CN116633691B - Cloud platform system based on SaaS and data storage method thereof - Google Patents

Cloud platform system based on SaaS and data storage method thereof Download PDF

Info

Publication number
CN116633691B
CN116633691B CN202310903808.XA CN202310903808A CN116633691B CN 116633691 B CN116633691 B CN 116633691B CN 202310903808 A CN202310903808 A CN 202310903808A CN 116633691 B CN116633691 B CN 116633691B
Authority
CN
China
Prior art keywords
database
module
information
tenant
shared
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN202310903808.XA
Other languages
Chinese (zh)
Other versions
CN116633691A (en
Inventor
周旅
胡代君
罗馗
李鸿鹄
伍平
郭一靖
周伟
梁日成
杜海波
贺亚兰
梁苏
杨茂书
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Sichuan Aerospace Tiansheng Technology Co ltd
Original Assignee
Sichuan Aerospace Tiansheng Technology Co ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Sichuan Aerospace Tiansheng Technology Co ltd filed Critical Sichuan Aerospace Tiansheng Technology Co ltd
Priority to CN202310903808.XA priority Critical patent/CN116633691B/en
Publication of CN116633691A publication Critical patent/CN116633691A/en
Application granted granted Critical
Publication of CN116633691B publication Critical patent/CN116633691B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
    • H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00—Error detection; Error correction; Monitoring
    • G06F11/07—Responding to the occurrence of a fault, e.g. fault tolerance
    • G06F11/14—Error detection or correction of the data by redundancy in operation
    • G06F11/1402—Saving, restoring, recovering or retrying
    • G06F11/1446—Point-in-time backing up or restoration of persistent data
    • G06F11/1458—Management of the backup or restore process
    • G06F11/1464—Management of the backup or restore process for networked environments
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00—Error detection; Error correction; Monitoring
    • G06F11/07—Responding to the occurrence of a fault, e.g. fault tolerance
    • G06F11/14—Error detection or correction of the data by redundancy in operation
    • G06F11/1402—Saving, restoring, recovering or retrying
    • G06F11/1446—Point-in-time backing up or restoration of persistent data
    • G06F11/1458—Management of the backup or restore process
    • G06F11/1469—Backup restoration techniques
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F16/00—Information retrieval; Database structures therefor; File system structures therefor
    • G06F16/20—Information retrieval; Database structures therefor; File system structures therefor of structured data, e.g. relational data
    • G06F16/27—Replication, distribution or synchronisation of data between databases or within a distributed database system; Distributed database system architectures therefor
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/02—Network architectures or network communication protocols for network security for separating internal from external traffic, e.g. firewalls
    • H04L63/0209—Architectural arrangements, e.g. perimeter networks or demilitarized zones
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/01—Protocols
    • H04L67/10—Protocols in which an application is distributed across nodes in the network
    • H04L67/1097—Protocols in which an application is distributed across nodes in the network for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/50—Network services
    • H04L67/54—Presence management, e.g. monitoring or registration for receipt of user log-on information, or the connection status of the users

Abstract

The invention relates to the technical field of big data and cloud storage, and discloses a cloud platform system based on SaaS and a data storage method thereof, wherein the cloud platform system comprises a database cluster, a first database set, a second database set and a third database set; the first database set consists of a plurality of independent databases prepared according to quantity constraint; the second database set consists of at least one first shared database which is prepared according to quantity constraint and contains a plurality of independent data tables; the third database set is composed of at least one second shared database containing at least one shared data table prepared according to a number constraint; the information database is stored in a shared database plus shared data table. According to the cloud platform system, the requirements of different tenants can be met by setting different types of database types.

Description

Cloud platform system based on SaaS and data storage method thereof
Technical Field
The invention relates to the technical field of big data and cloud storage, in particular to a cloud platform system based on SaaS and a data storage method thereof.
Background
The cloud platform system based on SaaS (hereinafter referred to as "cloud platform system") faces a community of multiple enterprises, wherein the enterprises are defined as tenants, data generated by the operation of the tenants in the cloud platform system are stored in a database of the cloud platform system, and at present, three main storage schemes exist for the data storage of the tenants, namely:
(1) Independent database: providing independent databases for different tenants is beneficial to simplifying the expansion design of the data model and meeting the unique requirements of different tenants, but for all the tenants, each tenant corresponds to one independent database to store the data thereof, so that the number of database installation is increased, and the maintenance cost and the purchase cost are brought along with the number of database installation;
(2) Shared database + independent data table: the method provides a certain degree of logic data isolation for tenants with higher security requirements, each database can support a plurality of tenant numbers, but for the tenants with high security, the data is stored by using the method, so that the security required by the tenant is not achieved;
(3) Shared database + shared data table: that is, tenants share the same database and data table, but data fields of tenantID multi-tenants are added in the table, which is the mode with the highest sharing degree, the highest isolation level, the lowest maintenance cost and the lowest acquisition cost, but the disadvantage of doing so is that the security is the lowest, and the tenants with requirements on the security cannot be met.
Therefore, how to meet the storage requirements of different tenants is a problem to be solved.
Disclosure of Invention
The invention provides a cloud platform system based on SaaS to solve the problems.
The invention is realized by the following technical scheme:
a SaaS-based cloud platform system, the cloud platform system comprising:
the system comprises a registration module, a modification module and a login module;
the interaction module comprises a plurality of applications with specific functions, and a tenant can generate certain data by operating the interaction module and transmit the data to the selection module;
the matching module is used for matching enterprise information of the corresponding tenant from the information database according to the user name acquired by the login module;
the judging module judges the type of the database and the corresponding transmission channel stored by the tenant using the data generated by the interaction module on the enterprise information from the matching module based on a preset judging rule, and simultaneously controls the selection module to transmit the data generated by the interaction module to the corresponding database in the database cluster;
a database cluster comprising a first set of databases, a second set of databases, and a third set of databases;
the first database set consists of a plurality of independent databases prepared according to quantity constraint;
The second database set consists of at least one first shared database which is prepared according to quantity constraint and contains a plurality of independent data tables;
the third database set is composed of at least one second shared database containing at least one shared data table prepared according to a number constraint; the storage mode of the information database is a shared database and a shared data table;
the system comprises a cloud platform system, a tenant, a monitoring module, a standby protection module and a transmission channel, wherein the monitoring module is used for backing up data stored in the database cluster and the information database, a first firewall is arranged between the cloud platform system and the user side of the tenant, and the monitoring module is used for monitoring whether the first firewall is attacked or not and controlling the on-off of the transmission channel among the database cluster, the information database and the standby protection module according to the attack state.
According to the technical scheme, the independent database, the first shared database and the second shared database are set together to be the database of the cloud platform system, so that the requirements of different types of tenants can be met, the judging module controls the transmission channel corresponding to the selecting module according to the tenant information acquired by the matching module and preset judging rules, data generated by the tenant in the interaction module are transmitted to the corresponding database through the transmission channel, the first firewall can resist network attack from the outside, when the first firewall is attacked for the first time, the monitoring module opens the transmission channel between the database cluster and the standby protection module, data in the database cluster is backed up to the standby protection module, the transmission channel between the database cluster and the standby protection module is disconnected after the backup is completed, and therefore, regardless of whether the first firewall is broken or not, the data of the cloud platform system can be stored completely, even if the data in the subsequent database cluster is lost, the data in the standby protection module can be restored to the database cluster again after the cloud platform system is restored, and therefore the first firewall is higher in the protection level.
