CN102571733B - The access method of BOSS system and system, cloud computing platform - Google Patents

Abstract

The present invention provides a BOSS system access method, system, and cloud computing platform, wherein the method includes: the cloud computing platform receives a login authentication request sent by at least one user login terminal, and after determining that the authentication is successful according to the login authentication request, Publish the BOSS application program to at least one user login terminal; the cloud computing platform replaces at least one user login terminal to run the BOSS application program. The present invention can weaken the function of the user login terminal, reduce the consumption of the terminal, thereby reducing negative effects such as the need for replacement due to terminal failure and low efficiency; at the same time, the difficulty of security management is greatly reduced, and the security performance is greatly improved.

Description

BOSS system access method, system, and cloud computing platform

technical field

The invention relates to the field of business support, in particular to a method and system for accessing a BOSS system, and a cloud computing platform.

Background technique

At present, the operating structure of the business hall is a direct connection structure of "business operation support system (BOSS)-personal computer (PC terminal)", that is, ordinary PC terminals are used to connect to the BOSS system for daily inquiries , Open/cancellation account, payment, invoice printing and other business operations. In actual operation, due to business development, the processing capacity of the PC terminal is often insufficient, and the host needs to be updated, and system failures often occur, including damage to the operating system, damage to the required software, damage to the configuration environment of the required software, and security failures , including various security incidents such as information leakage, malware, and unauthorized access. It can be seen that based on the existing direct connection architecture, in order to deal with the above-mentioned PC terminal incidents, a lot of manpower and energy are needed, but there is still little effect in terms of cost control, timeliness, and security. The details are as follows:

Since each host needs to have the computing power to handle related businesses, each terminal has processing power far beyond the initial purchase, resulting in the accumulation and waste of a large amount of computing resources; with the rapid development of business, the processing power of the terminal cannot To meet the demand, it is necessary to update the terminal every few years. The unbalanced computing resources of the existing direct connection architecture lead to a very low utilization rate of PC computing power;

Re-deployment or system failure in the existing direct-connection architecture will lead to a large amount of manpower for troubleshooting, redeployment and commissioning, and will also affect the work efficiency of the business hall, which will have a negative impact on customer satisfaction;

The complexity of end-users directly leads to the difficulty of discovering and controlling threats to intranet security and information leakage events; resulting in poor security of the existing direct connection architecture.

Contents of the invention

The first purpose of the present invention is to propose an efficient method for accessing the BOSS system.

The second purpose of the present invention is to propose an efficient cloud computing platform.

The third object of the present invention is to propose an efficient BOSS system access system.

In order to achieve the above-mentioned first purpose, the present invention provides a method for accessing the BOSS system, comprising: the cloud computing platform receives a login authentication request sent by at least one user login terminal, and after determining that the authentication is successful according to the login authentication request, sends to at least one A user logs in to a terminal to publish a BOSS application; the cloud computing platform replaces at least one user logging in to a terminal to run the BOSS application.

In order to achieve the above second purpose, the present invention provides a cloud computing platform, including: an authentication module, configured to receive a login authentication request sent by at least one user login terminal, and perform an authentication operation according to the login authentication request; a processing module for After the authentication module determines that the authentication is successful according to the login authentication request, the BOSS application program is issued to at least one user login terminal, and the BOSS application program is run instead of the at least one user login terminal.

In order to achieve the above third purpose, the present invention provides a BOSS system access system, including: at least one user login terminal, used to send a login authentication request; a cloud computing platform, used to receive the login authentication request sent by at least one user login terminal request, and after determining that the authentication is successful according to the login authentication request, issue the BOSS application program to at least one user login terminal to replace at least one user login terminal to run the BOSS application program.

In each embodiment of the present invention, by using the cloud computing platform as the computing platform for the user login terminal, the centralized processing capability of the cloud computing platform is used to process the affairs of the user login terminal, provide localized services for the user login terminal, and realize the user login terminal The function can weaken the user login terminal function, reduce the consumption of the terminal, thereby reducing the negative effects such as the need for replacement due to terminal failure and lower efficiency; at the same time, the cloud computing platform is used as the middle layer for centralized information processing, and the user login terminal to The intranet connection is completely stripped away, and the security management is changed from facing multiple terminals to facing several servers, so the difficulty of security management will be greatly reduced, and the security performance will be greatly improved.

