CN112131247A - Method and device for safe isolation of host data query - Google Patents

Abstract

The invention provides a method and a device for safety isolation of host data query, wherein the method comprises the following steps: compiling a query SQL statement according to the production data query task, and determining an operation text; determining a simulation manual operation script according to the production data query task; simulating keyboard operation to generate a keyboard operation instruction according to the simulated manual operation script and the operation text; and sending the keyboard operation instruction to the host system, inquiring production data and storing the production data to the server. The invention isolates the production environment of the operator and the host system, so that the operator can not directly log in the host system for operation, namely, the data query can be completed, and the data query can only be performed in the host system for fixed operation; the data query based on the host can be standardized and automated, so that the working efficiency is improved, the operation safety is improved, and the automated operation of a host system is realized.

Description

Method and device for safe isolation of host data query

technical field

The invention relates to the technical field of computer data processing, and in particular, to a method and device for safe isolation of host data query.

Background technique

This section is intended to provide a background or context for the embodiments of the invention that are recited in the claims. The descriptions herein are not admitted to be prior art by inclusion in this section.

Currently, the operation mode of manually logging in to the terminal is used to query data on the host system. When querying production data on the host system, the operator needs to log in to the terminal of the host system and use the command line to operate.

To directly log in to the host to operate, you need to be familiar with the host operating system, and the operator needs additional training to log in to the host to operate.

It is a risky thing to directly log in to the host system to operate. Moreover, it is impossible to control which commands are input by the operator by manually logging in to the host system to operate. Operators submitting incorrect instructions, or submitting jobs that impact performance, can impact financial operations. This way of working creates the potential for operator error and potential production failure.

Therefore, how to provide a new solution that can solve the above-mentioned technical problems is a technical problem to be solved urgently in the art.

SUMMARY OF THE INVENTION

The embodiment of the present invention provides a method for the security isolation of host data query, which isolates the operator from the production environment of the host system, so that the operator cannot directly log in to the host system to operate, and the data query can be completed, so that the data query can only be performed on the host computer. The system performs fixed operations, including:

According to the production data query task, write the query SQL statement to determine the job text;

According to the production data query task, determine the simulation manual operation script;

According to the simulated manual operation script and job text, simulate keyboard operation to generate keyboard operation instructions;

Send the keyboard operation instructions to the host system, query the production data and save it to the server.

The embodiment of the present invention also provides a device for security isolation of host data query, including:

The job text determination module is used to query tasks according to the production data, write query SQL statements, and determine the job text;

The simulation manual operation script determination module is used to query the task according to the production data and determine the simulation manual operation script;

The keyboard operation instruction generation and determination module is used to simulate the keyboard operation to generate the keyboard operation instruction according to the simulated manual operation script and the job text;

The production data query module is used to send the keyboard operation instructions to the host system, and query the production data and save it to the server.

An embodiment of the present invention further provides a computer device, including a memory, a processor, and a computer program stored in the memory and running on the processor, where the processor implements the above-mentioned host data query security when executing the computer program method of isolation.

An embodiment of the present invention further provides a computer-readable storage medium, where the computer-readable storage medium stores a computer program for executing the above-mentioned method for security isolation of host data query.

A method and device for security isolation of host data query provided by the embodiment of the present invention, firstly, according to the production data query task, write query SQL statement to determine the job text; then according to the production data query task, determine the simulation manual operation script; then according to the simulation Manually operate the script and job text, simulate keyboard operation to generate keyboard operation instructions; finally, send the keyboard operation instructions to the host system, query the production data and save it to the server. In the embodiment of the present invention, the operator does not need to understand the operation of the host terminal, and the operator only needs to write SQL statements to generate the optimal job text; the manual single keyboard operation is recorded in the job text, and the script program is used to generate the manual multiple operation text. Simulate the manual operation script, then use the simulated manual operation script to read the job text, simulate the keyboard operation, realize only the fixed standard operation, and eliminate the operation outside the scope; isolate the operator from the production environment of the host system, so that the operator cannot directly Log in to the host system to complete data query, realizing that data query can only be performed on the host system for fixed operations; host-based data query can be standardized and automated, which not only improves work efficiency, but also improves operation security It realizes the automatic operation of the host system.

Description of drawings

In order to explain the embodiments of the present invention or the technical solutions in the prior art more clearly, the following briefly introduces the accompanying drawings that need to be used in the description of the embodiments or the prior art. Obviously, the accompanying drawings in the following description are only These are some embodiments of the present invention. For those of ordinary skill in the art, other drawings can also be obtained according to these drawings without creative efforts. In the attached image:

FIG. 1 is a schematic diagram of a method for security isolation of host data query according to an embodiment of the present invention.

