WO2020168757A1

WO2020168757A1 - Network system access method and apparatus, computer device, and readable storage medium

Info

Publication number: WO2020168757A1
Application number: PCT/CN2019/118409
Authority: WO
Inventors: 何忠林
Original assignee: 平安科技（深圳）有限公司
Priority date: 2019-02-18
Filing date: 2019-11-14
Publication date: 2020-08-27
Also published as: CN109981569A; CN109981569B

Abstract

The present application discloses a network system access method and apparatus, a computer device and a readable storage medium. The present application relates to the field of Internet technology, and can determine whether to enable a write function of a terminal according to a terminal domain name of the terminal, reducing the risk of data tampering in a network system, and effectively ensuring the security and high availability of the network system. Said method comprises: upon receiving an access request of a terminal, querying a terminal domain name of the terminal according to a terminal identifier of the terminal, the terminal domain name indicating an access permission of the terminal for a network system; if the terminal domain name is an external network domain name, determining the physical location where the terminal is currently located, and selecting a target network system from at least one preset network system according to the physical location, a target geographic distance between the target network system and the physical location satisfying a distance requirement; and disenabling a write function of the target network system, and allowing the terminal to access the target network system.

Description

Network system access method, device, computer equipment and readable storage medium

This application claims the priority of the Chinese patent application filed on February 18, 2019 with the Chinese Patent Office, the application number is 201910119331X, and the application name is "Network system access methods, devices, computer equipment and readable storage media", and the entire content Incorporated in the application by reference.

Technical field

This application relates to the field of Internet technology, in particular to a network system access method, device, computer equipment and readable storage medium.

Background technique

With the rapid development of Internet technology, computers have gradually become popular in people's lives. In order to promote themselves, many companies usually establish official websites and display corporate information and corporate culture on the official websites to achieve the purpose of promoting companies. In order to display company-related information on the official website, the official website usually carries network systems such as information systems, and displays relevant information on the official website based on the network system, allowing users to access the network system through the terminal to gain a deeper understanding of the enterprise.

In related technologies, generally speaking, the domain names of terminals accessing the network system can be divided into intranet domain names and extranet domain names. Among them, the terminal with the intranet domain name is the official website staff, and the terminal with the extranet domain name is the external person. Staff and external personnel can use their own terminals to log in to the network system, access the network system, and read or write data in the network system.

In the process of realizing this application, the applicant found that the related technology has at least the following problems: because both staff and external personnel can read or write data in the network system, that is, have an intranet domain name and an extranet The terminal of the domain name can read or write data in the data in the network system, so that the data in the network system may be tampered with, and it is difficult to effectively guarantee the security and high availability of the network system.

Summary of the invention

In view of this, this application provides a network system access method, device, computer equipment, and readable storage medium. The main purpose is to solve the current risk of data in the network system being tampered with, and it is difficult to effectively ensure the security of the network system. And the issue of high availability.

According to the first aspect of the present application, there is provided a method for accessing a network system, the method including:

When receiving the access request of the terminal, query the terminal domain name of the terminal according to the terminal identification of the terminal. The terminal domain name indicates the access authority of the terminal to the network system; if the terminal domain name is an extranet domain name, then Determine the physical location where the terminal is currently located, select a target network system from at least one preset network system according to the physical location, and the target geographic distance between the target network system and the physical location meets the distance requirement; close all The write function of the target network system connects the terminal to the target network system.

In another embodiment, if the terminal domain name is an external network domain name, determining the current physical location of the terminal, and selecting a target network system from at least one preset network system according to the physical location includes:

If the terminal domain name is an external network domain name, locate the terminal according to the terminal identification, determine the physical location where the terminal is currently located; obtain the at least one preset network system, and calculate the at least At least one geographic distance between a network system and the physical location; sort the at least one geographic distance from largest to smallest to obtain a ranking result; extract the geographic distance ranked last in the ranking result as the The target geographic distance, and the preset network system corresponding to the target geographic distance is used as the target network system.

In another embodiment, the turning off the write function of the target network system and connecting the terminal to the target network system includes:

Determine at least one data write interface of the target network system, where the data write interface includes at least a database DB write interface and a key-value database Redis write interface; disable the at least one data write interface, and set the terminal Access to the target network system after the at least one data writing interface is disabled.