Description of drawings

The accompanying drawings are used to provide a further understanding of the present invention, and constitute a part of the description, together with the embodiments of the present invention, are used to explain the present invention, and do not constitute a limitation to the present invention. In the attached picture:

Fig. 1 is a flowchart of Embodiment 1 of the access method of the BOSS system of the present invention;

Fig. 2 is the flow chart of Embodiment 2 of the access method of the BOSS system of the present invention;

Fig. 3 is the embodiment structural diagram of cloud computing platform of the present invention;

Fig. 4 is a structural diagram of embodiment one of the access system of the BOSS system of the present invention;

FIG. 5 is a schematic diagram of Embodiment 2 of the access system of the BOSS system of the present invention.

Detailed ways

The preferred embodiments of the present invention will be described below in conjunction with the accompanying drawings. It should be understood that the preferred embodiments described here are only used to illustrate and explain the present invention, and are not intended to limit the present invention.

method embodiment

FIG. 1 is a flow chart of Embodiment 1 of the access method of the BOSS system of the present invention. As shown in Figure 1, this embodiment includes:

Step 102: The cloud computing platform receives the login authentication request sent by at least one user login terminal, and after determining that the authentication is successful according to the login authentication request, releases the BOSS application program to at least one user login terminal; those skilled in the art can understand that the user login The terminal can be a PC terminal and a mobile terminal, etc.;

Step 104: The cloud computing platform replaces at least one user login terminal to run the BOSS application program.

In this embodiment, the cloud computing platform is used as the computing platform for the user login terminal, and the centralized processing capability of the cloud computing platform is used to process the affairs of the user login terminal, provide localized services for the user login terminal, and realize the function of the user login terminal, which can The function of user login terminal is weakened to reduce the consumption of terminal, thereby reducing the negative effects such as low efficiency caused by the need for replacement due to terminal failure; at the same time, the cloud computing platform is used as the middle layer for centralized information processing, and the connection between user login terminal and intranet It is completely stripped, and the security management is changed from facing multiple terminals to facing several servers, so that the difficulty of security management will be greatly reduced, and the security performance will be greatly improved.

FIG. 2 is a flow chart of Embodiment 2 of the access method of the BOSS system of the present invention. As shown in Figure 2, including:

Step 200, the user login terminal receives the user's login authentication request. During specific operations, the login authentication request may include various authentication information. For example, when the user logs in via fingerprint, it may include the user's fingerprint information; when using a password, include The password entered; when logging in through IC card, magnetic card, etc., the corresponding authentication information can be included;

Step 202, the user login terminal transmits the login authentication request to the cloud computing platform for verification; during specific operations, the domain management of Windows can also be integrated at the bottom layer to perform authentication, and the user can be shielded from the local terminal (that is, the user login terminal) through upper layer encapsulation. (the local terminal is only equivalent to the peripheral terminal at this time, but does not perform calculation processing), and the user can only use the desktop and application program provided by the remote platform (that is, the cloud computing platform); the specific explanation is as follows:

When the user login terminal is installed and configured, it is set to log in to the domain server mode (this is carried out in the domain (DC, domain controller, domain controller) management integrated with Windows at the bottom layer, and the user itself cannot be changed), so that in the salesperson ( When the user) logs in, the login interface can only display the interface for logging in to the domain, and the login request will be transmitted to the cloud computing platform for verification; the user can only use the desktops and applications provided by the remote platform (ie, the cloud computing platform), thereby Block the user's ability to operate the local terminal (the local terminal is only equivalent to a display and input terminal at this time, but does not perform calculation processing);

Step 204, after the cloud computing platform determines that the authentication is passed according to the login authentication request, it releases the preset BOSS application program to the user login terminal; And change, that is to say, if the user logs in after changing the terminal, the BOSS application program is correspondingly sent to the new login terminal, that is, the user can roam to different terminals and obtain the same application (ie, the BOSS application program);

Step 206, after the BOSS application program is opened, the cloud computing platform fills in the user name/password set up for single sign-on (SSO, SingleSignOn); those skilled in the art can understand that the user for SSO The username/password can be the same as the username/password for login authentication, or can be set separately according to actual needs. Through SSO, the user login terminal corresponds to the login user one by one, that is, a terminal only runs one user login at a certain moment. A user is only allowed to log in to one terminal at a certain moment, so that after logging in to the cloud computing platform, multiple repeated logins of multiple applications are avoided;

