[go: up one dir, main page]

CN113220661A - Multi-cloud database management method, system, device and storage medium - Google Patents

Multi-cloud database management method, system, device and storage medium Download PDF

Info

Publication number
CN113220661A
CN113220661A CN202110471424.6A CN202110471424A CN113220661A CN 113220661 A CN113220661 A CN 113220661A CN 202110471424 A CN202110471424 A CN 202110471424A CN 113220661 A CN113220661 A CN 113220661A
Authority
CN
China
Prior art keywords
database
library
user
preset
action instruction
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN202110471424.6A
Other languages
Chinese (zh)
Inventor
张哲�
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Xi'an Notice Network Technology Co ltd
Original Assignee
Xi'an Notice Network Technology Co ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Xi'an Notice Network Technology Co ltd filed Critical Xi'an Notice Network Technology Co ltd
Priority to CN202110471424.6A priority Critical patent/CN113220661A/en
Publication of CN113220661A publication Critical patent/CN113220661A/en
Pending legal-status Critical Current

Links

Images

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F16/00Information retrieval; Database structures therefor; File system structures therefor
    • G06F16/20Information retrieval; Database structures therefor; File system structures therefor of structured data, e.g. relational data
    • G06F16/21Design, administration or maintenance of databases
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F16/00Information retrieval; Database structures therefor; File system structures therefor
    • G06F16/20Information retrieval; Database structures therefor; File system structures therefor of structured data, e.g. relational data
    • G06F16/25Integrating or interfacing systems involving database management systems
    • G06F16/252Integrating or interfacing systems involving database management systems between a Database Management System and a front-end application
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F16/00Information retrieval; Database structures therefor; File system structures therefor
    • G06F16/20Information retrieval; Database structures therefor; File system structures therefor of structured data, e.g. relational data
    • G06F16/27Replication, distribution or synchronisation of data between databases or within a distributed database system; Distributed database system architectures therefor
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/31User authentication
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60Protecting data
    • G06F21/604Tools and structures for managing or administering access control systems
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60Protecting data
    • G06F21/62Protecting access to data via a platform, e.g. using keys or access control rules
    • G06F21/6218Protecting access to data via a platform, e.g. using keys or access control rules to a system of files or objects, e.g. local or distributed file system or database
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2141Access rights, e.g. capability lists, access control lists, access tables, access matrices

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Databases & Information Systems (AREA)
  • General Physics & Mathematics (AREA)
  • Physics & Mathematics (AREA)
  • General Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Data Mining & Analysis (AREA)
  • Computer Hardware Design (AREA)
  • Software Systems (AREA)
  • General Health & Medical Sciences (AREA)
  • Bioethics (AREA)
  • Health & Medical Sciences (AREA)
  • Computing Systems (AREA)
  • Automation & Control Theory (AREA)
  • Storage Device Security (AREA)

Abstract

The invention discloses a multi-cloud database management method, a multi-cloud database management system, multi-cloud database management equipment and a storage medium, wherein the method comprises the following steps: acquiring an action instruction from a preset action instruction library; the action instructions in the preset action instruction library at least comprise authentication login, resource authority application and database login; calling and outputting the form in a preset form library according to the action instruction; the forms in the preset form library at least comprise a login information form, a multi-factor verification code form and a database application form; acquiring the filled form and the action instruction, and selecting and executing a preset function program from a processing program library based on the filled form and the action instruction; the preset function programs in the processing program library at least comprise a user authentication program and a user authentication program. The invention can support the access of the multi-cloud heterogeneous database.