In another embodiment, when the access request of the terminal is received, after querying the terminal domain name of the terminal according to the terminal identifier of the terminal, the method further includes:

If the terminal domain name is an intranet domain name, an intranet network system is determined in the at least one preset network, the terminal is connected to the intranet network system, and the intranet network system has a writing function and Read function.

In another embodiment, the method further includes:

When receiving the target data written by the terminal based on the intranet network system, store the target data in the intranet network system; synchronize the target data to the at least one preset network system .

According to the second aspect of the present application, there is provided a network system access device, which includes:

The query module is configured to query the terminal domain name of the terminal according to the terminal identifier of the terminal when the access request of the terminal is received, and the terminal domain name indicates the access authority of the terminal to the network system;

The first determining module is configured to determine the current physical location of the terminal if the terminal domain name is an external network domain name, and select a target network system from at least one preset network system according to the physical location, and the target network The target geographic distance between the system and the physical location meets the distance requirement;

The closing module is used to close the write function of the target network system and connect the terminal to the target network system.

In another embodiment, the first determining module includes:

A positioning unit, configured to locate the terminal according to the terminal identifier if the terminal domain name is an external network domain name, and determine the physical location where the terminal is currently located;

A calculating unit, configured to obtain the at least one preset network system, and calculate at least one geographic distance between the at least one network system and the physical location;

A sorting unit, configured to sort the at least one geographic distance from large to small to obtain a sorting result;

The extraction unit is configured to extract the geographic distance ranked last in the ranking result as the target geographic distance, and use the preset network system corresponding to the target geographic distance as the target network system.

In another embodiment, the closing module includes:

The determining unit is configured to determine at least one data writing interface of the target network system, the data writing interface includes at least a database DB writing interface and a key-value library Redis writing interface;

The access unit is configured to disable the at least one data writing interface, and connect the terminal to the target network system after the at least one data writing interface is disabled.

In another embodiment, the device further includes:

The second determining module is configured to, if the terminal domain name is an intranet domain name, determine an intranet network system in the at least one preset network, and connect the terminal to the intranet network system, and the intranet The network system has a write function and a read function.

In another embodiment, the device further includes:

A receiving module, configured to store the target data in the intranet network system when the target data written by the terminal based on the intranet network system is received;

The synchronization module is used to synchronize the target data to the at least one preset network system.

According to a third aspect of the present application, there is provided a computer device including a memory and a processor, the memory stores computer-readable instructions, and the processor implements the method described in the first aspect when the computer-readable instructions are executed A step of.

According to the fourth aspect of the present application, there is provided a non-volatile readable storage medium having computer-readable instructions stored thereon, and when the computer-readable instructions are executed by a processor, the method described in the first aspect is implemented. step.

With the above technical solutions, the network system access method, device, computer equipment, and readable storage medium provided by this application can read data in the network system as well as the current terminals with intranet domain names and extranet domain names. Compared with the method of fetching or data writing, this application obtains the terminal domain name of the terminal when receiving the access request of the terminal, and when the terminal domain name is an external network domain name, selects the target network system according to the current physical location of the terminal, and closes The write function of the target network system connects the terminal to the target network after the write function is disabled, so that it can be determined whether to enable the write function for the terminal according to the terminal domain name of the terminal, which reduces the risk of data tampering in the network system. Effectively ensure the security and high availability of the network system.

The above description is only an overview of the technical solution of this application. In order to understand the technical means of this application more clearly, it can be implemented in accordance with the content of the specification, and to make the above and other purposes, features and advantages of this application more obvious and understandable. , The following specifically cite the specific implementation of this application.

