Specific embodiment
Here will the description is performed on the exemplary embodiment in detail, the example is illustrated in the accompanying drawings.Following description is related toWhen attached drawing, unless otherwise indicated, the same numbers in different drawings indicate the same or similar elements.Following exemplary embodimentDescribed in embodiment do not represent all embodiments consistented with the present invention.On the contrary, they be only with it is such as appendedThe example of system and method being described in detail in claims, some aspects of the invention are consistent.
Implementation environment of the invention can be service equipment, such as Cloud Server or server.
Fig. 1 is a kind of schematic diagram of system shown according to an exemplary embodiment.System 100 can be above-mentioned service and setIt is standby.As shown in Figure 1, system 100 may include following one or more components: processing component 102, memory 104, power supply module106, multimedia component 108, audio component 110, sensor module 114 and communication component 116.
The integrated operation of the usual control system 100 of processing component 102, such as with display, telephone call, data communication, phaseMachine operation and the associated operation of record operation etc..Processing component 102 may include one or more processors 118 to executeInstruction, to complete all or part of the steps of following methods.In addition, processing component 102 may include one or more modules,For convenient for the interaction between processing component 102 and other assemblies.For example, processing component 102 may include multi-media module, useIn to facilitate the interaction between multimedia component 108 and processing component 102.
Memory 104 is configured as storing various types of data to support the operation in system 100.These data are shownExample includes the instruction of any application or method for operating on the system 100.Memory 104 can be by any kind ofVolatibility or non-volatile memory device or their combination are realized, such as static random access memory (Static RandomAccess Memory, abbreviation SRAM), electrically erasable programmable read-only memory (Electrically ErasableProgrammable Read-Only Memory, abbreviation EEPROM), Erasable Programmable Read Only Memory EPROM (ErasableProgrammable Read Only Memory, abbreviation EPROM), programmable read only memory (Programmable Red-Only Memory, abbreviation PROM), read-only memory (Read-Only Memory, abbreviation ROM), magnetic memory, flashDevice, disk or CD.It is also stored with one or more modules in memory 104, is configured to for the one or more moduleIt is executed by the one or more processors 118, to complete all or part of step in method as follows.
Power supply module 106 provides electric power for the various assemblies of system 100.Power supply module 106 may include power management systemSystem, one or more power supplys and other with for system 100 generate, manage, and distribute the associated component of electric power.
Multimedia component 108 includes the screen of one output interface of offer between the system 100 and user.OneIn a little embodiments, screen may include liquid crystal display (Liquid Crystal Display, abbreviation LCD) and touch panel.If screen includes touch panel, screen may be implemented as touch screen, to receive input signal from the user.Touch panelIncluding one or more touch sensors to sense the gesture on touch, slide, and touch panel.The touch sensor can be withThe boundary of a touch or slide action is not only sensed, but also detects duration associated with the touch or slide operation and pressurePower.Screen can also include display of organic electroluminescence (Organic Light Emitting Display, abbreviation OLED).
Audio component 110 is configured as output and/or input audio signal.For example, audio component 110 includes a MikeWind (Microphone, abbreviation MIC), when system 100 is in operation mode, such as call model, logging mode and speech recognition mouldWhen formula, microphone is configured as receiving external audio signal.The received audio signal can be further stored in memory104 or via communication component 116 send.In some embodiments, audio component 110 further includes a loudspeaker, for exportingAudio signal.
Sensor module 114 includes one or more sensors, and the state for providing various aspects for system 100 is commentedEstimate.For example, sensor module 114 can detecte the state that opens/closes of system 100, the relative positioning of component, sensor groupPart 114 can be with the position change of 100 1 components of detection system 100 or system and the temperature change of system 100.SomeIn embodiment, which can also include Magnetic Sensor, pressure sensor or temperature sensor.
Communication component 116 is configured to facilitate the communication of wired or wireless way between system 100 and other equipment.System100 can access the wireless network based on communication standard, such as WiFi (Wireless-Fidelity, Wireless Fidelity).Show at oneIn example property embodiment, communication component 116 receives broadcast singal or broadcast from external broadcasting management system via broadcast channelRelevant information.In one exemplary embodiment, the communication component 116 further includes near-field communication (Near FieldCommunication, abbreviation NFC) module, for promote short range communication.For example, radio frequency identification can be based in NFC module(Radio Frequency Identification, abbreviation RFID) technology, Infrared Data Association (Infrared DataAssociation, abbreviation IrDA) technology, ultra wide band (Ultra Wideband, abbreviation UWB) technology, Bluetooth technology and other skillsArt is realized.
