Disclosure of Invention
In view of the above, the present disclosure provides an information processing method, apparatus, device, medium, and program product.
According to a first aspect of the present disclosure, there is provided an information processing method, applied to a first service end, including:
acquiring a user attribute information tuple corresponding to service login information of a user, wherein the service login information is suitable for logging in a second server, and the user attribute information tuple comprises a user role attribute of the user;
inquiring service data matched with the user role attribute according to the user role attribute;
according to a data analysis request from a second server, calling a data analysis resource corresponding to the data analysis request, processing the service data, and generating a data analysis result; and
and sending the data analysis result to the second server.
According to the embodiment of the present disclosure, querying the service data matched with the user role attribute according to the user role attribute comprises:
inquiring user authority information corresponding to the user role attribute in an authority configuration library according to the user role attribute; and
and determining the service data corresponding to the user authority information according to the user authority information.
According to an embodiment of the present disclosure, determining, according to the user authority information, service data corresponding to the user authority information includes:
generating a service data query request based on the user permission information;
sending the service data query request to the second server, so that the second server determines the service data matched with the user permission information according to the service data query request, and returns the service data to the first server; and
and receiving the service data sent by the second server.
According to an embodiment of the present disclosure, the information processing method further includes:
in response to the detection of the permission change message sent by the second server, analyzing the permission change message to obtain a user identifier and user permission change information corresponding to the user identifier; and
and updating the authority configuration library according to the user identification and the user authority change information to obtain an updated authority configuration library.
According to an embodiment of the present disclosure, after obtaining a user attribute information tuple corresponding to service login information of a user, the information processing method further includes:
and creating a data analysis account for logging in the first service terminal according to the user identifier in the user attribute information tuple.
According to an embodiment of the present disclosure, after obtaining a user attribute information tuple corresponding to service login information of a user, the information processing method further includes:
determining a data analysis account for logging in the first service terminal according to the user identifier in the user attribute information tuple; and
and performing login authority authentication on the data analysis account to obtain a first authentication result for representing successful login of the first service terminal.
The second aspect of the present disclosure further provides an information processing method, applied to a second server, including:
performing login authority verification on the service login information of the user to obtain a second authentication result;
under the condition that the second authentication result represents that the second server is successfully logged in, responding to the detection of data analysis operation, and sending a user attribute information tuple corresponding to the service login information to the first server, so that the first server queries service data matched with the user role attribute according to the user attribute information tuple;
generating a data analysis request for calling data analysis resources according to the data analysis operation;
sending the data analysis request to the first service end, so that the first service end calls a data analysis resource corresponding to the data analysis request, processes the service data, and generates a data analysis result; and
and generating a data analysis display result representing the data analysis result in an interactive interface according to the data analysis result sent by the first service terminal.
According to an embodiment of the present disclosure, the second server includes a service server and a gateway device, and the second authentication result includes a login credential;
wherein, in response to detecting the data analysis operation, sending the user attribute information tuple corresponding to the service login information to the first server includes:
the service server responds to the detection of the data analysis operation and sends the login certificate to the gateway equipment;
acquiring a user attribute information tuple corresponding to the service login information by utilizing the gateway equipment according to the login certificate; and
and sending the user attribute information tuple to the first service end by using the gateway equipment.
According to an embodiment of the present disclosure, the information processing method further includes:
in response to detecting a service data query request sent by the first service terminal, determining service data matched with the user permission information according to the service data query request; and
and returning the service data to the first service end.
According to an embodiment of the present disclosure, the information processing method further includes:
generating an authority change message according to a user identifier and user authority change information corresponding to the user identifier; and
and sending the permission change message to the first service terminal.
The third aspect of the present disclosure also provides an information processing apparatus, applied to a first service end, including:
a user attribute information tuple obtaining module, configured to obtain a user attribute information tuple corresponding to service login information of a user, where the service login information is applicable to login of a second server, and the user attribute information tuple includes a user role attribute of the user;
the service data query module is used for querying service data matched with the user role attribute according to the user role attribute;
the data analysis result generation module is used for calling data analysis resources corresponding to the data analysis request according to the data analysis request from the second server, processing the business data and generating a data analysis result; and
and the data analysis result sending module is used for sending the data analysis result to the second server.
The fourth aspect of the present disclosure further provides an information processing apparatus, applied to a second server, including:
the login authority verification module is used for verifying the login authority of the service login information of the user to obtain a second authentication result;
a user attribute information tuple sending module, configured to, in response to detecting a data analysis operation, send a user attribute information tuple corresponding to the service login information to a first server when the second authentication result represents that the second server is successfully logged in, so that the first server queries service data matched with a user role attribute according to the user attribute information tuple;
the data analysis request generation module is used for generating a data analysis request for calling data analysis resources according to the data analysis operation;
a data analysis request sending module, configured to send the data analysis request to the first service end, so that the first service end invokes a data analysis resource corresponding to the data analysis request, processes the service data, and generates a data analysis result; and
and the data analysis display result generation module is used for generating a data analysis display result representing the data analysis result in an interactive interface according to the data analysis result sent by the first service end.
A fifth aspect of the present disclosure provides an electronic device, comprising: one or more processors; a memory for storing one or more programs, wherein the one or more programs, when executed by the one or more processors, cause the one or more processors to perform the above-described information processing method.
A sixth aspect of the present disclosure also provides a computer-readable storage medium having stored thereon executable instructions that, when executed by a processor, cause the processor to perform the above-mentioned information processing method.
A seventh aspect of the present disclosure also provides a computer program product comprising a computer program that, when executed by a processor, implements the above-described information processing method.
