CN108566412A - A kind of data service method and data service device - Google Patents
A kind of data service method and data service device Download PDFInfo
- Publication number
- CN108566412A CN108566412A CN201810149479.3A CN201810149479A CN108566412A CN 108566412 A CN108566412 A CN 108566412A CN 201810149479 A CN201810149479 A CN 201810149479A CN 108566412 A CN108566412 A CN 108566412A
- Authority
- CN
- China
- Prior art keywords
- account
- tenant
- data
- information
- business scope
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
- 238000000034 method Methods 0.000 title claims abstract description 43
- 230000005540 biological transmission Effects 0.000 claims abstract description 96
- 230000003993 interaction Effects 0.000 claims abstract description 60
- 239000000203 mixture Substances 0.000 claims abstract description 23
- 238000004590 computer program Methods 0.000 claims description 19
- 238000013468 resource allocation Methods 0.000 claims description 14
- 238000012545 processing Methods 0.000 claims description 5
- 238000007726 management method Methods 0.000 abstract description 18
- 238000013497 data interchange Methods 0.000 abstract description 9
- 238000005516 engineering process Methods 0.000 abstract description 8
- 238000010276 construction Methods 0.000 description 6
- 238000010586 diagram Methods 0.000 description 6
- 230000006870 function Effects 0.000 description 6
- 238000005538 encapsulation Methods 0.000 description 4
- 230000008569 process Effects 0.000 description 4
- 238000010168 coupling process Methods 0.000 description 3
- 238000005859 coupling reaction Methods 0.000 description 3
- 238000013439 planning Methods 0.000 description 3
- 238000004891 communication Methods 0.000 description 2
- 230000008878 coupling Effects 0.000 description 2
- 239000006185 dispersion Substances 0.000 description 2
- 230000000694 effects Effects 0.000 description 2
- 230000005611 electricity Effects 0.000 description 2
- 238000012986 modification Methods 0.000 description 2
- 230000004048 modification Effects 0.000 description 2
- 206010037660 Pyrexia Diseases 0.000 description 1
- 230000008901 benefit Effects 0.000 description 1
- 238000004422 calculation algorithm Methods 0.000 description 1
- 238000004364 calculation method Methods 0.000 description 1
- 230000010485 coping Effects 0.000 description 1
- 238000013500 data storage Methods 0.000 description 1
- 238000013461 design Methods 0.000 description 1
- 238000000605 extraction Methods 0.000 description 1
- 230000010354 integration Effects 0.000 description 1
- 230000002452 interceptive effect Effects 0.000 description 1
- 238000002955 isolation Methods 0.000 description 1
- 238000012423 maintenance Methods 0.000 description 1
- 238000011045 prefiltration Methods 0.000 description 1
- 238000000547 structure data Methods 0.000 description 1
- 238000006467 substitution reaction Methods 0.000 description 1
- 238000013519 translation Methods 0.000 description 1
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/01—Protocols
- H04L67/10—Protocols in which an application is distributed across nodes in the network
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/02—Network architectures or network communication protocols for network security for separating internal from external traffic, e.g. firewalls
- H04L63/0272—Virtual private networks
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/10—Network architectures or network communication protocols for network security for controlling access to devices or network resources
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Computer Hardware Design (AREA)
- Computer Security & Cryptography (AREA)
- Computing Systems (AREA)
- General Engineering & Computer Science (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
- Management, Administration, Business Operations System, And Electronic Commerce (AREA)
Abstract
The present invention is suitable for Data Interchange Technology field, provides a kind of data service method and data service device, including：By creating multiple business scope marks in data interaction system according to configuration information, and creates each business scope and identify corresponding tenant's account；According to tenant's account information, establish and the associated virtual gateway node of tenant's account；By the virtual gateway node composition data transmission network, corresponding data are identified to share or exchange the business scope.By way of corresponding tenant's account being identified to business scope on demand, virtual network is provided, realize the cloud data interaction based on the multi-field multi-tenant of cloud service pattern, improve the data interaction efficiency between multi-field multi-tenant and the efficiency of data interaction system unified management.
Description
Technical field
The invention belongs to Data Interchange Technology field more particularly to a kind of data service methods and data service device.
Background technology
Data share exchange platform is built in the conventional mode on construction mode, on virtualization cloud computing platform top
Affix one's name to data interchange platform.It is more that cloud platform optimized integration facility services (Infrastructure as a Service, IaaS) layer
Tenant and virtualization do not provide multi-field tenant's pattern in the business and technological layer of data share exchange platform itself.
Existing data interchange platform is built according to different business demand dispersions, continuous with business scope
Extension, data exchange demand be continuously increased and multi-service field between reciprocal effect so that exchanged in legacy data flat
The efficiency for carrying out data transmission on platform and managing is lower and lower.
Invention content
In view of this, an embodiment of the present invention provides a kind of data service method and data service device, it is existing to solve
The lower and lower problem of the efficiency that carries out data transmission and manage on legacy data switching plane in technology.
The first aspect of the embodiment of the present invention provides a kind of data service method, including：
Multiple business scope marks are created in data interaction system according to configuration information, and create each business neck
The corresponding tenant's account of domain identifier；The configuration information includes business scope demand information and each business scope mark
Corresponding tenant's account information；
According to tenant's account information, establish and the associated virtual gateway node of tenant's account；
By the virtual gateway node composition data transmission network；The data transmission network is for described in shared or exchange
Business scope identifies corresponding data.
The second aspect of the embodiment of the present invention provides a kind of data service device, including：
Account creation unit, for multiple business scope marks to be created in data interaction system according to configuration information, and
It creates each business scope and identifies corresponding tenant's account；The configuration information include business scope demand information with
And each business scope identifies corresponding tenant's account information；
Gateway creating unit, for according to tenant's account information, establishing and the associated virtual net of tenant's account
Artis；
Network establishes unit, is used for the virtual gateway node composition data transmission network；The data transmission network
Corresponding data are identified for sharing or exchanging the business scope.