Description

Multi-cloud database management method, system, device and storage medium
Technical Field
The invention belongs to the technical field of multi-cloud database management, and particularly relates to a multi-cloud database management method, a multi-cloud database management system, multi-cloud database management equipment and a multi-cloud database management storage medium.
Background
With the popularization of cloud computing, cloud services increasingly become basic resources of enterprises, in order to improve the robustness of an enterprise application system, the use and deployment of the cloud resources of the enterprises evolve from a single cloud to a mixed cloud, and a private cloud evolves towards a deployment mode combining a public cloud and a private cloud.
Each cloud manufacturer has a heterogeneous database management tool, at present, due to the heterogeneity and competition state among cloud manufacturers, the support degree of the RDS of each cloud manufacturer is not satisfactory, and specific defects include:
the DBMS (database management system) provided by a cloud manufacturer does not use independent authentication and authorization, generally directly utilizes the self-authorization and authorization of the managed DB, and cannot provide authorization support for scenes in which the DB does not have the authorization and authorization;
a DMS provided by a cloud manufacturer usually needs to create sub-accounts of the cloud account resources, for an application scenario with multiple clouds and multiple accounts, very many sub-accounts need to be created, which is expensive in operation and maintenance management cost, and a user needs to store and manage multiple cloud sub-accounts, so that the account management cost is high;
the DB types supported by the cloud manufacturer are limited by database product routes and types of the cloud manufacturer, and the DB types not supported by the cloud manufacturer, such as Aerosipe, cannot be managed into the DBMS system of the cloud manufacturer.
In summary, in order to make the database management of the enterprise using the hybrid cloud autonomously controllable, a uniform and customizable multi-cloud database operation and maintenance management system is required to cover the requirement.
Disclosure of Invention
The present invention is directed to a method, system, device and storage medium for managing a multi-cloud database, so as to solve one or more of the above technical problems. The invention can support the access of the multi-cloud heterogeneous database.
In order to achieve the purpose, the invention adopts the following technical scheme:
the invention discloses a multi-cloud database management method, which comprises the following steps:
acquiring an action instruction from a preset action instruction library; the action instructions in the preset action instruction library at least comprise authentication login, resource authority application and database login;
calling and outputting the form in a preset form library according to the action instruction; the forms in the preset form library at least comprise a login information form, a multi-factor verification code form and a database application form;
acquiring the filled form and the action instruction, and selecting and executing a preset function program from a processing program library based on the filled form and the action instruction; the preset function programs in the processing program library at least comprise a user authentication program and a user authentication program.
The further improvement of the present invention is that the action command of the preset action command library specifically includes: registering an account number, activating the account number, forgetting a password, authenticating login, multi-factor verification, resource authority application, database login, data export, data import, database resource addition, database resource removal and database script release.
The further improvement of the present invention is that the form in the preset form library specifically includes: a login information form, a multi-factor identifying code form, a database information form, a database script publishing form, a database application form and a data export application form.
The present invention is further improved in that the preset function program in the processing program library specifically includes: the method comprises an input data verification program, a user authentication program, a form data writing background database program and a form information generation mail approval stream program of a form submitted by a user.
The invention is further improved in that the filled-in form and the action instruction are acquired; based on the filled form and the action instruction, selecting a preset function program from a processing program library and executing the preset function program specifically comprises the following steps:
calling each database command line tool based on a process module to realize the access of each type of database system; the process module is developed based on bash and is integrated with a processing program library.
The invention is further improved in that the specific step of obtaining the action command from the preset action command library comprises:
acquiring an action instruction from a preset action instruction library by acquiring direction key information, input sequence number information or index information based on the menu component;
the menu component is a universal customizable menu component which is compiled based on a bash and cursor tool library and supports visual interactive operation; the functions of the menu component comprise a menu option function, a menu style function and a trigger action function after menu selection;
the step of calling and outputting the form in the preset form library according to the action instruction specifically comprises the following steps:
based on the form component, calling and outputting forms in a preset form library according to the action instruction;
the form component is a form component based on secondary development and packaging of a linux command line dialog tool and is used for outputting a display form through a user graphical interface of a dbms system; the form component has functions of a compound form function form, a multiple selection form, a single selection form, and a message notification form.
The further improvement of the present invention is that the process of acquiring the filled-in form and the action instruction, and selecting and executing a preset function program from a processing program library based on the filled-in form and the action instruction specifically includes:
the user authentication program: acquiring authentication information of a user based on a login information form filled by the user; after the input authentication information is verified to be correct, calling a multi-factor verification code form to output to a user; acquiring a multi-factor identifying code provided by a user based on a multi-factor identifying code form filled in by the user, and judging that the user successfully logs in after the multi-factor identifying code passes the verification;
the user authentication program: acquiring and verifying a database application form filled by a user, and generating approval flow work order information to a database work order table after verification is carried out without error; generating an application form approval mail based on approval flow work order information and sending the application form approval mail to a preset address, wherein the mail is provided with an approval link and a rejection link;
acquiring the trigger information of the approval or rejection link in the mail, and completing approval of approval or rejection; after obtaining the agreed trigger information, creating corresponding database users and operation authorities for the users in the applied database based on authority information applied by the users in the approval flow work order information, writing the information of the database users into a user authority table for use when the users log in next time, and completing application passing;