According to the information processing method, the device, the equipment, the medium and the program product, the service data are inquired according to the user attribute information tuple and the user role information in the user attribute information tuple through the obtained user attribute information tuple, then the data analysis resources are called to respond to the data analysis request of the second server to process the service data, so that the user can call the data analysis resources to analyze the service data under the condition of only operating the second server, the operation steps that the user repeatedly logs in the first server are at least partially reduced, the first server calls the data from the second server, the operation complexity of data analysis is reduced, and the technical effect of improving the data analysis efficiency is realized.
Detailed Description
Hereinafter, embodiments of the present disclosure will be described with reference to the accompanying drawings. It should be understood that the description is illustrative only and is not intended to limit the scope of the present disclosure. In the following detailed description, for purposes of explanation, numerous specific details are set forth in order to provide a thorough understanding of the embodiments of the disclosure. It may be evident, however, that one or more embodiments may be practiced without these specific details. Moreover, in the following description, descriptions of well-known structures and techniques are omitted so as to not unnecessarily obscure the concepts of the present disclosure.
The terminology used herein is for the purpose of describing particular embodiments only and is not intended to be limiting of the disclosure. The terms "comprises," "comprising," and the like, as used herein, specify the presence of stated features, steps, operations, and/or components, but do not preclude the presence or addition of one or more other features, steps, operations, or components.
All terms (including technical and scientific terms) used herein have the same meaning as commonly understood by one of ordinary skill in the art unless otherwise defined. It is noted that the terms used herein should be interpreted as having a meaning that is consistent with the context of this specification and should not be interpreted in an idealized or overly formal sense.
Where a convention analogous to "at least one of A, B, and C, etc." is used, in general such a construction is intended in the sense one having skill in the art would understand the convention (e.g., "a system having at least one of A, B, and C" would include but not be limited to systems that have A alone, B alone, C alone, A and B together, A and C together, B and C together, and/or A, B, and C together, etc.).
In the technical scheme of the disclosure, the collection, storage, use, processing, transmission, provision, disclosure, application and other processing of the related data (such as but not limited to personal information of the user) are all in accordance with the regulations of related laws and regulations, and necessary security measures are taken without violating the customs of the public order.
In an actual application scenario, the service system and the data analysis system are usually independent from each other, and each system needs to verify the login authority and the data call authority of the user before realizing the corresponding function, which results in that the user needs to repeatedly perform login operation and authority verification operation to realize the corresponding service data analysis function, resulting in low overall efficiency of data analysis, and under the condition that the user authority changes, the related operation and maintenance cost of each system for maintaining authority configuration information also rises, which leads to low overall efficiency of data analysis, and is difficult to meet the actual application requirement.
Embodiments of the present disclosure provide an information processing method, apparatus, device, medium, and program product. The information processing method can be applied to a first service terminal, and comprises the following steps: acquiring a user attribute information tuple corresponding to the service login information of the user, wherein the service login information is suitable for logging in a second server, and the user attribute information tuple comprises a user role attribute of the user; inquiring business data matched with the user role attribute according to the user role attribute; according to the data analysis request from the second server, calling data analysis resources corresponding to the data analysis request, processing the service data, and generating a data analysis result; and sending the data analysis result to the second server.
According to the embodiment of the disclosure, the service data is inquired according to the user attribute information tuple and the user role information in the user attribute information tuple, and then the data analysis resource is called to process the service data in response to the data analysis request of the second server, so that the user can call the data analysis resource to perform service data analysis under the condition of only operating the second server, the operation steps that the user repeatedly logs in the first server are at least partially reduced, the first server calls the data from the second server, the operation complexity of data analysis is reduced, and the technical effect of improving the data analysis efficiency is realized.
The embodiment of the disclosure also provides an information processing method which can be applied to the second server. The information processing method includes: performing login authority verification on the service login information of the user to obtain a second authentication result; under the condition that the second authentication result represents that the second server is successfully logged in, responding to the detection of data analysis operation, and sending a user attribute information tuple corresponding to the service login information to the first server, so that the first server can inquire service data matched with the user role attribute according to the user attribute information tuple; generating a data analysis request for calling data analysis resources according to the data analysis operation; sending a data analysis request to a first service end so that the first service end can call data analysis resources corresponding to the data analysis request, process business data and generate a data analysis result; and generating a data analysis display result representing the data analysis result in the interactive interface according to the data analysis result sent by the first server.
According to the embodiment of the disclosure, the first server may include a server for performing data analysis operation, and the second server may include a service system for generating or storing service data in the related art.
It should be noted that the information processing method, apparatus, device, medium, and program product provided in the embodiments of the present disclosure are not limited to the technical field of application. For example, the method can be applied to analyzing the relevant business data in a financial business system in a financial institution, but is not limited thereto, and can also be applied to the field of intelligent education, and the technical scheme provided by the disclosure is used for analyzing the business data in the business systems such as an education resource system, an education scoring system and a student management system.
Fig. 1 schematically shows an application scenario diagram of an information processing method and apparatus according to an embodiment of the present disclosure.
As shown in fig. 1, theapplication scenario 100 according to this embodiment may include a firstterminal device 101, a secondterminal device 102, a thirdterminal device 103, anetwork 104, asecond server 105, and afirst server 106. Thenetwork 104 is a medium to provide communication links between the firstterminal device 101, the secondterminal device 102, the thirdterminal device 103, and thesecond server 105.Network 104 may include various connection types, such as wired, wireless communication links, or fiber optic cables, to name a few.