The third aspect of the embodiment of the present invention provides a kind of data service device, including：It is processor, input equipment, defeated
Go out equipment and memory, the processor, input equipment, output equipment and memory are connected with each other, wherein the memory is used
Device is supported to execute the computer program of the above method in storage, the computer program includes program instruction, the processor
It is configured for calling described program instruction, the method for executing above-mentioned first aspect.
The fourth aspect of the embodiment of the present invention provides a kind of computer readable storage medium, the computer storage media
It is stored with computer program, the computer program includes program instruction, and described program instruction makes institute when being executed by a processor
State the method that processor executes above-mentioned first aspect.
Existing advantageous effect is the embodiment of the present invention compared with prior art：Said program, by according to configuration information
Multiple business scope marks are created in data interaction system, and are created each business scope and identified corresponding tenant
Account；According to tenant's account information, establish and the associated virtual gateway node of tenant's account；By the virtual gateway
Node composition data transmission network identifies corresponding data to share or exchange the business scope.By being led on demand to business
The corresponding tenant's account of domain identifier provides the mode of virtual network, realizes based on the multi-field multi-tenant of cloud service pattern
Cloud data interaction improves the data interaction efficiency between multi-field multi-tenant and the efficiency of data interaction system unified management.
Description of the drawings
It to describe the technical solutions in the embodiments of the present invention more clearly, below will be to embodiment or description of the prior art
Needed in attached drawing be briefly described, it should be apparent that, the accompanying drawings in the following description be only the present invention some
Embodiment for those of ordinary skill in the art without having to pay creative labor, can also be according to these
Attached drawing obtains other attached drawings.
Fig. 1 is the flow chart of data service method provided in an embodiment of the present invention；
Fig. 2 is the flow chart for the data service method that another embodiment of the present invention provides；
Fig. 3 is the schematic diagram of data service device provided in an embodiment of the present invention；
Fig. 4 is the schematic diagram for the data service device that another embodiment of the present invention provides；
Fig. 5 is the schematic diagram of data service device provided in an embodiment of the present invention.
Specific implementation mode
In being described below, for illustration and not for limitation, it is proposed that such as tool of particular system structure, technology etc
Body details, to understand thoroughly the embodiment of the present invention.However, it will be clear to one skilled in the art that there is no these specific
The present invention can also be realized in the other embodiments of details.In other situations, it omits to well-known system, device, electricity
The detailed description of road and method, in case unnecessary details interferes description of the invention.
In order to illustrate technical solutions according to the invention, illustrated referring to Fig. 1, Fig. 1 below by specific embodiment
It is a kind of flow chart of data service method provided in an embodiment of the present invention.The executive agent of data service method in the present embodiment
Equipment to provide data service, the equipment include but not limited to server.Data service method as shown in Figure 1 may include
Following steps：
S101：Multiple business scope marks are created in data interaction system according to configuration information, and are created each described
Business scope identifies corresponding tenant's account；The configuration information includes business scope demand information and each business neck
The corresponding tenant's account information of domain identifier.
Due to the fever of cloud computing subject under discussion, many enterprises for providing data services are all by being based on multi-tenant technology or multiple
The software architecture of leasing techniques shares same system or program assembly in the environment of multi-tenant to realize, so that tenant can be with
The data being stored in server are got, and still can ensure that the isolation of data between each tenant.
Illustratively, in government system, switching plane is shared by establishing government data, government affairs information is based on to realize
The government information resources of Resource TOC system and switching architecture share solution.Wherein, shared exchange of government data is established to put down
Platform is mainly made of platform prefilter layer, shared switching layer, platform layer, basic resource layer.For e-government authorities
Planning construction provides the mode that " transverse direction " data share exchange is combined with " longitudinal direction " data share exchange, realizes government affairs information money
The shared and opening in source, innovation society management and service pattern improve governance ability and public service under Information Condition
It is horizontal.
But traditional data interchange platform is built according to different business demand dispersions, with business scope
Continuous extension, data exchange demand be continuously increased.General there are two types of data interchange platform construction modes, and one is in original
Have and be extended on platform, this mode causes data interchange platform management to become increasingly complex, and the interaction between multi-service field
It is easy to be affected；Another situation is exactly again planning construction data interchange platform, and this mode causes finally running
The case where data interchange platform is more and more, and the cost of maintenance and management can be higher and higher, and there are serious repeated construction.
Therefore this programme proposes a kind of method for realizing Data share-and-exchange between multi-field tenant.
Multiple business scope marks are created in data interaction system according to configuration information, in each business scope identifies
Corresponding structure data exchange master control example, cloud service bus example, cloud resource catalogue example.These examples are all data sharings
The composition template or subsystem of exchange system, wherein data exchange master control example is responsible for the configuration management of data share exchange
And management and control；Cloud service bus example is responsible for the integrated of data sharing service and is administered；Cloud resource catalogue example is responsible for data resource
Combing cataloguing.Each example corresponds to tenant's account, and each tenant's account corresponds to a business scope mark, passes through this
Kind of mode realizes that various functional areas in data interaction system identify the unified management of corresponding tenant's account.Wherein, configuration information
May include the hardware configuration information of data interaction system, such as the memory space of total memory space, each business scope；And
Rules of interaction etc. between software configuration information, such as the method for on-line storage, business scope.Configuration information can created
It determines, can also be determined before creating multiple business scope marks when data interaction system.
Specifically, configuration information includes the demand information of each business scope, which can be according to business scope
Planning determine.Such as in government affairs field, configuration information may include the demand of the data volume size in the government affairs field, also may be used
With the information etc. of each department including belonging to the government affairs field.
It should be noted that the case where configuration information is with specific reference to data interaction system or each business scope is specific
Situation determines, does not limit herein.