under the condition that the application is passed, when a database login action instruction is obtained and triggered, a user authority table of the database is inquired to obtain login information of a user in the database to be logged in, the login information is transmitted to a database command line tool to complete verification of logging in the database, and the control authority and the interface of the logged-in command line tool are returned to the current user.
The invention discloses a multi-cloud database management system, which comprises:
the action instruction acquisition module is used for acquiring action instructions from a preset action instruction library; the action instructions in the preset action instruction library at least comprise authentication login, resource authority application and database login;
the form acquisition module is used for calling and outputting forms in a preset form library according to the action instruction; the forms in the preset form library at least comprise a login information form, a multi-factor verification code form and a database application form;
the calling execution module is used for acquiring the filled form and the action instruction, and selecting a preset function program from a processing program library and executing the preset function program based on the filled form and the action instruction; the preset function programs in the processing program library at least comprise a user authentication program and a user authentication program.
An electronic device of the present invention includes: a processor; a memory for storing computer program instructions; it is characterized in that the preparation method is characterized in that,
when the computer program instructions are loaded and run by the processor, the processor executes any one of the above-described methods of multi-cloud database management of the present invention.
A computer-readable storage medium of the present invention stores computer program instructions, and when the computer program instructions are loaded and executed by a processor, the processor executes any of the above-mentioned multi-cloud database management methods of the present invention.
Compared with the prior art, the invention has the following beneficial effects:
in the method provided by the invention, the database drive does not need to be developed one by one based on each heterogeneous database to realize the access and control of the database; an authentication system is established on the upper layer of the managed database, so that the unified authentication and unified control of a plurality of databases can be realized; the method of the invention is easy to increase the support to the future new type of database, works between the user and the database to be accessed, and reserves enough logic space for expanding the function of the database.
In the invention, a loosely coupled and easily expandable database management method is established through a bash and web server mail system on the basis of a database command line tool. Specifically, the databases involved in the present invention are of two types, the first type is a database of the DBMS itself, which is used for implementing functions of providing user authentication (storing user authentication information), user authentication (storing authority information of a user to a service database, and corresponding [ database user ] authentication information in the service database), and multi-factor authentication (storing an asymmetric encryption key); the second type, a service hosting database, is a database that users actually need to access and use; but the meta-information of these databases is still stored in the first type of database; because the user authentication is realized based on the DBMS self database, the user authentication is not limited by whether the second type database supports the authentication or not; meanwhile, the operation on the second type of database is to call a command line tool of the second type of service database through a process processing module (each service database such as mysql, redis, aerospike, mongodb and the like provides a ready-made available command line tool, namely the hash); therefore, the driving development of a specific database is avoided, so that the DBMS system can easily expand the service database;
the invention provides a command-row-based heterogeneous multi-cloud database management system, which is provided with an authentication system independent of a hosted database, supports multi-factor authentication and solves the problem of authentication of a part of databases which cannot provide authentication. Because the authentication is a self-established independent system, the authentication is not limited by the types and the quantity of the hosted databases, all hosted database resources can be logged in and accessed only by one set of authentication, the unified login and unified authentication are really realized, and a user is not required to manage, store and memorize the account number and the password of each hosted database; the user can not obtain the authentication information of the hosted database, so that the security of the hosted database is better protected.
Drawings
In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the description of the embodiments or the prior art are briefly introduced below; it is obvious that the drawings in the following description are some embodiments of the invention, and that for a person skilled in the art, other drawings can be derived from them without inventive effort.
FIG. 1 is a schematic flow chart diagram of a method for multi-cloud database management according to an embodiment of the present invention;
FIG. 2 is a diagram illustrating a database structure according to an embodiment of the present invention;
FIG. 3 is a system architecture diagram according to an embodiment of the present invention;
FIG. 4 is a diagram of menu components in an embodiment of the present invention;
FIG. 5 is a diagram of form components in accordance with an embodiment of the present invention;
FIG. 6 is a diagram of a process module according to an embodiment of the present invention;
FIG. 7 is a schematic diagram of a web _ api interface module in an embodiment of the present invention;
FIG. 8 is a schematic diagram of an api interface embedded in a mail in an embodiment of the present invention;
FIG. 9 is a schematic diagram of a work order mail list and work order information in a mail body for resource application in an embodiment of the present invention.
Detailed Description
In order to make the purpose, technical effect and technical solution of the embodiments of the present invention clearer, the following clearly and completely describes the technical solution of the embodiments of the present invention with reference to the drawings in the embodiments of the present invention; it is to be understood that the described embodiments are only some of the embodiments of the present invention. Other embodiments, which can be derived by one of ordinary skill in the art from the disclosed embodiments without inventive faculty, are intended to be within the scope of the invention.
Referring to fig. 1, a DBMS management method based on a command line according to an embodiment of the present invention includes the following steps,
step 1, acquiring an action instruction from a preset action instruction library; illustratively, build a command line menu component: based on bash and cursor tool libraries, compiling a universal customizable menu component supporting visual interactive operation, wherein the component functions comprise a menu option function, a menu style function and a trigger action function after menu selection; the user can operate the menu by up-down-left-right direction keys, can select the menu by inputting numbers, and also supports a search menu function to input instructions, as shown in fig. 4.
Step 2, calling and outputting the form in a preset form library according to the action instruction; illustratively, a form component is packaged on the basis of secondary development of a linux command line dialog tool, is used for a user graphical interface of a dbms system, and is used for receiving data entry of a user; the dialog composite form function form, the multiple selection form, the single selection form, and the message notification form are mainly applied, as shown in fig. 5.