FIG. 2 is a schematic diagram of a process of determining a job text in a method for security isolation of host data query according to an embodiment of the present invention.

3 is a schematic diagram of a process of querying production data of a method for security isolation of host data query according to an embodiment of the present invention.

FIG. 4 is a schematic diagram of a computer device running a method for security isolation of host data query implemented by the present invention.

FIG. 5 is a schematic diagram of an apparatus for security isolation of host data query according to an embodiment of the present invention.

FIG. 6 is a relational flow chart of another embodiment of an apparatus for security isolation of host data query according to the present invention.

Detailed ways

In order to make the purposes, technical solutions and advantages of the embodiments of the present invention clearer, the embodiments of the present invention will be further described in detail below with reference to the accompanying drawings. Here, the exemplary embodiments of the present invention and their descriptions are used to explain the present invention, but not to limit the present invention.

FIG. 1 is a schematic diagram of a method for security isolation of host data query according to an embodiment of the present invention. As shown in FIG. 1 , an embodiment of the present invention provides a method for security isolation of host data query, which isolates the operator from the production environment of the host system, The operator can not directly log in to the host system to operate, and can complete the data query, which realizes that the data query can only perform fixed operations on the host system, including:

Step 101: According to the production data query task, write a query SQL statement to determine the job text;

Step 102: Determine a simulated manual operation script according to the production data query task;

Step 103: simulate keyboard operation to generate keyboard operation instructions according to the simulated manual operation script and the job text;

Step 104: Send the keyboard operation instruction to the host system, and query the production data and save it to the server.

In a method for security isolation of host data query provided by an embodiment of the present invention, first, according to a production data query task, a query SQL statement is written to determine a job text; then according to the production data query task, a simulated manual operation script is determined; then according to the simulated manual operation Script and job text, simulate keyboard operation to generate keyboard operation instructions; finally, send the keyboard operation instructions to the host system, query the production data and save it to the server. In the embodiment of the present invention, the operator does not need to understand the operation of the host terminal, and the operator only needs to write SQL statements to generate the optimal job text; the manual single keyboard operation is recorded in the job text, and the script program is used to generate the manual multiple operation text. Simulate the manual operation script, then use the simulated manual operation script to read the job text, simulate the keyboard operation, realize only the fixed standard operation, and eliminate the operation outside the scope; isolate the operator from the production environment of the host system, so that the operator cannot directly Log in to the host system to complete data query, realizing that data query can only be performed on the host system for fixed operations; host-based data query can be standardized and automated, which not only improves work efficiency, but also improves operation security It realizes the automatic operation of the host system.

In order to prevent operators from submitting erroneous instructions or submitting jobs that affect performance and affect financial services, an embodiment of the present invention provides a method for security isolation of host data query, which may include:

According to the production data query task, write the query SQL statement to determine the job text;

According to the production data query task, determine the simulation manual operation script;

According to the simulated manual operation script and job text, simulate keyboard operation to generate keyboard operation instructions;

Send the keyboard operation instructions to the host system, query the production data and save it to the server.

FIG. 2 is a schematic diagram of a process of determining a job text in a method for security isolation of host data query according to an embodiment of the present invention. As shown in FIG. 2 , when implementing the method for security isolation of host data query provided by an embodiment of the present invention, in a In the embodiment, according to the production data query task, writing a query SQL statement to determine the job text, including:

Step 201: According to the production data query task, write a query SQL statement, enter a WEB page, and generate a job preset text in combination with preset host parameters;

Step 202 : perform pre-grammar check and parameter check on the job preset text, output the job text after the check is passed, and save it to the server.

In the implementation, in order to isolate the operator from the production environment of the host system, so that the operator cannot directly log in to the host system to operate, it is necessary to convert the original manual input query command into a programmed execution language, which may specifically include:

First, according to the production data query task, write query SQL statements, enter the WEB page, and combine the preset host parameters to generate job preset text; the operator does not need to understand the operation of the host terminal, and the operator only needs to write the SQL statement to generate the optimal job Text; record a single manual keyboard operation to the job preset text; in order to prevent problematic jobs from being submitted to the production environment, the job preset text is then subjected to pre-grammar check and parameter check, and after the check is passed, it is output as job text and saved. to the server; in this embodiment, each query job can perform syntax check and parameter check in advance, preventing problematic jobs from being submitted to the production environment. Before submitting the job text, the SQL statement is also reviewed to check whether it conforms to the specification.