Multiple business scope marks are created in a data interaction system according to configuration information, and create each industry
The business corresponding tenant's account of field designation.Business scope is identified as the title either code of each business scope, is used for
Distinguish each business scope data storage areas corresponding in data interaction system.Wherein, business scope may include political affairs
The fields such as business field, medical field, field of traffic.Tenant's account is the account of each department in each business scope, exemplary
, in government affairs field, tenant's account can be education account, public security account, the corresponding rent of fiscal accounts Deng Ge administrative departments
Family account.By creating business scope mark and its corresponding tenant's account, it can be achieved that business scope according to configuration information
With the unified management of tenant's account, the efficiency of management to data interaction system is improved.
S102：According to tenant's account information, establish and the associated virtual gateway node of tenant's account.
After being created that multiple business scope area identifications and its corresponding tenant's account, according to tenant's account
Family information, cloud service network establish inside the Pass with the associated virtual gateway node of tenant's account, so as to can lead between tenant's account
It crosses the virtual gateway node and carries out data interaction.
Optionally, it first passes through virtualization gateway environment creator and creates multiple virtualization gateway sections inside the Pass in cloud service network
Point, then these net virtual nodes are distributed into tenant different in various functional areas according to configuration.
Illustratively, multiple tenants are built to the virtual example allocation in each business scope based on cloud computer technology
Resource；Each entity gateway device is designed with virtualization gateway environment creator；Virtualization gateway environment creator is according to matching
It sets and creates virtual switch gateway node example automatically according to multiple tenants in multiple business scopes on demand.
By according to tenant's account information, building on the associated virtual gateway node of tenant's account, making data interaction system
In each tenant's account can have corresponding virtual gateway node for the data in acquisition system, or be based on the virtual net
Artis uploads data, and it is respectively corresponding that various functional areas mark is improved by way of this on-demand establishment virtual switch gateway
Tenant's account data obtain efficiency.
S103：By the virtual gateway node composition data transmission network；The data transmission network is for sharing or handing over
It changes the business scope and identifies corresponding data.
Establish with after the associated virtual gateway node of tenant's account, by virtual gateway node composition data transmission network
Network.So that request of data end can get the number in corresponding tenant's account in business scope by the data transmission network
According to.
Wherein, request of data end includes with the equipment, such as mobile phone, computer, tablet computer etc. for obtaining data function
Equipment does not limit herein.
Illustratively, by each business scope virtualization master control example and multiple gateway node examples, according to by institute
It states the connection of virtual gateway node and forms multiple data transmission networks, wherein data transmission network is for sharing or exchanging the industry
The corresponding data of business field designation.
Said program is identified by creating multiple business scopes in data interaction system according to configuration information, and created
Each business scope identifies corresponding tenant's account；According to tenant's account information, establish and tenant's account
The associated virtual gateway node in family；By the virtual gateway node composition data transmission network, to share or exchange the business
The corresponding data of field designation.By identifying the side that corresponding tenant's account provides virtual network to business scope on demand
Formula realizes the cloud data interaction based on the multi-field multi-tenant of cloud service pattern, and the data improved between multi-field multi-tenant are handed over
Mutual efficiency and the efficiency of data interaction system unified management.
It is a kind of flow chart of data service method provided in an embodiment of the present invention referring to Fig. 2, Fig. 2.Number in the present embodiment
Executive agent according to method of servicing is server.Data service method as shown in Figure 2 may comprise steps of：
S201：Multiple business scope marks are created in data interaction system according to configuration information, and are created each described
Business scope identifies corresponding tenant's account；The configuration information includes business scope demand information and each business neck
The corresponding tenant's account information of domain identifier.
Corresponding tenant's account information is identified by obtaining business scope demand information and each business scope, is created more
A business scope mark, and create each business scope and identify corresponding tenant's account.Wherein, multiple business are created
Field designation can be while create, and the when of creating a certain business scope mark can also be needed to create in user.
Can identify to create in business scope at the time of creating each business scope mark corresponding tenant's account
After completion, mark corresponding tenant's account in the business scope is created in the case where the business scope identifies, and is in no business neck
Domain identifier；Can also be first to create some business scope to identify corresponding tenant's account, then tenant's account is docked to the industry
It is engaged in the range of field designation.By way of this establishment tenant's account, user can be facilitated to carry out data interaction system
Neatly management and control increases the efficiency of management data interaction system.
Specifically, business scope demand information includes government affairs business scope demand information, education business domain requirement information
Or medical profession domain requirement information.This programme interacts simultaneously with intelligent terminal interactive, non-cloud with cloud application for interaction, cloud
Suitable for providing the safety of oneself and exclusive virtualization for all kinds of tenants in each business scope such as government affairs, education, medical treatment
Shared switched environment, meets the needs of widely applying data exchange to share intensive construction.
In addition to this, business scope demand information can also include traffic service domain requirement information, economic work field
Demand information etc..Due to can at any time be created according to the configuration information of data interaction system or the demand of user in this programme
Business scope identifies, and therefore, does not do specific restriction herein.
The data interaction system built by computer network, between so that several business scopes is identified into row information or
The transmission of data and shared, improves the utilization rate of information resources, becomes the elementary object for carrying out informatization, ensure distribution
It interconnects between heterogeneous system, establishes central database, complete the extraction of data, concentration, load, show, construct unification
Data processing and exchange.
S202：It is established and each associated virtual net joint of tenant's account according to the network resource requirement information
Point.
In the present embodiment, each business scope mark is corresponding with different data informations, data volume or tenant's account
The requirements for access of data in being identified to the business scope, therefore it is corresponding with different access in different business scope marks
Demand or network load demand, using network demand of tenant's account in shared data as network resource requirement information.
Wherein, network resource requirement information further include various functional areas mark in data volume number, network bandwidth need
Seek the information such as information, traffic transmission rate.Here network resource requirement information is specific according to being carried out the case where tenant's account
Setting, be not limited herein.