Step 3, acquiring the filled form and the action instruction; and selecting a preset function program from a processing program library and executing the preset function program based on the filled form and the action instruction. Illustratively, the process module is used for triggering and processing the system core action based on the bash development. The main function of the system is to be responsible for calling each database command line tool so that the system can be accessed to each type of database system to avoid database drive development; the process module is the definition of a logic layer and is the general name of a group of special function script programs; for example, login handler, login, forgotten password handler, forward _ pass, application resource handler, resource _ access _ application, work order generation handler, create _ work _ order, etc. as shown in fig. 6.
In the embodiment of the invention, the method further comprises the following steps: the web api interface is developed and realized on the basis of php to solve the problem that the bash language is not good at the web interaction mode. Exposing functions needing to interact with users inside dbms to external users or system calls in a web interface mode so as to have network functions; the web api interface is designed with two services, an account service and a work order service, which are respectively used for user account operation (account activation, password forgetting) and work order operation (work order approval, work order rejection), as shown in fig. 7.
In the embodiment of the invention, the method further comprises the following steps: a message notification mode of the mail is developed, internal messages are distributed to users in a mail mode, and a link of a system web api interface is implanted in the mail to realize interaction with the system and triggering of commands by clicking a mail link, as shown in FIGS. 8 and 9.
In summary, in the method of the embodiment of the present invention, based on the database command line tool, a loosely coupled and easily expandable database management system is established through the bash and web server email systems; it has the following advantages:
firstly, the database drive is not required to be developed one by one based on each heterogeneous database to realize the access and control of the database;
secondly, an authentication system is established on the upper layer of the managed database, so that unified authentication and unified control of a plurality of databases are realized;
thirdly, due to the modular design of the system, the support for a new type of database in the future is easy to increase;
fourthly, because the system works between the user and the database to be accessed, enough logic space is reserved for expanding the functions of the database.
Referring to fig. 2 and fig. 3, a database management system according to an embodiment of the present invention includes five core components: the system comprises a main control module, a menu module, a form module, a processing module and a webApi module.
Main control module (main): the main control program of the system is responsible for unified authentication login and multi-factor authentication functions of the system, and coordinates and calls other function modules respectively to realize system functions.
The menu component comprises: a support component for system menu functions, the functions comprising: the method comprises the following steps of selecting a cursor function, redrawing a function when the window size is changed, prompting an error, displaying a centering function, supporting home end pageup pagedown backspace for function keys, supporting configuration, setting line spacing, protecting a screen, supporting a multi-level menu forward and backward function and left and right keys of the cursor.
Form component: a support component for system form functions, the functions comprising: the cancel/confirm logic is realized in form, and finally, only the state, the form value and the circulation value need to be returned; defining a return state value and a next mode of the form submit cancel exit; successfully submitting form submit return data; canceling the submission of the form cancel and returning to the previous state; entering other branch flow to flow the form- > form- > process the form- > menu; the return data uses the keypair: the PROCESS comprises an export G _ OPTIO N, an export FORM _ xxxx, an export PROCESS _ xxxx and an export MENU _ xxxx, wherein the export G _ OPTIO N, the export FORM _ xxxx and xxxxx, the export PROCESS _ xxxx and xxxxxx are respectively used for updating an export value, and the export value is covered to a global variable.
A processing program module: the data verification method is mainly responsible for functions of data interaction and data verification involved in the form or menu. And the system work order function is realized. And the system is responsible for calling the self-contained command line tool of each database to realize the interaction with the corresponding database.
The webAPI module: the mail approval flow is mainly realized, so that work orders in the system can be quickly approved and circulated in a mail mode without logging in the system for operation, and the production efficiency is improved. The examination and approval authorization connection in the mail calls a webAPI interface, and a one-time token interface is applied to ensure the safety. token designs 256-bit random characters + time amp + uuid + random code + user _ email > md5, token is valid only once.
The invention processes the authentication login procedure in the program library: the method comprises the steps that a login information form is filled in based on a user, authentication information (an account number and a password) of the user is submitted, after the authentication information is submitted, a processing program firstly checks whether the input of the user is legal (the input information is not empty and meets the format requirement of an input parameter item), after the input is verified to be legal and valid, a system background database is used for inquiring whether the login information of the user exists and is correct, if the login information is correct, the user is required to provide a multi-factor verification code, the user submits the multi-factor verification code form, after the verification code is verified, the system registers the current user information, updates the latest login time of the user, judges that the user successfully logs in, and returns the login information to a user system function interface.
The invention processes the application of the login resources of the database of the program library: a user applies for login and related operation authority of required database resources by filling in a database resource application form, after the form is submitted, a resource application processing program performs form validity verification, and after the verification is correct, the resource application processing program writes into a background database and generates approval flow worksheet information to a database worksheet, generates an application form approval mail, and sends the mail to a corresponding approver; the resource application flow is completed.
The invention processes the mail approval of the program library: after receiving the approval mail, the auditor checks the user application information and judges whether to approve; and triggering and sending a web _ api call request to the system by clicking the link agreed or rejected in the mail so as to trigger the internal action of the system and finish the logic of approval or rejection. After the system receives the agreed command, the corresponding database user and operation authority are established for the applicant in the applied database based on the application authority information in the application work order; and writing the information of the users in the database into a background user authority table (the part of information is not disclosed to the users, and the users can only use but can not obtain specific information, so that the users can not bypass the DBMS to directly log in the service database) for the next time of user login.
