CN117376080A - Nuclear power service data sharing system - Google Patents

Abstract

The invention belongs to the technical field of computer application, and particularly relates to a data sharing system of nuclear power service. Including service provider systems, service directory systems, and front-end user self-research systems. The invention has the beneficial effects that: 1. when the user needs to access the API under the service, the original service interface is accessed through the gateway, and the original service interface returns the corresponding data response gateway and returns the data response gateway to the user, thereby hiding the specific release position of the real service, reducing the potential safety hazard of the system and effectively improving the safety of the whole system.

Description

Nuclear power service data sharing system

Technical Field

The invention belongs to the technical field of computer application, and particularly relates to a data sharing system of nuclear power service.

Background

The system comprises a China nuclear power large nuclear source platform (DHP) platform, a series of innovative nuclear power industrial applications oriented to a nuclear power full-industry chain, and safe, reliable and efficient operation of an operation unit, wherein the DHP platform is used as a supporting platform and a neural center of digital nuclear power, integrates data of a China nuclear power massive industrial system and equipment, builds an extensible open nuclear power industrial Internet platform, synchronously develops a nuclear power industrial application development ecological system oriented to various scenes and reusability, improves the use efficiency and sharing range of nuclear power plant hardware, service and data, realizes intelligent management and operation optimization of China nuclear power business and resources, and drives a series of innovative nuclear power industrial applications oriented to the nuclear power full-industry chain.

At present, a large number of sub-system research and development and external system access services exist on the DHP platform, overlapping services and functions exist on the services, a micro-service architecture is adopted for reducing research and development of repeated services and functions, research and development cost is reduced, and research and development efficiency is improved. However, since each system research and development group is independently researched and developed, a unified approach is not needed to know and check the open interface API of each system, and a large amount of communication cost is consumed by the open interface of the shared system service. Therefore, how to construct a data sharing system to reduce the communication cost in the development process of the DHP platform, effectively realize data sharing, and realize service information integration and management is a problem that needs to be solved at present.

Disclosure of Invention

The invention aims to provide a data sharing system of nuclear power service, which has unified service access standard, standardizes system access flow, realizes cross-domain security access of different services, and provides a unified use interface for a user body.

The technical scheme of the invention is as follows: a data sharing system of nuclear power service comprises a service provider system, a service directory system and a front-end user self-research system.

The service provider system is a service providing source and is used for providing continuous API service outwards through the service directory system and simultaneously interacting with the service directory, storing and checking the authorization token information.

The service directory system is used for carrying out service information interaction on the service provider system, collecting service information, classifying the collected service information and managing the service information on shelves and shelves; and providing service authorization application, checking authorization progress, checking authorization information and obtaining/downloading token information entry, and simultaneously providing service for searching, checking and debugging service information for the front end user of the service directory after the service directory system processes the user service authorization application.

The front-end user self-grinding system comprises: after the service catalog front-end user obtains the token, service calling coding implementation work is carried out, and the calling process needs to carry corresponding token information.

The service directory system includes:

service interaction module: the system is used for collecting service information of the service provider system and pushing an authorization token to the front-end user self-research system.

The service directory system includes: and the service management module is used for classifying, putting on/off the shelf management and authorization of the service information so as to manage and control the service information.

The service directory system includes: service catalog foreground display module: for providing a registration application, a service authorization application, and a service retrieval application; the service searching is to search service information according to the keywords input by the authorized foreground user in the service catalog foreground display module, match the service information, the service classification information and the service label information, and display a search result list.

The service directory system includes: the system comprises a service authorization module, a basic management module and a data sharing system, wherein the service authorization module is used for auditing the service authorization application and providing authorization token information for the user, and the basic management module is used for managing a foreground user and a background user of the data sharing system.

The service management module is mainly used for loading and unloading service information provided by the service provider system and comprises a service classification unit, a service marking unit, a service loading and unloading processing unit and a service automatic loading and unloading unit.

The service automatic loading and unloading unit is in communication connection with the service state acquisition unit of the external interaction module, so that corresponding services in the service catalog are automatically loaded and unloaded according to real-time service state information of each service in the service provider system, for example, a certain service in the service provider system is loaded and unloaded, the service state acquisition unit acquires the service loading and unloading state and then sends the service loading and unloading state to the service automatic loading and unloading unit, and the service automatic loading and unloading unit changes the service state into the service loading and unloading state in the service catalog;

the system comprises a service classifying unit, a service marking unit and a service on-off rack processing unit, wherein the service classifying unit is used for carrying out catalog classification management of the service to be on-rack, the service on-off rack processing unit is used for configuring access interface information of the service, and the service marking unit is used for adding/deleting one or more different labels for each service, so that a user can search for the service in a service catalog foreground conveniently.