In the exemplary embodiment, system 100 can be by one or more application specific integrated circuit (ApplicationSpecific Integrated Circuit, abbreviation ASIC), it is digital signal processor, digital signal processing appts, programmableLogical device, field programmable gate array, controller, microcontroller, microprocessor or other electronic components are realized, for executingFollowing methods.
Fig. 2 is a kind of visit of application programming interface service based on cloud transmission shown according to an exemplary embodimentAsk the flow chart of method.As shown in Fig. 2, the method includes the following steps.
Step 201, when the first application programming interface service in the first network segment that detects needs to access the second network segmentIn the second application programming interface service access instruction when, open the firewall between the first network segment and the second network segment,And intended gateway is set for the first network segment.
In the embodiment of the present invention, the first application programming interface service and the service of the second application programming interfaceThink any one application programming interface service in server cluster, and the first application programming interface service andThe service of two application programming interfaces is not the same application programming interface service.Application programming interface service can be withRealize some function of application program, and can be by any one application programming interface service access, to realize target functionEnergy.Any one application programming interface service in server cluster can correspond to any one network segment, and each answerWith between the network segment of Program Interfaces service, there is no the network segments being overlapped.In addition, any two application in server clusterProgram Interfaces, which service between corresponding network segment, all has firewall, so as to cannot directly be visited between any two network segmentIt asks, ensure that the safety of network segment.The presence of gateway can make the application programming interface service in the corresponding network segment of gatewayAccess server cluster any one network segment in application programming interface service, due to gateway can to access dataSecurity verification is carried out, thus guarantee that the application programming interface service in any one network segment cannot be accessed arbitrarily, becauseThis is without being recycled the safety that can also guarantee any one network segment to firewall.
As an alternative embodiment, when the first application programming interface service in the first network segment that detects needsWhen accessing the access instruction of the second application programming interface service in the second network segment, the first network segment and the second network segment are openedBetween firewall, and for the first network segment be arranged intended gateway mode may comprise steps of:
When the first application programming interface service in the first network segment that detects needs to access second in the second network segmentWhen the access instruction of application programming interface service, whether the firewall detected between the first network segment and the second network segment is open-minded；
If open-minded, the first application programming interface of control service of execution applies journey by intended gateway access secondSequence programming interface service；
If not open-minded, the firewall between the first network segment and the second network segment is opened, and detect whether the first network segment is arrangedIntended gateway；
If not set, intended gateway is set for the first network segment.
Wherein, implement this embodiment, can the firewall between the first network segment and the second network segment open andOne network segment directly makes the service of the first application programming interface access the by intended gateway under the premise of being provided with intended gatewayTwo application programming interface services avoid repetition and open the firewall between the first network segment and the second network segment and repeat to setSet the operation of the intended gateway of the first network segment.
Step 202, the service of the first application programming interface of control accesses the second application programming by intended gatewayInterface service.
In the embodiment of the present invention, intended gateway is the net that the first application programming interface services corresponding first network segmentIt closes, therefore the first application programming interface service can access any one network segment in server cluster by intended gatewayIn any application programming interface service, it is seen then that the first application programming interface service can be visited by intended gatewayAsk the second application programming interface service in the second network segment.
In the method depicted in fig. 2, without opening in each access application programming interface service protecting wall executionLogical and recycling operation, improves the access efficiency of application programming interface service.In addition, implement method described in Fig. 2,Repetition is avoided to open the firewall between the first network segment and the second network segment and repeat the intended gateway of the first network segment of settingOperation.
Fig. 3 is a kind of application programming interface service based on cloud transmission shown according to another exemplary embodimentThe flow chart of access method.As shown in figure 3, the method includes the following steps.
Step 301, the monitoring information that the service of the first application programming interface is sent is obtained by service discovery component.
In the embodiment of the present invention, when the first application programming interface service that detects is needed to any one application programWhen programming interface service accesses, it can be generated and service corresponding information comprising any one application programming interfaceMonitoring information, and the monitoring information is sent to service discovery component, so that service discovery component any one can apply thisProgram Interfaces service is monitored.
Step 302, the service identifiers for including in monitoring information are identified.
In the embodiment of the present invention, any one application programming interface service can correspond to a unique service markKnow, so as to can determine unique application programming interface service by the service identifiers.
Step 303, by service discovery component pair the second application programming interface corresponding with service identifiers service intoRow is monitored.