Description of the drawings

By reading the detailed description of the preferred embodiments below, various other advantages and benefits will become clear to those of ordinary skill in the art. The drawings are only used for the purpose of illustrating the preferred embodiments, and are not considered as a limitation to the application. Also, throughout the drawings, the same reference symbols are used to denote the same components. In the attached picture:

FIG. 1 shows a schematic flowchart of a method for accessing a network system according to an embodiment of the present application;

FIG. 2 shows a schematic flowchart of a method for accessing a network system provided by an embodiment of the present application;

FIG. 3A shows a schematic structural diagram of a network system access device provided by an embodiment of the present application;

FIG. 3B shows a schematic structural diagram of a network system access device provided by an embodiment of the present application;

FIG. 3C shows a schematic structural diagram of a network system access device provided by an embodiment of the present application;

FIG. 3D shows a schematic structural diagram of a network system access device provided by an embodiment of the present application;

FIG. 3E shows a schematic structural diagram of a network system access device provided by an embodiment of the present application;

Fig. 4 shows a schematic structural diagram of a network system access apparatus provided by an embodiment of the present application.

detailed description

Hereinafter, exemplary embodiments of the present application will be described in more detail with reference to the accompanying drawings. Although the drawings show exemplary embodiments of the present application, it should be understood that the present application can be implemented in various forms and should not be limited by the embodiments set forth herein. On the contrary, these embodiments are provided for a more thorough understanding of the application, and to fully convey the scope of the application to those skilled in the art.

The embodiment of the application provides a method for accessing a network system, which can obtain the terminal domain name of the terminal when the terminal's access request is received, and when the terminal domain name is an external network domain name, the target network system is selected according to the current physical location of the terminal , Turn off the write function of the target network system, and connect the terminal to the target network after the write function is turned off, so that it can be determined whether to enable the write function for the terminal according to the terminal domain name of the terminal, which reduces the data in the network system from being tampered with The risk of effectively ensuring the security of the network system and the purpose of high availability, as shown in Figure 1, the method includes:

101. When receiving the access request of the terminal, query the terminal domain name of the terminal according to the terminal identification of the terminal. The terminal domain name indicates the access authority of the terminal to the network system.

In this embodiment of the application, when a terminal's access request is received, in order to determine whether a write function can be provided to the terminal, it is necessary to query the terminal domain name of the terminal according to the terminal identifier of the terminal, and then determine whether to connect the terminal according to the terminal domain name. Which network system to enter.

102. If the terminal domain name is an external network domain name, determine the current physical location of the terminal, select a target network system from at least one preset network system according to the physical location, and the target geographic distance between the target network system and the physical location meets the distance requirement .

In the embodiment of this application, if the domain name of the terminal is an external domain name, it means that the terminal is an external terminal of the enterprise and cannot provide the writing function for the terminal. In order to shorten the time for the terminal to access the network system, it is necessary to determine the current physical location of the terminal According to the physical location, the target network system closest to the terminal is selected from at least one preset network system, so that the terminal can be subsequently connected to the target network system.

103. Turn off the write function of the target network system, and connect the terminal to the target network system.

In the embodiment of this application, since the terminal with the external network domain name indicates that the terminal is a terminal outside the enterprise and cannot provide the terminal with the writing function, therefore, after the target network system is determined, the writing function of the target network system is turned off. And connect the terminal to the target network system with the write function disabled.

The method provided in the embodiment of this application obtains the terminal domain name of the terminal when the terminal's access request is received, and when the terminal domain name is an external network domain name, the target network system is selected according to the current physical location of the terminal, and the target network system is closed. The write function connects the terminal to the target network after the write function is disabled, so that it can be determined whether to enable the write function for the terminal according to the terminal domain name of the terminal, which reduces the risk of data tampering in the network system and effectively guarantees the network System security and high availability.

The embodiment of the application provides a method for accessing a network system, which can obtain the terminal domain name of the terminal when the terminal's access request is received, and when the terminal domain name is an external network domain name, the target network system is selected according to the current physical location of the terminal , Turn off the write function of the target network system, and connect the terminal to the target network after the write function is turned off, so that it can be determined whether to enable the write function for the terminal according to the terminal domain name of the terminal, which reduces the data in the network system from being tampered with The risk of effectively ensuring the security of the network system and the purpose of high availability, as shown in Figure 2, the method includes:

201. When receiving the access request of the terminal, query the terminal domain name of the terminal according to the terminal ID of the terminal. If the terminal domain name is an external domain name, perform the following steps 202 to 204; if the terminal domain name is an intranet domain name, then Perform the following step 205.