The invention processes the login of a database of a program library: after the user application is passed, the user can see the applied data resource in a login resource menu after logging in the system, the menu option is selected, the database login operation is triggered, after the system receives the user login command, a user authority table of a background database of the system is inquired, the internal account name and the password of the user in the database to be logged in are inquired, the login information is transmitted to a database command line tool, the verification of the database login is completed, and the control authority and the interface of the logged-in command line tool are returned to the current user.
The web _ api interface of the invention: because the processing operation of the system is a function without the external operation of the system in the server command line mode, the system opens the form of connecting some functions (work order approval and account activation) needing to interact with the external user of the system to the web-api interface to the outside of the system, and when the external user clicks the agreed link in the mail, the link address is actually called to the web-api interface; after the system receives the web _ api call, the system once interfaces the background database of the system at the web _ api interface layer to execute the operations of increasing, deleting, modifying and checking the related database, and the other part calls the process component of the system to complete the execution of the internal operation of the system.
The unified management system can realize one-time login access to all types of database resources, and all operations in the system can be controlled and audited; meanwhile, the system supports the function of the work order, and the authorized approval work order of the authority is examined and approved in the form of the mail, so that the requirements of the compliance and the internal control of the multi-level approval are met. Command line based DBMS systems have authentication and authorization systems that are independent of the hosted database and support multi-factor authentication. The problem of authentication of a part of databases which cannot provide authentication is solved. Because the authentication of the system is a self-established independent system, the system is not limited by the type and the number of the hosted databases, and can log in and access all hosted database resources by only one set of authentication, thereby really realizing unified login and unified authentication. The user is not required to manage, store and memorize the account password of each managed database. And similarly, the user cannot obtain the authentication information of the hosted database, so that the security of the hosted database is better protected. The system architecture keeps good expansibility, is friendly to the types of newly-added managed databases in the future, and can expand various types of used databases as much as possible according to the type selection requirements of the databases of enterprises.
An electronic device of an embodiment of the present invention includes:
on the hardware level, the electronic device comprises: the processor optionally further comprises an internal bus, a network interface and a memory. The memory may include a memory, such as a high speed random access memory, and may also include a non-volatile memory, such as at least one disk memory. Of course, the electronic device may also include hardware required for other services.
The processor, network interface, memory are interconnected by an internal bus, which may be an industry standard architecture bus, a peripheral component interconnect standard bus, an extended industry standard architecture bus, or the like. The bus may be divided into an address bus, a data bus, a control bus, etc.
The memory is used for storing programs. In particular, the program may include program code, which includes computer operating instructions. The memory may include both memory and non-volatile storage and provides instructions and data to the processor.
The processor reads the corresponding computer program from the nonvolatile memory into the memory and then runs the computer program to form the electronic equipment on the logic level. When the processor executes the program, the following operations are specifically executed:
acquiring an action instruction from a preset action instruction library; the action instructions in the preset action instruction library at least comprise authentication login, resource authority application and database login;
calling and outputting the form in a preset form library according to the action instruction; the forms in the preset form library at least comprise a login information form, a multi-factor verification code form and a database application form;
acquiring the filled form and the action instruction, and selecting and executing a preset function program from a processing program library based on the filled form and the action instruction; the preset function programs in the processing program library at least comprise a user authentication program and a user authentication program.
A computer-readable storage medium of an embodiment of the present invention stores computer program instructions, and when the computer program instructions are loaded and executed by a processor, the processor executes a method including: acquiring an action instruction from a preset action instruction library; the action instructions in the preset action instruction library at least comprise authentication login, resource authority application and database login; calling and outputting the form in a preset form library according to the action instruction; the forms in the preset form library at least comprise a login information form, a multi-factor verification code form and a database application form; acquiring the filled form and the action instruction, and selecting and executing a preset function program from a processing program library based on the filled form and the action instruction; the preset function programs in the processing program library at least comprise a user authentication program and a user authentication program. In particular, the computer-readable storage medium includes, but is not limited to, volatile memory and/or non-volatile memory, for example. The volatile memory may include Random Access Memory (RAM) and/or cache memory (cache), among others. The non-volatile memory may include a Read Only Memory (ROM), hard disk, flash memory, optical disk, magnetic disk, and the like.
As will be appreciated by one skilled in the art, embodiments of the present application may be provided as a method, system, or computer program product. Accordingly, the present application may take the form of an entirely hardware embodiment, an entirely software embodiment or an embodiment combining software and hardware aspects. Furthermore, the present application may take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, and the like) having computer-usable program code embodied therein.
The present application is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the application. It will be understood that each flow and/or block of the flow diagrams and/or block diagrams, and combinations of flows and/or blocks in the flow diagrams and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
These computer program instructions may also be stored in a computer-readable memory that can direct a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer-readable memory produce an article of manufacture including instruction means which implement the function specified in the flowchart flow or flows and/or block diagram block or blocks.
These computer program instructions may also be loaded onto a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer implemented process such that the instructions which execute on the computer or other programmable apparatus provide steps for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
Although the present invention has been described in detail with reference to the above embodiments, those skilled in the art can make modifications and equivalents to the embodiments of the present invention without departing from the spirit and scope of the present invention, which is set forth in the claims of the present application.