The user may interact with thesecond server 105 over thenetwork 104 using at least one of the firstterminal device 101, the secondterminal device 102, the thirdterminal device 103, to receive or send messages or the like. Various communication client applications, such as a shopping application, a web browser application, a search application, an instant messaging tool, a mailbox client, social platform software, etc. (for example only), may be installed on the firstterminal device 101, the secondterminal device 102, and the thirdterminal device 103. Accordingly, the firstterminal device 101, the secondterminal device 102, and the thirdterminal device 103 may have a user editing interface, such as a touch display, installed thereon for responding to a program editing operation by a user.
The firstterminal device 101, the secondterminal device 102, and the thirdterminal device 103 may be various electronic devices having a display screen and supporting web browsing, including but not limited to a smart phone, a tablet computer, a laptop portable computer, a desktop computer, and the like.
Thesecond server 105 may be a server providing various services, such as a background management server (for example only) providing support for websites browsed by the user using the firstterminal device 101, the secondterminal device 102, and the thirdterminal device 103. The background management server may analyze and perform other processing on the received data such as the user request, and feed back a processing result (e.g., a webpage, information, or data obtained or generated according to the user request) to the terminal device.
First server 106 may likewise be a server providing various services, such as data request sending and receiving services, data computing services, and so forth.
In some embodiments, thesecond server 105 may be a data analytics server and the second server may be a business system server.
It should be noted that thesecond server 105 may correspond to a second server, and thefirst server 106 may correspond to a first server.
It should be noted that the information processing method applied to the first server according to the embodiment of the present disclosure may be generally executed by thefirst server 106. Accordingly, the information processing apparatus applied to the first server according to the embodiment of the disclosure may be generally disposed in thefirst server 106.
The information processing method applied to the second server provided by the embodiment of the present disclosure may be executed by thesecond server 105. Accordingly, the information processing apparatus applied to the second server provided by the embodiment of the present disclosure may be installed in thesecond server 105. The information processing method applied to the second server provided by the embodiment of the present disclosure may also be executed by a server or a server cluster that is different from thesecond server 105 and is capable of communicating with the firstterminal device 101, the secondterminal device 102, the thirdterminal device 103 and/or thesecond server 105. Accordingly, the information processing apparatus applied to the second server provided in the embodiment of the present disclosure may also be disposed in a server or a server cluster different from thesecond server 105 and capable of communicating with the firstterminal device 101, the secondterminal device 102, the thirdterminal device 103 and/or thesecond server 105.
It should be understood that the number of terminal devices, networks, and servers in fig. 1 is merely illustrative. There may be any number of terminal devices, networks, and servers, as desired for an implementation.
The information processing method of the disclosed embodiment will be described in detail below with fig. 2 to 5 based on the scenario described in fig. 1.
Fig. 2 schematically shows a flowchart of an information processing method applied to a first service end according to an embodiment of the present disclosure.
As shown in fig. 2, the information processing method applied to the first service end of this embodiment includes operations S210 to S240.
In operation S210, a user attribute information tuple corresponding to the service login information of the user is obtained, where the service login information is suitable for logging in the second server, and the user attribute information tuple includes a user role attribute of the user.
In operation S220, service data matched with the user role attribute is queried according to the user role attribute.
In operation S230, according to the data analysis request from the second server, a data analysis resource corresponding to the data analysis request is called, the service data is processed, and a data analysis result is generated.
In operation S240, the data analysis result is transmitted to the second server.
According to the embodiment of the disclosure, the first server may include a server or a server cluster for performing data analysis processing on the business data, such as a big data analysis service system in the related art. The second server may include a server or a server cluster for generating and/or storing business data, for example, a business service system constructed by relevant enterprises according to business requirements, and the like.
According to the embodiment of the disclosure, the login information may include information required for login, such as a login account, a user name and the like required for the user to login the second server. The user attribute information tuple can include a user role attribute corresponding to the login information of the user. The user role attribute may include the department to which the user belongs, the position of the user, the position level, and other attribute information related to the service data invocation authority. Accordingly, user information such as user identification and login account for characterizing the login identity of the user may also be included in the user attribute information tuple.
According to the embodiment of the disclosure, the user attribute information tuple may be acquired from the second server, for example, the second server sends the user attribute information tuple to the first server when detecting that the user logs in. Or the data can be stored in the second server in advance to reduce the data interaction frequency of the user attribute information tuple and improve the overall efficiency of service data analysis.
It should be understood that, the user attribute information tuple may store the user role attribute and the service login information of the user in association, so that the user role attribute may be invoked through the service login information of the user, and then the service data may be queried according to the user role attribute, which may at least omit an operation process of the user repeatedly inputting login information for logging in the first service end.
According to the embodiment of the disclosure, the service data matched with the user role attribute can be service data which can be called by the authority corresponding to the user role attribute, the data analysis resource can comprise related data analysis application in the first server, and the user can realize the operation process of calling the data analysis resource of the first server by sending a data analysis request by using the second server, so that the complex operation steps of switching the operation interface of the server by the user to perform data analysis operation are reduced, and the overall efficiency of service data analysis is improved.
According to the embodiment of the present disclosure, the service data may include data stored in the second server, or may further include service data acquired by the first server from the second server in advance. The embodiment of the present disclosure does not limit the specific storage location of the service data, and a person skilled in the art may select the storage location according to actual requirements.
According to the embodiment of the present disclosure, the data analysis result may include information in any form, such as a data calculation result, a business data analysis report, a business data analysis chart, and the like.