The invention has the beneficial effects that: 1. when the user needs to access the API under the service, the original service interface is accessed through the gateway, and the original service interface returns the corresponding data response gateway and returns the data response gateway to the user, thereby hiding the specific release position of the real service, reducing the potential safety hazard of the system and effectively improving the safety of the whole system. Meanwhile, because the user does not need to directly request the service, but accesses the service through the service directory system, the service directory system accesses the corresponding service according to control and returns service resources to the user, and when the service deployment environment is changed, only the service address is changed on the page, and the connection process of the bottom layer of the system is not required to be concerned.

2. The searching efficiency is high, when searching is carried out, the state of the current searching service is further confirmed according to the inside of the service directory system, if the service directory system is judged to be on line, the service provided by the service provider system is called through the front-end user self-research system, and if the service directory system is off line or in a deleted state, the process is ended, and unnecessary calling is avoided.

3. The functions of service list, on-line/off-line, service management and monitoring and the like are realized, and all existing and future business/data/intelligent services are integrated; through label classification, the interface helps documents, which is convenient for service developers to use; gradually managing standardized business data service interfaces; and according to the service attribute and the application classification, the service development work in the future is facilitated.

4. In order to ensure the data security, the operation and maintenance personnel can only provide data service for the authorized applicant; after the applicant passes the approval of the specific application flow, the operation and maintenance personnel authorize; the use condition of the data service interface can be checked and tracked through the data management and control module.

Drawings

FIG. 1 is a schematic diagram of a data sharing system for a nuclear power service provided by the invention;

FIG. 2 is a schematic diagram of a service provider system;

FIG. 3 is a schematic diagram of a service directory system.

Detailed Description

The invention will be described in further detail with reference to the accompanying drawings and specific examples.

As shown in FIG. 1, the invention discloses a data sharing system of nuclear power service, which comprises a front-end user self-research system, a service directory system and a service provider system;

a service provider system, which is a service providing source for providing continuous API service outwards via a service directory system, and interacting with the service directory, storing and checking authorization token information;

the service directory system is used for carrying out service information interaction on the service provider system, collecting service information, classifying the collected service information and managing the service information on shelves and shelves; providing service authorization application, checking authorization progress, checking authorization information and obtaining/downloading token information entry, and simultaneously providing service for searching, checking and debugging service information for a user at the front end of a service directory after the service directory system processes the user service authorization application;

front-end user self-grinding system: after the service catalog front-end user obtains the token, service calling coding implementation work is carried out, and the calling process needs to carry corresponding token information.

As shown in fig. 2, the service provider system of the present invention mainly adopts a micro-service architecture, and adopts the form of the RestFul API to provide services to the outside. The service provider system is a service providing source, and needs to provide continuous API service, service status information, service call information, and the like. Meanwhile, the service provider needs to interact with the service catalog, store and verify the authorization token information, so that the front-end user can smoothly call the self-research system during call. And after the front-end user acquires the token, the front-end user performs service calling coding implementation work, and the calling process needs to carry corresponding token information.

The service directory system performs service information interaction with the service provider system, and collects service information. And simultaneously, after the service directory system applies for processing the user service authorization, when the self-research system calls the API, a call log is recorded for statistical analysis. The service directory system classifies service information, manages and authorizes the service information, and manages and controls the service information. The service directory system provides services of searching, checking and debugging service information for a service directory front-end user, and provides service authorization application, checking authorization progress, checking authorization information and acquiring/downloading token information entry.

As shown in fig. 3, in this embodiment, the service directory system includes:

service interaction module: for interacting with a service provider system, collecting service information;

the service management module is used for classifying, putting on/off the shelf, managing, authorizing and the like the service information so as to manage and control the service information;

service catalog foreground display module: the system is used for providing service retrieval and service authorization application; the service retrieval is to match service information, service classification information and service label information to search service information according to keywords input by a foreground user in a service catalog foreground display module, and display a search result list;

and the service authorization module is used for auditing the service authorization application and providing authorization token information for the user.

And a base management module for managing users of the data sharing system.

The services of the service provider system comprise self-contained independent services, third-party controlled services and services from other sources, the external interaction module is used for interacting with the service provider system to collect service information, meanwhile, the external interaction module is also in communication connection with the front-end user self-research system for authorizing token information pushing,

in this embodiment, the service directory foreground display module includes a service authorization application unit and a service information search unit, where the service authorization application unit is configured to provide a service authorization entry for a user application, provide a user application authorization list, and submit a real-time service authorization application list by checking corresponding authorization information. The service management module examines the application service authorization list, and the examination passes and is distributed to the corresponding service authorization token/key of the user. The service information searching unit is used for providing a searching entrance and inquiring the service list according to the keyword matched service classification, service identification, service information and the like.