Claims (10)

1.一种多云数据库管理方法,其特征在于,包括以下步骤:1. a multi-cloud database management method, is characterized in that, comprises the following steps: 从预设动作指令库中获取动作指令;其中,所述预设动作指令库中的动作指令至少包括认证登陆、资源权限申请和数据库登陆;Obtain action instructions from a preset action instruction library; wherein, the action instructions in the preset action instruction library include at least authentication login, resource permission application and database login; 根据所述动作指令调用预设表单库中的表单并输出;其中,所述预设表单库中的表单至少包括登录信息表单、多因子验证码表单、数据库申请表单;Call and output the forms in the preset form library according to the action instruction; wherein, the forms in the preset form library at least include a login information form, a multi-factor verification code form, and a database application form; 获取填写完成的表单和所述动作指令,基于所述填写完成的表单和动作指令,从处理程序库中选取预设功能程序并执行;其中,所述处理程序库中的预设功能程序至少包括用户认证程序和用户鉴权程序。Obtain the completed form and the action instruction, and select a preset function program from the processing program library based on the completed form and the action instruction and execute it; wherein, the preset function program in the processing program library at least includes User authentication procedure and user authentication procedure. 2.根据权利要求1所述的一种多云数据库管理方法,其特征在于,所述预设动作指令库的动作指令具体包括:注册账号、账号激活、忘记密码、认证登陆、多因子验证、资源权限申请、数据库登陆、数据导出、数据导入、数据库资源添加、数据库资源移除和数据库脚本发布。2. A multi-cloud database management method according to claim 1, wherein the action instructions of the preset action instruction library specifically include: registered account, account activation, forgotten password, authentication login, multi-factor authentication, resource Permission application, database login, data export, data import, database resource addition, database resource removal and database script release. 3.根据权利要求2所述的一种多云数据库管理方法,其特征在于,所述预设表单库中的表单具体包括:登录信息表单、多因子验证码表单、数据库信息表单、数据库脚本发布表单、数据库申请表单和数据导出申请表单。3. The multi-cloud database management method according to claim 2, wherein the forms in the preset form library specifically include: a login information form, a multi-factor verification code form, a database information form, and a database script release form , database application form and data export application form. 4.根据权利要求3所述的一种多云数据库管理方法,其特征在于,所述处理程序库中的预设功能程序具体包括:用户提交表单的输入数据校验程序、用户认证程序、用户鉴权程序、表单数据写入后台数据库程序和表单信息生成邮件审批流程序。4 . The method for managing a multi-cloud database according to claim 3 , wherein the preset function programs in the processing program library specifically include: an input data verification program for user submission forms, a user authentication program, a user authentication program, and a user authentication program. 5 . Authorization program, form data writing background database program and form information generation mail approval flow program. 5.根据权利要求4所述的一种多云数据库管理方法,其特征在于,所述获取填写完成的表单和所述动作指令;基于所述填写完成的表单和动作指令,从处理程序库中选取预设功能程序并执行的步骤具体包括:5. A multi-cloud database management method according to claim 4, characterized in that, the acquisition of the completed form and the action instruction; based on the completed form and the action instruction, selecting from a processing program library The steps of presetting the function program and executing it include: 基于process模块调用各个数据库命令行工具,实现各个类型的数据库系统的接入;其中,所述process模块基于bash开发,集成有处理程序库。Based on the process module, various database command line tools are called to realize the access of various types of database systems; wherein, the process module is developed based on bash, and is integrated with a processing program library. 6.根据权利要求1所述的一种多云数据库管理方法,其特征在于,所述从预设动作指令库中获取动作指令的具体步骤包括:6. A multi-cloud database management method according to claim 1, wherein the specific step of acquiring the action instruction from the preset action instruction library comprises: 基于菜单组件,通过获取方向键信息、输入序号信息或索引信息从预设动作指令库中获取动作指令;Based on the menu component, obtain the action command from the preset action command library by obtaining the direction key information, inputting the serial number information or the index information; 其中,所述菜单组件为基于bash和cursor工具库编写的通用的可定制的支持可视化交互操作的菜单组件;菜单组件的功能包括菜单选项功能、菜单样式功能和菜单选择后触发动作功能;Wherein, the menu component is a general customizable menu component that supports visual interactive operation based on bash and cursor tool library writing; the function of the menu component includes menu option function, menu style function and menu selection trigger action function; 所述根据所述动作指令调用预设表单库中的表单并输出的步骤具体包括:The step of invoking and outputting the form in the preset form library according to the action instruction specifically includes: 基于表单组件,根据所述动作指令调用预设表单库中的表单并输出;Based on the form component, call and output the form in the preset form library according to the action instruction; 其中,所述表单组件为基于linux命令行dialog工具二次开发封装的表单组件,用于dbms系统的用户图形界面接口输出展示表单;所述表单组件具有复合表单功能form、多选表单、单选表单和消息通知表单功能。Wherein, the form component is a form component based on the secondary development and encapsulation of the linux command line dialog tool, and is used for the user graphical interface interface of the dbms system to output and display forms; Forms and message notification form functions. 7.