used for sending a request message to the upper node, receiving a version information message replied by the upper node, judging whether the connected upper node is a quotation gateway node according to a preset configuration file, if the connected upper node is the quotation gateway node, starting an authentication proxy module to start an authentication proxy thread, generating an encrypted authentication reply message carrying a local client ID and a physical address through the authentication proxy module, sending the encrypted authentication reply message to the quotation gateway, receiving a reply confirmation message returned by the quotation gateway, generating a real login message through the authentication proxy module, sending the real login message to the quotation gateway, ending the authentication proxy thread after receiving the login confirmation message returned by the quotation gateway, and starting the quotation receiving client module to receive the quotation message issued by the quotation gateway in real time; if the current node is a sub node, the login client module of the current node replies an encryption authentication reply message carrying a physical address and a network card address to the upper node after receiving the fixed encryption authentication reply message, the upper node directly authenticates legitimacy without decryption after receiving the encryption authentication reply message, the login client module of the current node replies a fixed authentication request message to the login client module of the current node after receiving the fixed encryption authentication reply message, the login client module of the current node sends an account name and a password to the upper node after receiving the confirmation authentication request message, the current node replies an encryption login request message after receiving the fixed encryption authentication reply message, and the current node replies a user password after receiving the confirmation authentication request message; if the current node is a third party client, the login client module of the current node decrypts the encrypted authentication message after receiving the encrypted authentication message, and sends an encrypted authentication reply message carrying a physical address and a network card address of the current node to an upper node, the upper node directly replies a confirmation authentication message without decrypting the encrypted authentication reply message after receiving the encrypted authentication reply message, the login client module of the current node considers that the current node passes authentication after receiving the confirmation authentication message, sends a login message carrying a user name and a password encrypted by the current node to the upper node, and the upper node directly considers that the encrypted login message is legal after receiving the encrypted login message, replies the confirmation login message to the current node, and starts a quotation receiving client module to receive quotation data issued by a quotation receiving server of the upper node in real time;

The authentication proxy module is used for starting an authentication proxy thread, acquiring a version information message replied by the quotation gateway, calculating an encrypted authentication reply message according to the local physical address and the network card address, and sending the encrypted authentication reply message to the quotation gateway by the login client module, generating a real login message when receiving a reply confirmation message sent by the login client module, and sending the real login message to the login client module by the login client module;

the login server side module is used for receiving a request message sent by the lower node login client side module, replying a fixed encryption message carrying the node version to the lower node login client side module according to the request message, replying a fixed authentication passing message to the lower node login client side module when receiving a fixed encryption authentication reply message sent by the lower node login client side module, and sending a confirmation login message to the lower node login client side module when receiving a fixed encryption login message sent by the lower node login client side module;

the quotation receiving client is used for starting under the control of the login server module, receiving a quotation message issued by an upper node in real time, and sending the received quotation data to the quotation receiving server module;

And the quotation receiving server is used for receiving quotation data forwarded by the quotation receiving client.

8. The market data distribution device according to claim 7, wherein the device further comprises a local configuration module for configuring configuration files to configure information related to IP ports and user passwords of the connection gateway or the upper node.

Images