As an optimization, the business information includes company name, industry type, registered funds, business type, current number of people, company location, legal information, business income of the previous year, whether or not business secrets are possessed.
As an optimization, the number constraint of the independent databases is as follows:
counting a first total number Q1 of first enterprises in a certain area, wherein the first enterprises comprise enterprises with confidentiality requirements of which the confidentiality requirements are first requirements and enterprises with sizes exceeding a first threshold and confidentiality of which the confidentiality is not first requirements, and the number d1= ⌈ (Q1R 1) ⌉ of independent databases;
the number constraint of the first shared database is:
counting a second total number Q2 of second enterprises in a certain area, wherein the second enterprises comprise enterprises with confidentiality requirements of which the second requirements are met and enterprises with sizes exceeding a second threshold value but being lower than a first threshold value and confidentiality of which is not met, data of the enterprises are stored in the first shared database, and the number d2= ⌈ (q2×r2) ⌉ of the first shared database;
the number constraint of the second shared database is:
counting a third total number Q3 of third enterprises within a certain region, wherein the third enterprises comprise enterprises which have no confidentiality requirements and have a scale lower than a second threshold, and the number d3= ⌈ (Q3R 3) ⌉ of the second shared databases;
R1, R2 and R3 are floating values of a first total number, a second total number and a third total number respectively,
；
wherein->Representing the data storage capacity of a second enterprise in the plurality of regions for one year, N representing the number of the second enterprises in the plurality of regions, K representing the capacity of the first shared database, x representing the storage age of the second enterprise, and T representing the estimated scale of the newly added database>；
Wherein->Representing data storage capacity of a third enterprise in the plurality of regions for one year, M representing the number of the third enterprises in the plurality of regions, G representing the capacity of the second shared database, y representing the storage age of the third enterprise, and T representing the estimated scale of the newly added database>。
Thus, through the quantity constraint, the database with the corresponding quantity can be prepared relatively easily and objectively, and meanwhile, the quantity of the database can meet the storage requirements of all enterprises in the area on the premise of lower maintenance cost and acquisition cost.
As optimization, the preset decision rule is:
as long as the tenant belongs to an enterprise with a first requirement of confidentiality, the data generated by the tenant is stored in an independent database regardless of the scale of the tenant, wherein the enterprise with the first requirement of confidentiality comprises military enterprises, public institutions and national enterprises of non-military enterprises;
If the tenant does not belong to an enterprise with the confidentiality requirement being the first requirement (possibly without confidentiality or the second requirement), but the scale of the tenant exceeds a first threshold, the data generated by the tenant are all stored in an independent database;
if the tenant belongs to an enterprise with a second requirement of confidentiality, on the premise that the scale of the tenant does not exceed a first threshold, the data generated by the tenant is stored in a first shared database regardless of the scale of the tenant, wherein the enterprise with the second requirement of confidentiality comprises an enterprise with business secrets;
if the tenant belongs to an enterprise without confidentiality, but the scale of the tenant is between a first threshold value and a second threshold value, the data generated by the tenant are stored in a first shared database;
if the tenant belongs to an enterprise without confidentiality requirements and the scale of the tenant is smaller than a second threshold, the data generated by the tenant are stored in a second shared database;
if the incomes and the practitioners of the tenant belong to two different scales respectively, the method comprises the following steps: the independent databases are prioritized, the first shared database is second, the second shared database is third, and the database selection is carried out.
Therefore, firstly, the confidentiality of the tenant is considered, and for the tenant with high confidentiality, no matter how large the scale of the tenant is, an independent database is matched for the tenant, so that the highest security of the tenant can be ensured;
For the second tenant requiring confidentiality, determining the type of the database according to the scale of the tenant, if the tenant is a large enterprise (the scale exceeds a first threshold), more data are needed to be stored by the tenant, and meanwhile, the tenant is quite likely to have some unique requirements, so that for the tenant, an independent database is also allocated to the tenant, or a first shared database is allocated to the tenant for a small enterprise (the scale is lower than the first threshold), and the data stored by the tenant can be more concentrated on the premise of ensuring the security of the tenant;
for a tenant without confidentiality requirements, the type of the database is also determined according to the scale of the tenant, if the scale of the tenant exceeds a first threshold value, more data are required to be stored by the tenant, and meanwhile, the tenant is very likely to have some unique requirements, so that for the tenant, an independent database is also allocated to the tenant; if the scale of the tenant is between the first threshold and the second threshold, a first shared database is allocated to the tenant, so that the tenant can store data in a data set, when the tenant with the scale between the first threshold and the second threshold is to be upgraded into an independent database, the data table in the original first shared database of the tenant can be wholly and rapidly backed up to a standby protection module and then transmitted to a new independent database through the standby protection module, and compared with the technical scheme of storing the enterprise data without confidentiality requirements and with the scale between the first threshold and the second threshold into the second shared database, finding the information of the tenant from a plurality of data tables in the second shared database, backing up to the standby protection module and transmitting the data table to the new independent database through the standby protection module, the time is less.
As optimization, the standby protection module comprises a standby database set for backing up and storing a first database set, a second database set and a third database set and an information standby database for backing up and storing an information database, wherein the first database set is connected with a sixth exchange module through a first exchange module, the second database set is connected with the sixth exchange module through a second exchange module, the third database set is connected with the sixth exchange module through a third exchange module, the sixth exchange module is also connected with the standby database set, and a first switch, a second switch and a third switch are respectively arranged among the first exchange module, the second exchange module, the third exchange module and the sixth exchange module; the information database is connected with the information standby database through a fourth exchange module, and a fourth switch is arranged between the fourth exchange module and the information standby database; and the first switch, the second switch, the third switch, the fourth switch and the second firewall are connected with the monitoring module, and the standby database set and the information standby database are arranged in a local area network.
Therefore, physical isolation between the database cluster and the standby database set can be realized through the first switch, the second switch and the third switch, physical isolation between the information database and the information standby database can be realized through the fourth switch, and meanwhile, the second firewall is matched, so that the safety of the standby database set is enhanced, when the first firewall is attacked, after the data backup is finished, the first switch, the second switch, the third switch and the fourth switch are disconnected, and the standby database set, the information standby database and the cloud platform system are completely disconnected, so that the data integrity is ensured.
In this embodiment, the storage modes of the standby database set are all shared databases and independent data tables, and the storage mode of the information standby database is shared databases and shared data tables.
In this way, the scale or confidentiality of the tenant may change, and in this way, the database corresponding to the tenant may change, and in this way, the standby data in the standby database set may be quickly and integrally migrated and stored in the changed database in the form of an independent data table.
The invention also discloses a data storage method of the cloud platform system based on the SaaS, which aims at storing the data generated by the cloud platform system based on the SaaS and comprises the following steps:
S1, storing enterprise information into an information database through a registration module or a modification module;
s2, inputting a user name through a login module, and outputting the user name to an interaction module and a matching module respectively;
s3, the matching module finds corresponding enterprise information according to the input user name, and meanwhile, the tenant operates the interaction module through the identity information of the corresponding user name, generates data and transmits the data to the selection module;
s4, the matching module inputs the searched enterprise information to a judging module, the judging module selects a corresponding database and a corresponding transmission channel number according to a preset judging rule, and sends a selection signal to a selecting module;
s5, the selection module opens a corresponding signal transmission channel according to the selection signal, and the signals generated by the interaction module are stored in a corresponding database in the database cluster.