根据权利要求1所述的一种多云数据库管理方法,其特征在于,所述获取填写完成的表单和所述动作指令,基于所述填写完成的表单和动作指令,从处理程序库中选取预设功能程序并执行的过程具体包括:7. A multi-cloud database management method according to claim 1, characterized in that, the acquisition of the completed form and the action instruction, based on the completed form and the action instruction, is selected from a processing program library The process of presetting the function program and executing it specifically includes: 所述用户认证程序:基于用户填写的登陆信息表单获取用户的认证信息;验证输入的认证信息正确后,调用多因子验证码表单输出给用户;基于用户填写的多因子验证码表单获取用户提供多因子验证码,验证通过后判定用户登陆成功;The user authentication program: obtain the user's authentication information based on the login information form filled in by the user; after verifying that the input authentication information is correct, call the multi-factor verification code form to output to the user; obtain the user's multi-factor verification code form based on the multi-factor verification code form filled in by the user. Factor verification code, after the verification is passed, it is determined that the user has successfully logged in; 所述用户鉴权程序:获取用户填写的数据库申请表单并验证,验证无误后生成审批流工单信息到数据库工单表中;基于审批流工单信息生成申请表单审批邮件并发送给预设地址,所述邮件中设置有同意和驳回链接;The user authentication program: obtain the database application form filled in by the user and verify it, and generate the approval flow work order information into the database work order table after the verification is correct; generate the application form approval email based on the approval flow work order information and send it to the preset address , and the emails are provided with consent and rejection links; 获取邮件中同意或驳回链接的触发信息,完成同意或驳回审批;其中,获取到同意的触发信息后,基于用户在审批流工单信息中申请的权限信息,为用户在所申请的数据库内部创建对应的数据库用户及操作权限,并将所述数据库用户的信息写入用户权限表用于下次用户登陆时使用,完成申请通过;Obtain the trigger information of the approval or rejection link in the email, and complete the approval or rejection approval; among them, after the approval trigger information is obtained, based on the permission information applied by the user in the approval process work order information, create a database for the user to apply for The corresponding database user and operation authority, and the information of the database user is written into the user authority table for use when the user logs in next time, and the application is approved; 在申请得到通过的条件下,获取到数据库登陆动作指令触发时,查询数据库的用户权限表获取用户在所要登陆的数据库的登录信息,将登陆信息传递给数据库命令行工具完成登陆数据库的验证,将登录后的命令行工具操控权限和界面返回给当前用户。Under the condition that the application is approved, when the database login action command is obtained, the user permission table of the database is queried to obtain the login information of the user in the database to be logged in, and the login information is passed to the database command line tool to complete the verification of the login database. After logging in, the command line tool control permissions and interface are returned to the current user. 8.一种多云数据库管理系统,其特征在于,包括:8. A multi-cloud database management system, comprising: 动作指令获取模块,用于从预设动作指令库中获取动作指令;其中,所述预设动作指令库中的动作指令至少包括认证登陆、资源权限申请和数据库登陆;an action instruction acquisition module, configured to acquire an action instruction from a preset action instruction library; wherein, the action instruction in the preset action instruction library at least includes authentication login, resource permission application and database login; 表单获取模块,用于根据所述动作指令调用预设表单库中的表单并输出;其中,所述预设表单库中的表单至少包括登录信息表单、多因子验证码表单、数据库申请表单;A form acquisition module, configured to call and output the forms in the preset form library according to the action instruction; wherein, the forms in the preset form library at least include a login information form, a multi-factor verification code form, and a database application form; 调用执行模块,用于获取填写完成的表单和所述动作指令,基于所述填写完成的表单和动作指令,从处理程序库中选取预设功能程序并执行;其中,所述处理程序库中的预设功能程序至少包括用户认证程序和用户鉴权程序。The execution module is called to obtain the completed form and the action instruction, and based on the completed form and the action instruction, select a preset function program from the processing program library and execute it; wherein, the processing program library The preset function program includes at least a user authentication program and a user authentication program. 9.一种电子设备,包括:处理器;存储器,用于存储计算机程序指令;其特征在于,9. An electronic device, comprising: a processor; a memory for storing computer program instructions; characterized in that, 所述计算机程序指令由所述处理器加载并运行时,所述处理器执行权利要求1至7中任一项所述的多云数据库管理方法。When the computer program instructions are loaded and executed by the processor, the processor executes the multi-cloud database management method of any one of claims 1 to 7. 10.一种计算机可读存储介质,所述计算机可读存储介质存储有计算机程序指令,其特征在于,所述计算机程序指令被处理器加载并运行时,所述处理器执行权利要求1至7中任一项所述的多云数据库管理方法。10. A computer-readable storage medium storing computer program instructions, wherein when the computer program instructions are loaded and executed by a processor, the processor executes claims 1 to 7 The multi-cloud database management method described in any one of.
CN202110471424.6A 2021-04-29 2021-04-29 Multi-cloud database management method, system, device and storage medium Pending CN113220661A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202110471424.6A CN113220661A (en) 2021-04-29 2021-04-29 Multi-cloud database management method, system, device and storage medium

