基于微服务的分布式数据安全整合应用系统  

Distributed Data Security Integrated Application System Based on Microservices

作　　者：杨舒 苏放[1] YANG Shu;SU Fang(School of Information and Communication Engineering,Beijing University of Posts and Telecommunications,Beijing 100876,China)

机构地区：[1]北京邮电大学信息与通信工程学院,北京100876

出　　处：《计算机工程与应用》2021年第18期238-247,共10页Computer Engineering and Applications

基　　金：国家重点研发计划(No.2018YFB2100203)。

摘　　要：针对分布式数据安全整合应用中数据整合操作繁琐,实时性不足,数据应用共享困难的问题,设计并实现了基于微服务的分布式数据安全整合应用系统,包含有两个子系统:数据整合子系统与数据安全应用子系统。系统基于SpringCloud微服务架构设计,服务模块功能单一,边界明确,服务之间相互解耦,便于便捷开发,快速部署,可扩展性强,拥有强大的负载均衡策略与容错机制。数据整合子系统中提出了一种轻量级的数据整合方案,可以进行可视化的数据便捷整合,具有较好的灵活性与实时性;数据安全应用子系统中通过数据分级与用户角色划分,实现了用户对数据的安全访问控制,同时,采用证书链模型,使用数据证书来认证用户身份,有效地解决了用户角色的管理问题与网络信任问题。To solve the problem of operating data integration complicatedly,lacking real-time performance and sharing data applications difficultly,this paper designs and implements a distributed data security integrated application system based on microservices.This system including two subsystems:data integration subsystem and data security application subsystem.This system is designed based on the Spring Cloud.Each microservice has a single function and a clear bound-ary.The microservices are decoupled from each other.It has the advantages of convenient development,rapid deploy-ment,excellent scalability,strong load balancing strategy and fault tolerance.In the data integration subsystem,a light-weight data integration scheme is proposed,which can integrate data conveniently and visually.It has great flexibility and real-time performance.In the data security application subsystem,through data classification and user role division,the user access control to data is realized.By using certificate chain model and data certificate to authenticate user identity,the problems of user role management and network trust are effectively solved.

关 键 词：微服务 数据整合 数据安全应用 证书链 物联网终端评测平台 

分 类 号：TP311.5[自动化与计算机技术—计算机软件与理论]