As optimization, the judging module comprises a control module, a storage module and a capacity detection module for detecting the capacity of the database cluster, and the selecting module comprises a fifth switching module; the control module is respectively connected with the matching module, the storage module, the capacity detection module, the monitoring module, the first exchange module, the second exchange module, the third exchange module, the fifth exchange module and the sixth exchange module, wherein the storage module stores the corresponding information of 'independent database number-user name-first transmission channel number-second transmission channel number-standby database number', 'first shared database number-user name-first transmission channel number-second transmission channel number-standby database number', 'second shared database number-first transmission channel number-second transmission channel number-standby database number', the first transmission channel number which is not used in the fifth exchange module and the first transmission channel number which is connected with the independent database, the first shared database number which is provided with the free capacity in the fifth exchange module and the first transmission channel number which is connected with the first shared database, the second shared database number which is provided with the free capacity in the fifth exchange module and the first transmission channel number which is connected with the second shared database, the first transmission channel number which is provided with the free capacity in the fifth exchange module, the first shared database number which is provided with the free capacity in the second shared database, and the preset cluster numbers between all the standby databases and the standby databases;
The specific steps of S5 are as follows:
s5.1, the control module receives enterprise information of the matching module, matches the enterprise information with a preset rule read from the storage module, matches the enterprise information with a database type corresponding to a tenant, and meanwhile judges as follows:
a. if the data generated by the tenant needs to be stored in the independent database, the control module judges whether the tenant has the corresponding independent database according to the corresponding information read from the storage module, if so, the first transmission channel corresponding to the fifth exchange module is opened to transmit the data to the independent database for storage, otherwise, one independent database number is randomly selected from unused independent database numbers respectively, one spare database number with spare capacity is randomly selected from a spare database set, the number of the first transmission channel corresponding to the independent database and the number of the second transmission channel are simultaneously selected, the number of the first transmission channel and the number of the second transmission channel are paired with the user name of the tenant to form new corresponding information for storage, and after the pairing is completed, the corresponding first transmission channel is opened to transmit the data generated by the tenant to the corresponding independent database for storage;
b. if the data generated by the tenant needs to be stored in the first shared database, the control module judges whether the tenant has a corresponding first shared database according to the corresponding information read from the storage module, if so, the first transmission channel corresponding to the fifth exchange module is opened to transmit the data to the data table corresponding to the first shared database for storage, otherwise, the capacity detection module randomly selects a first shared database number from the first shared database numbers with spare capacity, randomly selects a spare database number with spare capacity from the spare database set, simultaneously selects the number of the first transmission channel corresponding to the first shared database and the number of the second transmission channel, pairs the number with the user name of the tenant to form new corresponding information and stores the new corresponding information, after the pairing is completed, opens the corresponding first transmission channel, transmits the data generated by the tenant to the corresponding first shared database for storage, and after a certain first shared database is full, the capacity detection module transmits the number of the first shared database to the control module to delete the corresponding shared database number of the control module;
c. If the data generated by the tenant needs to be stored in the second shared database, the control module randomly selects a second shared database number from the first shared database number with spare capacity, randomly selects a spare database number with spare capacity in the spare database set, simultaneously selects the number of the first transmission channel and the number of the second transmission channel corresponding to the second shared database, opens the corresponding first transmission channel, transmits the data generated by the tenant to the second shared database for storage, and when a certain second shared database is full, the capacity detection module transmits the number of the second shared database to the control module, and the control module controls deletion of the second shared database number with spare capacity corresponding to the second shared database stored by the storage module.
As optimization, the method also comprises S6, a plurality of independent databases in the first database set, a plurality of first shared databases in the second database set, a plurality of second shared databases in the third database set and an information database periodically and completely backing up the unrepeated data to the corresponding standby database set and the information standby database,
When the first firewall is not attacked and the database clusters and the information databases do not need to backup data, the monitoring module controls the first switch, the second switch, the third switch and the fourth switch to be switched off, and the first database set, the second database set, the third database set and the information databases are respectively switched off from transmission channels between the standby database set and the information standby database;
when the first firewall is attacked, the monitoring module controls the first switch, the second switch, the third switch and the fourth switch to be closed, the first database set, the second database set, the third database set and the information database are respectively communicated with transmission channels between the standby database set and the information standby database, the first database set, the second database set, the third database set and the information database are used for completely backing up unrepeated data into the standby database set and the information standby database respectively, and the first switch, the second switch, the third switch and the fourth switch are opened after the data backup is completed;
when the first firewall is not attacked and the database clusters and the information databases need to be backed up, the monitoring module controls the first switch, the second switch, the third switch and the fourth switch to be closed, the first database set, the second database set, the third database set and the information database are respectively communicated with transmission channels among the first standby database, the second standby database, the third standby database and the information standby database, and the monitoring module controls the first database set, the second database set, the third database set and the information database to completely backup the unreported data into the standby database set and the information standby database respectively;
When the second firewall is attacked, the monitoring module controls the first switch, the second switch, the third switch and the fourth switch to be disconnected.
When the enterprise information of the tenant changes, the control module informs the monitoring module that the enterprise information of the tenant changes, the monitoring module correspondingly controls the corresponding switch to be closed through the change flow of the database of the tenant stored data, the data which is not backed up in the original database corresponding to the tenant is backed up to the corresponding original standby database, the original database is emptied after the backup is completed, the database number which is not used or has spare capacity in the storage module is obtained through the control module, one database number is randomly selected as a new database, the number of the first transmission channel corresponding to the new database and the number of the second transmission channel between the first transmission channel and the original standby database are obtained, the number of the new database, the number of the original database, the number of the first transmission channel and the number of the second transmission channel are correspondingly formed into corresponding information with the user name of the tenant, the original corresponding information is stored in the storage module, the data in the original standby database is transmitted to the new database through the corresponding second transmission channel, and the data in the new database is stored according to the new data storage mode.
Compared with the prior art, the invention has the following advantages and beneficial effects:
according to the cloud platform system, the requirements of different tenants can be met by setting different types of databases, and meanwhile, the storage requirements of all enterprises in the area can be met on the premise of lower cost by means of the quantity constraint of the databases;
the data generated by the tenants can be correspondingly stored in the corresponding databases through the pre-judging rules, and manual distribution is not needed, so that the efficiency and the accuracy of database distribution are high.
Drawings
In order to more clearly illustrate the technical solutions of the exemplary embodiments of the present invention, the drawings that are needed in the examples will be briefly described below, it being understood that the following drawings only illustrate some examples of the present invention and therefore should not be considered as limiting the scope, and that other related drawings may be obtained from these drawings without inventive effort for a person skilled in the art. In the drawings:
fig. 1 is a schematic diagram of a module connection structure of a SaaS-based cloud platform system;
FIG. 2 is a schematic diagram of the connections between a database cluster, a decision module, a selection module, a monitoring module, and a backup protection module;
FIG. 3 is a schematic diagram illustrating connection of a plurality of standby databases forming a standby data set to a sixth switching module.
In the drawings, the reference numerals and corresponding part names:
100-cloud platform system, 110-registration module, 111-modification module, 120-database cluster, 121-first database set, 122-second database set, 123-third database set, 130-login module, 140-information database, 150-interaction module, 160-matching module, 170-determination module, 171-control module, 172-storage module, 173-capacity detection module, 180-selection module, 181-fifth exchange module, 190-monitoring module, 200-standby protection module, 210-first exchange module, 220-second exchange module, 230-third exchange module, 240-fourth exchange module, 251-first switch, 252-second switch, 253-third switch, 254-fourth switch, 260-sixth exchange module, 270-standby database set, 271-first standby database, 272-second standby database, 273-third standby database, 280-information standby database, 290-second firewall, 300-first firewall, 400-client.
