WO2024051195A1 - 数据调用方法、装置、服务网关及存储介质 - Google Patents

数据调用方法、装置、服务网关及存储介质 Download PDF

Info

Publication number
WO2024051195A1
WO2024051195A1 PCT/CN2023/093375 CN2023093375W WO2024051195A1 WO 2024051195 A1 WO2024051195 A1 WO 2024051195A1 CN 2023093375 W CN2023093375 W CN 2023093375W WO 2024051195 A1 WO2024051195 A1 WO 2024051195A1
Authority
WO
WIPO (PCT)
Prior art keywords
target
information
parameter
service
response information
Prior art date
Application number
PCT/CN2023/093375
Other languages
English (en)
French (fr)
Inventor
余靖远
Original Assignee
上海派拉软件股份有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 上海派拉软件股份有限公司 filed Critical 上海派拉软件股份有限公司
Publication of WO2024051195A1 publication Critical patent/WO2024051195A1/zh

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/34—Network arrangements or protocols for supporting network services or applications involving the movement of software or configuration parameters 

Definitions

  • This application relates to the field of network security technology, for example, to a data calling method, device, service gateway and storage medium.
  • APIs application programming interfaces
  • the service gateway acts as an intermediary to assist API calls, and most of the access security and monitoring management functions are concentrated in it.
  • the service gateway of related technologies can uniformly manage non-business functions such as load, caching, routing, access control, service proxy and data monitoring of multiple services. After receiving the user's business request, it can forward it to the corresponding business server. The response generated by the business server is then forwarded to the user.
  • the access authorization and information content management granularity provided by the service gateway of related technologies are all at the API level.
  • different callers call the same API, they often need to wait for a long time if they need to obtain different information. , or the API itself needs to be modified, which reduces the response and processing speed of the service gateway and affects the performance of the service gateway.
  • This application provides a data calling method, device, service gateway and storage medium, which provides users with a response that matches their calling request without modifying the API and business server, improving the response accuracy of data calling. Reduces the complexity of data calls and improves data processing efficiency.
  • a data calling method including:
  • a data calling device including:
  • the information receiving module is configured to forward the received business call request to the target business server, and receive the response information generated by the target business server according to the business call request;
  • the authorization information determination module is configured to determine the target parameter authorization information based on the business call request
  • the information filtering module is configured to filter the response information according to the target parameter authorization information and determine the target response information
  • the target information forwarding module is configured to forward the target response information to the target user corresponding to the business call request.
  • a service gateway including:
  • a memory communicatively connected to at least one processor; wherein,
  • the memory stores a computer program that can be executed by at least one processor, and the computer program is executed by at least one processor, so that at least one processor can execute the data calling method described in any embodiment of the present application.
  • a computer-readable storage medium stores computer instructions.
  • the computer instructions are used to enable the processor to implement a data described in any embodiment of the application when executed. Call method.
  • This application discloses a data calling method, device, service gateway and storage medium.
  • the method includes: forwarding the received business call request to a target business server, and receiving response information generated by the target business server according to the business call request; determining target parameter authorization information according to the business call request; and processing the response information according to the target parameter authorization information. Filter and determine the target response information; forward the target response information to the target user corresponding to the service call request.
  • the service gateway determines the parameter types that the target user corresponding to the service call request can access in the target business server, and then completes in the service gateway the target business server for the business.
  • the business server can It is difficult to provide different information to different customers who access it, which reduces the difficulty of business server configuration in complex situations, improves the response accuracy of data calls, reduces the complexity of data calls, and improves data processing efficiency.
  • Figure 1 is a schematic flow chart of a data calling method provided in Embodiment 1 of the present application.
  • Figure 2 is a schematic flow chart of a data calling method provided in Embodiment 2 of the present application.
  • Figure 3 is a flow example diagram of a data calling method provided in Embodiment 2 of the present application.
  • Figure 4 is a schematic structural diagram of a data calling device provided in Embodiment 3 of the present application.
  • Figure 5 is a schematic structural diagram of a service gateway provided in Embodiment 4 of the present application.
  • Figure 1 is a schematic flow chart of a data calling method provided in Embodiment 1 of the present application. This method is suitable for situations where multiple users with different needs access the same business server. This method can It is executed by a data calling device, where the device can be implemented by software and/or hardware, and is generally integrated on a service gateway.
  • the service gateway includes, for example, a kong gateway.
  • a data calling method provided by Embodiment 1 of the present application includes the following steps:
  • a service call request can be understood as a request message sent by a user terminal to call information required by the service, where the user terminal can be an application program, such as Xiaohongshu, etc.
  • the target business server can be understood as a high-performance computer that can provide corresponding business services according to the business call request submitted by the user, and has the ability to undertake services and guarantee services.
  • the response information can be understood as the message content fed back by the business server after receiving the business call request based on the pre-configured API.
  • the response information includes all parameter types returned by the target business server.
  • parameter types can be understood as parameter names of various categories defined in the business server.
  • the Parameters can include information such as residents’ names, ages, ID numbers, residential addresses, and whether they are resident, and data of different parameter types can be saved in different data types.
  • the parameter type is name, its value in the target business server
  • the data storage format can be string type, etc.
  • the service gateway when the service gateway receives a service call request sent by a user, it determines a target business server that corresponds to the service call request and can provide corresponding services among the multiple business servers connected to it, and transfers the service to the service gateway.
  • the call request is forwarded to the target business server.
  • it receives response information of all parameter types fed back by the target business server according to the pre-configured API after receiving the business call request.
  • the target business server after receiving the service call request, the target business server will send all the configured parameter type data to the service gateway as response information according to the pre-configured API. There is no need to configure the target business server itself. After modification, there is no need to set up corresponding business servers separately for users who make different business call requests, which reduces the difficulty of configuring the business server and reduces the cost of data calling.
  • the target parameter authorization information can be understood as the parameter type set in the service gateway to indicate the data type that the target business server can provide for the user.
  • the service gateway determines the parameter type that the user can access in the security service server based on the service call request issued by the user, and determines the parameter type as the target parameter authorization information.
  • the target business server is a server in the public security system that stores information about residents within its jurisdiction, it can provide external information such as residents' names, ages, genders, ID numbers, residential addresses, and whether they are resident or not.
  • the target business server can provide external information such as residents' names, ages, genders, ID numbers, residential addresses, and whether they are resident or not.
  • the user sends Only two pieces of information, the resident's name and gender, need to be called in the business call request, and the two pieces of information that need to be called are included in the parameter types that can be provided by the target business server.
  • the parameter types corresponding to the name and gender can be determined as the business.
  • the target parameter authorization information corresponding to the call request can be determined as the business.
  • the target response information can be understood as the information corresponding to the parameter type that the user needs to access. It is retained after filtering by the service gateway and only contains response information that is consistent with the parameter type data in the target parameter authorization information.
  • the service gateway filters all the information returned by the business server according to the parameter type included in the target parameter authorization information, and determines the information corresponding to the parameter type that the user needs to access as the target response information.
  • the service gateway obtains all the returned residents' names, ages, genders, ID numbers, residential addresses, and whether they are resident from the target business server, and filters out the information contained in the target parameter authorization information from this information. Resident name and gender type information, and determine the data in the above type of information as target response information, such as (Zhang San, male), (Wang Yi, female), etc.
  • the target user can be understood as an application that issues a service call request, for example, Xiaohongshu, etc.
  • the service gateway determines the application that sent the service call request as the target user, and forwards the filtered target response information to the target user to provide the target user with the service call request through the service call request. Called business information.
  • the technical solution of this embodiment is to determine the parameter types that the target user corresponding to the service call request can access in the target business server based on the received business call request in the service gateway, and then complete the call to the target business server in the service gateway. Filtering the response information returned by the business call request so that the target user can only obtain the information that can be accessed by the target business server in the response information. It solves the problem that the service gateway of related technologies is difficult to filter the response information provided by the business server, and the business server cannot provide different information to different customers who access it without transforming the business server itself. This reduces the problem of the business server in complex situations. Configuration difficulty improves the response accuracy of data calls, reduces the complexity of data calls, and improves data processing efficiency.
  • Figure 2 is a schematic flow chart of a data calling method provided in Embodiment 2 of the present application.