As an alternative embodiment, passing through service discovery component pair the second application program corresponding with service identifiersThe mode that programming interface service is monitored may comprise steps of:
When listening to any one application programming interface service and registering in service discovery component, pass through service hairExisting component obtains the current service information and any one application programming of any one application programming interface serviceInterface service corresponding current network segment includes at least working as any one application programming interface service in current service informationPreceding service identifiers；
Current gateway corresponding with current network segment is determined by service discovery component；
Current service information is arranged into current gateway by service discovery component, and identifies that current service identifies whetherIt is corresponding with the service of the second application programming interface；
If so, determining that the service of the second application programming interface is online.
Wherein, implement this embodiment, service discovery component can detecte the application registered in service discovery componentWhether Program Interfaces service is monitored application programming interface service, if it is, service discovery component can be withDetermine that monitored application programming interface service is online, so that it is monitored to guarantee that service discovery component can determine in timeApplication programming interface service state.
Step 304, when listen to the service of the second application programming interface it is online when, by service discovery component to firstApplication programming interface service, which is sent, services online notice.
In the embodiment of the present invention, implement above-mentioned step 301~step 304, can send and monitor to service discovery componentInformation, so that service discovery component monitors the application programming interface service for including in monitoring information, so thatThe state for the application programming interface service that needs are monitored timely is learned in the service of first application programming interface.
Step 305, the current service for including in online notice is serviced by the first application programming interface service acquisitionInformation.
Step 306, the access data that the first application programming interface service is generated according to current service information are obtained, andThe access instruction of the first application programming interface service is generated according to access data, access instruction is for indicating that first applies journeySequence programming interface service needs to access the second application programming interface service.
In the embodiment of the present invention, implement above-mentioned step 305~step 306, the first application programming interface can be madeService determines the access of the second application programming interface service of access according to the online notice of service that service discovery component is sentData, so that access data can accurately access to the second application programming interface service.
Step 307, when the first application programming interface service in the first network segment that detects needs to access the second network segmentIn the second application programming interface service access instruction when, open the firewall between the first network segment and the second network segment,And intended gateway is set for the first network segment.
Step 308, security verification is carried out to the access data in access instruction by intended gateway.
As an alternative embodiment, carrying out safety school to the access data in access instruction by intended gatewayThe mode tested may comprise steps of:
The data content and access address that the access data in access instruction include are obtained by intended gateway；
Whether detection data content is secure content；
If it is secure content, whether test access address is legal address；
If it is legal address, determine that access data pass through security verification.
Wherein, implement this embodiment, can to access data data content safety and access address conjunctionMethod carries out security verification, so that the security verification of intended gateway is relatively reliable.
Step 309, when access data pass through security verification, the first application programming interface service of control passes through meshMark gateway is sent to the second application programming interface service for data are accessed, so that the service of the first application programming interface is logicalAccess data are crossed to access to the second application programming interface service.
As an alternative embodiment, the first application program of control is compiled when access data pass through security verificationJourney interface service will be accessed by way of data are sent to the second application programming interface service intended gatewayFollowing steps:
When access data pass through security verification, the amount of access of intended gateway is obtained；
Judge whether amount of access is greater than default maximum amount of access；
If it is not greater, access data are sent to the by intended gateway by the service of the first application programming interface of controlTwo application programming interface services；
Prompt information, prompt information are sent if it does, servicing by intended gateway to the first application programming interfaceAccess data are sent for prompting intended gateway to be unable to complete to service to the second application programming interface.
Wherein, implement this embodiment, the amount of access of intended gateway can be monitored, so that the visit of intended gatewayThe amount of asking is in normal range (NR), avoids causing intended gateway access errors occur because amount of access is excessive.
In the embodiment of the present invention, implement above-mentioned step 308~step 309, it can be by intended gateway to access dataSafety verified, only by the just accessible second application programming interface service of the access data of verification, protectThe safety for having demonstrate,proved the second application programming interface service further also ensures the second application programming interface serviceThe safety of corresponding second network segment.
In the method depicted in fig. 3, without opening in each access application programming interface service protecting wall executionLogical and recycling operation, improves the access efficiency of application programming interface service.In addition, method described in implementing Fig. 3,It can guarantee that service discovery component can determine the state of monitored application programming interface service in time.In addition, realMethod described in Fig. 3 is applied, the service of the first application programming interface can be made timely to learn the application program that needs are monitoredThe state of programming interface service.In addition, method described in implementing Fig. 3, can make access number evidence that can accurately answer secondIt is accessed with Program Interfaces service.In addition, method described in implementing Fig. 3, can make the safety school of intended gatewayIt tests relatively reliable.In addition, method described in implementing Fig. 3, can cause intended gateway to be visited to avoid because amount of access is excessiveAsk mistake.In addition, method described in implementing Fig. 3, ensure that the safety of the second application programming interface service, more into oneStep also ensures that the second application programming interface services the safety of corresponding second network segment.