Description of the embodiments
For the purpose of making apparent the objects, technical solutions and advantages of the present invention, the present invention will be further described in detail with reference to the following examples and the accompanying drawings, wherein the exemplary embodiments of the present invention and the descriptions thereof are for illustrating the present invention only and are not to be construed as limiting the present invention.
A SaaS-based cloud platform system of embodiment 1, as shown in fig. 1, the cloud platform system 100 includes:
a registration module 110, configured to register enterprise information of a tenant, and store the registered enterprise information and a corresponding user name and password in an information database 140;
the modification module 111 is configured to modify registered enterprise information by a tenant, store the modified enterprise information in the information database 140, and cover original enterprise information data.
Specifically, the enterprise information includes company name, industry type, registered funds, enterprise type, current number of people, company location, legal information, business income of the previous year, and whether or not the business secret is available.
If the change in tenant size does not affect the database of the tenant's stored data, or the change in industry type does not affect the database of the tenant's stored data, the tenant may not change the enterprise information. For example, if the scale of the tenant changes from a to B, but both scales of A, B are corresponding to the same type of database, or if the industry type of the tenant changes from C to D, but both industries of C, D are corresponding to the same type of database, the tenant may not need to modify the enterprise information of the tenant by the modification module 111, but may also modify the enterprise information of the tenant by the modification module 111, but if the enterprise information of the tenant is stored in corresponding to different databases before and after the change, the tenant must change the enterprise information by the modification module 111.
A login module 130, configured to enable a tenant to enter the cloud platform system 100 by logging in a user name and a password;
the interaction module 150 comprises a plurality of applications with specific functions, and a tenant can generate certain data by operating the interaction module 150 and transmit the data to the selection module 180;
the interaction module 150 may be understood as existing software capable of generating data, such as chat software including QQ, weChat, nail, etc., drawing software including CAD, solidWorks, etc., and the data may be text data, video data, audio data, data generated by various special office software, etc.
A matching module 160, configured to match enterprise information of a corresponding tenant from the information database 140 according to the user name acquired by the login module 130;
the matching module 160 performs a corresponding search in the information database 140 according to the keyword (here, the user name), so as to find the enterprise information corresponding to the user name.
The determining module 170 determines, based on a preset determining rule, a database type and a corresponding transmission channel stored by the tenant using the data generated by the interaction module 150 for the enterprise information from the matching module 160, and controls the selecting module 180 to transmit the data generated by the interaction module to a corresponding database in the database cluster;
A database cluster 120 comprising a first set of databases 121, a second set of databases 122, and a third set of databases 123;
the first database set 121 is composed of a plurality of independent databases prepared according to a number constraint;
the second database set 122 is comprised of at least one first shared database containing a plurality of independent data tables prepared according to a number constraint;
the third database set 123 is composed of at least one second shared database containing at least one shared data table prepared according to a number constraint; the information database 140 is stored in a shared database+shared data table;
the system further comprises a monitoring module 190 and a standby protection module 200 for backing up the data stored in the database cluster 120 and the information database 140, a first firewall 300 is arranged between the cloud platform system 100 and the user side 400 of the tenant, the monitoring module 190 is used for monitoring whether the first firewall 300 is attacked, and when the first firewall 300 is not attacked and the database cluster 120 and the information database 140 do not need to back up the data, the monitoring module 190 controls the transmission channels among the database cluster 120, the information database 140 and the standby protection module 200 to be disconnected; when the first firewall 300 is attacked, the monitoring module 190 controls the communication of the transmission channels between the database cluster 120 and the information database 140 and the standby protection module 200, the databases in the database cluster 120 and the information database 140 backup the data which is not backed up into the standby protection module 200, and after the data backup is completed, the monitoring module 190 controls the disconnection of the transmission channels between the database cluster 120 and the information database 140 and the standby protection module 200; when the first firewall 300 is not attacked and the database cluster 120, the information database 140 needs backup data, the monitoring module 190 controls the transmission channel communication between the database cluster 120, the information database 140 and the standby protection module 200, and the determining module 170 also controls the connection transmission channel combination between the standby protection module 200 and the database cluster 120. When the first firewall 300 is not attacked, the first database set 121, the second database set 122, the third database set 123 and the information database 140 may perform data backup in a time-sharing manner, for example, backup the data in the first database set 121 on the day of the week of the first week; on the day of the second week, the data in the second database set 122 is backed up, and on the day of the third week, the data in the third database set 123 is backed up; on the fourth day of the week, the data in the information database 140 is backed up.
In this technical solution, by setting the independent database, the first shared database, and the second shared database as the databases of the cloud platform system 100 together, the requirement of different types of tenants can be met, the determining module 170 controls the transmission channel corresponding to the selecting module 180 according to the tenant information acquired by the matching module 160, so that the data generated by the tenant in the interaction module 150 is transmitted to the corresponding database through the transmission channel, the first firewall 300 can resist the network attack from the outside, when the first firewall 300 is attacked for the first time, the monitoring module 190 opens the transmission channel between the database cluster 120 and the standby protection module 200, so that the database cluster 120 and the standby protection module 200 are disconnected after the backup is completed, so that no matter whether the first firewall 300 is broken or not, the data of the cloud platform system 100 is kept in a complete state, even if the data in the subsequent database cluster 120 is lost, the data in the subsequent database cluster is backed up by the first firewall 300 is lost, and after the cloud platform system 100 is restored, the data cluster is completely backed up by the first firewall 300 again, and the first firewall 300 is not broken, and the data in the first firewall 300 is not broken until the first firewall 300 is required to be completely attacked, so that the data cluster is not broken by the first firewall 300, and the first firewall 300 is completely and the data cluster is completely broken.
In this embodiment, the number constraint of the independent databases is:
statistics of a certain region (called local region, canAdministrative district, or city), the first total number Q1 of first businesses within the first business, including businesses with confidentiality requirements of a first requirement and businesses with a size exceeding a first threshold and confidentiality of no first requirement, the number d1= ⌈ (Q1R 1) ⌉ of the independent databases, R1 being a floating value of the first total number,；
the independent databases are mainly used for data storage aiming at enterprises (one of the enterprises is selected) with the confidentiality requirement of the first requirement or the scale exceeding a first threshold value, so the number of the independent databases is equal to the first total number Q1) Multiple, extra->Multiple is provided for enterprises or new-to-live areas where later data may be updated to a separate database for storage, which is generally not so much, so the first total number Q1 is set up more +>The method can be used for doubling, so that the cost is not increased greatly, and redundant independent databases can be guaranteed to store data for newly added enterprises. ⌈ (Q1R 1) ⌉ is an integer pointing upwards to the value of "Q1R 1".
The number constraint of the first shared database is:
counting a second total number Q2 of second enterprises within a certain region, the second enterprises comprising enterprises whose confidentiality requirements are second requirements and enterprises whose scale exceeds a second threshold but is lower than a first threshold and whose confidentiality is not first requirements, the data of the enterprises being stored in the first shared database, the number d2= ⌈ (Q2R 2) ⌉ of the first shared database, R2 being a floating value of the second total number,wherein->Representing the data storage capacity of a second enterprise in the plurality of regions for one year, N representing the number of the second enterprises in the plurality of regions, K representing the capacity of the first shared database, x representing the storage age of the second enterprise, and T representing the estimated scale of the newly added database>The method comprises the steps of carrying out a first treatment on the surface of the The plurality of regions are other regions except a certain region (local region), the number of other regions can be obtained according to practice, the plurality of regions are regions with the same or higher administrative level as the local region, the data storage capacity of the second enterprises in the plurality of other regions is counted, the maximum value is taken as the data capacity reference value of the second enterprises in the local region, the storage period can be set to be 20 years generally, the storage period of 20 years of one of the second enterprises in the local region can be estimated, the purpose of estimating the data storage capacity of the second enterprises can be estimated, and the purpose of estimating the proportion range of the newly added database is to prevent the later newly added enterprises from storing data, so the proportion of the storage capacity of the second enterprises to the capacity of the first shared database is properly increased, and the storage capacity of the later newly added enterprises is ensured.