  • Embodiment 2 is optimized on the basis of the above embodiments.
  • the determination is made based on the parameter definition information.
  • the parameter type returned by at least one business server determines the accessible parameter type of at least one user in each accessible business server based on the parameter authorization information; then determines the target business server based on the received business call request, and determines the target business server based on the pre-stored Use the configuration data to authenticate the business call request; then determine the target user according to the business call request, and determine the accessible parameter type corresponding to the target user as the target parameter authorization information; finally, based on the accessible parameter type, the response header of the response information Filter the parameter types in the response body, and determine the information composed of the filtered response header and response body as the target response information.
  • the return parameter type By defining the return parameter type in advance in the service gateway for the business server connected to it, and at the same time defining the parameter types accessible to users who access the business server through it, after receiving the business call request, the return parameter type can be defined based on The configuration filters the response information returned by the target business server for the business call request without reconfiguring the target business server. This ensures the accuracy of access to the target user's business call request and reduces the complexity of data calls. It improves data processing efficiency and reduces the cost of data calls by different users to the same business server.
  • a data calling method provided by Embodiment 2 of the present application includes the following steps:
  • the parameter definition information can be understood as information used to define the parameter types that the business server accessing the service gateway can return to the service gateway.
  • the parameter definition information is not specific data information, but Refers to the parameter types included in the business server and the data storage form corresponding to each parameter type. For example, if the parameter type is name, the data of this parameter type can be stored as String type, etc.
  • Parameter authorization information can be understood as information that defines the parameter types that users who make business call requests can access in different APIs. APIs are used to provide user programs and developers with access to a set of routines based on certain software or hardware. capabilities without requiring access to source code or understanding the details of the inner workings of predefined functions.
  • a service gateway can be connected to multiple APIs at the same time, each API corresponds to a business server, and each business server has its own parameter type that it can provide.
  • parameter definition information used to define the parameter types that can return information to the API connected to it is obtained, and users who make business calls through it are obtained.
  • Parameter authorization information defined for different business server accessible parameter types.
  • the service gateway determines the corresponding business server based on the parameter definition information, and
  • the parameter type contained in the parameter definition information is determined as the parameter type of the response information that the business server can send to the service gateway.
  • the number of parameter definition information can be one or more, and can be performed separately for different business servers. Definition of response message parameter types.
  • S203 Determine the accessible parameter type in each accessible business server of at least one user according to the parameter authorization information.
  • accessible parameter types can be understood as parameter types that can be accessed by users among the parameter types to which data returned by all business servers belong.
  • the parameter type is name and gender, then name and gender are the accessible parameter types of the user in the Public Security Bureau storage system.
  • the service gateway determines the business servers accessible to the user, and determines the parameter types that can be obtained in the accessible business servers as the accessible parameter types.
  • the parameter definition of the business server and user parameter authorization can be directly performed in the service gateway, or the parameter authorization function can be expanded based on the API management platform of related technologies.
  • an API that requires parameter authorization can be registered in the API management platform, the parameter types that can be fed back to the service gateway are defined, the parameter list of the API is determined based on all the parameter types that can be fed back, and the parameter list can be determined in the API management platform.
  • Users (subscribers) who access the API perform parameter authorization, select the parameters that the user is authorized to access from the API parameter list, and then the API management platform generates authorization information and synchronizes the information to the service gateway.
  • the API management platform can generate a JSON type authorization file and synchronize it to the service gateway.
  • the API management platform that is, the gateway formatting platform, is an external gateway platform that can be accessed through the API management platform. Configure parameters directly on the service gateway.
  • forwarding the received business call request to the target business server including: determining the target business server based on the received business call request, and authenticating the business call request based on pre-stored configuration data; when the identity verification is When passed, the business call request is forwarded to the target business server.
  • the configuration data can be understood as identity verification information used to verify whether the user can access the business server. It can be configured together when configuring the parameter authorization information, or it can be configured in advance.
  • the service gateway when it receives a business call request sent by a user, it obtains the configuration data configured by the API development platform from the database, including the configuration data of the business server accessible to the user, and uses The configuration data authenticates the user who issues the business call request. When the identity verification is passed, the corresponding business call request is forwarded to the target business server, ensuring the security of the data call.
  • the service gateway determines the user who issued the service invocation request based on the information contained in the received service invocation request, and determines the user as the target user.
  • the service gateway After determining the target user who issued the service call request, the service gateway searches for the accessible parameter type corresponding to the target user in the database, and determines the accessible parameter type as the target parameter authorization information.
  • the accessible parameter type included in the target parameter authorization information is compared with the parameter type included in the response information returned by the target business server to the service gateway, and the parameter type in the response information is the data of the accessible parameter type. , determined as the target response information.
  • determining the information in the response information whose parameter type is the same as the accessible parameter type as the target response information includes: filtering the parameter types in the response header and response body of the response information according to the accessible parameter type; The information composed of the filtered response header and response body is determined as the target response information.
  • the response information includes a response header and a response body.
  • the response header can be understood as the part of the response information that carries specific response parameters and is passed to the user who issued the service call request.
  • the response body can be understood as the part used to store the data information that needs to be returned to the user.
  • the service gateway filters the parameter types in the response header of the response information based on the determined accessible parameter types, retains only the parameter types in the response header that are the same as the accessible parameter types, and retains the same parameter types in the response body. For information with the same parameter type in the response header, the information composed of the filtered response header and response body is determined as the target response information.
  • Figure 3 is a flow example diagram of a data calling method provided in Embodiment 2 of the present application.
  • the process includes the following processes: 1) Through The API management platform authorizes the APIs managed by the Kong gateway and the applications that can access the API through the Kong gateway; 2) Generate the corresponding configuration information through the API gateway management part and send the configuration information to the API ACL plug-in in the Kong gateway , to complete the configuration of the Kong gateway; 3) The Kong gateway will be configured with parameter permission information to indicate the type of parameters accessible to the application.
  • the user When the user needs to request an application, it initiates API call information to the Kong gateway, which is the business call request in the embodiment of this application; 5) The Kong gateway pre-configured in it Configuration information, whether the API call information can be used to authenticate the corresponding API call; 6) After the authentication is passed, the corresponding API call information is forwarded to the corresponding business server, and the business server receives the API call request for the API call.
  • a database such as PostgreSQL
  • the API ACL plug-in determines the parameter types accessible to the API call information based on the configuration information, and filters the response information given by the business server based on the determined parameter types, and filters out the response information that should not be provided to
  • the user's information is stored in the database through cache (such as Cache); 8)
  • the Kong gateway transmits the filtered response information that can be provided to the user to the application that initiated the API call information to complete the data call process.
  • the technical solution of this embodiment is to define the return parameter type of the business server accessed in the service gateway in advance, and at the same time define the parameter type accessible to the user who accesses the business server through it, so that when receiving After the business call request is made, the response information returned by the target business server for the business call request can be filtered based on the configuration, without reconfiguring the target business server. This ensures the accuracy of access to the target user's business call request, while reducing It reduces the complexity of data calls, improves data processing efficiency, and reduces the cost of data calls by different users to the same business server.
  • FIG 4 is a schematic structural diagram of a data calling device provided in Embodiment 3 of the present application.
  • the data calling device includes: an information receiving module 310, an authorization information determining module 320, an information filtering module 330 and a target information forwarding module 340.
  • the information receiving module 310 is configured to forward the received business call request to the target business server, and receive the response information generated by the target business server according to the business call request;
  • the authorization information determination module 320 is configured to determine the target according to the business call request.
  • the information filtering module 330 is configured to filter the response information according to the target parameter authorization information and determine the target response information;