It is system embodiment of the invention below.
Fig. 4 is a kind of visit of application programming interface service based on cloud transmission shown according to an exemplary embodimentAsk the block diagram of system.As shown in figure 4, the system includes:
Unit 401 is opened, detects that the first application programming interface service in the first network segment needs to access for working asWhen the access instruction of the second application programming interface service in the second network segment, open between the first network segment and the second network segmentFirewall, and intended gateway is set for the first network segment.
It is compiled as an alternative embodiment, opening unit 401 and working as the first application program detected in the first network segmentWhen journey interface service needs to access the access instruction of the second application programming interface service in the second network segment, the first net is openedFirewall between section and the second network segment, and be specifically as follows for the mode that intended gateway is arranged in the first network segment:
When the first application programming interface service in the first network segment that detects needs to access second in the second network segmentWhen the access instruction of application programming interface service, whether the firewall detected between the first network segment and the second network segment is open-minded；
If open-minded, the first application programming interface of control service of execution applies journey by intended gateway access secondSequence programming interface service；
If not open-minded, the firewall between the first network segment and the second network segment is opened, and detect whether the first network segment is arrangedIntended gateway；
If not set, intended gateway is set for the first network segment.
Wherein, implement this embodiment, can the firewall between the first network segment and the second network segment open andOne network segment directly makes the service of the first application programming interface access the by intended gateway under the premise of being provided with intended gatewayTwo application programming interface services avoid repetition and open the firewall between the first network segment and the second network segment and repeat to setSet the operation of the intended gateway of the first network segment.
Access unit 402 passes through target network for controlling the first application programming interface service opened in unit 401Close the second application programming interface service of access.
In the access system of application programming interface service shown in Fig. 4 based on cloud transmission, without visiting every timeIt asks that application programming interface service executes the operation opened and recycled to protecting wall, improves application programming interface serviceAccess efficiency.In addition, in system shown in Fig. 4, avoids repetition and open fire prevention between the first network segment and the second network segmentThe operation of the intended gateway of wall and repetition the first network segment of setting.
Fig. 5 is a kind of application programming interface service based on cloud transmission shown according to another exemplary embodimentThe block diagram of access system.Wherein, the access system of the application programming interface service shown in fig. 5 based on cloud transmission is by schemingWhat the access system of the application programming interface service based on cloud transmission shown in 4 optimized.With base shown in Fig. 4It is compared in the access system of the application programming interface service of cloud transmission, the application program shown in fig. 5 based on cloud transmission is compiledThe access system of journey interface service can also include:
First acquisition unit 403, for opening unit 401 when detecting the first application programming in the first network segmentWhen interface service needs to access the access instruction of the second application programming interface service in the second network segment, the first network segment is openedWith the firewall between the second network segment, and for the first network segment be arranged intended gateway before, pass through service discovery component obtain firstThe monitoring information that application programming interface service is sent.
Recognition unit 404, the service identifiers for including in the monitoring information of the acquisition of first acquisition unit 403 for identification.
Monitoring unit 405, for passing through service discovery component pair corresponding with the service identifiers that recognition unit 404 identifies theTwo application programming interface services are monitored.
As an alternative embodiment, monitoring unit 405 is corresponding with service identifiers by service discovery component pairThe mode that second application programming interface service is monitored is specifically as follows:
When listening to any one application programming interface service and registering in service discovery component, pass through service hairExisting component obtains the current service information and any one application programming of any one application programming interface serviceInterface service corresponding current network segment includes at least working as any one application programming interface service in current service informationPreceding service identifiers；
Current gateway corresponding with current network segment is determined by service discovery component；
Current service information is arranged into current gateway by service discovery component, and identifies that current service identifies whetherIt is corresponding with the service of the second application programming interface；
If so, determining that the service of the second application programming interface is online.
Wherein, implement this embodiment, service discovery component can detecte the application registered in service discovery componentWhether Program Interfaces service is monitored application programming interface service, if it is, service discovery component can be withDetermine that monitored application programming interface service is online, so that it is monitored to guarantee that service discovery component can determine in timeApplication programming interface service state.
Transmission unit 406, for leading to when monitoring unit 405 listens to the second application programming interface and services onlineIt crosses service discovery component and services the online notice of the service of transmission to the first application programming interface.
In the embodiment of the present invention, monitoring information can be sent to service discovery component, so that service discovery component is to monitoringThe application programming interface service for including in information is monitored, so that the service of the first application programming interface is timelyThe state for learning application programming interface service that needs are monitored.