The first shared database is mainly used for storing data for enterprises with confidentiality requirements of second requirements or confidentiality between a first threshold and a second threshold, wherein the confidentiality is not required by the first requirements (one of the enterprises is selected), and the enterprises with confidentiality between the first threshold and the second threshold and not required by the first requirements can also require confidentiality, so that the data of the enterprises are stored in the first shared database, the enterprises can be guaranteed to have certain confidentiality, and meanwhile, the data volume of the enterprises with confidentiality which is not required by the first requirements and is not too large due to the fact that the scale exceeds the second threshold but is lower than the first threshold is not increased, the number of the first shared databases is R2 times of the total number Q2, and therefore, the storage requirements of the enterprises can be met on the basis of not increasing more cost.
The number constraint of the second shared database is:
counting the total number of enterprises within a certain area, which have no confidentiality requirements and the scale is lower than a second threshold, wherein the total number is defined as a third total number Q3, the number d3= ⌈ (q3.0.2) ⌉ of the second shared database, R3 is a floating value of the third total number,wherein->Representing data storage capacity of a third enterprise in the plurality of regions for one year, M representing the number of the third enterprises in the plurality of regions, G representing the capacity of the second shared database, y representing the storage age of the third enterprise, and T representing the estimated scale of the newly added database >The method comprises the steps of carrying out a first treatment on the surface of the The multiple regions are other regions except a certain region (local region), the data storage capacity of the third enterprises in the multiple other regions is counted, then the maximum value is taken as the data capacity reference value of the third enterprises in the local region, the storage period can be generally set to be 20 years, so that the storage period of one of the third enterprises in the local region for 20 years can be estimated, the purpose of estimating the proportion range of the newly added database is to prevent the later newly added enterprises from storing data, and the proportion of the storage capacity of the third enterprises to the capacity of the first shared database is properly increased, so that the storage capacity of the later newly added enterprises is ensured.
The second shared databases are mainly used for data storage for enterprises (both of which are required to be met) without confidentiality requirements and with the size smaller than the second threshold, and the data size of the enterprises with the size smaller than the second threshold is not too large, so that the number of the second shared databases is R2 times of the third total number Q3, and the storage requirements of the enterprises can be met on the basis of not increasing more cost.
Thus, through the quantity constraint, the database with the corresponding quantity can be prepared relatively easily and objectively, and meanwhile, the quantity of the database can meet the storage requirements of all enterprises in the area on the premise of lower maintenance cost and acquisition cost.
The decision rule preset in the decision module 170 is:
as long as the tenant belongs to an enterprise with a first confidentiality requirement, the data generated by the tenant is stored in an independent database regardless of the scale of the tenant, wherein the enterprise with the first confidentiality requirement is an enterprise with confidentiality qualification, such as a military enterprise, a public institution and a national enterprise of a non-military enterprise, and the enterprise can be obtained through online inquiry; the enterprises that store data in the independent databases are classified into two types, one is an enterprise with high confidentiality requirements, and even if the size is small (smaller than the second threshold value), the data of the enterprise is stored in the independent databases.
Another is an enterprise whose confidentiality exceeding the first threshold is not a first requirement, i.e. the tenant does not belong to an enterprise whose confidentiality requirement is a first requirement (possibly no confidentiality or a second requirement), but whose size exceeds the first threshold; the tenant has more data to be stored, and meanwhile, the tenant has very high possibility of having some unique requirements, so that for the tenant, an independent database is also allocated to the tenant, or the tenant is a small and medium enterprise (the scale is lower than a first threshold value), and a first shared database is allocated to the tenant, so that the data stored by the tenant can be more concentrated on the premise of ensuring the safety of the tenant;
If the tenant belongs to an enterprise with a second requirement of confidentiality, storing data generated by the tenant in a first shared database on the premise that the scale of the tenant does not exceed a first threshold value, wherein the enterprise with the second requirement of confidentiality comprises all enterprises with business secrets;
if the tenant belongs to an enterprise without confidentiality, but the scale of the tenant is between a first threshold value and a second threshold value, the data generated by the tenant are stored in a first shared database;
if the tenant belongs to an enterprise without confidentiality requirements and the scale of the tenant is smaller than a second threshold, the data generated by the tenant are stored in a second shared database.
When the industry of the tenant belongs to industry, if the scale is business income, the first threshold is 40000 ten thousand yuan, the second threshold is 2000 ten thousand yuan, and if the scale is the number of practitioners, the first threshold is 1000 persons, and the second threshold is 300 persons;
when the industry of the tenant belongs to the building industry, if the scale is business income, the first threshold is 80000 ten thousand yuan, and the second threshold is 6000 ten thousand yuan;
when the industry of the tenant belongs to the information transmission industry, if the scale is business income, the first threshold is 100000 ten thousand yuan, the second threshold is 1000 ten thousand yuan, and if the scale is the number of practitioners, the first threshold is 2000 people, and the second threshold is 100 people;
When the industry of the tenant belongs to the software and information technology service industry, if the scale is business income, the first threshold is 10000 ten thousand yuan, the second threshold is 1000 ten thousand yuan, and if the scale is the number of practitioners, the first threshold is 300 persons, and the second threshold is 100 persons;
if the incomes and the practitioners of the tenant belong to two different scales respectively, the method comprises the following steps: the independent databases are prioritized, the first shared database is second, the second shared database is third, and the database selection is carried out.
Here, for example, if the confidentiality is not the first desired tenant, and the incomes exceed the first threshold, and the number of practitioners is between the first threshold and the second threshold, the database corresponding to the tenant is set as an independent database, and other data are the same as above.
The industries just correspond to cloud platforms in the areas where the invention is located, all the residents in different areas are different, the industries are different, and industry standards can refer to 'medium and small enterprises' identification standards, and the details are not repeated here.
Therefore, firstly, the confidentiality of the tenant is considered, and for the tenant with high confidentiality, no matter how large the scale of the tenant is, an independent database is matched for the tenant, so that the highest security of the tenant can be ensured;
For the second tenant requiring confidentiality, determining the type of the database according to the scale of the tenant, if the tenant is a large enterprise (the scale exceeds a first threshold), more data are needed to be stored by the tenant, and meanwhile, the tenant is quite likely to have some unique requirements, so that for the tenant, an independent database is also allocated to the tenant, or a first shared database is allocated to the tenant for a small enterprise (the scale is lower than the first threshold), and the data stored by the tenant can be more concentrated on the premise of ensuring the security of the tenant;
for a tenant without confidentiality requirements, the type of the database is also determined according to the scale of the tenant, if the scale of the tenant exceeds a first threshold value, more data are required to be stored by the tenant, and meanwhile, the tenant is very likely to have some unique requirements, so that for the tenant, an independent database is also allocated to the tenant; if the scale of the tenant is between the first threshold and the second threshold, a first shared database is allocated to the tenant, so that in the data set stored by the tenant, when the tenant with the scale between the first threshold and the second threshold is to be upgraded into an independent database, the data table in the original first shared database of the tenant can be backed up to the standby protection module 200 entirely and quickly, and then transmitted to a new independent database through the standby protection module 200, and compared with the technical scheme of storing the enterprise data without confidentiality requirement and with the scale between the first threshold and the second threshold into the second shared database, finding the information of the tenant from a plurality of data tables in the second shared database, backing up to the standby protection module 200, and then transmitting to the new independent database through the standby protection module 200, the time is less.