In the embodiments of this application, the applicant realizes that there is a difference in the terminal domain name between the terminal used by the staff and the terminal used by external personnel. The terminal domain name can be used to distinguish whether the terminal is an internal terminal or an external terminal. To avoid that the external terminal has too much authority to cause the data in the network system’s database to be insecure, and there is a risk of tampering. When a terminal request for access is detected, the terminal domain name can be used to determine the authority that the terminal can enjoy. Access to different network systems, thereby limiting the terminal's authority to read and write data.

Among them, the terminal domain name corresponding to each terminal can be stored in the database, so that when the terminal requests access, the terminal domain name of the terminal can be directly queried. Considering that the IP (Internet Protocol, interconnection protocol between networks) address of each terminal and the user account used by the user are different, the IP address or user account of the terminal can be used as the terminal identification of the terminal, and When the terminal domain name corresponding to each terminal is stored in the database, the terminal identifier is used for marking. Specifically, when the terminal domain name is stored in the database, the domain name table shown in Table 1 can be generated, and the terminal identification and the terminal domain name are stored based on the domain name table.

Table 1

终端标识Terminal ID	终端域名Terminal domain name
166.111.1.11166.111.1.11	XXX.comXXX.com
166.111.1.12166.111.1.12	yyy.comyyy.com
……	……

Since the terminal domain name is stored in the database, when an access request sent by the terminal is received, the terminal ID of the terminal can be obtained, and the database can be queried according to the terminal ID to obtain the terminal domain name corresponding to the terminal ID, so as to follow The domain name connects the terminal to different network systems. In the actual application process, there may be the case that the terminal domain name of the terminal is not stored in the database, that is, the corresponding terminal domain name cannot be queried in the database according to the terminal ID. In this case, the terminal can be judged according to the terminal ID. The internal terminal is also the external terminal.

Specifically, if the terminal is identified as an IP address, it can be queried whether the IP address is an IP address provided inside the enterprise, and when it is determined that the IP address is an IP address provided inside the enterprise, it is directly determined that the terminal is an internal terminal, that is The terminal domain name of the terminal is the intranet domain name. At this time, in order to directly determine the domain name category of the terminal when the terminal requests access again, the terminal can also be assigned an intranet domain name and the intranet domain name assigned to it The terminal identification corresponding to the terminal is stored in the database. When it is determined that the IP address is not an IP address provided by the enterprise, directly determine that the terminal is an external terminal, that is, the terminal domain name of the terminal is an external network domain name. In this case, the terminal can directly determine the The domain name category of the terminal can also allocate an extranet domain name to the terminal, and store the allocated extranet domain name corresponding to the terminal identification of the terminal in the database.

If the terminal is identified as a user account, you can query whether the user account is an internal company account, and when determining that the user account is an internal company account, directly determine that the terminal is an internal terminal, that is, the terminal domain name of the terminal is an intranet domain name At this time, in order to directly determine the domain name category of the terminal when the terminal requests access again later, an intranet domain name can also be assigned to the terminal, and the assigned intranet domain name and the terminal identification of the terminal can be stored in In the database. When it is determined that the user account is not an internal company account, the terminal is directly determined as an external terminal, that is, the terminal domain name of the terminal is an external domain name. At this time, the domain name of the terminal can be directly determined when the terminal requests access again later Category, it is also possible to assign an extranet domain name to the terminal, and store the assigned extranet domain name corresponding to the terminal identification of the terminal in the database.

By performing the above process, it can be determined whether the terminal domain name of the terminal sending the access request is an intranet domain name or an external domain name. If the terminal domain name is an external domain name, it means that the terminal is not an internal terminal of the enterprise and cannot provide writing for the terminal. Access authority, the terminal needs to be connected to the network system without writing function, that is, the following steps 202 to 204 are executed; if the terminal domain name is an intranet domain name, it means that the terminal is an internal terminal of the enterprise and can be used at the same time If the terminal is provided with a read permission and a write permission, the terminal can be connected to a network system with a read function and a write function, that is, the following step 205 is performed.

202. If the terminal domain name is an external network domain name, locate the terminal according to the terminal identifier, and determine the current physical location of the terminal.