According to the embodiment of the disclosure, the service data is inquired according to the user attribute information tuple and the user role information in the user attribute information tuple, and then the data analysis resource is called to process the service data in response to the data analysis request of the second server, so that the user can call the data analysis resource to perform service data analysis under the condition of only operating the second server, the operation steps that the user repeatedly logs in the first server are at least partially reduced, the first server calls the data from the second server, the operation complexity of data analysis is reduced, and the technical effect of improving the data analysis efficiency is realized.
According to an embodiment of the present disclosure, in operation S210, after obtaining a user attribute information tuple corresponding to the service login information of the user, the information processing method may further include the following operations:
and creating a data analysis account for logging in the first service terminal according to the user identification in the user attribute information tuple.
In the related art, when a user does not create a data analysis account suitable for logging in a first service end, the user is usually required to register the data analysis account in an operation interface corresponding to the first service end, that is, the data analysis account needs to be created through an operation of the user. The information processing method provided by the embodiment of the disclosure can realize automatic creation of the data analysis account according to the user attribute information tuple, at least partially reduces the operation steps of the user operating the operation interface corresponding to the first service end to register the data analysis account, enables the user to quickly acquire the operation authority of data analysis, immediately calls the data analysis resources to analyze the service data, and further improves the data analysis efficiency.
According to an embodiment of the present disclosure, in operation S210, after obtaining a user attribute information tuple corresponding to the service login information of the user, the information processing method may further include the following operations:
determining a data analysis account for logging in a first server according to a user identifier in a user attribute information tuple; and performing login authority authentication aiming at the data analysis account to obtain a first authentication result for representing successful login of the first server.
According to the embodiment of the disclosure, under the condition that the user has previously created the data analysis account for logging in the first service end, when the user has logged in the second service end, the login authority authentication of the data analysis account can be realized according to the user identifier in the user attribute information tuple, so that the user can automatically log in the first service end, and the operation steps of repeatedly logging in the first service end by the user can be reduced.
According to the embodiment of the disclosure, the automatic creation of the data analysis account and the automatic login of the data analysis account can be realized by designing the related automatic login plug-in and mounting the automatic login plug-in the related big data analysis system (the first server). After the automatic login plug-in obtains the user attribute information tuple, whether the user creates a data analysis account in the big data analysis system or not is detected according to the user identification in the user attribute information tuple. Under the condition that the data analysis account is created, the data analysis account can be automatically logged in, under the condition that the user does not create the data analysis account, the function that the user can log in the first service end in a one-click mode by using the second service end can be realized by creating the data analysis account and logging in, and the user can access one or more big data analysis systems in a one-stop mode through the second service end.
The automatic login plug-in can be developed according to respective plug-in specifications of the big data analysis system, the automatic login plug-in is mounted on a hook reserved by each big data analysis system, functions of the big data analysis system are upgraded, meanwhile, the automatic login plug-in can be software supporting hot plug, and maintenance cost for the upgraded big data analysis system can be reduced.
It should be noted that, in the embodiment of the present disclosure, before the user information such as the relevant login information and the user role attribute of the user is obtained, the user approval is obtained, and necessary measures are taken to encrypt and store the user information, so that the user information is prevented from being leaked. Meanwhile, the process of processing the user information and the use target of the user information are informed to the user in advance, the regulation of relevant laws and regulations is met, and the public order and the custom are not violated.
Fig. 3 schematically shows a flowchart of querying business data matching with user role attributes according to the user role attributes according to an embodiment of the present disclosure.
As shown in fig. 3, the operation S220 of querying the service data matching the user role attribute according to the user role attribute includes operations S310 to S320.
In operation S310, user authority information corresponding to the user role attribute is queried in the authority configuration repository according to the user role attribute.
In operation S320, service data corresponding to the user authority information is determined according to the user authority information.
According to an embodiment of the present disclosure, the authority configuration library may contain an authority configuration table for storing related authority configuration information. The user role attribute and the user authority information can be stored in the authority position library in an associated mode, so that the user authority information corresponding to the user role attribute can be inquired quickly. After the user authority information is obtained, the service data corresponding to the user authority information can be determined from the database storing a large amount of service data according to the respective authority calling attributes of the service data, so that a user can call the service data matched with the user authority information by operating the second server, namely the first server according to the user role attribute of the user, and the operation steps of switching the operation interface by the user are reduced.
According to the embodiment of the present disclosure, in operation S320, determining the service data corresponding to the user authority information according to the user authority information includes the following operations:
generating a service data query request based on the user permission information; sending a service data query request to a second server so that the second server determines service data matched with the user authority information according to the service data query request and returns the service data to the first server; and receiving the service data sent by the second server.
According to the embodiment of the disclosure, under the condition that the service data is stored in the second server, the service data can be quickly acquired by sending the service data query request containing the user permission information to the second server, so that the technical problems that a service system and a big data analysis system are independent from each other and the information interaction efficiency is low in the related technology can be at least partially solved.
According to the embodiment of the present disclosure, the number of the second servers may be one or more, and the number of the second servers is not limited in the embodiment of the present disclosure. Under the condition that the second server side comprises a plurality of second server sides, the service data stored by different second server sides can be obtained by respectively sending service data query requests to the plurality of second server sides, so that data gaps between different second server sides (namely different service systems) are further overcome, the efficiency of summarizing the service data is improved, and the data analysis efficiency aiming at the service data can be further improved.
According to an embodiment of the present disclosure, the information processing method applied to the first server may further include the following operations:
in response to the detection of the permission change message sent from the second server, analyzing the permission change message to obtain a user identifier and user permission change information corresponding to the user identifier; and updating the authority configuration library according to the user identification and the user authority change information to obtain an updated authority configuration library.
