METHOD, DEVICE AND COMPUTER PROGRAM PRODUCT FOR SERVICE ACCESS

• US 20200137059A1
• Filed: 01/25/2019
• Published: 04/30/2020
• Est. Priority Date: 10/25/2018
• Status: Active Grant

• Current Assignee: Dell Products LP (Dell Technologies Inc.)
• Original Assignee: Dell Products LP (Dell Technologies Inc.)
• Inventors: Tang, Wenyu, Gao, Han, Ji, Jim LeWei
• Granted Patent: US 11,431,711 B2
• Time in Patent Office: Days
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 67/133 Protocols for remote procedure calls [RPC]
• CPC Class Codes: H04L 67/63 Routing a service request depending on the request content or context

Abstract

Embodiments of the present disclosure relate to a method, a device and a computer program product for service access. The method comprises receiving, from a requester, a request for accessing a first functional interface of a first service of a plurality of services. The method also comprises, in response to the request, determining a first combined permission of the requester to access a plurality of functional interfaces of the plurality of services. The method further comprises determining a second combined permission of the first service to access the plurality of functional interfaces of the plurality of services. In addition, the method comprises controlling, based on the first and the second combined permissions, access of the requester to the first functional interface. The method can accomplish rapid, safe service calling and improve service accessing efficiency.

Claims

1. A method of service access, comprising:

receiving, from a requester, a request for accessing a first functional interface of a first service of a plurality of services;

determining, in response to the receiving the request, a first combined permission of the requester to access a plurality of functional interfaces of the plurality of services;

determining a second combined permission of the first service to access the plurality of functional interfaces of the plurality of services; and

controlling, based on the first and second combined permissions, access of the requester to the first functional interface.

2. The method of claim 1, wherein controlling access of the requester to the first functional interface comprises:

determining, based on the first and second combined permissions, a third combined permission of the requester and the first service to access the plurality of services; and

controlling, based on the third combined permission, the access of the requester to the first functional interface.

3. The method of claim 2, wherein the first combined permission is represented by a first binary string, and the second combined permission is represented by a second binary string, and wherein determining the third combined permission comprises:

obtaining a third binary string representing the third combined permission by performing a logical AND operation on the first and second binary strings.

4. The method of claim 1, wherein controlling access of the requester to the first functional interface comprises:

controlling, in response to determining that the accessed first functional interface is to call a second functional interface of a second service of the plurality of services, access of the requester to the second functional interface based on the first and second combined permissions.

5. The method of claim 4, wherein controlling access of the requester to the second functional interface comprises:

sending, to the second service in response to determining that the second functional interface is accessible to the requester, an indication associated with the first and second combined permissions.

6. The method of claim 1, wherein the requester comprises identification information of the requester, and wherein determining the first combined permission comprises:

sending the identification information to a management device; and

receiving, from the management device, the first combined permission obtained based on the identification information.

7. An electronic device for service access, comprising:

a processor; and

a memory having computer program instructions stored thereon, the processor executing the computer program instructions in the memory to control the electronic device to perform acts comprising;

receiving, from a requester, a request for accessing a first functional interface of a first service of a plurality of services;

determining, in response to the request, a first combined permission of the requester to access a plurality of functional interfaces of the plurality of services;

determining a second combined permission of the first service to access the plurality of functional interfaces of the plurality of services; and

controlling, based on the first and second combined permissions, access of the requester to the first functional interface.

8. The electronic device of claim 7, wherein controlling access of the requester to the first functional interface comprises:

determining, based on the first and second combined permissions, a third combined permission of the requester and the first service to access the plurality of services; and

controlling, based on the third combined permission, the access of the requester to the first functional interface.

9. The electronic device of claim 8, wherein the first combined permission is represented by a first binary string, and the second combined permission is represented by a second binary string, and wherein determining the third combined permission comprises:

obtaining a third binary string representing the third combined permission by performing a logical AND operation on the first and second binary strings.

10. The electronic device of claim 7, wherein controlling access of the requester to the first functional interface comprises:

controlling, in response to determining that the accessed first functional interface is to call a second functional interface of a second service of the plurality of services, access of the requester to the second functional interface based on the first and second combined permissions.

11. The electronic device of claim 10, wherein controlling access of the requester to the second functional interface comprises:

sending, to the second service in response to determining that the second functional interface is accessible to the requester, an indication associated with the first and second combined permissions.

12. The electronic device of claim 7, wherein the requester comprises identification information of the requester, and wherein determining the first combined permission comprises:

sending the identification information to a management device; and

receiving, from the management device, the first combined permission obtained based on the identification information.

13. A non-transitory, computer-readable medium having stored thereon computer-readable instructions that are executable to cause a computer to perform operations comprising:

receiving, from a requester, a request for accessing a first functional interface of a first service of a plurality of services;

determining, in response to the request, a first combined permission of the requester to access a plurality of functional interfaces of the plurality of services;

determining a second combined permission of the first service to access the plurality of functional interfaces of the plurality of services; and

controlling, based on the first and second combined permissions, access of the requester to the first functional interface.

14. The non-transitory, computer-readable medium of claim 13, wherein controlling access of the requester to the first functional interface comprises:

determining, based on the first and second combined permissions, a third combined permission of the requester and the first service to access the plurality of services; and

controlling, based on the third combined permission, the access of the requester to the first functional interface.

15. The non-transitory, computer-readable medium of claim 14, wherein the first combined permission is represented by a first binary string, and the second combined permission is represented by a second binary string, and wherein determining the third combined permission comprises:

obtaining a third binary string representing the third combined permission by performing a logical AND operation on the first and second binary strings.

16. The non-transitory, computer-readable medium of claim 13, wherein controlling access of the requester to the first functional interface comprises:

controlling, in response to determining that the accessed first functional interface is to call a second functional interface of a second service of the plurality of services, access of the requester to the second functional interface based on the first and second combined permissions.

17. The non-transitory, computer-readable medium of claim 16, wherein controlling access of the requester to the second functional interface comprises:

sending, to the second service in response to determining that the second functional interface is accessible to the requester, an indication associated with the first and second combined permissions.

18. The non-transitory, computer-readable medium of claim 13, wherein the requester comprises identification information of the requester, and wherein determining the first combined permission comprises:

sending the identification information to a management device; and

receiving, from the management device, the first combined permission obtained based on the identification information.

19. The non-transitory, computer-readable medium of claim 13, wherein the first functionality interface is an Application Programming Interface (API).

20. The non-transitory, computer-readable medium of claim 13, wherein the first combined permission is represented by a first Boolean value, and the second combined permission is represented by a second Boolean value.