In the embodiments of this application, if the terminal domain name is an external network domain name, it means that the terminal is not an internal terminal of the enterprise and can only provide the terminal with a reading function, that is, the terminal can only read data in the network system. However, it is not possible to modify and write data in the network system. Therefore, it is necessary to determine a target network system that does not have a write function for the terminal, and subsequently connect the terminal to the target network system.

Among them, when determining the network system to be accessed by the terminal, considering that some network systems are far away from the terminal, if the terminal is connected to a network system that is far away, the terminal will waste a lot of data when reading data in the network system. Resources and time, and the workload is also relatively large. Therefore, in order to save resources, time and workload, when determining the target network for the terminal to access, a network system close to it can be determined for the terminal to access. Specifically, the terminal can be located according to the terminal identifier of the terminal, and the physical location of the terminal currently located can be determined, so that the terminal can subsequently determine the network system access nearest to the terminal based on the physical location of the terminal.

203. Obtain at least one preset network system, calculate at least one geographic distance between the at least one network system and the physical location, sort the at least one geographic distance from largest to smallest, obtain a ranking result, and extract the ranking result to be ranked last The geographic distance of the location is taken as the target geographic distance, and the preset network system corresponding to the target geographic distance is taken as the target network system.

In the embodiment of this application, for an enterprise, at least one preset network system will be set up for terminal access. These preset network systems may be in different regions, but at least one preset network system is stored The data is the same. Therefore, after the physical location of the terminal is determined, the at least one geographic distance between the at least one network system and the physical location can be calculated according to the location of the at least one preset network system, and the A geographic distance determines the preset network system closest to the terminal.

Specifically, after calculating at least one geographic distance between at least one network system and the physical location, first, sort the at least one geographic distance from largest to smallest to obtain the ranking result; then, extract the ranking result from the ranking result. The geographic distance of the location is taken as the target geographic distance, and the preset network system corresponding to the target geographic distance is taken as the target network system, that is, the smallest geographic distance among at least one geographic distance is extracted as the target geographic distance, and the preset network system corresponding to the target geographic distance Set the network system as the target network system so that the terminal can be connected to the target network system later. It should be noted that when sorting at least one geographic distance, you can also sort from smallest to largest, and set the top geographic distance as the target geographic distance, as long as the target geographic distance is the smallest of at least one geographic distance. Can be.

204. Turn off the write function of the target network system, and connect the terminal to the target network system.

In the embodiment of this application, after the target network system is determined, since the terminal domain name of the terminal is an external network domain name, the terminal can only read and view data in the target network system data, and the terminal cannot be in the target network system. To write data, therefore, it is necessary to turn off the write function of the target network system, and connect the terminal to the target network system whose write function has been turned off. Among them, when closing the write function of the target network system, firstly, at least one data write interface of the target network system can be determined. Specifically, the data write interface can include a DB (Data Base, database) write interface and Redis ( Key value library) write interface. Subsequently, the determined at least one data writing interface is disabled, so that the writing function of the target network system is closed, and the terminal is connected to the target network system after the at least one data writing interface is disabled.

205. If the terminal domain name is an intranet domain name, determine an intranet network system in at least one preset network, and connect the terminal to the intranet network system.

In the embodiment of this application, if the terminal domain name is an intranet domain name, it means that the terminal is an internal terminal of the enterprise. The terminal can not only read data in the network system, but also write or modify data in the network system. , The network system that the terminal needs to access has both writing and reading functions. In this way, an intranet network system with writing and reading functions is determined in at least one preset network, and the terminal is connected to In the intranet network system, based on the intranet network system, the terminal provides data reading services and data writing services.

In the actual application process, since the terminal with the intranet domain name is allowed to write data in the accessed intranet network system, when receiving the target data written by the terminal based on the intranet network system, it will The received target data can be stored in the intranet network system. Since the data stored in each preset network in at least one preset network are consistent, after storing the target data in the intranet network system, the target data needs to be synchronized to at least one preset network system In order to ensure the consistency of data in at least one preset network system.

Further, as a specific implementation of the method described in FIG. 1, an embodiment of the present application provides a network system access device. As shown in FIG. 3A, the device includes: a query module 301, a first determination module 302, and a shutdown module 303 .