It is established and each associated virtual gateway node of tenant's account according to these network resource requirement information.So that
The tenant account larger to network resource requirement can get more Internet resources, or to get data transmission faster
Virtual network node.
Illustratively, in the household register class in administrative business scope, wherein the data stored include identity information data, by
In be required in many business scopes apply the identity information data, therefore such data transmission when just need better performances
Internet resources, identity information data is rapidly transmitted to request of data end.Therefore, according to the network of identity information data
Resource requirement builds in administrative business scope and stores the associated virtual gateway node of tenant's account of identity information data, and
Distribute the virtual gateway node to higher network bandwidth or permission.It is drawn by being redefined according to network resource requirement information
Subnetwork resource may be implemented the dynamic allocation of Internet resources, flexible dispatching, cross-domain shared, improve network resource utilization, make
Internet resources can really become social infrastructure, serve application demand flexible and changeable in every profession and trade field.
S203：By the virtual gateway node composition data transmission network；The data transmission network is for sharing or handing over
It changes the business scope and identifies corresponding data.
The realization method of S103 is identical in S203 embodiments corresponding with Fig. 1 in the present embodiment, specifically refers to
The associated description of S103 in the corresponding embodiments of Fig. 1, details are not described herein.
S204：According to the resource allocation information, the data transmission network is divided at least two Virtual Transport Networks
Network, and distribute the virtual transmission network for each business scope mark.
After by virtual gateway node composition data transmission network, according to resource allocation information, by data transmission network
At least two virtual transmission networks are divided into, and the virtual transmission network is distributed for each business scope mark, to be reached for
Purpose of the switched environment by configuration distribution virtual level data transmission network is shared in the virtualization of each business scope mark.Wherein,
Resource allocation information includes that each business scope identifies corresponding data resource configuration information or data transmission configuration information.
Illustratively, controller is divided by designing a virtual network in data interaction system, using virtual network
Generic route encapsulation (Virtual Network Generic Routing Encapsulation, NVGRE) standard passes data
Defeated network is divided into multiple virtual networks, then is that each virtualization is shared switched environment and distributed by configuration in each business scope
Virtual level data transmission network.NVGRE uses generic route encapsulation (Generic Routing Encapsulation, GRE) head
Low 24 of portion are used as tenant network identifier, with empty like extension LAN (Virtual Extensible LAN, VXLAN) one
Sample can support 16,000,000 virtual networks.In order to provide the stream of description bandwidth availability ratio granularity, transmission network needs to use GRE
Head.The advantage of NVGRE is to need not rely on agreement (Internet Protocol, the IP) group for flooding and interconnecting between network
Broadcast and learnt, but by it is a kind of it is more flexible in a manner of broadcasted.Also, NVGRE supports to reduce data packet maximum transmitted list
Member need not require transmission network to support transmission frame major to reduce internal virtual network packet size.Further,
NVGRE gateways are also used as a network address translation component, and apps server is published on network, although these
Service is physically located in the virtual server of software defined network.This allows the virtual machine in software defined network that can make
For public global wide area network (World Wide Web, Web) server or provide the services of other network-orienteds.
Further, multiple business scope marks and its corresponding tenant's account are being created, and is dividing good each tenant
After the corresponding virtual transmission network of account, further include：
Obtain the data service request from tenant's account；
According to the authority information of the data service request and tenant's account, the permission of tenant's account is determined.
Request of data end is by tenant's account to server transmission data service request.Server is being got from rent
After the data service request of family account, the authority information of tenant's account is first identified, if the authority information, which meets, comes from tenant
Data in the data service request of account, then to the power of the data in tenant's account Open Access Journals data service requests
Limit.Request of data end gets the data of oneself needs by tenant's account.Pass through this restriction request of data end permission
Mode limits request of data end and obtains data from data interaction system, and limitation does not obtain the request of data end of the data permission
Corresponding data are obtained, to ensure that the safety of data and privacy in data interaction system.
Said program is identified by creating multiple business scopes in data interaction system according to configuration information, and created
Each business scope identifies corresponding tenant's account；It is established according to the network resource requirement information and each described
The associated virtual gateway node of tenant's account.By the virtual gateway node composition data transmission network, with shared or clearing house
It states business scope and identifies corresponding data.According to the resource allocation information, the data transmission network is divided at least two
A virtual transmission network, and distribute the virtual transmission network for each business scope mark.By by data transmission network
Network is divided into multiple virtual transmission networks, and is that each virtualization shares switched environment by configuration distribution in each business scope
Virtual transmission network improves the data transmission efficiency in data interaction system, by according to configuration information in data interaction system
Multiple business scopes mark and its corresponding tenant's account are created in system, improve data interaction system unified management efficiency and
Quality.
It is a kind of schematic diagram of data service device provided in an embodiment of the present invention referring to Fig. 3, Fig. 3.The number of the present embodiment
The each unit for including according to service unit 300 is used to execute each step in the corresponding embodiments of Fig. 1, referring specifically to Fig. 1 and Fig. 1
Associated description in corresponding embodiment, does not repeat herein.The data service device 300 of the present embodiment includes account creation unit
301, gateway creating unit 302 and network establish unit 303.
Account creation unit 301, for multiple business scope marks to be created in data interaction system according to configuration information,
And it creates each business scope and identifies corresponding tenant's account；The configuration information includes business scope demand information
And each business scope identifies corresponding tenant's account information；
Gateway creating unit 302, it is associated virtual with tenant's account for according to tenant's account information, establishing
Gateway node；
Network establishes unit 303, is used for the virtual gateway node composition data transmission network；The data transmission network
Network identifies corresponding data for sharing or exchanging the business scope.