When specifically implementing the method for security isolation of host data query provided by an embodiment of the present invention, in one embodiment, the aforementioned determination of a simulated manual operation script according to a production data query task includes:

Analyze the production data query task, and obtain the name, user name, account, host system operation instructions and host system operation sequence of the login server;

The name, user name, account, host system operating instructions and host system operating sequence of the login server are programmed to generate a simulated manual operation script.

In the embodiment, in order to realize the simulated manual login to the host system, a script that can realize the simulated manual operation is required. First, the production data query task is analyzed, and the name, user name, account, host system operation instruction and host system operation sequence of the login server are obtained; From the job name of the production data query task, you can obtain the name of the login server, user name, account, host system operating instructions, and host system operation sequence; The operation sequence is programmed to generate a simulated manual operation script, which realizes the operation program, avoids the problem of affecting the performance of the host system or causing system errors caused by manual input instructions, and ensures the safe, stable and efficient operation of the host system. In the embodiment, as described in Table 1, a specific program code for simulating a manual operation script is provided.

Table 1

When specifically implementing the method for security isolation of host data query provided by the embodiment of the present invention, in one embodiment, the aforementioned generation of keyboard operation instructions by simulating keyboard operation according to the simulated manual operation script and job text includes:

On the terminal that can log in to the host system, run the scheduled task, obtain the job text from the server regularly, execute the simulated manual operation script, read the job text by simulating keyboard operation, and generate keyboard operation instructions.

In the embodiment, in order to enable the host system to recognize the job text, a keyboard operation instruction needs to be generated, and the main process includes:

On the terminal that can log in to the host system, run the scheduled task, obtain the job text from the server regularly, execute the simulated manual operation script, read the job text by simulating keyboard operation, and generate keyboard operation instructions; On the production terminal, run the scheduled task, obtain the job text from the server regularly, execute the simulated manual operation script, use the simulated keyboard operation method, simulate the manual login to the host computer, and simulate the operation of submitting the job, mainly by simulating the keyboard operation method, with text form save. The keyboard operation instruction is read by the program, and the keyboard operation instruction is sent to the terminal tool of the host system, so as to realize the operation of submitting the host query job and saving the result.

Record a single manual keyboard operation to the job text, use a script program to generate a simulated manual operation script for multiple manual operations, and then use the simulated manual operation script to read the job text, simulate keyboard operations, and implement only fixed and standardized operations, eliminating scope outside operation

FIG. 3 is a schematic diagram of a process of querying production data of a method for security isolation of host data query according to an embodiment of the present invention. As shown in FIG. 3 , when a method for security isolation of host data query provided by an embodiment of the present invention is specifically implemented, a In the embodiment, the aforesaid sending the keyboard operation instruction to the host system, querying the production data and saving it to the server, includes:

Step 301: obtaining the terminal operation window handle, and sending the keyboard operation instruction to the host system;

Step 302: Responding to the keyboard operation instruction in the host system, query and obtain the production data, and save it to the server.

In the embodiment, in order to query the production data, the main steps include: the terminal runs under the windows system, the windows application program needs to be written, the terminal operation window handle is obtained, and the keyboard operation instruction is sent to the host system; then the host system responds to the keyboard. Operation instructions, query to obtain production data, save to the server, and download from the server to the local when the production data needs to be used. The aforementioned server may be an FTP server.

The operator is isolated from the production environment of the host system, so that the operator cannot directly log in to the host system to operate, and can complete the data query, so that the data query can only perform fixed operations on the host system; the host-based data query can be done Standardization and automation not only improve work efficiency, but also improve the safety of operation, and realize the automatic operation of the host system

For the embodiment of the present invention, the core part is to simulate manual keyboard operation; use the simulated manual operation script to open the host operation terminal, default to manual operation, and send keyboard operation instructions to query production data according to the pre-designed script.

FIG. 4 is a schematic diagram of a computer device running a method for security isolation of host data query implemented by the present invention. As shown in FIG. 4 , an embodiment of the present invention further provides a computer device, including a memory, a processor, and a A computer program that can be run on a processor, when the processor executes the computer program, the above-mentioned method for security isolation of host data query is implemented.

An embodiment of the present invention further provides a computer-readable storage medium, where the computer-readable storage medium stores a computer program for implementing the above-mentioned method for implementing the security isolation of host data query.

The embodiment of the present invention also provides an apparatus for security isolation of host data query, as described in the following embodiments. Since the principle of the device for solving the problem is similar to a method for security isolation of host data query, the implementation of the device may refer to the implementation of a method for security isolation of host data query, and the repetition will not be repeated.