The query module 301 is configured to query the terminal domain name of the terminal according to the terminal identifier of the terminal when an access request of the terminal is received, and the terminal domain name indicates the access authority of the terminal to the network system;

The first determining module 302 is configured to determine the current physical location of the terminal if the terminal domain name is an external network domain name, and select a target network system from at least one preset network system according to the physical location, between the target network system and the physical location The target geographic distance meets the distance requirement;

The closing module 303 is used to close the write function of the target network system and connect the terminal to the target network system.

In a specific application scenario, as shown in FIG. 3B, the first determining module 302 includes: a positioning unit 3021, a calculation unit 3022, a sorting unit 3023, and an extraction unit 3024.

If the terminal domain name is an external network domain name, the positioning unit 3021 locates the terminal according to the terminal identifier and determines the current physical location of the terminal;

The calculation unit 3022 is configured to obtain at least one preset network system, and calculate at least one geographic distance between the at least one network system and the physical location;

The sorting unit 3023 is used to sort at least one geographic distance from large to small to obtain a sorting result;

The extracting unit 3024 is configured to extract the geographic distance ranked last in the ranking result as the target geographic distance, and use the preset network system corresponding to the target geographic distance as the target network system.

In a specific application scenario, as shown in FIG. 3C, the closing module 303 includes a determining unit 3031 and an access unit 3032.

The determining unit 3031 is configured to determine at least one data writing interface of the target network system, the data writing interface includes at least a database DB writing interface and a key-value library Redis writing interface;

The access unit 3032 is configured to disable at least one data writing interface, and connect the terminal to the target network system after the at least one data writing interface is disabled.

In a specific application scenario, as shown in FIG. 3D, the device further includes: a second determining module 304.

The second determining module 304 is configured to determine the intranet network system in at least one preset network if the terminal domain name is an intranet domain name, and connect the terminal to the intranet network system. The intranet network system has the function of writing and reading. Take function.

In a specific application scenario, as shown in FIG. 3E, the device further includes: a receiving module 305 and a synchronization module 306.

The receiving module 305 is configured to store the target data in the intranet network system when receiving the target data written by the terminal based on the intranet network system;

The synchronization module 306 is used to synchronize the target data to at least one preset network system.

The device provided by the embodiment of the present application obtains the terminal domain name of the terminal when receiving the access request of the terminal, and when the terminal domain name is an external network domain name, selects the target network system according to the current physical location of the terminal, and closes the target network system. The write function connects the terminal to the target network after the write function is disabled, so that it can be determined whether to enable the write function for the terminal according to the terminal domain name of the terminal, which reduces the risk of data tampering in the network system and effectively guarantees the network System security and high availability.

It should be noted that, for other corresponding descriptions of the functional units involved in the network system access device provided in the embodiment of the present application, reference may be made to the corresponding descriptions in FIG. 1 and FIG. 2, and details are not repeated here.

In an exemplary embodiment, referring to FIG. 4, a device is also provided. The device 400 includes a communication bus, a processor, a memory, and a communication interface, and may also include an input and output interface, and a display device, wherein one of the functional units The communication between each other can be completed through the bus. The memory stores computer-readable instructions, and the processor is configured to execute the computer-readable instructions stored in the memory, and execute the network system access method in the foregoing embodiment.

A non-volatile readable storage medium has computer readable instructions stored thereon, and when the computer readable instructions are executed by a processor, the steps of the network system access method are realized. Through the description of the above implementation manners, those skilled in the art can clearly understand that this application can be implemented by hardware, or by software plus a necessary general hardware platform. Based on this understanding, the technical solution of this application can be embodied in the form of a software product. The software product can be stored in a non-volatile storage medium (which can be a CD-ROM, U disk, mobile hard disk, etc.), including several The instructions are used to make a computer device (which may be a personal computer, a server, or a network device, etc.) execute the methods described in each implementation scenario of this application.

Those skilled in the art can understand that the accompanying drawings are only schematic diagrams of preferred implementation scenarios, and the modules or processes in the accompanying drawings are not necessarily necessary for implementing this application.

Those skilled in the art can understand that the modules in the device in the implementation scenario can be distributed in the device in the implementation scenario according to the description of the implementation scenario, or can be changed to be located in one or more devices different from the implementation scenario. The modules of the above implementation scenarios can be combined into one module or further divided into multiple sub-modules.