Said program is identified by creating multiple business scopes in data interaction system according to configuration information, and created
Each business scope identifies corresponding tenant's account；According to tenant's account information, establish and tenant's account
The associated virtual gateway node in family；By the virtual gateway node composition data transmission network, to share or exchange the business
The corresponding data of field designation.By identifying the side that corresponding tenant's account provides virtual network to business scope on demand
Formula realizes the cloud data interaction based on the multi-field multi-tenant of cloud service pattern, and the data improved between multi-field multi-tenant are handed over
Mutual efficiency and the efficiency of data interaction system unified management.
It is a kind of schematic diagram of data service device provided in an embodiment of the present invention referring to Fig. 4, Fig. 4.The number of the present embodiment
The each unit for including according to service unit 400 is used to execute each step in the corresponding embodiments of Fig. 2, referring specifically to Fig. 2 and Fig. 2
Associated description in corresponding embodiment, does not repeat herein.The data service device 400 of the present embodiment includes account creation unit
301, gateway creating unit 302, network establish unit 303 and virtual network creating unit 404.
Account creation unit 301, for multiple business scope marks to be created in data interaction system according to configuration information,
And it creates each business scope and identifies corresponding tenant's account；The configuration information includes business scope demand information
And each business scope identifies corresponding tenant's account information；
Gateway creating unit 302 is closed for being established according to the network resource requirement information with each tenant's account
The virtual gateway node of connection；
Network establishes unit 303, is used for the virtual gateway node composition data transmission network；The data transmission network
Network identifies corresponding data for sharing or exchanging the business scope.
Virtual network creating unit 404, for according to the resource allocation information, the data transmission network to be divided into
At least two virtual transmission networks, and distribute the virtual transmission network for each business scope mark.
Wherein, the business scope demand information includes government affairs business scope demand information, education business domain requirement letter
Breath or medical profession domain requirement information.
Further, the data service device further includes：
Service request acquiring unit, for obtaining the data service request from tenant's account；
Permission determination unit determines institute for the authority information according to the data service request and tenant's account
State the permission of tenant's account.
Said program is identified by creating multiple business scopes in data interaction system according to configuration information, and created
Each business scope identifies corresponding tenant's account；It is established according to the network resource requirement information and each described
The associated virtual gateway node of tenant's account.By the virtual gateway node composition data transmission network, with shared or clearing house
It states business scope and identifies corresponding data.According to the resource allocation information, the data transmission network is divided at least two
A virtual transmission network, and distribute the virtual transmission network for each business scope mark.By by data transmission network
Network is divided into multiple virtual transmission networks, and is that each virtualization shares switched environment by configuration distribution in each business scope
Virtual transmission network improves the data transmission efficiency in data interaction system, by according to configuration information in data interaction system
Multiple business scopes mark and its corresponding tenant's account are created in system, improve data interaction system unified management efficiency and
Quality.
It should be understood that the size of the serial number of each step is not meant that the order of the execution order in above-described embodiment, each process
Execution sequence should be determined by its function and internal logic, the implementation process without coping with the embodiment of the present invention constitutes any limit
It is fixed.
It is a kind of schematic diagram for data service device that yet another embodiment of the invention provides referring to Fig. 5, Fig. 5.As shown in Figure 5
The present embodiment in data service device 500 may include：Processor 501, memory 502 and it is stored in memory 502
In and the computer program 503 that can be run on processor 501.Processor 501 is realized above-mentioned each when executing computer program 503
A step in data service method embodiment.Memory 502 is for storing computer program, the computer program packet
Include program instruction.Processor 501 is used to execute the program instruction of the storage of memory 502.Wherein, processor 501 is configured for
Described program instruction execution or less is called to operate：
Processor 501 is used to create multiple business scope marks in data interaction system according to configuration information, and creates
Each business scope identifies corresponding tenant's account；The configuration information includes business scope demand information and every
A business scope identifies corresponding tenant's account information；
Processor 501 is additionally operable to, according to tenant's account information, establish and the associated virtual gateway of tenant's account
Node；
Processor 501 is additionally operable to the virtual gateway node composition data transmission network；The data transmission network is used
Corresponding data are identified in sharing or exchanging the business scope.
Processor 501 is specifically used for, according to the resource allocation information, the data transmission network being divided at least two
A virtual transmission network, and distribute the virtual transmission network for each business scope mark.
Processor 501 is specifically used for being established according to the network resource requirement information associated with each tenant's account
Virtual gateway node.
Wherein, the business scope demand information includes government affairs business scope demand information, education business domain requirement letter
Breath or medical profession domain requirement information.
Processor 501 is specifically used for obtaining the data service request from tenant's account；
Processor 501 is specifically used for the authority information according to the data service request and tenant's account, determines institute
State the permission of tenant's account.
Said program is identified by creating multiple business scopes in data interaction system according to configuration information, and created
Each business scope identifies corresponding tenant's account；It is established according to the network resource requirement information and each described
The associated virtual gateway node of tenant's account.By the virtual gateway node composition data transmission network, with shared or clearing house
It states business scope and identifies corresponding data.According to the resource allocation information, the data transmission network is divided at least two
A virtual transmission network, and distribute the virtual transmission network for each business scope mark.By by data transmission network
Network is divided into multiple virtual transmission networks, and is that each virtualization shares switched environment by configuration distribution in each business scope
Virtual transmission network improves the data transmission efficiency in data interaction system, by according to configuration information in data interaction system
Multiple business scopes mark and its corresponding tenant's account are created in system, improve data interaction system unified management efficiency and
Quality.
It should be appreciated that in embodiments of the present invention, alleged processor 501 can be central processing unit (Central
Processing Unit, CPU), which can also be other general processors, digital signal processor (Digital
Signal Processor, DSP), application-specific integrated circuit (Application Specific Integrated Circuit,
ASIC), ready-made programmable gate array (Field-Programmable Gate Array, FPGA) or other programmable logic
Device, discrete gate or transistor logic, discrete hardware components etc..General processor can be microprocessor or this at
It can also be any conventional processor etc. to manage device.