As shown in fig. 2, in this embodiment, the backup protection module 200 includes a backup database set 270 for backup storage of the first database set 121, the second database set 122, and the third database set 123, and an information backup database 280 for backup storage of the information database 140, where the first database set 121 is connected to the sixth exchange module 260 through the first exchange module 210, the second database set 122 is connected to the sixth exchange module 260 through the second exchange module 220, the third database set 123 is connected to the sixth exchange module 260 through the third exchange module 230, and the sixth exchange module 260 is further connected to the backup database set 270. The backup database set 270 is composed of a plurality of backup databases, the plurality of backup databases are connected through the sixth switching module 260, and the plurality of backup databases and the sixth switching module 260 form a star shape centered on the sixth switching module 260, as shown in fig. 3, for example, the backup database set is composed of a first backup database 271, a second backup database 272, and a third backup database 273. The sixth switch module 260 may be composed of a plurality of switches, and may be connected by any existing manner, so long as each standby database can be guaranteed to have a data transmission channel with each database in the first database set 121, the second database set 122, and the third database set 123, so that when data recovery or data migration (change occurs to the database stored by the tenant) is performed, data in any standby database can be stored in any database in the first database set 121, the second database set 122, and the third database set 123.
A first switch 251, a second switch 252 and a third switch 253 are respectively disposed between the first switch module 210, the second switch module 220, the third switch module 230 and the sixth switch module 260; the information database 140 is connected with the information standby database 280 through a fourth switching module 240, and a fourth switch 254 is arranged between the fourth switching module 240 and the information standby database 280; and a second firewall 290 is disposed between the first switch 210 and the first switch 251, between the second switch 220 and the second switch 252, between the third switch 230 and the third switch 253, and between the fourth switch 240 and the fourth switch 254, the first switch 251, the second switch 252, the third switch 253, the fourth switch 254, and the second firewall 290 are connected with the monitoring module 190, and the standby database set 270 and the information standby database 280 are disposed in a local area network.
In this way, the first switch 251, the second switch 252 and the third switch 253 can realize physical isolation between the database cluster 120 and the standby database set 270, the fourth switch 254 can realize physical isolation between the information database 140 and the information standby database 280, and the second firewall 290 is matched, so that the security of the standby database set 270 is enhanced, when the first firewall 300 is attacked, after the data backup is completed, the first switch 251, the second switch 252, the third switch 253 and the fourth switch 254 are opened, so that the standby database set 270, the information standby database 280 and the cloud platform system 100 are completely disconnected, and the integrity of the data is ensured.
In this embodiment, the storage modes of the standby database set 270 are all shared databases and independent data tables, and the storage mode of the information standby database 280 is shared databases and shared data tables.
In this way, the size or confidentiality of the tenant may change, for example, the tenant originally stores data in the first shared database, and then needs to store the data in the independent database, the corresponding standby database may store the data in the changed database through the corresponding exchange modules (the corresponding exchange modules in this example are the sixth exchange module 260, the first exchange module 210 and the second exchange module 220), and the standby data in the standby database set 270 may also be migrated and stored in the changed database in a relatively fast manner through the form of the independent data table, because the storage modes of the standby database set 270 are both the shared database and the independent data table.
The invention of embodiment 2 also discloses a storage method of the SaaS-based cloud platform system 100, which aims at storing data generated by the SaaS-based cloud platform system 100 of embodiment 1, and comprises the following steps:
S1, storing enterprise information into an information database 140 through a registration module 110 or a modification module 111;
s2, inputting a user name through the login module 130 and outputting the user name to the interaction module 150 and the matching module 160 respectively;
s3, the matching module 160 finds corresponding enterprise information according to the input user name, and meanwhile, the tenant operates the interaction module 150 through the identity information of the corresponding user name, generates data and transmits the data to the selection module 180;
s4, the matching module 160 inputs the searched enterprise information to the judging module 170, the judging module 170 selects a corresponding database and a corresponding transmission channel number according to a preset judging rule, and sends a selection signal to the selecting module 180;
s5, the selection module 180 opens a corresponding signal transmission channel according to the selection signal, and stores the signal generated by the interaction module 150 into a corresponding database in the database cluster 120.
In this embodiment, the determining module 170 includes a control module 171, a storage module 172, and a capacity detecting module 173 for detecting a capacity of the database cluster 120, and the selecting module 180 includes a fifth switching module 181; the control module 171 is respectively connected to the matching module 160, the storage module 172, the capacity detection module 173, the monitoring module 190, the first switching module 210, the second switching module 220, the third switching module 230, the fifth switching module 181, and the sixth switching module 260, where the storage module 172 stores the corresponding information of "the independent database number-the user name-the first transmission channel number-the second transmission channel number-the standby database number", "the first shared database number-the user name-the first transmission channel number-the second transmission channel number-the standby database number", "the second shared database number-the first transmission channel number-the second transmission channel number-the standby database number", the unused independent database number, and the first transmission channel number connected to the independent database in the fifth switching module 181, the second shared database number connected to the first shared database in the fifth switching module 181, the second shared database number with the spare capacity, the spare database number connected to the second shared database in the fifth switching module 181, and the spare database number in the fifth switching module 181, and the spare database in the spare database, all sets of all the spare database numbers 120;
The specific steps of S5 are as follows:
s5.1, the control module 171 receives the enterprise information of the matching module 160, matches the enterprise information with the preset rule read from the storage module 172, matches the enterprise information to the database type corresponding to the tenant, and meanwhile makes the following judgment:
a. if the data generated by the tenant needs to be stored in the independent database, the control module 171 determines whether the tenant has a corresponding independent database according to the corresponding information read from the storage module 172, if yes, opens the first transmission channel corresponding to the fifth exchange module 181 to transmit the data to the independent database for storage, otherwise, randomly selects an independent database number from unused independent database numbers, randomly selects a spare database number with spare capacity from the spare database set 270, simultaneously selects the number of the first transmission channel and the number of the second transmission channel corresponding to the independent database, matches with the user name of the tenant to form new corresponding information for storage, and opens the corresponding first transmission channel to transmit the data generated by the tenant to the corresponding independent database for storage after the matching is completed;
b. If the data generated by the tenant needs to be stored in the first shared database, the control module 171 determines whether the tenant has a corresponding first shared database according to the corresponding information read from the storage module 172, if yes, opens the corresponding first transmission channel of the fifth exchange module 181 to transmit the data to the corresponding data table of the first shared database for storage, otherwise, randomly selects a first shared database number from the first shared database numbers with spare capacity, randomly selects a spare database number with spare capacity from the spare database set 270, simultaneously selects the number of the first transmission channel and the number of the second transmission channel corresponding to the first shared database, matches the user name of the tenant to form new corresponding information and stores the new corresponding information, opens the corresponding first transmission channel after the matching is completed, transmits the generated data to the corresponding first shared database for storage, and when a certain first shared database is full, the capacity detection module 173 transmits the number of the first shared database to the control module 171 to delete the corresponding shared database number of the control module 171;
c. If the data generated by the tenant needs to be stored in the second shared database, the control module 171 randomly selects a second shared database number from the second shared database numbers with spare capacity, randomly selects a spare database number with spare capacity in the spare database set 270, simultaneously selects the number of the first transmission channel and the number of the second transmission channel corresponding to the second shared database, opens the corresponding first transmission channel, transmits the data generated by the tenant to the second shared database for storage, and when a certain second shared database is full, the capacity detection module 173 transmits the number of the second shared database to the control module 171, and the control module 171 controls deletion of the "second shared database number with spare capacity" corresponding to the second shared database stored in the storage module 172.