According to the embodiment of the disclosure, the user permission change information may include new user permission information corresponding to the user identifier or new user role attribute, and the permission configuration library is updated according to the user identifier and the user permission change information, so that the second server can obtain the new user permission information corresponding to the user identifier, and thus the user role attribute change condition of the user or the change condition of the user permission information can be reflected in time according to the updated permission configuration library, thereby avoiding that the user calls service data which is not matched with the new user role attribute, so as to improve the operation and maintenance accuracy of the service data, and simultaneously, the permission configuration library of the first server is automatically updated, so that the user role attribute synchronization between the first server and the second server and the user permission information synchronization are realized.
According to the embodiment of the disclosure, the corresponding permission synchronization component can be developed for the first service end to update the permission configuration library. The permission synchronization component can provide a general callback notification interface for the second server side, the second server side can notify the permission change message to the permission synchronization component of the first server side by calling the callback notification interface, the permission synchronization component obtains the user permission change information by analyzing the permission change message, and injects or refreshes the user permission change information into the permission configuration library to update the permission configuration library.
Fig. 4 schematically shows a flowchart of an information processing method applied to a first service end according to an embodiment of the present disclosure.
As shown in fig. 4, the information processing method applied to the second server in this embodiment may include operations S410 to S450.
In operation S410, the service login information of the user is verified for the login authority, and a second authentication result is obtained.
In operation S420, in a case that the second authentication result represents that the second service end is successfully logged in, in response to detecting the data analysis operation, sending a user attribute information tuple corresponding to the service login information to the first service end, so that the first service end queries service data matched with the user role attribute according to the user attribute information tuple.
In operation S430, a data analysis request for calling a data analysis resource is generated according to the data analysis operation.
In operation S440, a data analysis request is sent to the first service end, so that the first service end invokes a data analysis resource corresponding to the data analysis request, processes the service data, and generates a data analysis result.
In operation S450, a data analysis display result representing the data analysis result is generated in the interactive interface according to the data analysis result sent from the first server.
According to the embodiment of the disclosure, the data analysis operation may be detected after the user operates the operation interface for operating the second server, for example, the user may perform a click operation on an interface element representing that data analysis can be performed in the operation interface to perform the data analysis operation.
It should be noted that, the embodiment of the present disclosure does not limit the specific operation type of the data analysis operation, for example, the data analysis operation may also be executed based on the operation of the user inputting the data analysis content in the relevant input box, and a person skilled in the art may design the specific operation type of the data analysis operation executed by the user according to the actual requirement as long as the data analysis requirement of the user can be met.
According to the embodiment of the disclosure, the data analysis request generated according to the data analysis operation may include data analysis resource attribute information such as an identifier of a data analysis resource corresponding to the data analysis operation, so that the first service end may call the data analysis resource according to the data analysis request.
According to the embodiment of the disclosure, the data analysis request may further include data attribute information of the service data required by the application data analysis resource, for example, the data attribute information may include a data type of the service data, a service type, a generation time period of the service data, and the like, so that the first server may conveniently invoke the relevant service data according to the data attribute information.
It should be understood that the data attribute information of the service data may also be correspondingly stored in the first service end, so that the first service end may associate and query the corresponding data attribute information according to the data analysis request, and then quickly apply the data analysis resource to process the relevant service data.
According to the embodiment of the present disclosure, the data analysis request may be obtained by encapsulating based on any request protocol, and the embodiment of the present disclosure does not limit the specific request protocol type of the encapsulated data analysis request, and a person skilled in the art may select the request according to actual requirements as long as the first server can obtain the content in the data analysis request by analyzing.
According to the embodiment of the disclosure, the data analysis display result can include interface elements such as characters, numerical values, reports, images and charts which can be displayed in the interactive interface, so that a user can conveniently acquire the data analysis result in the interactive interface.
According to the embodiment of the disclosure, the second server includes a service server and a gateway device, and the second authentication result includes a login credential.
In operation S420, in response to detecting the data analysis operation, sending, to the first service end, the user attribute information tuple corresponding to the service login information may include the following operations:
the service server responds to the detected data analysis operation and sends a login certificate to the gateway equipment; acquiring a user attribute information tuple corresponding to the service login information according to the login certificate by using gateway equipment; and sending the user attribute information tuple to the first service end by using the gateway equipment.
According to the embodiment of the present disclosure, the number of the service servers in the second server may be one or more, and correspondingly, the number of the gateway devices may also be one or more.
According to the embodiment of the disclosure, the service server can establish communication connection with the first service terminal through the gateway device, and the second service terminal is established through the gateway device and the service server, so that service data and user attribute information tuples in the service server can be fully decoupled from the gateway, the security attributes of the service data and the user attribute information tuples are improved, and user information or service data leakage is avoided.
According to the embodiment of the disclosure, when the user successfully logs in the service server, the login credential may be sent to the gateway device, and the gateway device may invoke the user attribute information tuple from the service server according to the login credential (token) and send the user attribute information tuple to the first service end. Therefore, under the condition that the system architecture of a related service server (namely a service system) is not changed, the gateway equipment and the service server cooperate to complete login authentication of a user for logging in the service server, and a user attribute information tuple is transmitted to the first service end, so that the development cost of the service system is reduced, and meanwhile, because the gateway equipment does not store the user attribute information tuple or service data, the information safety problem that the gateway equipment reveals information can be avoided.
According to an embodiment of the present disclosure, the information processing method applied to the second server may further include the following operations:
responding to a service data query request sent by a first server, and determining service data matched with user authority information according to the service data query request; and returning the service data to the first server.