Further, the service catalog foreground display module further comprises a service classification viewing unit, a service information viewing unit and a service API interface debugging unit, wherein the service catalog classification viewing unit is used for displaying service information classification information set by a background; the service information viewing unit is used for providing basic information and identification information of viewing service, an API interface list under the service, and viewing information such as an API input parameter, an API output parameter, a request mode and the like when clicking the API. The API interface debugging unit is used for inputting request parameters according to the API interface information and executing the request process. After the request execution is completed, the returned result can be checked. When the interface is debugged, if the interface needs login information, request header information can be added, so that on-line debugging is ensured to be carried out smoothly.

Business scenario examples: a certain unit of three gates puts forward the simulation data service requirement; the operation and maintenance manager of the data service tool grants the specific interface use authority to the service developer; the authorized service developer can check the service catalog, check the basic information service API related to the unit according to the label of the unit, and the time sequence interface service API related to the unit measuring point is surrounded, so that the document learning and the use are facilitated through the interface, and the simulation development work is smoothly carried out. The real-time data service management can automatically arrange and manage service application, so that a service interface is better and easy to use, service application is accurately enabled, and cost and efficiency are reduced.

In this embodiment, the external interaction module includes a service information acquiring unit, a service state acquiring unit, and an authorization token information pushing unit. The authorization token information pushing unit is used for pushing the authorization token registered by the front-end user to the front-end user self-research system, and when the front-end user has authority to inquire the service, the front-end user self-research system carries the authorization token to carry out interface API call to the service provider so as to acquire the related service.

The service information acquisition unit is used for interacting with the service provider system to acquire service information; the service state acquisition unit acquires service state information in real time; in this embodiment, service API interface information collection mainly obtains services registered in a registry through a network manager, obtains all the swagger interface information through the services, parses the swagger interface information, and stores the parsed swagger interface information in a service directory system database, thereby completing data collection.

The service management module is mainly used for loading and unloading service information provided by the service provider system and comprises a service classification unit, a service marking unit, a service loading and unloading processing unit and a service automatic loading and unloading unit.

The service automatic loading and unloading unit is in communication connection with the service state acquisition unit of the external interaction module, so that corresponding services in the service catalog are automatically loaded and unloaded according to real-time service state information of each service in the service provider system, for example, a certain service in the service provider system is loaded and unloaded, the service state acquisition unit acquires the service loading and unloading state and then sends the service loading and unloading state to the service automatic loading and unloading unit, and the service automatic loading and unloading unit modifies the service state into the service catalog.

The system comprises a service classifying unit, a service marking unit and a service on-off rack processing unit, wherein the service classifying unit is used for carrying out catalog classification management of the service to be on-rack, the service on-off rack processing unit is used for configuring access interface information of the service, and the service marking unit is used for adding/deleting one or more different labels for each service, so that a user can search for the service in a service catalog foreground conveniently.

The service loading process comprises the following steps:

(1) The service classification unit performs catalog classification management of the to-be-put-on-shelf service, and comprises the steps of setting the superior class of the to-be-released service, and confirming the hierarchy of the service in the catalog classification based on the superior class and the preset catalog classification, wherein the catalog classification is used for representing the hierarchy and node distribution of each service;

(2) For the services of the determined classification, service management and API management are performed through the service on-off-shelf processing unit:

and (3) service management: setting an interface access basic path of the service to be issued and binding the interface access basic path and the service;

API management: comprising

Configuring and encapsulating the API address to form an access address to the external interface, comprising the steps of;

acquiring an actual interface access address of the service;

compiling the interface access basic path to obtain a virtual interface access basic path;

generating a random code for the service;

combining the virtual interface access basic path, the random code and the actual interface access address as an external interface access address of the service;

configuring the parameter information of the service, and configuring the parameter information of the service in a service catalog according to the original parameter information of the service;

after the parameter setting is finished, the service can be marked by a service marking unit, and tag information is set for the service information, so that a user can search for the service in a service catalog foreground conveniently.

(3) And marking the state of the service as an online state, and carrying out service online and issuing.