It should be noted that, the first switch module 210 to the sixth switch module 260 may be composed of a plurality of switch circuits or at least one switch capable of selecting channels, each data transmission channel has a corresponding number, for example, the number of the first transmission channel of the fifth switch module 181 between the interaction module 150 and the independent database one is 5001, the number of the independent database one is a001, the number of the standby database one stored corresponding to the independent database one is D001, the channel between the independent database one and the standby database one is 1001-6001, the user name of the tenant one is Zh1, and then the number of the independent database-user name-first transmission channel number-second transmission channel number-standby database number may be: A001-ZH 1-5001-1001-6001-D001; for another example, the first transmission channel of the fifth exchange module 181 between the interaction module 150 and the first shared database one is numbered 5101, the first shared database one is numbered B001, the spare database ten stored corresponding to the first shared database one is numbered D010, the channel between the shared database one and the spare database ten is 2010-6010, the user name of the tenant two is Zh2, and then the first shared database number-user name-first transmission channel number-second transmission channel number-spare database number may be: B001-ZH 2-5101-2010-6010-D010.
Through the setting, each tenant can have a special standby database, so that data migration can be conveniently carried out when the database corresponding to the tenant is changed.
In this embodiment, the method further includes S6, when the first firewall 300 is not attacked and the database clusters 120 and the information database 140 do not need to backup data, the monitoring module 190 controls the first switch 251, the second switch 252, the third switch 253 and the fourth switch 254 to be turned off, and the first database set 121, the second database set 122, the third database set 123 and the information database 140 are turned off from transmission channels between the backup database set 270 and the information backup database 280, respectively;
when the first firewall 300 is attacked, the monitoring module 190 controls the first switch 251, the second switch 252, the third switch 253 and the fourth switch 254 to be closed, the first database set 121, the second database set 122, the third database set 123 and the information database 140 are respectively communicated with transmission channels between the standby database set 270 and the information standby database 280, the first database set 121, the second database set 122, the third database set 123 and the information database 140 are respectively used for completely backing up unreported data into the standby database set 270 and the information standby database 280, and after the data backup is completed, the first switch 251, the second switch 252, the third switch 253 and the fourth switch 254 are opened;
When the first firewall 300 is not attacked and the database clusters 120 and the information databases 140 need to be backed up, the monitoring module 190 controls the first switch 251, the second switch 252, the third switch 253 and the fourth switch 254 to be closed, the first database set 121, the second database set 122, the third database set 123 and the information databases 140 are respectively communicated with transmission channels between the first standby database 271, the second standby database 272, the third standby database 273 and the information standby database 280, and the monitoring module 190 controls the first database set 121, the second database set 122, the third database set 123 and the information databases 140 to completely backup the unreported data into the standby database set 270 and the information standby database 280;
when the second firewall 290 is attacked, the monitoring module 190 controls the first switch 251, the second switch 252, the third switch 253 and the fourth switch 254 to be opened.
In this embodiment, when the enterprise information of the tenant changes, the control module 171 notifies the monitoring module 190 that the enterprise information of the tenant changes, the monitoring module 190 correspondingly controls the corresponding switch to be closed through the change flow of the database of the tenant stored data, backs up the data which is not backed up in the original database corresponding to the tenant into the corresponding original standby database, after the backup is completed, the original database is emptied, the control module 171 obtains the database number which is not used or has a spare capacity in the storage module 172, randomly selects one database number as a new database, simultaneously obtains the first transmission channel number corresponding to the new database and the second transmission channel number between the first transmission channel number and the original standby database, and associates the number of the new database, the original database number, the first transmission channel number and the second transmission channel number with the user name to form corresponding information, stores the corresponding information in the storage module 172, and covers the original corresponding information of the tenant, and the data in the original standby database is transmitted to the new database through the corresponding second transmission channel and stores the new database according to the new database.
For example, the scale of tenant 2 originally stored in the first shared database is enlarged, the tenant 2 is to be changed to store data in the independent database, then the data of the tenant originally stored in the first shared database is all backed up to the standby database ten, then the control module 171 reads the unused independent database, for example, the independent database five is not used, the number a005, and then the independent database five is allocated to the tenant 2, the channel between the independent database five and the standby database ten is 1020-6010, and the corresponding information after the change of the tenant 2 is: A005-Zh 2-5101-1020-6010-D010, then restore the data in the spare database ten numbered D010 to the independent database five.
The foregoing description of the embodiments has been provided for the purpose of illustrating the general principles of the invention, and is not meant to limit the scope of the invention, but to limit the invention to the particular embodiments, and any modifications, equivalents, improvements, etc. that fall within the spirit and principles of the invention are intended to be included within the scope of the invention.

Claims (9)

1. The cloud platform system based on SaaS is characterized in that the cloud platform system comprises:
the system comprises a registration module, a modification module and a login module;
the tenant generates data by operating the interaction module and transmits the data to the selection module;
the matching module is used for matching enterprise information of the corresponding tenant from the information database according to the user name acquired by the login module;
the judging module judges the type of the database and the corresponding transmission channel stored by the tenant using the data generated by the interaction module on the enterprise information from the matching module based on a preset judging rule, and simultaneously controls the selection module to transmit the data generated by the interaction module to the corresponding database in the database cluster;
a database cluster comprising a first set of databases, a second set of databases, and a third set of databases;
the first database set consists of a plurality of independent databases prepared according to quantity constraint;
the number constraint of the independent databases is as follows:
counting a first total number Q1 of first enterprises in a certain area, wherein the first enterprises comprise enterprises with confidentiality requirements of which the confidentiality requirements are first requirements and enterprises with sizes exceeding a first threshold and confidentiality of which the confidentiality is not first requirements, and the number d1= ⌈ (Q1R 1) ⌉ of independent databases;
The second database set consists of at least one first shared database which is prepared according to quantity constraint and contains a plurality of independent data tables;
the number constraint of the first shared database is:
counting a second total number Q2 of second enterprises in a certain area, wherein the second enterprises comprise enterprises with confidentiality requirements of which the second requirements are met and enterprises with sizes exceeding a second threshold value but being lower than a first threshold value and confidentiality of which is not met, data of the enterprises are stored in the first shared database, and the number d2= ⌈ (q2×r2) ⌉ of the first shared database;
the third database set is composed of at least one second shared database containing at least one shared data table prepared according to a number constraint;
the number constraint of the second shared database is:
counting a third total number Q3 of third enterprises within a certain region, wherein the third enterprises comprise enterprises which have no confidentiality requirements and have a scale lower than a second threshold, and the number d3= ⌈ (Q3R 3) ⌉ of the second shared databases;
r1, R2 and R3 are floating values of a first total number, a second total number and a third total number respectively,
；
wherein->Representing the data storage capacity of a second enterprise in the plurality of regions for one year, N representing the number of the second enterprises in the plurality of regions, K representing the capacity of the first shared database, x representing the storage age of the second enterprise, and T representing the estimated scale of the newly added database >；
Wherein->Representing data storage capacity of a third enterprise in the plurality of regions for one year, M representing the number of the third enterprises in the plurality of regions, G representing the capacity of the second shared database, y representing the storage age of the third enterprise, and T representing the estimated scale of the newly added database>；
The system comprises a cloud platform system, a tenant, a monitoring module, a standby protection module and a control module, wherein the monitoring module is used for backing up data stored in the database cluster and an information database, a first firewall is arranged between the cloud platform system and the user side of the tenant, and the monitoring module is used for monitoring whether the first firewall is attacked or not and controlling the on-off of a transmission channel among the database cluster, the information database and the standby protection module according to an attack state;