  • the target information forwarding module 340 is configured to forward the target response information to the target user corresponding to the service call request.
  • the technical solution of this embodiment is to determine the parameter types that the target user corresponding to the service call request can access in the target business server based on the received business call request, and then complete the target business server in the service gateway.
  • the filtering of the response information returned by the business call request allows the target user to obtain only the information that can be accessed by the target business server in the response information. solved It is difficult for the service gateway of related technologies to filter the response information provided by the business server.
  • the business server cannot provide different information to different customers who access it without transforming the business server itself, which reduces the difficulty of configuring the business server in complex situations. , improves the response accuracy of data calls, reduces the complexity of data calls, and improves data processing efficiency.
  • the response information includes all parameter types returned by the target business server.
  • the data calling device also includes:
  • the parameter configuration module is configured to obtain parameter definition information and parameter authorization information before forwarding the received business call request to the target business server; determine the parameter type returned by at least one business server based on the parameter definition information; determine at least one parameter type returned by the business server based on the parameter authorization information.
  • the authorization information determination module 320 includes:
  • the target user determination unit is configured to determine the target user based on the service call request.
  • the authorization information determining unit is configured to determine the accessible parameter type corresponding to the target user as the target parameter authorization information.
  • the information filtering module 330 is configured to filter the response information according to the target parameter authorization information and determine the target response information in the following manner: determine the information in the response information whose parameter type is the same as the accessible parameter type as the target response information. .
  • determine the information in the response information whose parameter type is the same as the accessible parameter type as the target response information including:
  • the information composed of the filtered response header and response body is determined as the target response information.
  • information receiving module 310 includes:
  • An identity verification unit configured to determine the target business server based on the received business call request, and authenticate the business call request based on pre-stored configuration data
  • the request forwarding unit is configured to forward the business call request to the target business server when the identity authentication is passed.
  • the data calling device provided by the embodiments of this application can execute the data calling method provided by any embodiment of this application, and has the corresponding functional modules and beneficial effects of the execution method.
  • FIG. 5 is a schematic structural diagram of a service gateway provided in Embodiment 4 of the present application. It is intended to refer to various forms of digital computers, such as laptops, desktop computers, workstations, personal digital assistants, servers, blade servers, mainframe computers, and other suitable computers. Services gateways may also represent various forms of mobile devices, such as personal digital assistants, cellular phones, smart phones, wearable devices (eg, helmets, glasses, watches, etc.), and other similar computing devices. The components shown herein, their connections and relationships, and their functions are examples only.
  • the service gateway 40 includes at least one processor 41, and a memory communicatively connected to the at least one processor 41, such as a read-only memory (Read Only Memory, ROM) 42, a random access memory (Random Access Memory, RAM). ) 43, etc., wherein the memory stores a computer program that can be executed by at least one processor, and the processor 41 can load it into a random access memory (RAM) according to the computer program stored in the read-only memory (ROM) 42 or from the storage unit 48 )43 to perform various appropriate actions and processes. In the RAM 43, various programs and data required for the operation of the service gateway 40 can also be stored.
  • the processor 41, ROM 42 and RAM 43 are connected to each other through a bus 44.
  • An input/output (I/O) interface 45 is also connected to the bus 44 .
  • the I/O interface 45 Multiple components in the service gateway 40 are connected to the I/O interface 45, including: input unit 46, such as keyboard, mouse, etc.; output unit 47, such as various types of displays, speakers, etc.; storage unit 48, such as magnetic disk, optical disk etc.; and communication unit 49, such as network card, modem, wireless communication transceiver, etc.
  • the communication unit 49 allows the service gateway 40 to exchange information/data with other devices through computer networks such as the Internet and/or various telecommunications networks.
  • Processor 41 may be a variety of general and/or special purpose processing components having processing and computing capabilities. Some examples of the processor 41 may include a central processing unit (Central Processing Unit, CPU), a graphics processing unit (Graphic Processing Unit, GPU), various dedicated artificial intelligence (Artificial Intelligence, AI) computing chips, various types of running machine learning Model algorithm processor, digital signal processor (Digital Signal Processing, DSP), and appropriate processors, controllers, microcontrollers, etc.
  • the processor 41 performs various methods and processes described above, such as data calling methods.
  • the data calling method may be implemented as a computer program, which is tangibly embodied in a computer-readable storage medium, such as storage unit 48.
  • part or all of the computer program may be loaded and/or installed onto the service gateway 40 via the ROM 42 and/or the communication unit 49.
  • the processor 41 may be configured to perform the data calling method in other suitable ways (eg, by means of firmware).
  • Various implementations of the systems and techniques described above may be implemented in digital electronic circuit systems, integrated circuit systems, Field-Programmable Gate Arrays (FPGAs), Application Specific Integrated Circuits (ASICs) , special standard products (Application Specific Standard Parts, ASSP), System on Chip (SOC), Complex Programmable Logic Device (CPLD), computer hardware, firmware, software, and/or combinations thereof accomplish.
  • FPGAs Field-Programmable Gate Arrays
  • ASICs Application Specific Integrated Circuits
  • ASSP Application Specific Standard Parts
  • SOC System on Chip
  • CPLD Complex Programmable Logic Device
  • These various embodiments may include implementation in one or more computer programs executable and/or interpreted on a programmable system including at least one programmable processor, the programmable processor
  • the processor which may be a special purpose or general purpose programmable processor, may receive data and instructions from a storage system, at least one input device, and at least one output device, and transmit data and instructions to the storage system, the at least one input device, and the at least one output device.
  • An output device may be a special purpose or general purpose programmable processor, may receive data and instructions from a storage system, at least one input device, and at least one output device, and transmit data and instructions to the storage system, the at least one input device, and the at least one output device.
  • An output device may be a special purpose or general purpose programmable processor, may receive data and instructions from a storage system, at least one input device, and at least one output device, and transmit data and instructions to the storage system, the at least one input device, and the at least one output device.
  • Computer programs for implementing the methods of the present application may be written in any combination of one or more programming languages. These computer programs may be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device, such that the computer program, when executed by the processor, causes the functions/operations specified in the flowcharts and/or block diagrams to be implemented.
  • a computer program may execute entirely on the machine, partly on the machine, as a stand-alone software package, partly on the machine and partly on a remote machine or entirely on the remote machine or server.
  • a computer-readable storage medium may be a tangible medium that may contain or store a computer program for use by or in connection with an instruction execution system, apparatus, or device.
  • Computer-readable storage media may include electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, devices or devices, or any suitable combination of the foregoing.
  • the computer-readable storage medium may be a machine-readable signal medium.
  • machine-readable storage media would include one or more wire-based electrical connections, laptop disks, hard drives, random access memory (RAM), read only memory (ROM), erasable programmable read only memory (Electronic Programable Read Only Memory, EPROM) or flash memory, optical fiber, portable compact disk read-only memory (Compact Disc-Read Only Memory, CD-ROM), optical storage device, magnetic storage device, or a suitable combination of the above .
  • RAM random access memory
  • ROM read only memory
  • EPROM erasable programmable read only memory
  • flash memory optical fiber
  • portable compact disk read-only memory Compact Disc-Read Only Memory
  • CD-ROM Compact Disc-Read Only Memory
  • magnetic storage device or a suitable combination of the above .
  • a service gateway having: a display device (e.g., a cathode ray tube (CRT) or liquid crystal) for displaying information to the user A display (Liquid Crystal Display, LCD) or monitor); and a keyboard and pointing device (e.g., mouse or trackball) through which a user can provide input to the service gateway.
  • a display device e.g., a cathode ray tube (CRT) or liquid crystal
  • LCD Liquid Crystal Display
  • keyboard and pointing device e.g., mouse or trackball
  • Other kinds of devices may also be used to provide interaction with the user; for example, the feedback provided to the user may be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and may be provided in any form, including Acoustic input, voice input or tactile input) to receive input from the user.
  • the systems and techniques described herein may be implemented on a computing system that includes backend components (e.g., as a data server), or a computing system that includes middleware components (e.g., an application server), or or a computing system that includes front-end components (e.g., a user's computer having a graphical user interface or web browser through which the user can interact with implementations of the systems and techniques described herein), or A computing system that includes any combination of such backend components, middleware components, or front-end components.
  • the components of the system may be interconnected by any form or medium of digital data communication (eg, a communications network). Examples of communication networks include: Local Area Network (LAN), Wide Area Network (WAN), blockchain network, and the Internet.
  • Computing systems may include clients and servers.
  • Clients and servers are generally remote from each other and typically interact over a communications network.
  • the relationship of client and server is created by computer programs running on corresponding computers and having a client-server relationship with each other.
  • the server can be a cloud server, also known as cloud computing server or cloud host. It is a host product in the cloud computing service system to solve the problems of difficult management and weak business scalability in traditional physical hosts and VPS services. defect.