The memory 502 may include read-only memory and random access memory, and to processor 501 provide instruction and
Data.The a part of of memory 502 can also include nonvolatile RAM.For example, memory 502 can also be deposited
Store up the information of device type.
In the specific implementation, processor 501 described in the embodiment of the present invention, memory 502, computer program 503 can
The first embodiment for executing data service method provided in an embodiment of the present invention and the realization method described in second embodiment,
Also the realization method of data service device described in the embodiment of the present invention is can perform, details are not described herein.
A kind of computer readable storage medium, the computer-readable storage medium are provided in another embodiment of the invention
Matter is stored with computer program, and the computer program includes program instruction, and described program instruction is realized when being executed by processor：
Multiple business scope marks are created in data interaction system according to configuration information, and create each business neck
The corresponding tenant's account of domain identifier；The configuration information includes business scope demand information and each business scope mark
Corresponding tenant's account information；
According to tenant's account information, establish and the associated virtual gateway node of tenant's account；
By the virtual gateway node composition data transmission network；The data transmission network is for described in shared or exchange
Business scope identifies corresponding data.
Further, it is also realized when the computer program is executed by processor：
According to the resource allocation information, the data transmission network is divided at least two virtual transmission networks, and
The virtual transmission network is distributed for each business scope mark.
Further, it is also realized when the computer program is executed by processor：
It is established and each associated virtual gateway node of tenant's account according to the network resource requirement information.
Wherein, the business scope demand information includes government affairs business scope demand information, education business domain requirement letter
Breath or medical profession domain requirement information.
Further, it is also realized when the computer program is executed by processor：
Obtain the data service request from tenant's account；
According to the authority information of the data service request and tenant's account, the permission of tenant's account is determined.
Said program is identified by creating multiple business scopes in data interaction system according to configuration information, and created
Each business scope identifies corresponding tenant's account；It is established according to the network resource requirement information and each described
The associated virtual gateway node of tenant's account.By the virtual gateway node composition data transmission network, with shared or clearing house
It states business scope and identifies corresponding data.According to the resource allocation information, the data transmission network is divided at least two
A virtual transmission network, and distribute the virtual transmission network for each business scope mark.By by data transmission network
Network is divided into multiple virtual transmission networks, and is that each virtualization shares switched environment by configuration distribution in each business scope
Virtual transmission network improves the data transmission efficiency in data interaction system, by according to configuration information in data interaction system
Multiple business scopes mark and its corresponding tenant's account are created in system, improve data interaction system unified management efficiency and
Quality.
The computer readable storage medium can be that the inside of the data service device described in aforementioned any embodiment is deposited
Storage unit, such as hard disk or memory.The computer readable storage medium can also be that the outside of the data service device is deposited
The plug-in type hard disk being equipped in storage equipment, such as the data service device, intelligent memory card (Smart Media Card,
SMC), secure digital (Secure Digital, SD) blocks, flash card (Flash Card) etc..Further, the computer can
Read storage medium can also both include the data service device internal storage unit and also including External memory equipment.The meter
Calculation machine readable storage medium storing program for executing is used to store other programs and data needed for the computer program and the data service device.
The computer readable storage medium can be also used for temporarily storing the data that has exported or will export.
Those of ordinary skill in the art may realize that lists described in conjunction with the examples disclosed in the embodiments of the present disclosure
Member and algorithm steps, can be realized with electronic hardware, computer software, or a combination of the two, in order to clearly demonstrate hardware
With the interchangeability of software, each exemplary composition and step are generally described according to function in the above description.This
A little functions are implemented in hardware or software actually, depend on the specific application and design constraint of technical solution.Specially
Industry technical staff can use different methods to achieve the described function each specific application, but this realization is not
It is considered as beyond the scope of this invention.
It is apparent to those skilled in the art that for convenience of description and succinctly, the dress of foregoing description
The specific work process with unit is set, can refer to corresponding processes in the foregoing method embodiment, details are not described herein.
In several embodiments provided herein, it should be understood that disclosed device and method can pass through it
Its mode is realized.For example, the apparatus embodiments described above are merely exemplary, for example, the division of the unit, only
Only a kind of division of logic function, formula that in actual implementation, there may be another division manner, such as multiple units or component can be tied
Another system is closed or is desirably integrated into, or some features can be ignored or not executed.In addition, shown or discussed phase
Coupling, direct-coupling or communication connection between mutually can be INDIRECT COUPLING or the communication by some interfaces, device or unit
Connection can also be electricity, mechanical or other form connections.
The unit illustrated as separating component may or may not be physically separated, aobvious as unit
The component shown may or may not be physical unit, you can be located at a place, or may be distributed over multiple
In network element.Some or all of unit therein can be selected according to the actual needs to realize the embodiment of the present invention
Purpose.
In addition, each functional unit in each embodiment of the present invention can be integrated in a processing unit, it can also
It is that each unit physically exists alone, can also be during two or more units are integrated in one unit.It is above-mentioned integrated
The form that hardware had both may be used in unit is realized, can also be realized in the form of SFU software functional unit.
If the integrated unit is realized in the form of SFU software functional unit and sells or use as independent product
When, it can be stored in a computer read/write memory medium.Based on this understanding, technical scheme of the present invention is substantially
The all or part of the part that contributes to existing technology or the technical solution can be in the form of software products in other words
It embodies, which is stored in a storage medium, including some instructions are used so that a computer
Equipment (can be personal computer, server or the network equipment etc.) executes the complete of each embodiment the method for the present invention
Portion or part steps.And storage medium above-mentioned includes：USB flash disk, mobile hard disk, read-only memory (Read-Only Memory,
ROM), random access memory (Random Access Memory, RAM), magnetic disc or CD etc. are various can store program
The medium of code.