FIG. 5 is a schematic diagram of a device for security isolation of host data query according to an embodiment of the present invention. As shown in FIG. 5 , an embodiment of the present invention further provides a device for security isolation of host data query, which may include:

The job text determination module 501 is used for querying the task according to the production data, writing a query SQL statement, and determining the job text;

A simulated manual operation script determination module 502, configured to query the task according to the production data and determine the simulated manual operation script;

The keyboard operation instruction generation and determination module 503 is used to simulate the keyboard operation to generate the keyboard operation instruction according to the simulated manual operation script and the job text;

The production data query module 504 is used for sending the keyboard operation instruction to the host system, and querying the production data and saving it to the server.

When implementing the device for security isolation of host data query provided by the embodiment of the present invention, in one embodiment, the aforementioned job text determination module is specifically used for:

According to the production data query task, write the query SQL statement, enter the WEB page, and combine the preset host parameters to generate the job preset text;

The job preset text is checked for syntax and parameters in advance, and after the check is passed, it is output as job text and saved to the server.

When implementing the device for security isolation of host data query provided by the embodiment of the present invention, in one embodiment, the aforementioned simulation manual operation script determination module is specifically used for:

Analyze the production data query task, and obtain the name, user name, account, host system operation instructions and host system operation sequence of the login server;

The name, user name, account, host system operating instructions and host system operating sequence of the login server are programmed to generate a simulated manual operation script.

When implementing a host data query security isolation device provided by an embodiment of the present invention, in one embodiment, the aforementioned keyboard operation instruction generation and determination module is specifically used for:

On the terminal that can log in to the host system, run the scheduled task, obtain the job text from the server regularly, execute the simulated manual operation script, read the job text by simulating keyboard operation, and generate keyboard operation instructions.

When implementing the device for security isolation of host data query provided by the embodiment of the present invention, in one embodiment, the aforementioned production data query module is specifically used for:

Obtain the terminal operation window handle, and send the keyboard operation command to the host system;

Respond to keyboard operation instructions in the host system, query and obtain production data, and save it to the server.

The present invention also provides another embodiment of a device for security isolation of host data query. FIG. 6 is a relational flow chart of another embodiment of a device for security isolation of host data query according to the present invention, as shown in FIG. 6 , including:

1. Job text generation module: The input is standard sql statement, plus preset host parameters, to generate job text that can be run on the target host.

2. Simulation manual operation script generation module: generate manual operation scripts according to the job name of the production data query task to be submitted. The manual operation script records the login server name, user name, account, operation instructions related to the host, and operation sequence.

3. The keyboard operation instruction generation module reads the simulated manual operation script and sends the keyboard operation instruction. By reading the simulated manual operation script, send keyboard operation instructions to the host login terminal.

Fourth, the production data query module, send the keyboard operation instructions to the host system, query the production data and save it to the server

Five, ftp module, upload job text, download data query results to the local.

To sum up, the method and device for the security isolation of host data query provided by the embodiments of the present invention firstly write a query SQL statement according to the production data query task, and determine the job text; and then determine the simulated manual operation script according to the production data query task; Then, according to the simulated manual operation script and job text, simulate keyboard operation to generate keyboard operation instructions; finally, the keyboard operation instructions are sent to the host system, and the query production data is saved to the server. In the embodiment of the present invention, the operator does not need to understand the operation of the host terminal, and the operator only needs to write SQL statements to generate the optimal job text; the manual single keyboard operation is recorded in the job text, and the script program is used to generate the manual multiple operation text. Simulate the manual operation script, then use the simulated manual operation script to read the job text, simulate the keyboard operation, realize only the fixed standard operation, and eliminate the operation outside the scope; isolate the operator from the production environment of the host system, so that the operator cannot directly Log in to the host system to complete data query, realizing that data query can only be performed on the host system for fixed operations; host-based data query can be standardized and automated, which not only improves work efficiency, but also improves operation security It realizes the automatic operation of the host system.

In the embodiment of the present invention, each query job can perform syntax check and parameter check in advance, preventing problematic jobs from being submitted to the production environment. Before submitting the job, the SQL statement is also reviewed to check whether it conforms to the specification.

The invention realizes the automatic operation of the host system, and makes basic preparations for the artificial intelligence operation and maintenance in the future. In the future, artificial intelligence operation and maintenance can generate different operation scripts, and the implementation of the operation scripts is realized through the present invention. Using the present invention, in the future, the host-based version deployment and data query can be standardized and automated, which not only improves work efficiency, but also improves operation security.

As will be appreciated by one skilled in the art, embodiments of the present invention may be provided as a method, system, or computer program product. Accordingly, the present invention may take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present invention may take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, etc.) having computer-usable program code embodied therein.