The above serial number of this application is only for description, and does not represent the merits of implementation scenarios.

The above disclosures are only a few specific implementation scenarios of the application, but the application is not limited to these, and any changes that can be thought of by those skilled in the art should fall into the protection scope of the application.

Claims

A method for accessing a network system, characterized in that it comprises:

When receiving the access request of the terminal, query the terminal domain name of the terminal according to the terminal identifier of the terminal, where the terminal domain name indicates the access authority of the terminal to the network system;

If the terminal domain name is an external network domain name, the current physical location of the terminal is determined, and a target network system is selected from at least one preset network system according to the physical location. The target network system is between the target network system and the physical location. The geographic distance between the target meets the distance requirement;

Turn off the write function of the target network system, and connect the terminal to the target network system.
The method according to claim 1, wherein if the terminal domain name is an external network domain name, the physical location of the terminal is determined, and the physical location is selected from at least one preset network system according to the physical location Target network system, including:

If the terminal domain name is an external network domain name, locate the terminal according to the terminal identifier, and determine the physical location where the terminal is currently located;

Acquiring the at least one preset network system, and calculating at least one geographic distance between the at least one network system and the physical location;

Sort the at least one geographic distance from largest to smallest to obtain a ranking result;

The geographic distance ranked last in the ranking result is extracted as the target geographic distance, and a preset network system corresponding to the target geographic distance is used as the target network system.
The method according to claim 1, wherein the turning off the writing function of the target network system and connecting the terminal to the target network system comprises:

Determine at least one data writing interface of the target network system, where the data writing interface includes at least a database DB writing interface and a key-value database Redis writing interface;

Disabling the at least one data writing interface, and connecting the terminal to the target network system after the at least one data writing interface is disabled.
The method according to claim 1, characterized in that, after the terminal domain name of the terminal is inquired according to the terminal identifier of the terminal when the access request of the terminal is received, the method further comprises:

If the terminal domain name is an intranet domain name, an intranet network system is determined in the at least one preset network, the terminal is connected to the intranet network system, and the intranet network system has a writing function and Read function.
The method according to claim 4, wherein the method further comprises:

When receiving the target data written by the terminal based on the intranet network system, storing the target data in the intranet network system;

The target data is synchronized to the at least one preset network system.
A network system access device, characterized in that it comprises:

The query module is configured to query the terminal domain name of the terminal according to the terminal identifier of the terminal when the access request of the terminal is received, and the terminal domain name indicates the access authority of the terminal to the network system;

The first determining module is configured to determine the current physical location of the terminal if the terminal domain name is an external network domain name, and select a target network system from at least one preset network system according to the physical location, and the target network The target geographic distance between the system and the physical location meets the distance requirement;

The closing module is used to close the write function of the target network system and connect the terminal to the target network system.
The device according to claim 6, wherein the first determining module comprises:

A positioning unit, configured to locate the terminal according to the terminal identifier if the terminal domain name is an external network domain name, and determine the physical location where the terminal is currently located;

A calculating unit, configured to obtain the at least one preset network system, and calculate at least one geographic distance between the at least one network system and the physical location;

A sorting unit, configured to sort the at least one geographic distance from large to small to obtain a sorting result;

The extraction unit is configured to extract the geographic distance ranked last in the ranking result as the target geographic distance, and use the preset network system corresponding to the target geographic distance as the target network system.
The device according to claim 6, wherein the closing module comprises:

The determining unit is configured to determine at least one data writing interface of the target network system, the data writing interface includes at least a database DB writing interface and a key-value library Redis writing interface;

The access unit is configured to disable the at least one data writing interface, and connect the terminal to the target network system after the at least one data writing interface is disabled.
The device according to claim 6, wherein the device further comprises:

The second determining module is configured to, if the terminal domain name is an intranet domain name, determine an intranet network system in the at least one preset network, and connect the terminal to the intranet network system, and the intranet The network system has a write function and a read function.
The device according to claim 7, wherein the device further comprises:

A receiving module, configured to store the target data in the intranet network system when the target data written by the terminal based on the intranet network system is received;