Abstract

本申请公开了一种数据调用、方法、服务网关及存储介质。该方法包括：将接收到的业务调用请求转发至目标业务服务器，并接收目标业务服务器根据业务调用请求产生的响应信息；根据业务调用请求确定目标参数授权信息；根据目标参数授权信息对响应信息进行过滤，确定目标响应信息；将目标响应信息转发给业务调用请求对应的目标用户。

Description

数据调用方法、装置、服务网关及存储介质
本公开要求在2022年9月8日提交中国专利局、申请号为202211100673.5的中国专利申请的优先权，该申请的全部内容通过引用结合在本申请中。
技术领域
本申请涉及网络安全技术领域，例如涉及一种数据调用方法、装置、服务网关及存储介质。
背景技术
随着互联网和物联网等快速发展，网络安全逐渐成为事关国家安全和国家发展，以及广大人民群众工作生活的重大战略问题。在云时代，数据和信息大多存储于云上，通过应用程序接口(Application Programming Interface，API)暴露出来，因此API作为信息和数据的核心通道，是网络安全保护的重点。
而随着网络业务量和互联网用户的大幅增长，软件架构逐渐向分布式和微服务的道路演进。急剧增加的服务数量，使得为每个服务提供单独的安全相关功能的成本变得无法接受，服务网关则作为一个协助API调用的中介者，大多数访问安全和监控管理的功能都集中在其中。相关技术的服务网关可统一管理多个服务的负载、缓存、路由、访问控制、服务代理和数据监控等非业务功能，在接收到用户的业务请求后，可将其转发至对应的业务服务器，然后将业务服务器产生的响应转发给用户。
然而，相关技术的服务网关所提供的访问授权和信息内容的管理粒度均位于API层面，在不同的调用者对同一API进行调用时，如需获取不同的信息，常需花费较长的等待时间，或需对API本身进行改造，降低了服务网关响应及处理的速度，影响了服务网关的性能。
发明内容
本申请提供了一种数据调用方法、装置、服务网关及存储介质，在无需对API及业务服务器进行修改的基础上，为用户提供与其调用请求相匹配的响应，提升了数据调用的响应精度，减少了数据调用的复杂程度，提升数据处理效率。
根据本申请的一方面，提供了一种数据调用方法，包括：
将接收到的业务调用请求转发至目标业务服务器，并接收目标业务服务器根据业务调用请求产生的响应信息；
根据业务调用请求确定目标参数授权信息；
根据目标参数授权信息对响应信息进行过滤，确定目标响应信息；
将目标响应信息转发给业务调用请求对应的目标用户。
根据本申请的另一方面，提供了一种数据调用装置，包括：
信息接收模块，设置为将接收到的业务调用请求转发至目标业务服务器，并接收目标业务服务器根据业务调用请求产生的响应信息；
授权信息确定模块，设置为根据业务调用请求确定目标参数授权信息；
信息过滤模块，设置为根据目标参数授权信息对响应信息进行过滤，确定目标响应信息；
目标信息转发模块，设置为将目标响应信息转发给业务调用请求对应的目标用户。
根据本申请的另一方面，提供了一种服务网关，包括：
至少一个处理器；以及
与至少一个处理器通信连接的存储器；其中，
存储器存储有可被至少一个处理器执行的计算机程序，计算机程序被至少一个处理器执行，以使至少一个处理器能够执行本申请任一实施例所述的数据调用方法。
根据本申请的另一方面，提供了一种计算机可读存储介质，计算机可读存储介质存储有计算机指令，计算机指令用于使处理器执行时实现本申请任一实施例所述的一种数据调用方法。
本申请公开了一种数据调用方法、装置、服务网关及存储介质。该方法包括：将接收到的业务调用请求转发至目标业务服务器，并接收目标业务服务器根据业务调用请求产生的响应信息；根据业务调用请求确定目标参数授权信息；根据目标参数授权信息对响应信息进行过滤，确定目标响应信息；将目标响应信息转发给所述业务调用请求对应的目标用户。通过采用上述技术方案，在服务网关中依据接收到的业务调用请求，确定该业务调用请求对应的目标用户可在目标业务服务器中访问的参数类型，进而在业务网关中完成对目标业务服务器针对业务调用请求返回的响应信息的过滤，使得目标用户仅能得到目标业务服务器响应信息中可被其访问的信息。解决了相关技术的服务网关难以针对业务服务器提供的响应信息进行过滤，业务服务器在不对其本身进行改造情况下， 难以为访问其的不同客户提供不同信息的问题，减少了针对复杂情况下业务服务器配置难度，提升了数据调用的响应精度，减少了数据调用的复杂程度，提升数据处理效率。
附图说明
为了说明本申请实施例中的技术方案，下面将对实施例描述中所需要使用的附图作介绍，下面描述中的附图仅仅是本申请的一些实施例，对于本领域普通技术人员来讲，在不付出创造性劳动的前提下，还可以根据这些附图获得其他的附图。
图1是本申请实施例一提供的一种数据调用方法的流程示意图；
图2是本申请实施例二提供的一种数据调用方法的流程示意图；
图3是本申请实施例二提供的一种数据调用方法的流程示例图；
图4是本申请实施例三提供的一种数据调用装置的结构示意图；
图5是本申请实施例四提供的服务网关的结构示意图。
具体实施方式
为了使本技术领域的人员理解本申请方案，下面将结合本申请实施例中的附图，对本申请实施例中的技术方案进行描述，所描述的实施例仅仅是本申请一部分的实施例，而不是全部的实施例。基于本申请中的实施例，本领域普通技术人员在没有做出创造性劳动前提下所获得的所有其他实施例，都应当属于本申请保护的范围。
需要说明的是，本申请的说明书和权利要求书及上述附图中的术语“第一”、“第二”等是用于区别类似的对象，而不必用于描述特定的顺序或先后次序。应该理解这样使用的数据在适当情况下可以互换，以便这里描述的本申请的实施例能够以除了在这里图示或描述的那些以外的顺序实施。此外，术语“包括”和“具有”以及他们的任何变形，意图在于覆盖不排他的包含，例如，包含了一系列步骤或单元的过程、方法、系统、产品或设备不必限于列出的那些步骤或单元，而是可包括没有列出的或对于这些过程、方法、产品或设备固有的其它步骤或单元。
实施例一
图1为本申请实施例一提供的一种数据调用方法的流程示意图，该方法适用于多个具有不同需求用户针对同一业务服务器进行访问的情况，该方法可以 由数据调用装置来执行，其中该装置可以由软件和/或硬件实现，并一般集成在服务网关上，在本实施例中，服务网关例如包括：kong网关。
如图1所示，本申请实施例一提供的一种数据调用方法，包括如下步骤：
S101、将接收到的业务调用请求转发至目标业务服务器，并接收目标业务服务器根据业务调用请求产生的响应信息。
在本实施例中，业务调用请求可以理解为由用户端发出的，对其业务所需求信息进行调用的请求信息，其中用户端可以为应用程序，如小红书等。目标业务服务器可以理解为能够根据用户端提交的业务调用请求，提供相应的业务服务，具有承担服务并且保障服务的能力的高性能计算机。响应信息可以理解为业务服务器根据预先进行的API配置，在接收到业务调用请求后反馈的消息内容。
其中，响应信息中包括目标业务服务器返回的所有参数类型。
在本实施例中，参数类型可以理解为业务服务器中定义的多种不同类别的参数名称，示例性的，若目标业务服务器为公安系统中用以保存辖区内居民信息的服务器，则其中定义的参数可包括居民姓名、年龄、身份证号码、居住地址以及常驻与否等信息，且不同参数类型的数据可以不同的数据类型进行保存，如参数类型为姓名时，其在目标业务服务器中的数据存储形式可为string类型等。