Through the steps, no matter the service source, when the service is input, catalog classification management, service management and API configuration management are respectively carried out on the service, service association catalog classification (the catalog classification of the service belongs to, one catalog classification manages a plurality of services), API association service (the API and the service are in binding relation, the API depends on the service), and when the API configuration management is carried out, the API address is packaged, when a user needs to access the API under the service, the user accesses an original service interface through a gateway, the original service interface returns corresponding data to the gateway and returns to the user, thereby hiding the specific release position of the real service, reducing the hidden danger of the system and effectively improving the safety of the whole system. Meanwhile, because the user does not need to directly request the service, but accesses the service through the service directory system, the service directory system accesses the corresponding service according to control and returns service resources to the user, and when the service deployment environment is changed, only the service address is changed on the page, and the connection process of the bottom layer of the system is not required to be concerned.

In the process of putting the service on shelf, the service information can be marked for multiple times through the service marking unit, and a plurality of different marks are marked. Such as the equipment domain, nuclear power domain, messaging domain, etc.

Correspondingly, when a certain service is required to be put on the shelf, the service state is modified to be put on the line in the service on-shelf and off-shelf processing unit.

Preferably, the external interaction module further comprises a service interface call log obtaining unit, and correspondingly, the service management module further comprises a service interface statistics analysis unit, and when the service interface call log obtaining unit is used for calling an API, the service directory system records a call log for statistics analysis. Specifically, when the front-end user self-researches a system call service API, call log information is generated on a service provider system, wherein when the call log is generated on the service provider system, only basic information is generated, and after the basic information is collected by a service directory system, the service information is additionally related to the service call log information and is read and recorded by a service interface call log acquisition unit. The service interface statistics analysis unit is in communication connection with the service interface call log acquisition unit of the external interaction module so as to carry out statistics summarization on the real-time service call information and display icons, so that the overall real-time service call condition can be conveniently known, and corresponding basis is provided for service optimization and current limiting.

The basic management module is in communication connection with the foreground display module and is used for defining the operation authority of a front-end user; meanwhile, the basic management module is also in communication connection with the service management module and the service authorization management module respectively so as to define the management operation authority of the background management user and realize the management of the front-end user and the background management user. Preferably, the basic management module comprises a user login and logout unit, a foreground user management unit, a background user authority management unit and a background user management unit, wherein the user login and logout unit is used for login and logout of a user; the foreground user management unit is used for managing operations such as foreground registered user, foreground user deactivation, deletion, password modification and the like. The background user authority management unit is used for inquiring the role list, building, repairing and deleting roles and binding the role authority. The background user management is used for background user list inquiry, user building, checking and deleting and password resetting.

The service authorization management module comprises a service authorization checking unit, wherein the service authorization checking unit is used for checking a service authorization application submitted by a foreground user and is in communication connection with the service authorization application unit of the foreground display module and the authorization token information pushing unit of the external interaction module. When the front-end user searches and inquires the service through the data sharing system, the front-end user is required to submit a service authorization application through the service authorization application unit, the service catalog is checked through the service authorization module after receiving the service authorization application of the front-end user, if the check passes, the service authorization information of the front-end user is generated in the service authorization module and an authorization token is distributed, and meanwhile the front-end user is pushed to the front-end user self-research system through the authorization token information pushing unit.

Preferably, the service authorization management module further comprises a service authorization application list query unit, a service authorization information viewing unit and an authorization token management unit; and the service authorization application list query unit is used for the background user to check the service authorization application submitted by the foreground user. And the service authorization information viewing unit is used for viewing the authorization information of the authorized user. And the authorization token management unit is used for displaying the authorized user list and the user authorization token information and providing a token downloading function.

After the authorization application is passed, when the front-end user performs service retrieval through the data sharing system of the nuclear power service, the method comprises the following steps of

(A) Acquiring a search keyword input by a foreground user in a service catalog foreground display module; in the embodiment, a front-end user inputs a search keyword through a foreground user in a service directory foreground display module;

(B) Judging whether the foreground user has an authorization token or not, if so, turning to the step (C); if not, ending the access;

in order to ensure that information is not revealed to unauthorized users, a service catalog foreground provides a user application service authorization entry, provides a user application authorization list, and submits a real-time service authorization application list by checking corresponding authorization information; and the service authorization module examines the application service authorization list, and if the examination is passed, the service authorization list is distributed to the corresponding service authorization token/key of the user. When a search request of a foreground user is received, the service directory background firstly judges whether the foreground user has an authorization token of the service so as to judge whether the foreground user has permission to access the service.

(C) According to the keywords, matching service information, service classification information and service label information to search service information;

(D) Judging a service state corresponding to the service, and if the service state is online; if the service state is on-line, the step is shifted to, and if the service state is off-line or deleted, the feedback service is not available.