The synchronization module is used to synchronize the target data to the at least one preset network system.
A computer device includes a memory and a processor, the memory stores computer-readable instructions, and is characterized in that the method for implementing network system access when the processor executes the computer-readable instructions includes:

When receiving the access request of the terminal, query the terminal domain name of the terminal according to the terminal identification of the terminal. The terminal domain name indicates the access authority of the terminal to the network system; if the terminal domain name is an extranet domain name, then Determine the physical location where the terminal is currently located, select a target network system from at least one preset network system according to the physical location, and the target geographic distance between the target network system and the physical location meets the distance requirement; close all The write function of the target network system connects the terminal to the target network system.
The computer device according to claim 11, wherein if the terminal domain name is an external network domain name, the current physical location of the terminal is determined, and in at least one preset network system according to the physical location Select the target network system, including:

If the terminal domain name is an external network domain name, locate the terminal according to the terminal identifier, and determine the physical location where the terminal is currently located;

Acquiring the at least one preset network system, and calculating at least one geographic distance between the at least one network system and the physical location;

Sort the at least one geographic distance from largest to smallest to obtain a ranking result;

The geographic distance ranked last in the ranking result is extracted as the target geographic distance, and a preset network system corresponding to the target geographic distance is used as the target network system.
The computer device according to claim 11, wherein the closing the write function of the target network system and connecting the terminal to the target network system comprises:

Determine at least one data writing interface of the target network system, where the data writing interface includes at least a database DB writing interface and a key-value database Redis writing interface;

Disabling the at least one data writing interface, and connecting the terminal to the target network system after the at least one data writing interface is disabled.
The computer device according to claim 11, wherein the method further comprises: after the terminal domain name of the terminal is inquired according to the terminal identifier of the terminal when the access request of the terminal is received, the method further comprises:

If the terminal domain name is an intranet domain name, an intranet network system is determined in the at least one preset network, the terminal is connected to the intranet network system, and the intranet network system has a writing function and Read function.
The computer device according to claim 14, wherein the method further comprises:

When receiving the target data written by the terminal based on the intranet network system, storing the target data in the intranet network system;

The target data is synchronized to the at least one preset network system.
A non-volatile readable storage medium having computer readable instructions stored thereon, characterized in that, when the computer readable instructions are executed by a processor, a method for accessing a network system is realized, including:

When receiving the access request of the terminal, query the terminal domain name of the terminal according to the terminal identifier of the terminal, where the terminal domain name indicates the access authority of the terminal to the network system;

If the terminal domain name is an external network domain name, the current physical location of the terminal is determined, and a target network system is selected from at least one preset network system according to the physical location. The target network system is between the target network system and the physical location. The geographic distance between the target meets the distance requirement;

Turn off the write function of the target network system, and connect the terminal to the target network system.
The non-volatile readable storage medium according to claim 16, wherein when an access request of the terminal is received, the terminal domain name of the terminal is queried according to the terminal identification of the terminal, and the terminal domain name indicates The terminal has access to the network system;

If the terminal domain name is an external network domain name, the current physical location of the terminal is determined, and a target network system is selected from at least one preset network system according to the physical location. The target network system is between the target network system and the physical location. The geographic distance between the target meets the distance requirement;

Turn off the write function of the target network system, and connect the terminal to the target network system.
The non-volatile readable storage medium according to claim 16, wherein the closing the write function of the target network system and connecting the terminal to the target network system comprises:

Determine at least one data writing interface of the target network system, where the data writing interface includes at least a database DB writing interface and a key-value database Redis writing interface;

Disabling the at least one data writing interface, and connecting the terminal to the target network system after the at least one data writing interface is disabled.
The non-volatile readable storage medium according to claim 16, wherein when the access request of the terminal is received, after querying the terminal domain name of the terminal according to the terminal identifier of the terminal, the Methods also include:

If the terminal domain name is an intranet domain name, an intranet network system is determined in the at least one preset network, the terminal is connected to the intranet network system, and the intranet network system has a writing function and Read function.
The non-volatile readable storage medium of claim 19, wherein the method further comprises:

When receiving the target data written by the terminal based on the intranet network system, storing the target data in the intranet network system;

The target data is synchronized to the at least one preset network system.