示例性的，在服务网关接收到由用户发送的业务调用请求时，在与其连接的多个业务服务器中确定与业务调用请求相对应的，可为其提供相应服务的目标业务服务器，并将业务调用请求转发至目标业务服务器。同时接收目标业务服务器在接收到业务调用请求后根据预先进行的API配置，反馈的所有参数类型的响应信息。
在本申请实施例中，目标业务服务器在接收到业务调用请求后，会根据预先进行的API配置，将配置的所有参数类型的数据均作为响应信息发送至服务网关，无需对目标业务服务器自身配置进行修改，也无需为提出不同业务调用请求的用户单独设置对应的业务服务器，降低了业务服务器的配置难度，降低了数据调用成本。
S102、根据业务调用请求确定目标参数授权信息。
在本实施例中，目标参数授权信息可以理解为服务网关中设置的，用以表明目标业务服务器可为用户提供的数据的参数类型。
示例性的，服务网关根据用户发出的业务调用请求，确定该用户可以在密保业务服务器中访问的参数类型，并将该参数类型确定为目标参数授权信息。
示例性的，假设目标业务服务器为公安系统中用以保存辖区内居民信息的服务器，可以对外提供居民姓名、年龄、性别、身份证号码、居住地址以及常驻与否等信息，用户在发出的业务调用请求中仅需调用居民姓名和性别两项信息，且需调用的两项信息包含于目标业务服务器可提供的参数类型中，此时可将姓名和性别对应的参数类型，确定为该业务调用请求对应的目标参数授权信息。
S103、根据目标参数授权信息对响应信息进行过滤，确定目标响应信息。
在本实施例中，目标响应信息可以理解为用户需要访问的参数类型所对应的信息，是经服务网关过滤后保留的，仅包含与目标参数授权信息中一致参数类型数据的响应信息。
示例性的，服务网关根据目标参数授权信息中包含的参数类型对业务服务器返回的所有信息进行过滤，将其中与用户需要访问的参数类型所对应的信息确定为目标响应信息。
接上述示例，服务网关由目标业务服务器中获取返回的所有居民姓名、年龄、性别、身份证号码、居住地址以及常驻与否等信息，并从这些信息中筛选出目标参数授权信息中包含的居民姓名及性别类型的信息，并将上述类型的信息中的数据确定为目标响应信息，如(张三，男)，(王怡，女)等。
S104、将目标响应信息转发给业务调用请求对应的目标用户。
在本实施例中，目标用户可以理解为发出业务调用请求的应用，例如，小红书等。
示例性的，服务网关根据接收到业务调用请求，将发送该业务调用请求的应用确定为目标用户，并将筛选后所得的目标响应信息转发至目标用户处，以为目标用户提供其通过业务调用请求调用的业务信息。
本实施例的技术方案，通过在服务网关中依据接收到的业务调用请求，确定该业务调用请求对应的目标用户可在目标业务服务器中访问的参数类型，进而在业务网关中完成对目标业务服务器针对业务调用请求返回的响应信息的过滤，使得目标用户仅能得到目标业务服务器响应信息中可被其访问的信息。解决了相关技术的服务网关难以针对业务服务器提供的响应信息进行过滤，业务服务器在不对其本身进行改造情况下，难以为访问其的不同客户提供不同信息的问题，减少了针对复杂情况下业务服务器配置难度，提升了数据调用的响应精度，减少了数据调用的复杂程度，提升数据处理效率。
实施例二
图2为本申请实施例二提供的一种数据调用方法的流程示意图，本实施例二在上述各实施例的基础上进行优化，通过首先获取参数定义信息和参数授权信息，根据参数定义信息确定至少一个业务服务器返回的参数类型，根据参数授权信息确定至少一个用户，在可访问的每个业务服务器中的可访问参数类型；然后根据接收到的业务调用请求确定目标业务服务器，并根据预存储的配置数据对业务调用请求进行身份验证；之后根据业务调用请求确定目标用户，将目标用户对应的可访问参数类型，确定为目标参数授权信息；最后根据可访问参数类型，对响应信息的响应头和响应体中的参数类型进行筛选，将筛选后的响应头和响应体构成的信息，确定为目标响应信息。通过预先在服务网关中对接入其中的业务服务器进行返回参数类型的定义，同时在其中对通过其访问业务服务器的用户可访问的参数类型进行定义，使得在接收到业务调用请求后，可依据配置情况对目标业务服务器针对业务调用请求返回的响应信息的过滤，而无需对目标业务服务器进行重配置，在保证了对目标用户业务调用请求的访问精度的同时，降低了数据调用的复杂度，提升了数据处理效率，降低了不同用户对同一业务服务器进行数据调用的成本。
如图2所示，本申请实施例二提供的一种数据调用方法，包括如下步骤：
S201、获取参数定义信息和参数授权信息。
在本实施例中，参数定义信息可以理解为用于对接入服务网关的业务服务器可向服务网关返回信息的参数类型进行定义的信息，其中，参数定义信息并不是具体的数据信息，而是指业务服务器中包含的参数类型以及各个参数类型对应的数据存储形式，例如，参数类型为姓名，该参数类型的数据可存储为String类型等。参数授权信息可以理解为定义发出业务调用请求的用户在不同API中可访问的参数类型的信息，其中，API是用来提供用户程序与开发人员基于某软件或者某硬件得以访问一组例程的能力，并且无需访问源码或无需理解内部工作机制细节的预先定义函数。
在本实施例中，一个服务网关可以同时与多个API连接，每个API对应一个业务服务器，每个业务服务器均具有自己可以提供的参数类型。
示例性的，在服务网关未投入使用时，或在使用过程中，获取用以对与其连接的API可返回信息的参数类型进行定义的参数定义信息，并获取对通过其进行业务调用的用户，针对不同业务服务器可访问参数类型进行定义的参数授权信息。
S202、根据参数定义信息确定至少一个业务服务器返回的参数类型。
示例性的，服务网关根据参数定义信息确定与其对应的业务服务器，并将 该参数定义信息中包含的参数类型，确定为该业务服务器可向服务网关发送的响应信息的参数类型，其中，参数定义信息的个数可为一个或多个，可分别针对不同的业务服务器进行响应信息参数类型的定义。
S203、根据参数授权信息确定至少一个用户，在可访问的每个业务服务器中的可访问参数类型。
本实施例中，可访问参数类型可以理解为在所有业务服务器返回的数据所属的参数类型中，可以被用户访问的参数类型，例如，在公安局数据存储系统作为业务服务器时，用户能够访问其中的参数类型为姓名和性别，则姓名和性别即为该用户在公安局存储系统中的可访问参数类型。
示例性的，根据不同用户对应的参数授权信息，在服务网关中确定该用户可访问的业务服务器，并将其对在可访问业务服务器中可进行获取的参数类型确定为可访问参数类型。
针对如S201-S203的步骤，可直接在服务网关中进行业务服务器的参数定义，以及用户的参数授权，也可基于相关技术的API管理平台进行参数授权功能的扩展。示例性的，可在API管理平台中注册需要参数授权的API，对其可反馈至服务网关的参数类型进行定义，根据所有可反馈的参数类型确定该API的参数列表，并在API管理平台可对该API进行访问的用户(订阅者)进行参数授权，从API参数列表选择用户可被授权访问的参数，进而由API管理平台生成授权信息，并将信息同步至服务网关。可选的，API管理平台可通过生成JSON类型的授权文件，将其同步至服务网关中，其中，API管理平台即网关格式化平台，是一种通过外置的网关平台，可以通过API管理平台将参数直接配置在服务网关上。