The service state is mainly used for marking the service on-line and off-line states, and because a part of the service directory provides a service system, the system version updating frequency is higher, and meanwhile, the service information is newly increased, updated, off-line and the like in the acquisition process, the service state in the service directory can be changed frequently, and in the step (D), after the service directory system finds the corresponding service, the step of judging the service state is added, and only if the service is in the on-line state, the step (E) is shifted to carry out service call; if the service is in the offline state or the deleted state, the service is directly fed back and informed of the unavailability, so that the step of calling the service is avoided, and the operation complexity of the whole system is reduced.

In this embodiment, as a preferred solution, the service management module is configured to determine a service state through passive triggering, and specifically, the service management module includes a service interface statistics analysis unit, where the service interface statistics analysis unit performs statistics and collection on real-time service call information, and knows an overall real-time service call condition, if a certain service is offline or deleted, when a user calls the service through a service directory, the service interface statistics analysis unit calculates that a corresponding feedback result cannot be called, and if the service interface statistics analysis unit calculates that a feedback result of a certain service is not called for multiple times, the service is determined and recorded to be offline or deleted;

further, the service management module further includes a service state synchronization unit, where the service state synchronization unit is configured to synchronize the service state counted by the service interface statistics analysis unit to the service directory foreground display module at a fixed time, and after obtaining the user search request, the service state foreground display module may determine the service state, if the service state is an up state, then execute a subsequent step, or directly report an error, thereby further degrading the complexity of system search.

(E) The system is used for interacting with a service provider system, acquiring service information and feeding the service information back to the service catalog foreground display module.

Claims (10)

1. The utility model provides a data sharing system of nuclear power service which characterized in that: including service provider systems, service directory systems, and front-end user self-research systems.

2. The data sharing system of a nuclear power service of claim 1, wherein: the service provider system is a service providing source and is used for providing continuous API service outwards through the service directory system and simultaneously interacting with the service directory, storing and checking the authorization token information.

3. The data sharing system of a nuclear power service of claim 1, wherein: the service directory system is used for carrying out service information interaction on the service provider system, collecting service information, classifying the collected service information and managing the service information on shelves and shelves; and providing service authorization application, checking authorization progress, checking authorization information and obtaining/downloading token information entry, and simultaneously providing service for searching, checking and debugging service information for the front end user of the service directory after the service directory system processes the user service authorization application.

4. The data sharing system of a nuclear power service of claim 1, wherein: the front-end user self-grinding system comprises: after the service catalog front-end user obtains the token, service calling coding implementation work is carried out, and the calling process needs to carry corresponding token information.

5. The data sharing system of a nuclear power service of claim 1 wherein said service directory system comprises:

service interaction module: the system is used for collecting service information of the service provider system and pushing an authorization token to the front-end user self-research system.

6. The data sharing system of a nuclear power service of claim 1 wherein said service directory system comprises: and the service management module is used for classifying, putting on/off the shelf management and authorization of the service information so as to manage and control the service information.

7. The data sharing system of a nuclear power service of claim 1 wherein said service directory system comprises: service catalog foreground display module: for providing a registration application, a service authorization application, and a service retrieval application; the service searching is to search service information according to the keywords input by the authorized foreground user in the service catalog foreground display module, match the service information, the service classification information and the service label information, and display a search result list.

8. The data sharing system of a nuclear power service of claim 1 wherein said service directory system comprises: the system comprises a service authorization module, a basic management module and a data sharing system, wherein the service authorization module is used for auditing the service authorization application and providing authorization token information for the user, and the basic management module is used for managing a foreground user and a background user of the data sharing system.

9. The data sharing system of a nuclear power service of claim 1, wherein: the service management module is mainly used for loading and unloading service information provided by the service provider system and comprises a service classification unit, a service marking unit, a service loading and unloading processing unit and a service automatic loading and unloading unit.

10. The data sharing system of a nuclear power service of claim 9, wherein: the service automatic loading and unloading unit is in communication connection with the service state acquisition unit of the external interaction module, so that corresponding services in the service catalog are automatically loaded and unloaded according to real-time service state information of each service in the service provider system, for example, a certain service in the service provider system is loaded and unloaded, the service state acquisition unit acquires the service loading and unloading state and then sends the service loading and unloading state to the service automatic loading and unloading unit, and the service automatic loading and unloading unit changes the service state into the service loading and unloading state in the service catalog;

the system comprises a service classifying unit, a service marking unit and a service on-off rack processing unit, wherein the service classifying unit is used for carrying out catalog classification management of the service to be on-rack, the service on-off rack processing unit is used for configuring access interface information of the service, and the service marking unit is used for adding/deleting one or more different labels for each service, so that a user can search for the service in a service catalog foreground conveniently.