The above description is merely a specific embodiment, but scope of protection of the present invention is not limited thereto, any
Those familiar with the art in the technical scope disclosed by the present invention, can readily occur in various equivalent modifications or replace
It changes, these modifications or substitutions should be covered by the protection scope of the present invention.Therefore, protection scope of the present invention should be with right
It is required that protection domain subject to.
Claims (10)
1. a kind of data service method, which is characterized in that including：
Multiple business scope marks are created in data interaction system according to configuration information, and create each business scope mark
Know corresponding tenant's account；The configuration information includes that business scope demand information and each business scope mark correspond to
Tenant's account information；
According to tenant's account information, establish and the associated virtual gateway node of tenant's account；
By the virtual gateway node composition data transmission network；The data transmission network is for sharing or exchanging the business
The corresponding data of field designation.
2. data service method as described in claim 1, which is characterized in that the configuration information includes resource allocation information,
It is described by after the virtual gateway node composition data transmission network, further include：
According to the resource allocation information, the data transmission network is divided at least two virtual transmission networks, and be every
A business scope mark distributes the virtual transmission network.
3. data service method as described in claim 1, which is characterized in that tenant's account information includes tenant's account
The network resource requirement information at family, it is described according to tenant's account information, establish virtual net corresponding with tenant's account
Artis, including：
It is established and each associated virtual gateway node of tenant's account according to the network resource requirement information.
4. data service method as described in claim 1, which is characterized in that the business scope demand information includes government affairs industry
Business domain requirement information, education business domain requirement information or medical profession domain requirement information.
5. the data service method as described in claim 1 or 3, which is characterized in that tenant's account information includes the rent
The authority information of family account；The method further includes：
Obtain the data service request from tenant's account；
According to the authority information of the data service request and tenant's account, the data access rights of tenant's account are determined
Limit.
6. a kind of data service device, which is characterized in that including：
Account creation unit for creating multiple business scope marks in data interaction system according to configuration information, and creates
Each business scope identifies corresponding tenant's account；The configuration information includes business scope demand information and every
A business scope identifies corresponding tenant's account information；
Gateway creating unit, for according to tenant's account information, establishing and the associated virtual net joint of tenant's account
Point；
Network establishes unit, is used for the virtual gateway node composition data transmission network；The data transmission network is used for
It shares or exchanges the business scope and identify corresponding data.
7. data service device as described in claim 1, which is characterized in that the configuration information includes resource allocation information,
Further include：
Virtual network creating unit, for according to the resource allocation information, the data transmission network to be divided at least two
A virtual transmission network, and distribute the virtual transmission network for each business scope mark.
8. the data service method as described in claim 1 or 3, which is characterized in that tenant's account information includes the rent
The authority information of family account；Described device further includes：
Acquisition request unit, for obtaining the data service request from tenant's account；
Permission determination unit determines the rent for the authority information according to the data service request and tenant's account
The permission of family account.
9. a kind of data service device, including memory, processor and it is stored in the memory and can be in the processing
The computer program run on device, which is characterized in that the processor realizes such as claim 1 when executing the computer program
The step of to any one of 5 the method.
10. a kind of computer readable storage medium, the computer-readable recording medium storage has computer program, feature to exist
In when the computer program is executed by processor the step of any one of such as claim 1 to 5 of realization the method.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201810149479.3A CN108566412B (en) | 2018-02-13 | 2018-02-13 | Data service method and data service device |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201810149479.3A CN108566412B (en) | 2018-02-13 | 2018-02-13 | Data service method and data service device |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN108566412A true CN108566412A (en) | 2018-09-21 |
| CN108566412B CN108566412B (en) | 2021-02-09 |
Family
ID=63532239
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201810149479.3A Active CN108566412B (en) | 2018-02-13 | 2018-02-13 | Data service method and data service device |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN108566412B (en) |
Cited By (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN109992416A (en) * | 2019-03-20 | 2019-07-09 | 跬云(上海)信息科技有限公司 | Multi-tenant method of servicing and device based on precomputation OLAP model |
| CN112269562A (en) * | 2020-09-27 | 2021-01-26 | 福建天泉教育科技有限公司 | Tenant isolation method and terminal in modular product |
| CN112748920A (en) * | 2019-10-29 | 2021-05-04 | 福建天泉教育科技有限公司 | Method and storage medium for product component tenancy |
| CN114710502A (en) * | 2021-12-28 | 2022-07-05 | 南京中孚信息技术有限公司 | Virtualization-based data security exchange method and system |
Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN204926097U (en) * | 2015-06-01 | 2015-12-30 | 北京圆通慧达管理软件开发有限公司 | Memory system is kept apart to data |
| CN105824625A (en) * | 2016-03-14 | 2016-08-03 | 北京中电普华信息技术有限公司 | Business application construction device and method based on cloud environment |
| US20160352843A1 (en) * | 2014-03-18 | 2016-12-01 | Huawei Technologies Co., Ltd. | Data Processing Method, Device, and ESB System |