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202110471424.6A CN113220661A (en) 2021-04-29 2021-04-29 Multi-cloud database management method, system, device and storage medium

Publications (1)

Publication Number Publication Date
CN113220661A true CN113220661A (en) 2021-08-06

Family

ID=77089930

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202110471424.6A Pending CN113220661A (en) 2021-04-29 2021-04-29 Multi-cloud database management method, system, device and storage medium

Country Status (1)

Country Link
CN (1) CN113220661A (en)

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN113868634A (en) * 2021-12-06 2021-12-31 苏州浪潮智能科技有限公司 Storage system user authentication method and device, electronic equipment and storage medium
CN114860314A (en) * 2022-07-06 2022-08-05 深圳华锐分布式技术股份有限公司 Deployment upgrading method, device, equipment and medium based on database compatibility
CN116010007A (en) * 2022-12-29 2023-04-25 超聚变数字技术有限公司 Screen protection method and computing device

Citations (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20050177731A1 (en) * 2004-02-09 2005-08-11 International Business Machines Corporation Secure management of authentication information
US20050216356A1 (en) * 2003-07-30 2005-09-29 Pearce William M Method for automatically filling in web forms
CN102752276A (en) * 2012-02-02 2012-10-24 青岛印象派信息技术有限公司 Verification code service method and system based on cloud computing
CN104021175A (en) * 2014-05-30 2014-09-03 国云科技股份有限公司 Distributed remote establishing method of Oracle example life cycle
CN105243536A (en) * 2015-11-13 2016-01-13 盐城工学院 PDM-based authority application method
CN107248917A (en) * 2017-06-05 2017-10-13 丁辰科技(北京)有限公司 The measures and procedures for the examination and approval, service end and approval system
CN109992619A (en) * 2019-03-28 2019-07-09 杭州云毅网络科技有限公司 A kind of data query method, system, electronic equipment and storage medium
CN110086826A (en) * 2019-05-13 2019-08-02 西安点告网络科技有限公司 Information processing method
CN110334099A (en) * 2019-07-09 2019-10-15 西安点告网络科技有限公司 List calculation method and system based on database
WO2021051876A1 (en) * 2019-09-18 2021-03-25 平安科技(深圳)有限公司 Batch authorization method and apparatus for emails, and computer device and storage medium

Patent Citations (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20050216356A1 (en) * 2003-07-30 2005-09-29 Pearce William M Method for automatically filling in web forms
US20050177731A1 (en) * 2004-02-09 2005-08-11 International Business Machines Corporation Secure management of authentication information
CN102752276A (en) * 2012-02-02 2012-10-24 青岛印象派信息技术有限公司 Verification code service method and system based on cloud computing
CN104021175A (en) * 2014-05-30 2014-09-03 国云科技股份有限公司 Distributed remote establishing method of Oracle example life cycle
CN105243536A (en) * 2015-11-13 2016-01-13 盐城工学院 PDM-based authority application method
CN107248917A (en) * 2017-06-05 2017-10-13 丁辰科技(北京)有限公司 The measures and procedures for the examination and approval, service end and approval system
CN109992619A (en) * 2019-03-28 2019-07-09 杭州云毅网络科技有限公司 A kind of data query method, system, electronic equipment and storage medium
CN110086826A (en) * 2019-05-13 2019-08-02 西安点告网络科技有限公司 Information processing method
CN110334099A (en) * 2019-07-09 2019-10-15 西安点告网络科技有限公司 List calculation method and system based on database
WO2021051876A1 (en) * 2019-09-18 2021-03-25 平安科技(深圳)有限公司 Batch authorization method and apparatus for emails, and computer device and storage medium

Non-Patent Citations (4)

* Cited by examiner, † Cited by third party
Title
LLLLQZ, 在控制台真正实现选择菜单(可用方向键选择), pages 1 - 18 *
LLLLQZ: "在控制台真正实现选择菜单(可用方向键选择)", pages 1 - 18, Retrieved from the Internet <URL:https://blog.csdn.net/LLLLQZ/article/details/110405100> *
段文红: "以IT技术实现企业的OA系统", 化工建设工程, no. 05 *
郭毅棋;: "Email在网上审批中的应用", 电脑知识与技术, no. 35 *

Cited By (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN113868634A (en) * 2021-12-06 2021-12-31 苏州浪潮智能科技有限公司 Storage system user authentication method and device, electronic equipment and storage medium
CN114860314A (en) * 2022-07-06 2022-08-05 深圳华锐分布式技术股份有限公司 Deployment upgrading method, device, equipment and medium based on database compatibility
CN114860314B (en) * 2022-07-06 2022-10-04 深圳华锐分布式技术股份有限公司 Deployment upgrading method, device, equipment and medium based on database compatibility
CN116010007A (en) * 2022-12-29 2023-04-25 超聚变数字技术有限公司 Screen protection method and computing device

Similar Documents

Publication Publication Date Title
CN113220661A (en) Multi-cloud database management method, system, device and storage medium
CN114626088B (en) Task processing method and device of privacy computing platform based on algorithm interconnection
KR20160138063A (en) Techniques to operate a service with machine generated authentication tokens
CN112511653B (en) Service authority activation method, configuration method and registration method of Internet of things equipment
CN101438274B (en) Claim transformations for trust relationships
CN105812350B (en) Cross-platform single sign-on system
CN109379336A (en) A kind of uniform authentication method, distributed system and computer readable storage medium
CN110390184A (en) For executing the method, apparatus and computer program product of application in cloud
CN111835514A (en) Method and system for realizing safe interaction of front-end and back-end separated data
CN110086813A (en) Access right control method and device
CN106775882A (en) Cloud computing server batch dispositions method and device
CN106155661A (en) A kind of control cut-in method and device
CN112633830B (en) Workflow system and method capable of realizing rapid integration of application system
CN111045725B (en) Control method and device of code management system and storage medium
CN112181599A (en) Model training method, device and storage medium
CN116980136A (en) Interface processing method, device, equipment, storage medium and product of intelligent contract
US12038734B2 (en) Managing access for a manufacturing system
CN112532609B (en) Unified identity authentication method supporting access of multiple authentication sources
CN111783121B (en) Data processing method, device, equipment and storage medium
CN115859260A (en) Authority authentication method, device, equipment and readable storage medium
CN114064444A (en) Test system account generation method and device
Hatami-Alamdari et al. Monolithic architecture vs. multi-layered cloud-based architecture in the CRM application domain
CN111555887A (en) Block chain certificate compatibility processing method and device and computer storage medium
CN116737596B (en) Application program testing method and device for android
US11392898B2 (en) Secure cloud collaboration platform

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
RJ01 Rejection of invention patent application after publication
RJ01 Rejection of invention patent application after publication

Application publication date: 20210806