According to an embodiment of the present disclosure, the information processing method applied to the second server may further include the following operations:
generating an authority change message according to the user identification and user authority change information corresponding to the user identification; and sending the permission change message to the first service terminal.
It should be noted that, the same technical terms in the information processing method applied to the second server and the information processing method applied to the first server have the same or corresponding technical features, and the embodiments of the present disclosure are not described herein again.
Fig. 5 schematically shows an application scenario diagram of an information processing method according to an embodiment of the present disclosure.
As shown in fig. 5, the application scenario may include aterminal device 510, asecond service end 520, and afirst service end 530. Thesecond server 520 may include aservice server 521 and agateway device 522. Theservice server 521 can be provided with a service system accordingly.
The user can log in theservice server 521 of thesecond server 520 by operating theterminal device 510. Upon successful login to theservice server 521, theservice server 521 may send a login credential to thegateway device 522. Accordingly, thegateway device 522 may send the user attribute information tuple obtained from theservice server 521 or the user attribute information tuple generated based on the user attribute information in the service server to thefirst service end 530.
Thefirst server 530 may create a data analysis account for the user or log in the data analysis account based on the user attribute information tuple, so that the user logs in thefirst server 530 and thesecond server 520 in a one-stop manner.
Accordingly, the user performs a data analysis operation by operating theterminal device 510, and theservice server 521 may send a data analysis request to thefirst service end 530 when detecting the data analysis operation, so that the user may call a data analysis resource in thefirst service end 530 through theterminal device 510.
Thefirst service end 530 may invoke a data analysis resource according to the data analysis request, obtain service data matched with the user role attribute of the user according to the user attribute information tuple, and then process the relevant service data by using the data analysis resource to obtain a data analysis result. And sends the data analysis result to thesecond server 520 through thefirst server 530.
Theservice server 521 of thesecond server 520 may display the data analysis result in the interactive interface of theterminal device 510, and generate a corresponding data analysis display result, so that the user may conveniently obtain the data analysis result matched with the role attribute of the user.
Accordingly, in the case that the user role attribute of the user or the user permission information is changed, a permission change message may also be sent to thefirst service end 530 through theservice server 521. The permission change message may be obtained through a callback notification interface corresponding to thefirst server 530, and the permission configuration library is updated according to the permission change information in the permission change message, so as to implement synchronous update of the user service data call permission and the service data analysis permission.
According to the embodiment of the present disclosure, when thefirst service end 530 includes a plurality of heterogeneous data analysis systems, that is, includes a plurality of data analysis servers or server clusters, a user may also call respective data analysis resources of the plurality of heterogeneous data analysis systems in a one-stop manner by operating theterminal device 510, so that quick call and convenient analysis of service data are realized, and data analysis efficiency is improved.
Based on the information processing method, the disclosure also provides an information processing device. The apparatus will be described in detail below with reference to fig. 6 and 7.
Fig. 6 schematically shows a block diagram of the structure of an information processing apparatus according to an embodiment of the present disclosure.
As shown in fig. 6, theinformation processing apparatus 600 of this embodiment is applicable to a first server, and theinformation processing apparatus 600 includes a user attribute informationtuple obtaining module 610, a servicedata querying module 620, a data analysisresult generating module 630, and a data analysisresult sending module 640.
The user attribute informationtuple obtaining module 610 is configured to obtain a user attribute information tuple corresponding to service login information of a user, where the service login information is suitable for logging in a second server, and the user attribute information tuple includes a user role attribute of the user.
The servicedata query module 620 is configured to query service data matching the user role attribute according to the user role attribute.
The data analysisresult generating module 630 is configured to invoke a data analysis resource corresponding to the data analysis request according to the data analysis request from the second server, process the service data, and generate a data analysis result.
The data analysisresult sending module 640 is configured to send the data analysis result to the second server.
According to an embodiment of the present disclosure, the servicedata query module 620 includes: a user authority information inquiry unit and a service data determination unit.
And the user authority information inquiry unit is used for inquiring user authority information corresponding to the user role attribute in the authority configuration library according to the user role attribute.
And the service data determining unit is used for determining the service data corresponding to the user authority information according to the user authority information.
According to an embodiment of the present disclosure, the service data determining unit includes: the device comprises a query request generating subunit, a query request sending subunit and a service data receiving subunit.
And the query request generating subunit is used for generating a service data query request based on the user authority information.
The query request sending subunit is configured to send a service data query request to the second server, so that the second server determines, according to the service data query request, service data matched with the user permission information, and returns the service data to the first server.
The service data receiving subunit is configured to receive service data sent from the second server.
According to an embodiment of the present disclosure, the information processing apparatus further includes: the system comprises an authority change message analysis module and an authority configuration library updating module.
And the permission change message analysis module is used for responding to the detected permission change message sent from the second server, analyzing the permission change message and obtaining the user identification and the user permission change information corresponding to the user identification.
And the authority configuration library updating module is used for updating the authority configuration library according to the user identification and the user authority change information to obtain an updated authority configuration library.
According to an embodiment of the present disclosure, the information processing apparatus further includes: a data analysis account creation module.
And the data analysis account creation module is used for creating a data analysis account for logging in the first service terminal according to the user identification in the user attribute information tuple.
According to an embodiment of the present disclosure, the information processing apparatus further includes: the system comprises a data analysis account determining module and a data analysis account authentication module.
And the data analysis account determining module is used for determining a data analysis account for logging in the first server according to the user identification in the user attribute information tuple.