Step 208, the cloud computing platform runs the application program, exchanges information with the BOSS system, and completes related business actions; for example: after the end user makes a query, after entering the customer number, the cloud computing platform performs calculations, and the customer number and query date, etc. After the information is verified and calculated, it is sent to the BOSS system, and the result returned by the BOSS system is formatted, and finally displayed on the terminal user's monitor;

Step 210, after the cloud computing platform receives the peripheral device call request, it calls the local peripheral device (such as a printer, scanner, etc.) of the user's login terminal corresponding to the virtual peripheral device to perform business operations, wherein the virtual peripheral device on the cloud computing platform The correspondence between the local peripherals of the user terminal and the virtual peripherals on the cloud computing platform through the Remote Desktop Protocol (Remote Desktop Protocol, RDP) protocol is realized through the mapping of the RDP protocol;

Step 212, the user login terminal sends disconnection request information, such as login ID, request time, etc., to the cloud computing platform, and the cloud computing platform records the user request, calculates the login time, and compares the current status of the user with the BOSS application The operation log is recorded in the database; during specific operations, the cloud computing platform can store the operation information of the BOSS application program in real time when the user login terminal is disconnected (that is, when logging out), so that when the corresponding user logs in again from another terminal When logging out, the cloud computing platform directly searches the stored operation information from the database, and directly continues to run the corresponding BOSS application. ); For example: when opening an account, the salesperson first enters the customer's information, and then needs to leave temporarily for 5 minutes because of the need to copy the customer's ID card. At this time, the salesperson can log out of the cloud computing platform and wait for the customer's ID card to be copied , you can log in to the cloud computing platform again, and continue to enter from the place where you entered last time, without re-entering the customer information that has already been entered;

In addition, those skilled in the art can understand that by using the cloud computing platform as the computing platform for the user login terminal, the centralized processing capability of the cloud computing platform can be used to process the transaction of the user login terminal, and the load of the cloud computing platform can also be used. Balance capability, specifically: when multiple user login terminals send login authentication requests at the same time, the balance algorithm of the server in the cloud computing platform is distributed to different servers to perform practical processing for the multiple user login terminals. The load balancing capability among servers realizes the dynamic expansion of computing resources.

In this embodiment, the cloud computing platform is used as the computing platform for the user login terminal, and the centralized processing capability of the cloud computing platform is used to process the affairs of the user login terminal, provide localized services for the user login terminal, and realize the function of the user login terminal, which can The function of user login terminal is weakened to reduce the consumption of terminal, thereby reducing the negative effects such as low efficiency caused by the need for replacement due to terminal failure; at the same time, the cloud computing platform is used as the middle layer for centralized information processing, and the connection between user login terminal and intranet are completely stripped, and the security management is changed from facing multiple terminals to facing several servers, so that the difficulty of security management will be greatly reduced, and the security performance will be greatly improved; preferably, by adding the user login terminal to the domain, it realizes Forcing users to be unable to log in to the local terminal further improves security, and by storing the operation information of the BOSS application when logging out, quick access is realized.

Platform Embodiment

FIG. 3 is a structural diagram of an embodiment of the cloud computing platform of the present invention. All method embodiments shown in FIGS. 1 and 2 can be applied to this embodiment. This embodiment includes: an authentication module 30, configured to receive a login authentication request sent by at least one user login terminal, and perform an authentication operation according to the login authentication request; a processing module 32, configured to determine that the authentication is successful according to the login authentication request by the authentication module 30 , distributing the BOSS application program to at least one user login terminal, and running the BOSS application program instead of the at least one user login terminal.

During specific operations, the cloud computing platform may also include: a database 34, which is used to store the operation information of the BOSS application program in real time during the process of the processing module 32 replacing at least one user login terminal to run the BOSS application program and carry out information interaction with the BOSS system .