The present invention is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the invention. It will be understood that each process and/or block in the flowchart illustrations and/or block diagrams, and combinations of processes and/or blocks in the flowchart illustrations and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to the processor of a general purpose computer, special purpose computer, embedded processor or other programmable data processing device to produce a machine such that the instructions executed by the processor of the computer or other programmable data processing device produce Means for implementing the functions specified in a flow or flow of a flowchart and/or a block or blocks of a block diagram.

These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer-readable memory result in an article of manufacture comprising instruction means, the instructions The apparatus implements the functions specified in the flow or flow of the flowcharts and/or the block or blocks of the block diagrams.

These computer program instructions can also be loaded on a computer or other programmable data processing device to cause a series of operational steps to be performed on the computer or other programmable device to produce a computer-implemented process such that The instructions provide steps for implementing the functions specified in the flow or blocks of the flowcharts and/or the block or blocks of the block diagrams.

The specific embodiments described above further describe the purpose, technical solutions and beneficial effects of the present invention in detail. It should be understood that the above-mentioned specific embodiments are only specific embodiments of the present invention, and are not intended to limit the scope of the present invention. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention shall be included within the protection scope of the present invention.

Claims (12)

1. a method for host data query security isolation, is characterized in that, comprises: According to the production data query task, write the query SQL statement to determine the job text; According to the production data query task, determine the simulation manual operation script; According to the simulated manual operation script and job text, simulate keyboard operation to generate keyboard operation instructions; Send the keyboard operation instructions to the host system, query the production data and save it to the server. 2. The method according to claim 1, characterized in that, according to the production data query task, writing a query SQL statement to determine the job text, comprising: According to the production data query task, write the query SQL statement, enter the WEB page, and combine the preset host parameters to generate the job preset text; The job preset text is checked for syntax and parameters in advance, and after the check is passed, it is output as job text and saved to the server. 3. method as claimed in claim 1, is characterized in that, according to production data inquiry task, determines to simulate manual operation script, comprises: Analyze the production data query task, and obtain the name, user name, account, host system operation instructions and host system operation sequence of the login server; The name, user name, account, host system operating instructions and host system operating sequence of the login server are programmed to generate a simulated manual operation script. 4. method as claimed in claim 2 is characterized in that, according to simulation manual operation script and job text, simulate keyboard operation to generate keyboard operation instruction, comprising: On the terminal that can log in to the host system, run the scheduled task, obtain the job text from the server regularly, execute the simulated manual operation script, read the job text by simulating keyboard operation, and generate keyboard operation instructions. 5. The method of claim 4, wherein the keyboard operation instructions are sent to the host system, and the query production data is saved to the server, comprising: Obtain the terminal operation window handle, and send the keyboard operation command to the host system; Respond to keyboard operation instructions in the host system, query and obtain production data, and save it to the server. 6. A device for safe isolation of host data query, characterized in that, comprising: The job text determination module is used to query tasks according to the production data, write query SQL statements, and determine the job text; The simulation manual operation script determination module is used to query the task according to the production data and determine the simulation manual operation script; The keyboard operation instruction generation and determination module is used to simulate the keyboard operation to generate the keyboard operation instruction according to the simulated manual operation script and the job text; The production data query module is used to send the keyboard operation instructions to the host system, and query the production data and save it to the server. 7. The apparatus of claim 6, wherein the job text determination module is specifically used for: According to the production data query task, write the query SQL statement, enter the WEB page, and combine the preset host parameters to generate the job preset text; The job preset text is checked for syntax and parameters in advance, and after the check is passed, it is output as job text and saved to the server. 8. device as claimed in claim 6, is characterized in that, simulating manual operation script to determine module, is specially used for: Analyze the production data query task, and obtain the name, user name, account, host system operation instructions and host system operation sequence of the login server; The name, user name, account, host system operating instructions and host system operating sequence of the login server are programmed to generate a simulated manual operation script. 9. device as claimed in claim 7, is characterized in that, keyboard operation instruction generation determination module, is specifically used for: On the terminal that can log in to the host system, run the scheduled task, obtain the job text from the server regularly, execute the simulated manual operation script, read the job text by simulating keyboard operation, and generate keyboard operation instructions. 10. The device according to claim 9, wherein the production data query module is specifically used for: Obtain the terminal operation window handle, and send the keyboard operation command to the host system; Respond to keyboard operation instructions in the host system, query and obtain production data, and save it to the server. 11. A computer device comprising a memory, a processor and a computer program stored on the memory and running on the processor, wherein the processor implements any of claims 1 to 5 when the processor executes the computer program method described in item. 12. A computer-readable storage medium, wherein the computer-readable storage medium stores a computer program for executing the method of any one of claims 1 to 5.

Images