As an alternative embodiment, the visit of the application programming interface service shown in fig. 5 based on cloud transmissionThe system of asking can also include:
Second acquisition unit 407, for online when listening to the service of the second application programming interface in transmission unit 406When, after servicing the online notice of the service of transmission to the first application programming interface by service discovery component, answered by firstThe current service information for including in online notice is serviced with Program Interfaces service acquisition；
Third acquiring unit 408 is obtained for obtaining the first application programming interface service according to second acquisition unit 407The access data that the current service information taken generates, and according to the visit of access data the first application programming interface service of generationAsk instruction, access instruction is for indicating that the first application programming interface service needs to access the second application programming interface clothesBusiness.
Wherein, implement this embodiment, the first application programming interface service can be made according to service discovery componentThe online notice of the service of transmission determines the access data of the second application programming interface service of access, so that access data can be withAccurately access to the second application programming interface service.
As an alternative embodiment, the visit of the application programming interface service shown in fig. 5 based on cloud transmissionAsk that system access unit 402 may include:
Subelement 4021 is verified, for carrying out security verification to the access data in access instruction by intended gateway；
Transmission sub-unit 4022, for controlling when verification subelement 4021 determines that access data pass through security verificationThe service of first application programming interface is sent to the second application programming interface service for data are accessed by intended gateway,So that the service of the first application programming interface accesses to the second application programming interface service by accessing data.
Wherein, implement this embodiment, the safety of access data can be verified by intended gateway, onlyBy the access data just accessible second application programming interface service of verification, it ensure that the second application programming connectsThe safety of oral business, further also ensures that the second application programming interface services the safety of corresponding second network segmentProperty.
As an alternative embodiment, verification subelement 4021 is by intended gateway to the access number in access instructionIt is specifically as follows according to the mode for carrying out security verification:
The data content and access address that the access data in access instruction include are obtained by intended gateway；
Whether detection data content is secure content；
If it is secure content, whether test access address is legal address；
If it is legal address, determine that access data pass through security verification.
Wherein, implement this embodiment, can to access data data content safety and access address conjunctionMethod carries out security verification, so that the security verification of intended gateway is relatively reliable.
As an alternative embodiment, transmission sub-unit 4022 is controlled when access data pass through security verificationThe service of first application programming interface is sent to the second application programming interface service for data are accessed by intended gatewayMode be specifically as follows:
When access data pass through security verification, the amount of access of intended gateway is obtained；
Judge whether amount of access is greater than default maximum amount of access；
If it is not greater, access data are sent to the by intended gateway by the service of the first application programming interface of controlTwo application programming interface services；
Prompt information, prompt information are sent if it does, servicing by intended gateway to the first application programming interfaceAccess data are sent for prompting intended gateway to be unable to complete to service to the second application programming interface.
Wherein, implement this embodiment, the amount of access of intended gateway can be monitored, so that the visit of intended gatewayThe amount of asking is in normal range (NR), avoids causing intended gateway access errors occur because amount of access is excessive.
In the access system of application programming interface service based on cloud transmission shown in Fig. 5, without visiting every timeIt asks that application programming interface service executes the operation opened and recycled to protecting wall, improves application programming interface serviceAccess efficiency.In addition, in system shown in Fig. 5, it is ensured that service discovery component can determine monitored in timeThe state of application programming interface service.In addition, the first application programming interface can be made in system shown in Fig. 5The state for the application programming interface service that needs are monitored timely is learned in service.In addition, in system shown in Fig. 5, it canSo that access data can accurately access to the second application programming interface service.In addition, system shown in Fig. 5In, it ensure that the safety of the second application programming interface service, further also ensure that the second application programming connectsThe safety of oral corresponding second network segment of being engaged in.In addition, the safety school of intended gateway can be made in system shown in Fig. 5It tests relatively reliable.In addition, intended gateway can be caused to access to avoid because amount of access is excessive in system shown in Fig. 5Mistake.
The present invention also provides a kind of electronic equipment, which includes:
Processor；
Memory is stored with computer-readable instruction on the memory, when which is executed by processor,Realize the access method of the application programming interface service based on cloud transmission as previously shown.
In one exemplary embodiment, the present invention also provides a kind of computer readable storage mediums, are stored thereon with calculatingMachine program when the computer program is executed by processor, realizes the application programming interface as previously shown based on cloud transmissionThe access method of service.
It should be understood that the present invention is not limited to the precise structure already described above and shown in the accompanying drawings, andAnd various modifications and change can executed without departing from the scope.The scope of the present invention is limited only by the attached claims.