The processing module 32 may include: a first processing sub-module 322, configured to issue the BOSS application program to at least one user login terminal after the authentication module 30 determines that the authentication is successful according to the login authentication request, and run the BOSS application program instead of at least one user login terminal program;

The second processing submodule 324 is used to log out any user terminal in at least one user login terminal, when logging in any user terminal again, according to the operation information of the BOSS application stored in the database 34 when logging out, Continue running the BOSS application directly.

In this implementation, through the processing module 32 of the cloud computing platform, the BOSS application program of each user login terminal is centrally run, and localized services are provided for the corresponding user login terminal, so as to realize the function of the user login terminal and weaken the function of the user login terminal. Reduce the consumption of terminals, thereby reducing the negative effects such as low efficiency caused by the need for replacement due to terminal failures; at the same time, each module of the cloud computing platform is used as the middle layer for centralized information processing, and the connection between the user login terminal and the intranet is completely stripped, ensuring security Management has changed from facing multiple terminals to facing several servers, so that the difficulty of security management will be greatly reduced, and the security performance will be greatly improved; in addition, the authentication module 30 can support multiple authentication methods during specific operations, such as Password, fingerprint, magnetic card, etc.; preferably, the database 44 stores the operation information of the BOSS application program when logging out, and the second processing submodule 324 realizes quick access according to the stored operation information.

System embodiment

Fig. 4 is a structural diagram of an embodiment of the access system of the BOSS system of the present invention. All method embodiments shown in FIGS. 1 and 2 can be applied to this embodiment. This embodiment includes: at least one user login terminal, used to send a login authentication request; a cloud computing platform, used to receive the login authentication request sent by at least one user login terminal, and after determining that the authentication is successful according to the login authentication request, send a request to at least one The user login terminal publishes the BOSS application program instead of running the BOSS application program on at least one user login terminal. During specific operations, the system may also include a BOSS system, configured to perform information interaction with at least one user login terminal through the cloud computing platform running the BOSS application program.

As shown in Figure 4, the explanation is as follows: the architecture of the access system of the BOSS system is divided into three layers, the first layer is a plurality of user login terminals (such as business terminal layer), the second layer is a cloud computing platform layer (including the software layer and back-end hardware support layer), and the third layer is the internal BOSS system. Each business hall terminal is connected to the cloud computing platform through TCP/IP (can be LAN (local area network, local area network) or WAN (wide area network, wide area network)); the cloud computing platform is connected to the internal BOSS system through LAN. The cloud computing platform is divided into AD (Active Directory, Active Directory) area (not shown, corresponding to the authentication module 30 in Fig. 3), database area (not shown in the figure, corresponding to the database 34 in Fig. Not shown, corresponding to the processing module 32 in Fig. 3), wherein, the AD area is used for authentication, the database area is used for storing platform information, and the computing area is used for installing various BOSS application programs, and the BOSS application programs are issued to salespersons for use , all calculations are completed in the calculation area, which realizes the functions of the terminals of each business hall.

FIG. 5 is a schematic diagram of Embodiment 2 of the access system of the BOSS system of the present invention. All method embodiments shown in FIGS. 1 and 2 can be applied to this embodiment. This example includes:

The terminal area composed of terminals in each business hall, in which the client software of the cloud computing platform can be installed on the terminals of each business hall to achieve stricter control or access through the IE browser;

The security gateway server is used to provide a web-based access control server for remote users to access through browsers such as IE; by default, ports 443 and 80 are enabled for communication, and the server is usually placed in a DMZ (demilitarized zone, isolated area) Area, cluster technology can be used for redundant design;

It is equivalent to the server group (clusterservers, cluster server) of the processing module 32 in Fig. 3: the calculation area configures servers according to the calculation capacity, and performs load balancing;

The database (disksets, disk group) that is equivalent to database 34 among Fig. 3: can adopt the Clusterer (cluster) design of SQL (standardquerylanguage, standard query language), also can not set up a new SQL cluster, for example can be connected to an existing Some SQL clusters or other installed SQL servers;

It is equivalent to the AD of the authentication module 30 in Fig. 3: a new AD can be created or an existing AD can be adopted. If it is an existing AD, there is no need to modify it, only need to connect to the existing server.

Among them, the cloud computing platform includes server farms, databases and AD, and the cloud computing platform can support the cluster technology of Microsoft (Microsoft), so as to achieve the purpose of parallel processing of client requests by multiple servers and load balancing.