S204、将接收到的业务调用请求转发至目标业务服务器，并接收目标业务服务器根据业务调用请求产生的响应信息。
可选的，将接收到的业务调用请求转发至目标业务服务器，包括：根据接收到的业务调用请求确定目标业务服务器，并根据预存储的配置数据对业务调用请求进行身份验证；当身份验证为通过时，讲业务调用请求转发至目标业务服务器。
在本实施例中，配置数据可以理解为用于验证用户能否对业务服务器进行访问的身份验证信息，可以是在配置参数授权信息时一起配置的，也可以是提前配置的。
示例性的，当服务网关接收到用户发送的业务调用请求时，由数据库中获取API开发平台为其配置的，包含用户可访问业务服务器的配置数据，并利用 配置数据对发出业务调用请求的用户进行身份验证，在身份验证通过时，将对应业务调用请求转发至目标业务服务器，保证了数据调用的安全性。
S205、根据业务调用请求确定目标用户。
示例性的，服务网关根据接收到的业务调用请求中包含的信息确定发出该业务调用请求的用户，并将该用户确定为目标用户。
S206、将目标用户对应的可访问参数类型，确定为目标参数授权信息。
示例性的，服务网关在确定发出业务调用请求的目标用户后，在数据库中查找出可以该目标用户对应的可访问参数类型，并将该可访问参数类型确定为目标参数授权信息。
S207、将响应信息中参数类型与可访问参数类型相同的信息，确定为目标响应信息。
示例性的，将目标参数授权信息中包括的可访问参数类型，与目标业务服务器返回给服务网关的响应信息中包括的参数类型进行比对，将响应信息中参数类型为可访问参数类型的数据，确定为目标响应信息。
示例性的，将响应信息中参数类型与可访问参数类型相同的信息，确定为目标响应信息，包括：根据可访问参数类型，对响应信息的响应头和响应体中的参数类型进行筛选；将筛选后的响应头和响应体构成的信息，确定为目标响应信息。
在本实施例中，响应信息包含响应头和响应体。响应头可以理解为响应信息中用于携带特定响应参数并传递至发出业务调用请求的用户的部分。响应体可以理解为用于存放需要返回给用户端的数据信息的部分。
示例性的，服务网关根据确定出的可访问参数类型，对响应信息的响应头中的参数类型进行筛选，仅保留响应头中与可访问参数类型相同的参数类型，并在响应体中保留与响应头中参数类型相同的信息，将筛选后的响应头与响应体共同构成的信息，确定为目标响应信息。
S208、将目标响应信息转发给业务调用请求对应的目标用户。
图3为本申请实施例二提供的一种数据调用方法的流程示例图，如图3所示，以通过API管理平台为作为服务网关的Kong网关进行配置为例，包括如下流程：1)通过API管理平台对Kong网关所管理的API，以及可经由Kong网关对API进行访问的应用进行授权；2)通过API网关管理部分生成对应配置信息，并将配置信息发送至Kong网关中的API ACL插件，以完成对Kong网关的配置；3)Kong网关将配置于其中的，用以表明应用可访问参数类型的参数权限信息 存储至数据库(如PostgreSQL)中保存；4)在用户需要请求应用时，向Kong网关发起API调用信息，也即为本申请实施例中的业务调用请求；5)Kong网关根据预先配置于其中的配置信息，对API调用信息能否对对应API进行调用进行鉴权；6)在鉴权通过后，将对应的API调用信息转发至对应的业务服务器中，并接收业务服务器针对该API调用请求给出的响应信息；7)API ACL插件基于配置信息确定该API调用信息可访问的参数类型，并根据确定出的参数类型对业务服务器给出的响应信息进行过滤，将过滤出的不应提供给用户的信息经由缓存(如Cache)存储至数据库中；8)Kong网关将过滤后得到的可提供给用户的响应信息，对应传输至发起API调用信息的应用，以完成数据调用流程。
需要明确的是，在API调用与API鉴权步骤间，以及在参数过滤至参数响应步骤间，数据可被Kong网关中设置的其他插件进行对应类型的处理。
本实施例的技术方案，通过预先在服务网关中对接入其中的业务服务器进行返回参数类型的定义，同时在其中对通过其访问业务服务器的用户可访问的参数类型进行定义，使得在接收到业务调用请求后，可依据配置情况对目标业务服务器针对业务调用请求返回的响应信息的过滤，而无需对目标业务服务器进行重配置，在保证了对目标用户业务调用请求的访问精度的同时，降低了数据调用的复杂度，提升了数据处理效率，降低了不同用户对同一业务服务器进行数据调用的成本。
实施例三
图4为本申请实施例三提供的一种数据调用装置的结构示意图，该数据调用装置包括：信息接收模块310、授权信息确定模块320、信息过滤模块330和目标信息转发模块340。
其中，信息接收模块310，设置为将接收到的业务调用请求转发至目标业务服务器，并接收目标业务服务器根据业务调用请求产生的响应信息；授权信息确定模块320，设置为根据业务调用请求确定目标参数授权信息；信息过滤模块330，设置为根据目标参数授权信息对响应信息进行过滤，确定目标响应信息；目标信息转发模块340，设置为将目标响应信息转发给业务调用请求对应的目标用户。
本实施例的技术方案，在服务网关中依据接收到的业务调用请求，确定该业务调用请求对应的目标用户可在目标业务服务器中访问的参数类型，进而在业务网关中完成对目标业务服务器针对业务调用请求返回的响应信息的过滤，使得目标用户仅能得到目标业务服务器响应信息中可被其访问的信息。解决了 相关技术的服务网关难以针对业务服务器提供的响应信息进行过滤，业务服务器在不对其本身进行改造情况下，难以为访问其的不同客户提供不同信息的问题，减少了针对复杂情况下业务服务器配置难度，提升了数据调用的响应精度，减少了数据调用的复杂程度，提升数据处理效率。
可选的，响应信息中包括目标业务服务器返回的所有参数类型。
可选的，数据调用装置，还包括：
参数配置模块，设置为在将接收到的业务调用请求转发至目标业务服务器之前，获取参数定义信息和参数授权信息；根据参数定义信息确定至少一个业务服务器返回的参数类型；根据参数授权信息确定至少一个用户，在可访问的每个业务服务器中的可访问参数类型。
可选的，所述授权信息确定模块320，包括：
目标用户确定单元，设置为根据业务调用请求确定目标用户。
授权信息确定单元，设置为将目标用户对应的可访问参数类型，确定为目标参数授权信息。
可选的，信息过滤模块330，设置为通过以下方式根据目标参数授权信息对响应信息进行过滤，确定目标响应信息：将响应信息中参数类型与可访问参数类型相同的信息，确定为目标响应信息。
可选的，将响应信息中参数类型与可访问参数类型相同的信息，确定为目标响应信息，包括：
根据可访问参数类型，对响应信息的响应头和响应体中的参数类型进行筛选；
将筛选后的响应头和响应体构成的信息，确定为目标响应信息。
可选的，信息接收模块310，包括：
身份验证单元，设置为根据接收到的业务调用请求确定目标业务服务器，并根据预存储的配置数据对业务调用请求进行身份验证；
请求转发单元，设置为当身份验证为通过时，讲业务调用请求转发至目标业务服务器。