The data analysis account authentication module is used for performing login authority authentication on the data analysis account to obtain a first authentication result for representing successful login of the first server.
Fig. 7 schematically shows a block diagram of the structure of an information processing apparatus according to another embodiment of the present disclosure.
As shown in fig. 7, theinformation processing apparatus 700 of this embodiment may be applied to a second server, and theinformation processing apparatus 700 includes a loginauthority verification module 710, a user attribute informationtuple sending module 720, a data analysisrequest generation module 730, a data analysisrequest sending module 740, and a data analysis presentationresult generation module 750.
The loginauthority verification module 710 is configured to perform login authority verification on the service login information of the user to obtain a second authentication result.
The user attribute informationtuple sending module 720 is configured to, in response to detecting the data analysis operation, send a user attribute information tuple corresponding to the service login information to the first service end under the condition that the second authentication result represents that the second service end is successfully logged in, so that the first service end queries service data matched with the user role attribute according to the user attribute information tuple.
The data analysisrequest generating module 730 is configured to generate a data analysis request for invoking a data analysis resource according to the data analysis operation.
The data analysisrequest sending module 740 is configured to send a data analysis request to the first service end, so that the first service end invokes a data analysis resource corresponding to the data analysis request, processes the service data, and generates a data analysis result.
The data analysis displayresult generating module 750 is configured to generate a data analysis display result representing a data analysis result in the interactive interface according to the data analysis result sent from the first server.
According to the embodiment of the disclosure, the second server includes a service server and a gateway device, and the second authentication result includes a login credential.
The user attribute information tuple sending module comprises: the system comprises a first sending unit, a user attribute information tuple obtaining unit and a second sending unit.
The first sending unit is used for the service server to respond to the detection of the data analysis operation and send the login credential to the gateway equipment.
The user attribute information tuple obtaining unit is used for obtaining the user attribute information tuple corresponding to the service login information by using the gateway equipment according to the login certificate.
The second sending unit is configured to send the user attribute information tuple to the first service end by using the gateway device.
According to an embodiment of the present disclosure, theinformation processing apparatus 700 further includes: the system comprises a service data query module and a service data return module.
And the service data query module is used for responding to the detected service data query request sent by the first server and determining the service data matched with the user authority information according to the service data query request.
The service data returning module is used for returning the service data to the first service terminal.
According to an embodiment of the present disclosure, theinformation processing apparatus 700 further includes: the system comprises an authority change message generating module and an authority change message sending module.
And the permission change message generation module is used for generating a permission change message according to the user identifier and the user permission change information corresponding to the user identifier.
And the permission change message sending module sends a permission change message to the first server.
According to the embodiment of the present disclosure, any multiple modules of the user attribute informationtuple acquisition module 610, the servicedata query module 620, the data analysisresult generation module 630, and the data analysisresult transmission module 640, or the loginauthority verification module 710, the user attribute informationtuple transmission module 720, the data analysisrequest generation module 730, the data analysisrequest transmission module 740, and the data analysis displayresult generation module 750 may be combined and implemented in one module, or any one of the modules may be split into multiple modules. Alternatively, at least part of the functionality of one or more of these modules may be combined with at least part of the functionality of the other modules and implemented in one module. According to the embodiment of the present disclosure, at least one of the user attribute informationtuple obtaining module 610, the servicedata query module 620, the data analysisresult generating module 630, and the data analysisresult sending module 640, or the loginauthority verifying module 710, the user attribute informationtuple sending module 720, the data analysisrequest generating module 730, the data analysisrequest sending module 740, and the data analysis displayresult generating module 750 may be at least partially implemented as a hardware circuit, such as a Field Programmable Gate Array (FPGA), a Programmable Logic Array (PLA), a system on a chip, a system on a substrate, a system on a package, an Application Specific Integrated Circuit (ASIC), or may be implemented by hardware or firmware in any other reasonable manner of integrating or packaging a circuit, or implemented by any one of three implementation manners of software, hardware, and firmware, or by a suitable combination of any of them. Alternatively, at least one of the user attribute informationtuple obtaining module 610, the servicedata query module 620, the data analysisresult generating module 630 and the data analysisresult sending module 640, or the loginauthority verification module 710, the user attribute informationtuple sending module 720, the data analysisrequest generating module 730, the data analysisrequest sending module 740 and the data analysis displayresult generating module 750 may be at least partially implemented as a computer program module, and when the computer program module is executed, the corresponding function may be executed.
Fig. 8 schematically shows a block diagram of an electronic device adapted to implement an information processing method according to an embodiment of the present disclosure.
As shown in fig. 8, anelectronic device 800 according to an embodiment of the present disclosure includes aprocessor 801 that can perform various appropriate actions and processes according to a program stored in a Read Only Memory (ROM) 802 or a program loaded from astorage section 808 into a Random Access Memory (RAM) 803. Theprocessor 801 may include, for example, a general purpose microprocessor (e.g., CPU), an instruction set processor and/or associated chipset, and/or a special purpose microprocessor (e.g., application Specific Integrated Circuit (ASIC)), among others. Theprocessor 801 may also include onboard memory for caching purposes. Theprocessor 801 may include a single processing unit or multiple processing units for performing different actions of the method flows according to embodiments of the present disclosure.
In theRAM 803, various programs and data necessary for the operation of theelectronic apparatus 800 are stored. Theprocessor 801, theROM 802, and theRAM 803 are connected to each other by abus 804. Theprocessor 801 performs various operations of the method flows according to the embodiments of the present disclosure by executing programs in theROM 802 and/orRAM 803. Note that the programs may also be stored in one or more memories other than theROM 802 andRAM 803. Theprocessor 801 may also perform various operations of method flows according to embodiments of the present disclosure by executing programs stored in the one or more memories.
