Design And Implementation Of REST-based Information Systems Cloud Services Platform

The current IT market of cloud computing, mobile applications, web applications aregrowing, while the combination of these the three is still in its infancy. How cloud computingmodel to achieve better integration of these three? It contains several aspects: what kind ofcloud services to be provided? How to design cloud services? How simple and secure accessto the needed services? In this paper, based on the actual demand of enterprise applicationsand non-enterprise application APP developer, and academic research as a starting point,in-depth analysis and research the questions listed above.What kind of cloud services to be provided? From the large classification, cloudservices include three kinds: IaaS, PaaS, SaaS, respectively, provide the user with anemphasis on hardware, application development system, application software three differentlevels of service directly, this paper aims to research the problems of the combination amongcloud computing, mobile applications and web applications, choose the cloud modelapplication development system(PaaS), application software(SaaS), as a breakthrough.According to the actual demand, implements an information system cloud service platform:provide organizational management services; provide cloud storage services, includingflexible non-modal structured data storage, and file storage; provide business processmanagement system which are widely used in enterprise information construction.How to design cloud services? This system uses the open source cloud computingplatform, MongoDB, in the data layer, support the upper logic of cloud service platform, formulti-tenant mode, select " shared database and shared data structure ", using the tenantcolumn to realize the tenant data isolation; for the end users of the application based on ourcloud platform, we designed two-level access control model for the structured data and fileresources; using GWT to achieve web version of the platform back-end management system;integrated open source workflow engine, activiti, build service-oriented business processmanagement system, so tenants can easily achieve platform workflow applications.How simple and secure access to the needed services? This paper describes two aspectsof the solution to this problem: How to access services simply? In the form of open interfaces provide external RESTful API, this paper designed a creative interface designpatterns with strong expressive, able to easily access the services required resources; How toensure the safety of transport? For REST own security mechanism is not perfect, vulnerableto replay attacks, this article combined with the characteristics of the REST, proposedsecurity service model for the RESTful API which can completely avoid replay attacks andensure information integrity and confidentiality.In the application example, as a tenant ’s identity to the platform, leased platformcapabilities, we implemented an internal communications tool with the function of workflow.This example indicates that the information system of cloud service platform designed in thisarticle has good usability.Finally, the service platform to be further in-depth research to explore and practice werediscussed.