本申请实施例提供的数据调用装置可执行本申请任意实施例所提供的数据调用方法，具备执行方法相应的功能模块和有益效果。
实施例四
图5为本申请实施例四提供的服务网关的结构示意图。旨在表示各种形式的数字计算机，诸如，膝上型计算机、台式计算机、工作台、个人数字助理、服务器、刀片式服务器、大型计算机、和其它适合的计算机。服务网关还可以表示各种形式的移动装置，诸如，个人数字处理、蜂窝电话、智能电话、可穿戴设备(如头盔、眼镜、手表等)和其它类似的计算装置。本文所示的部件、它们的连接和关系、以及它们的功能仅仅作为示例。
如图5所示，服务网关40包括至少一个处理器41，以及与至少一个处理器41通信连接的存储器，如只读存储器(Read Only Memory，ROM)42、随机访问存储器(Random Access Memory，RAM)43等，其中，存储器存储有可被至少一个处理器执行的计算机程序，处理器41可以根据存储在只读存储器(ROM)42中的计算机程序或者从存储单元48加载到随机访问存储器(RAM)43中的计算机程序，来执行各种适当的动作和处理。在RAM 43中，还可存储服务网关40操作所需的各种程序和数据。处理器41、ROM 42以及RAM 43通过总线44彼此相连。输入/输出(Input/Output，I/O)接口45也连接至总线44。
服务网关40中的多个部件连接至I/O接口45，包括：输入单元46，例如键盘、鼠标等；输出单元47，例如各种类型的显示器、扬声器等；存储单元48，例如磁盘、光盘等；以及通信单元49，例如网卡、调制解调器、无线通信收发机等。通信单元49允许服务网关40通过诸如因特网的计算机网络和/或各种电信网络与其他设备交换信息/数据。
处理器41可以是各种具有处理和计算能力的通用和/或专用处理组件。处理器41的一些示例可以包括中央处理单元(Central Processing Unit，CPU)、图形处理单元(Graphic Processing Unit，GPU)、各种专用的人工智能(Artificial Intelligence，AI)计算芯片、各种运行机器学习模型算法的处理器、数字信号处理器(Digital Signal Processing，DSP)、以及适当的处理器、控制器、微控制器等。处理器41执行上文所描述的各个方法和处理，例如数据调用方法。
在一些实施例中，数据调用方法可被实现为计算机程序，其被有形地包含于计算机可读存储介质，例如存储单元48。在一些实施例中，计算机程序的部分或者全部可以经由ROM 42和/或通信单元49而被载入和/或安装到服务网关40上。当计算机程序加载到RAM 43并由处理器41执行时，可以执行上文描述的数据调用方法的一个或多个步骤。备选地，在其他实施例中，处理器41可以通过其他适当的方式(例如，借助于固件)而被配置为执行数据调用方法。
本文中以上描述的系统和技术的各种实施方式可以在数字电子电路系统、集成电路系统、场可编程门阵列(Field-Programmable Gate Array，FPGA)、专用集成电路(Application Specific Integrated Circuit，ASIC)、专用标准产品 (Application Specific Standard Parts，ASSP)、芯片上系统的系统(System on Chip，SOC)、复杂可编程逻辑设备(Complex Programmable Logic Device，CPLD)、计算机硬件、固件、软件、和/或它们的组合中实现。这些各种实施方式可以包括：实施在一个或者多个计算机程序中，该一个或者多个计算机程序可在包括至少一个可编程处理器的可编程系统上执行和/或解释，该可编程处理器可以是专用或者通用可编程处理器，可以从存储系统、至少一个输入装置、和至少一个输出装置接收数据和指令，并且将数据和指令传输至该存储系统、该至少一个输入装置、和该至少一个输出装置。
用于实施本申请的方法的计算机程序可以采用一个或多个编程语言的任何组合来编写。这些计算机程序可以提供给通用计算机、专用计算机或其他可编程数据处理装置的处理器，使得计算机程序当由处理器执行时使流程图和/或框图中所规定的功能/操作被实施。计算机程序可以完全在机器上执行、部分地在机器上执行，作为独立软件包部分地在机器上执行且部分地在远程机器上执行或完全在远程机器或服务器上执行。
在本申请的上下文中，计算机可读存储介质可以是有形的介质，其可以包含或存储以供指令执行系统、装置或设备使用或与指令执行系统、装置或设备结合地使用的计算机程序。计算机可读存储介质可以包括电子的、磁性的、光学的、电磁的、红外的、或半导体系统、装置或设备，或者上述内容的任何合适组合。备选地，计算机可读存储介质可以是机器可读信号介质。机器可读存储介质的更具体示例会包括基于一个或多个线的电气连接、便携式计算机盘、硬盘、随机存取存储器(RAM)、只读存储器(ROM)、可擦除可编程只读存储器(Electronic Programable Read Only Memory，EPROM)或快闪存储器、光纤、便捷式紧凑盘只读存储器(Compact Disc-Read Only Memory，CD-ROM)、光学储存设备、磁储存设备、或上述内容的合适组合。
为了提供与用户的交互，可以在服务网关上实施此处描述的系统和技术，该服务网关具有：用于向用户显示信息的显示装置(例如，阴极射线管(Cathode Ray Tube，CRT)或者液晶显示器(Liquid Crystal Display，LCD)或者监视器)；以及键盘和指向装置(例如，鼠标或者轨迹球)，用户可以通过该键盘和该指向装置来将输入提供给服务网关。其它种类的装置还可以用于提供与用户的交互；例如，提供给用户的反馈可以是任何形式的传感反馈(例如，视觉反馈、听觉反馈、或者触觉反馈)；并且可以用任何形式(包括声输入、语音输入或者、触觉输入)来接收来自用户的输入。
可以将此处描述的系统和技术实施在包括后台部件的计算系统(例如，作为数据服务器)、或者包括中间件部件的计算系统(例如，应用服务器)、或 者包括前端部件的计算系统(例如，具有图形用户界面或者网络浏览器的用户计算机，用户可以通过该图形用户界面或者该网络浏览器来与此处描述的系统和技术的实施方式交互)、或者包括这种后台部件、中间件部件、或者前端部件的任何组合的计算系统中。可以通过任何形式或者介质的数字数据通信(例如，通信网络)来将系统的部件相互连接。通信网络的示例包括：局域网(Local Area Network，LAN)、广域网(Wide Area Network，WAN)、区块链网络和互联网。
计算系统可以包括客户端和服务器。客户端和服务器一般远离彼此并且通常通过通信网络进行交互。通过在相应的计算机上运行并且彼此具有客户端-服务器关系的计算机程序来产生客户端和服务器的关系。服务器可以是云服务器，又称为云计算服务器或云主机，是云计算服务体系中的一项主机产品，以解决了传统物理主机与VPS服务中，存在的管理难度大，业务扩展性弱的缺陷。
应该理解，可以使用上面所示的各种形式的流程，重新排序、增加或删除步骤。例如，本申请中记载的各步骤可以并行地执行也可以顺序地执行也可以不同的次序执行，只要能够实现本申请的技术方案所期望的结果。