Electronic device 800 may also include input/output (I/O)interface 805, input/output (I/O)interface 805 also connected tobus 804, according to an embodiment of the present disclosure.Electronic device 800 may also include one or more of the following components connected to I/O interface 805: aninput portion 806 including a keyboard, a mouse, and the like; anoutput section 807 including a signal such as a Cathode Ray Tube (CRT), a Liquid Crystal Display (LCD), and the like, and a speaker; astorage portion 808 including a hard disk and the like; and acommunication section 809 including a network interface card such as = LAN card, modem, or the like. Thecommunication section 809 performs communication processing via a network such as the internet. Adrive 810 is also connected to the I/O interface 805 as necessary. Aremovable medium 811 such as a magnetic disk, an optical disk, a magneto-optical disk, a semiconductor memory, or the like is mounted on thedrive 810 as necessary, so that a computer program read out therefrom is mounted on thestorage section 808 as necessary.
The present disclosure also provides a computer-readable storage medium, which may be embodied in the device/apparatus/system described in the above embodiments; or may exist separately and not be assembled into the device/apparatus/system. The computer-readable storage medium carries one or more programs which, when executed, implement a method according to an embodiment of the disclosure.
According to embodiments of the present disclosure, the computer-readable storage medium may be a non-volatile computer-readable storage medium, which may include, for example but is not limited to: a portable computer diskette, a hard disk, a Random Access Memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), a portable compact disc read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing. In the present disclosure, a computer readable storage medium may be any tangible medium that can contain, or store a program for use by or in connection with an instruction execution system, apparatus, or device. For example, according to embodiments of the present disclosure, a computer-readable storage medium may include theROM 802 and/orRAM 803 described above and/or one or more memories other than theROM 802 andRAM 803.
Embodiments of the present disclosure also include a computer program product comprising a computer program containing program code for performing the method illustrated in the flow chart. When the computer program product runs in a computer system, the program code is used for causing the computer system to realize the information processing method provided by the embodiment of the disclosure.
The computer program performs the above-described functions defined in the system/apparatus of the embodiments of the present disclosure when executed by theprocessor 801. The systems, apparatuses, modules, units, etc. described above may be implemented by computer program modules according to embodiments of the present disclosure.
In one embodiment, the computer program may be hosted on a tangible storage medium such as an optical storage device, a magnetic storage device, or the like. In another embodiment, the computer program may also be transmitted in the form of a signal, distributed over a network medium, downloaded and installed viacommunications portion 809, and/or installed fromremovable media 811. The computer program containing program code may be transmitted using any suitable network medium, including but not limited to: wireless, wired, etc., or any suitable combination of the foregoing.
In such an embodiment, the computer program can be downloaded and installed from a network through thecommunication section 809 and/or installed from theremovable medium 811. The computer program, when executed by theprocessor 801, performs the above-described functions defined in the system of the embodiments of the present disclosure. The systems, devices, apparatuses, modules, units, etc. described above may be implemented by computer program modules according to embodiments of the present disclosure.
In accordance with embodiments of the present disclosure, program code for executing computer programs provided by embodiments of the present disclosure may be written in any combination of one or more programming languages, and in particular, these computer programs may be implemented using high level procedural and/or object oriented programming languages, and/or assembly/machine languages. The programming language includes, but is not limited to, programming languages such as Java, C + +, python, the "C" language, or the like. The program code may execute entirely on the user's computing device, partly on the user's device, partly on a remote computing device, or entirely on the remote computing device or server. In the case of a remote computing device, the remote computing device may be connected to the user computing device through any kind of network, including a Local Area Network (LAN) or a Wide Area Network (WAN), or may be connected to an external computing device (e.g., through the internet using an internet service provider).
The flowchart and block diagrams in the figures illustrate the architecture, functionality, and operation of possible implementations of systems, methods and computer program products according to various embodiments of the present disclosure. In this regard, each block in the flowchart or block diagrams may represent a module, segment, or portion of code, which comprises one or more executable instructions for implementing the specified logical function(s). It should also be noted that, in some alternative implementations, the functions noted in the block may occur out of the order noted in the figures. For example, two blocks shown in succession may, in fact, be executed substantially concurrently, or the blocks may sometimes be executed in the reverse order, depending upon the functionality involved. It will also be noted that each block of the block diagrams or flowchart illustration, and combinations of blocks in the block diagrams or flowchart illustration, can be implemented by special purpose hardware-based systems which perform the specified functions or acts, or combinations of special purpose hardware and computer instructions.
Those skilled in the art will appreciate that various combinations and/or combinations of features recited in the various embodiments and/or claims of the present disclosure can be made, even if such combinations or combinations are not expressly recited in the present disclosure. In particular, various combinations and/or combinations of the features recited in the various embodiments of the present disclosure and/or the claims may be made without departing from the spirit and teachings of the present disclosure. All such combinations and/or associations are within the scope of the present disclosure.
The embodiments of the present disclosure are described above. However, these examples are for illustrative purposes only and are not intended to limit the scope of the present disclosure. Although the embodiments are described separately above, this does not mean that the measures in the embodiments cannot be used in advantageous combination. The scope of the disclosure is defined by the appended claims and equivalents thereof. Various alternatives and modifications can be devised by those skilled in the art without departing from the scope of the disclosure, and these alternatives and modifications are intended to fall within the scope of the disclosure.