In this embodiment, by adopting the "cloud" computing model, the computing power is separated from the terminals in the business hall, and the reasonable allocation of computing resources is realized through load balancing. Since all calculations are performed uniformly on the server, the terminals in the business hall do not need to be replaced frequently. The service life is extended; there is no need to deploy application software on the terminal, which simplifies terminal management; preferably, by adding the terminal to a domain, the salesperson cannot log in to the local terminal, improving the security and manageability of the terminal.

Finally, it should be noted that the above are only preferred embodiments of the present invention, and are not intended to limit the present invention. Although the present invention has been described in detail with reference to the foregoing embodiments, those skilled in the art can still understand The technical solutions recorded in the foregoing embodiments are modified, or some of the technical features are equivalently replaced. Any modifications, equivalent replacements, improvements, etc. made within the spirit and principles of the present invention shall be included within the protection scope of the present invention.

Claims (10)

1. An access method of a BOSS system, characterized in that, comprising: The cloud computing platform receives the login authentication request sent by at least one user login terminal, and after determining that the authentication is successful according to the login authentication request, releases the BOSS application program to the at least one user login terminal; The cloud computing platform runs the BOSS application program instead of the at least one user login terminal, and performs information interaction with the BOSS system, and the cloud computing platform performs centralized information processing as an intermediate layer. 2. the access method of BOSS system according to claim 1, is characterized in that, also comprises before the step that described cloud computing platform receives the login authentication request that at least one user login terminal sends: Setting the at least one user login terminal to log in to the domain server mode; The domain controller of the at least one user login terminal receives the input login authentication request, and directly forwards the login authentication request to the cloud computing platform. 3. The access method of the BOSS system according to claim 1 or 2, characterized in that, the step of performing information interaction between the BOSS application program and the BOSS system is performed on the cloud computing platform instead of the at least one user login terminal The process also includes: The operation information of the BOSS application program is stored in real time. 4. The access method of the BOSS system according to claim 3, further comprising: After logging out of any user terminal in the at least one user login terminal, when logging in any user terminal again, the cloud computing platform directly continues to Run the BOSS application. 5. The access method of the BOSS system according to claim 1 or 2, characterized in that, when the at least one user login terminal is a plurality of user terminals, the cloud computing platform replaces the at least one user login terminal to run The steps of the BOSS application include: The cloud computing platform assigns a corresponding server to the at least one user login terminal according to a preset load balancing method, and the corresponding server replaces the at least one user login terminal to run the BOSS application program and communicate with the BOSS system interact. 6. A cloud computing platform, characterized in that, comprising: An authentication module, configured to receive a login authentication request sent by at least one user login terminal, and perform an authentication operation according to the login authentication request; A processing module, configured to issue the BOSS application program to the at least one user login terminal after the authentication module determines that the authentication is successful according to the login authentication request, and run the BOSS application program instead of the at least one user login terminal; Wherein, the cloud computing platform performs centralized information processing as an intermediate layer. 7. The cloud computing platform according to claim 6, further comprising: The database is used to store the operation information of the BOSS application in real time during the process of the processing module replacing the at least one user login terminal to run the BOSS application to exchange information with the BOSS system. 8. cloud computing platform according to claim 7, is characterized in that, described processing module comprises: The first processing submodule is configured to issue the BOSS application program to the at least one user login terminal after the authentication module determines that the authentication is successful according to the login authentication request, and run the BOSS instead of the at least one user login terminal application; The second processing submodule is configured to log in any user terminal successfully after logging out of any user terminal in the at least one user login terminal, according to the BOSS application stored in the database when logging out The operation information of the program directly continues to run the BOSS application. 9. An access system for a BOSS system, comprising: at least one user login terminal for sending a login authentication request; The cloud computing platform is configured to receive the login authentication request sent by the at least one user login terminal, and after determining that the authentication is successful according to the login authentication request, issue a BOSS application program to the at least one user login terminal instead of the at least one The user logs in to the terminal to run the BOSS application program to interact with the BOSS system; the cloud computing platform acts as an intermediate layer for centralized information processing. 10. The access system of BOSS system according to claim 9, is characterized in that, also comprises: The BOSS system is configured to perform information interaction with the at least one user login terminal through the cloud computing platform running the BOSS application program.