Claims (10)

  1. 一种数据调用方法，包括：
    将接收到的业务调用请求转发至目标业务服务器，并接收所述目标业务服务器根据所述业务调用请求产生的响应信息；
    根据所述业务调用请求确定目标参数授权信息；
    根据所述目标参数授权信息对所述响应信息进行过滤，确定目标响应信息；
    将所述目标响应信息转发给所述业务调用请求对应的目标用户。
  2. 根据权利要求1所述的方法，在所述将接收到的业务调用请求转发至目标业务服务器之前，所述方法还包括：
    获取参数定义信息和参数授权信息；
    根据所述参数定义信息确定至少一个业务服务器返回的参数类型；
    根据所述参数授权信息确定至少一个用户，在可访问的每个业务服务器中的可访问参数类型。
  3. 根据权利要求1所述的方法，其中，所述根据所述业务调用请求确定目标参数授权信息，包括：
    根据所述业务调用请求确定目标用户；
    将所述目标用户对应的可访问参数类型，确定为目标参数授权信息。
  4. 根据权利要求3所述的方法，其中，所述根据所述目标参数授权信息对所述响应信息进行过滤，确定目标响应信息，包括：
    将所述响应信息中参数类型与所述可访问参数类型相同的信息，确定为目标响应信息。
  5. 根据权利要求4所述的方法，其中，所述将所述响应信息中参数类型与所述可访问参数类型相同的信息，确定为目标响应信息，包括：
    根据所述可访问参数类型，对所述响应信息的响应头和响应体中的参数类型进行筛选；
    将筛选后的响应头和响应体构成的信息，确定为目标响应信息。
  6. 根据权利要求1所述的方法，其中，所述将接收到的业务调用请求转发至目标业务服务器，包括：
    根据接收到的业务调用请求确定目标业务服务器，并根据预存储的配置数据对所述业务调用请求进行身份验证；
    当所述身份验证为通过时，讲所述业务调用请求转发至所述目标业务服务 器。
  7. 根据权利要求1-6中任一项所述的方法，其中，所述响应信息中包括所述目标业务服务器返回的所有参数类型。
  8. 一种数据调用装置，包括：
    信息接收模块，设置为将接收到的业务调用请求转发至目标业务服务器，并接收所述目标业务服务器根据所述业务调用请求产生的响应信息；
    授权信息确定模块，设置为根据所述业务调用请求确定目标参数授权信息；
    信息过滤模块，设置为根据所述目标参数授权信息对所述响应信息进行过滤，确定目标响应信息；
    目标信息转发模块，设置为将所述目标响应信息转发给所述业务调用请求对应的目标用户。
  9. 一种服务网关，所述服务网关包括：
    至少一个处理器；以及
    与所述至少一个处理器通信连接的存储器；其中，
    所述存储器存储有可被所述至少一个处理器执行的计算机程序，所述计算机程序被所述至少一个处理器执行，以使所述至少一个处理器能够执行权利要求1-7中任一项所述的数据调用方法。
  10. 一种计算机可读存储介质，所述计算机可读存储介质存储有计算机指令，所述计算机指令用于使处理器执行时实现权利要求1-7中任一项所述的数据调用方法。
PCT/CN2023/093375 2022-09-08 2023-05-11 数据调用方法、装置、服务网关及存储介质 WO2024051195A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN202211100673.5A CN115550413A (zh) 2022-09-08 2022-09-08 一种数据调用方法、装置、服务网关及存储介质
CN202211100673.5 2022-09-08

Publications (1)

Publication Number Publication Date
WO2024051195A1 true WO2024051195A1 (zh) 2024-03-14

Family

ID=84724796

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2023/093375 WO2024051195A1 (zh) 2022-09-08 2023-05-11 数据调用方法、装置、服务网关及存储介质

Country Status (2)

Country Link
CN (1) CN115550413A (zh)
WO (1) WO2024051195A1 (zh)

Families Citing this family (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN115550413A (zh) * 2022-09-08 2022-12-30 上海派拉软件股份有限公司 一种数据调用方法、装置、服务网关及存储介质

Citations (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1863211A (zh) * 2006-03-23 2006-11-15 华为技术有限公司 内容过滤系统及其方法
US20150074670A1 (en) * 2013-09-10 2015-03-12 Vmware, Inc. Method and system for distributed processing of http requests
CN110049106A (zh) * 2019-03-22 2019-07-23 口碑(上海)信息技术有限公司 业务请求处理系统及方法
CN110809011A (zh) * 2020-01-08 2020-02-18 医渡云（北京）技术有限公司 访问控制方法及系统、存储介质
CN113765982A (zh) * 2020-12-17 2021-12-07 北京沃东天骏信息技术有限公司 一种请求响应方法、装置、系统、服务器和存储介质
CN114726605A (zh) * 2022-03-30 2022-07-08 医渡云（北京）技术有限公司 一种敏感数据过滤方法、装置、系统及计算机设备
CN115550413A (zh) * 2022-09-08 2022-12-30 上海派拉软件股份有限公司 一种数据调用方法、装置、服务网关及存储介质

Patent Citations (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1863211A (zh) * 2006-03-23 2006-11-15 华为技术有限公司 内容过滤系统及其方法
US20150074670A1 (en) * 2013-09-10 2015-03-12 Vmware, Inc. Method and system for distributed processing of http requests
CN110049106A (zh) * 2019-03-22 2019-07-23 口碑(上海)信息技术有限公司 业务请求处理系统及方法
CN110809011A (zh) * 2020-01-08 2020-02-18 医渡云（北京）技术有限公司 访问控制方法及系统、存储介质
CN113765982A (zh) * 2020-12-17 2021-12-07 北京沃东天骏信息技术有限公司 一种请求响应方法、装置、系统、服务器和存储介质
CN114726605A (zh) * 2022-03-30 2022-07-08 医渡云（北京）技术有限公司 一种敏感数据过滤方法、装置、系统及计算机设备
CN115550413A (zh) * 2022-09-08 2022-12-30 上海派拉软件股份有限公司 一种数据调用方法、装置、服务网关及存储介质

Also Published As

Publication number Publication date
CN115550413A (zh) 2022-12-30

Similar Documents

Publication Publication Date Title
WO2018177124A1 (zh) 业务处理方法、装置、数据共享系统及存储介质
US9225707B1 (en) Cloud computing and integrated cloud drive
CN113438355B (zh) 基于云手机的通讯方法、装置、设备以及存储介质
US10757064B2 (en) Communication interface for handling multiple operations
US20220100777A1 (en) Transaction request construction method and apparatus, transaction request processing method and apparatus, device and storage medium
WO2022247359A1 (zh) 集群访问方法、装置、电子设备和介质
WO2015101320A1 (zh) 一种账号的生成方法、终端及后台服务器
WO2017041562A1 (zh) 一种识别终端设备用户身份的方法和装置
WO2024051195A1 (zh) 数据调用方法、装置、服务网关及存储介质
TWI706359B (zh) 資料處理方法及裝置、計算設備及儲存媒體
US20200021573A1 (en) Access token management for state preservation and reuse
WO2023193687A1 (zh) 一种共享内存的访问方法、装置、设备和存储介质
CN116611411A (zh) 一种业务系统报表生成方法、装置、设备及存储介质
CN114186206A (zh) 基于小程序的登录方法、装置、电子设备和存储介质
CN113010238A (zh) 一种微应用调用接口的权限确定方法、装置和系统
US20230111782A1 (en) Request processing method based on consortium blockchain, device, and storage medium
US20230085367A1 (en) Authorization processing method, electronic device, and non-transitory computer-readable storage medium
CN116244682A (zh) 数据库的访问方法、装置、设备以及存储介质
WO2019109922A1 (zh) 资源处理方法及系统、存储介质、电子设备
CN114390239B (zh) 通信方法、装置、系统、电子设备以及存储介质
WO2023024057A1 (zh) 跨域授权处理方法及跨域调用处理方法
CN116566737B (zh) 基于SaaS平台的权限配置方法、装置及相关设备
CN114978786B (zh) 一种将第三方接口转化为系统标准接口的方法及装置
US20230097763A1 (en) Maintaining sessions information in multi-region cloud environment
CN110262756B (zh) 用于缓存数据的方法和装置

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 23861899

Country of ref document: EP

Kind code of ref document: A1