| CN106897337A (en) * | 2016-07-01 | 2017-06-27 | 阿里巴巴集团控股有限公司 | The acquisition methods and device of Internet resources, the acquisition methods of finance product |
| CN107342895A (en) * | 2017-06-26 | 2017-11-10 | 网宿科技股份有限公司 | A kind of network optimized approach of multi-tenant, system, computing device and storage medium |
-
2018
- 2018-02-13 CN CN201810149479.3A patent/CN108566412B/en active Active
Patent Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20160352843A1 (en) * | 2014-03-18 | 2016-12-01 | Huawei Technologies Co., Ltd. | Data Processing Method, Device, and ESB System |
| CN204926097U (en) * | 2015-06-01 | 2015-12-30 | 北京圆通慧达管理软件开发有限公司 | Memory system is kept apart to data |
| CN105824625A (en) * | 2016-03-14 | 2016-08-03 | 北京中电普华信息技术有限公司 | Business application construction device and method based on cloud environment |
| CN106897337A (en) * | 2016-07-01 | 2017-06-27 | 阿里巴巴集团控股有限公司 | The acquisition methods and device of Internet resources, the acquisition methods of finance product |
| CN107342895A (en) * | 2017-06-26 | 2017-11-10 | 网宿科技股份有限公司 | A kind of network optimized approach of multi-tenant, system, computing device and storage medium |
Cited By (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN109992416A (en) * | 2019-03-20 | 2019-07-09 | 跬云(上海)信息科技有限公司 | Multi-tenant method of servicing and device based on precomputation OLAP model |
| CN109992416B (en) * | 2019-03-20 | 2022-03-18 | 跬云(上海)信息科技有限公司 | Multi-tenant service method and device based on pre-calculation OLAP model |
| CN112748920A (en) * | 2019-10-29 | 2021-05-04 | 福建天泉教育科技有限公司 | Method and storage medium for product component tenancy |
| CN112748920B (en) * | 2019-10-29 | 2023-09-15 | 福建天泉教育科技有限公司 | Method and storage medium for tenant product components |
| CN112269562A (en) * | 2020-09-27 | 2021-01-26 | 福建天泉教育科技有限公司 | Tenant isolation method and terminal in modular product |
| CN112269562B (en) * | 2020-09-27 | 2023-09-12 | 福建天泉教育科技有限公司 | Tenant isolation method and terminal in componentized product |
| CN114710502A (en) * | 2021-12-28 | 2022-07-05 | 南京中孚信息技术有限公司 | Virtualization-based data security exchange method and system |
Also Published As
| Publication number | Publication date |
|---|---|
| CN108566412B (en) | 2021-02-09 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN103369027B (en) | Location aware Virtual Service in mixing cloud environment is equipped with | |
| CN104104620B (en) | Method and system for according to priority carrying out business stream process | |
| US10942666B2 (en) | Using network device replication in distributed storage clusters | |
| CN107147509B (en) | Virtual private network service implementation method, device and communication system | |
| EP2989751B1 (en) | Network resource matching | |
| CN108566412A (en) | A kind of data service method and data service device | |
| CN107276783B (en) | Method, device and system for realizing unified management and intercommunication of virtual machines | |
| CN105915470B (en) | A kind of elastic bandwidth configuration method based on Linux flow control | |
| US10873639B2 (en) | Cooperative caching for fast and scalable policy sharing in cloud environments | |
| CN108475206A (en) | Fine granularity service chain is realized in network function virtualization architecture | |
| CN106464742A (en) | Programmable network platform for a cloud-based services exchange | |
| CN109462534A (en) | Regional internet controller, regional internet control method and computer storage medium | |
| CN107113219A (en) | VLAN marks in virtual environment | |
| CN107153565A (en) | Configure the method and its network equipment of resource | |
| US11483398B2 (en) | Session management in a forwarding plane | |
| CN104769550B (en) | The method and system of bandwidth allocation in system for cloud computing | |
| JP5935418B2 (en) | Information processing apparatus, information processing method and program for managing multicast address, relay apparatus, information processing method and program for relay apparatus, and information processing system | |
| CN106462469A (en) | Framework for network technology agnostic multi-cloud elastic extension and isolation | |
| US11095661B2 (en) | Enforcing data sovereignty policies in a cloud environment | |
| CN107426152A (en) | Multitask security isolation system and method under cloud platform actual situation Interconnection Environment | |
| CN106027396B (en) | A kind of route control method, device and system | |
| US20190114337A1 (en) | Efficient trickle updates in large databases using persistent memory | |
| CN104166581A (en) | Virtualization method for increment manufacturing device | |
| Yan et al. | Sdn+ K8s Routing Optimization Strategy in 5G Cloud Edge Collaboration Scenario | |
| Nimkar et al. | Towards full network virtualization in horizontal IaaS federation: security issues |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| CB02 | Change of applicant information |
Address after: 518000 Two 26G Baihua Apartments on Baihua Erlu, Futian District, Shenzhen City, Guangdong Province Applicant after: Shenzhen Taiji Yun Soft Technology Co.,Ltd. Address before: 518000 Two 26G Baihua Apartments on Baihua Erlu, Futian District, Shenzhen City, Guangdong Province Applicant before: SHENZHEN TYKY TECHNOLOGY CO.,LTD. |
|
| CB02 | Change of applicant information | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant | ||
| PE01 | Entry into force of the registration of the contract for pledge of patent right |
Denomination of invention: A data service method and data service device Effective date of registration: 20210810 Granted publication date: 20210209 Pledgee: Shenzhen hi tech investment small loan Co.,Ltd. Pledgor: Shenzhen Taiji Yun Soft Technology Co.,Ltd. Registration number: Y2021980007466 |
|
| PE01 | Entry into force of the registration of the contract for pledge of patent right | ||
| CP03 | Change of name, title or address |
Address after: 518000 1402, building 3, Shenzhen new generation industrial park, No. 136, Zhongkang Road, Meidu community, Meilin street, Futian District, Shenzhen, Guangdong Province Patentee after: Shenzhen Taiji Shuzhi Technology Co.,Ltd. Address before: 518000 Two 26G Baihua Apartments on Baihua Erlu, Futian District, Shenzhen City, Guangdong Province Patentee before: Shenzhen Taiji Yun Soft Technology Co.,Ltd. |
|
| CP03 | Change of name, title or address | ||
| PC01 | Cancellation of the registration of the contract for pledge of patent right |
Date of cancellation: 20221107 Granted publication date: 20210209 Pledgee: Shenzhen hi tech investment small loan Co.,Ltd. Pledgor: Shenzhen Taiji Yun Soft Technology Co.,Ltd. Registration number: Y2021980007466 |
|
| PC01 | Cancellation of the registration of the contract for pledge of patent right |