the standby protection module comprises a standby database set for backing up and storing a first database set, a second database set and a third database set and an information standby database for backing up and storing an information database, wherein the first database set is connected with a sixth exchange module through a first exchange module, the second database set is connected with the sixth exchange module through a second exchange module, the third database set is connected with the sixth exchange module through a third exchange module, the sixth exchange module is also connected with the standby database set, and a first switch, a second switch and a third switch are respectively arranged among the first exchange module, the second exchange module, the third exchange module and the sixth exchange module; the information database is connected with the information standby database through a fourth exchange module, and a fourth switch is arranged between the fourth exchange module and the information standby database; the first switch, the second switch, the third switch, the fourth switch and the second firewall are connected with the monitoring module, and the standby database set and the information standby database are arranged in a local area network;
The judging module comprises a control module, a storage module and a capacity detection module for detecting the capacity of the database cluster, and the selecting module comprises a fifth switching module; the control module is respectively connected with the matching module, the storage module, the capacity detection module, the monitoring module, the first exchange module, the second exchange module, the third exchange module, the fifth exchange module and the sixth exchange module, wherein the storage module stores the corresponding information of 'independent database number-user name-first transmission channel number-second transmission channel number-standby database number', 'first shared database number-user name-first transmission channel number-second transmission channel number-standby database number', 'second shared database number-first transmission channel number-second transmission channel number-standby database number', the first transmission channel number which is not used in the fifth exchange module and the first transmission channel number which is connected with the independent database, the first shared database number which is provided with the free capacity in the fifth exchange module and the first transmission channel number which is connected with the first shared database, the second shared database number which is provided with the free capacity in the fifth exchange module and the first transmission channel number which is connected with the second shared database, the first transmission channel number which is provided with the free capacity in the fifth exchange module, the first shared database number which is provided with the free capacity in the second shared database, and the preset cluster numbers between all the standby databases and the standby databases;
The control module receives enterprise information of the matching module, matches the enterprise information with the preset rules read from the storage module, matches the enterprise information with the database type corresponding to the tenant, and meanwhile judges as follows:
a. if the data generated by the tenant needs to be stored in the independent database, the control module judges whether the tenant has the corresponding independent database according to the corresponding information read from the storage module, if so, the first transmission channel corresponding to the fifth exchange module is opened to transmit the data to the independent database for storage, otherwise, one independent database number is randomly selected from unused independent database numbers respectively, one spare database number with spare capacity is randomly selected from a spare database set, the number of the first transmission channel corresponding to the independent database and the number of the second transmission channel are simultaneously selected, the number of the first transmission channel and the number of the second transmission channel are paired with the user name of the tenant to form new corresponding information for storage, and after the pairing is completed, the corresponding first transmission channel is opened to transmit the data generated by the tenant to the corresponding independent database for storage;
b. if the data generated by the tenant needs to be stored in the first shared database, the control module judges whether the tenant has a corresponding first shared database according to the corresponding information read from the storage module, if so, the first transmission channel corresponding to the fifth exchange module is opened to transmit the data to the data table corresponding to the first shared database for storage, otherwise, the capacity detection module randomly selects a first shared database number from the first shared database numbers with spare capacity, randomly selects a spare database number with spare capacity from the spare database set, simultaneously selects the number of the first transmission channel corresponding to the first shared database and the number of the second transmission channel, pairs the number with the user name of the tenant to form new corresponding information and stores the new corresponding information, after the pairing is completed, opens the corresponding first transmission channel, transmits the data generated by the tenant to the corresponding first shared database for storage, and after a certain first shared database is full, the capacity detection module transmits the number of the first shared database to the control module to delete the corresponding shared database number of the control module;
c. If the data generated by the tenant needs to be stored in a second shared database, the control module randomly selects a second shared database number from the second shared database number with spare capacity, randomly selects a spare database number with spare capacity in a spare database set, simultaneously selects the number of a first transmission channel and the number of a second transmission channel corresponding to the second shared database, opens the corresponding first transmission channel, transmits the data generated by the tenant to the second shared database for storage, and when a certain second shared database is full, the capacity detection module transmits the number of the second shared database to the control module, and the control module controls deletion of the second shared database number with spare capacity corresponding to the second shared database stored by the storage module;
the independent databases in the first database set, the first shared databases in the second database set, the second shared databases in the third database set and the information database regularly and completely backup the unrepeated data to the corresponding standby database set and the information standby database,
When the first firewall is not attacked and the database clusters and the information databases do not need to backup data, the monitoring module controls the first switch, the second switch, the third switch and the fourth switch to be switched off, and the first database set, the second database set, the third database set and the information databases are respectively switched off from transmission channels between the standby database set and the information standby database;
when the first firewall is attacked, the monitoring module controls the first switch, the second switch, the third switch and the fourth switch to be closed, the first database set, the second database set, the third database set and the information database are respectively communicated with transmission channels between the standby database set and the information standby database, the first database set, the second database set, the third database set and the information database are used for completely backing up unrepeated data into the standby database set and the information standby database respectively, and the first switch, the second switch, the third switch and the fourth switch are opened after the data backup is completed;
when the first firewall is not attacked and the database clusters and the information databases need to be backed up, the monitoring module controls the first switch, the second switch, the third switch and the fourth switch to be closed, the first database set, the second database set, the third database set and the information database are respectively communicated with transmission channels among the first standby database, the second standby database, the third standby database and the information standby database, and the monitoring module controls the first database set, the second database set, the third database set and the information database to completely backup the unreported data into the standby database set and the information standby database respectively;
When the second firewall is attacked, the monitoring module controls the first switch, the second switch, the third switch and the fourth switch to be disconnected.
2. The SaaS based cloud platform system of claim 1, wherein said business information comprises company name, industry type, registered funds, business type, current number of people, company location, legal information, previous year business income, whether or not there is a business secret.
3. The SaaS-based cloud platform system according to claim 1, wherein the preset determination rule is: as long as the tenant belongs to an enterprise with a first confidentiality requirement, the data generated by the tenant is stored in an independent database regardless of the scale of the tenant, wherein the enterprise with the first confidentiality requirement is an enterprise with confidentiality qualification;
if the tenant does not belong to the enterprise with the confidentiality requirement of the first requirement, but the scale of the tenant exceeds a first threshold, the data generated by the tenant are stored in an independent database;
if the tenant belongs to an enterprise with a second requirement of confidentiality, on the premise that the scale of the tenant does not exceed a first threshold, the data generated by the tenant is stored in a first shared database regardless of the scale of the tenant, wherein the enterprise with the second requirement of confidentiality comprises an enterprise with business secrets;
If the tenant belongs to an enterprise without confidentiality, but the scale of the tenant is between a first threshold value and a second threshold value, the data generated by the tenant are stored in a first shared database;
if the tenant belongs to an enterprise without confidentiality requirements and the scale of the tenant is smaller than a second threshold, the data generated by the tenant are stored in a second shared database;
if the incomes and the practitioners of the tenant belong to two different scales respectively, the method comprises the following steps: the independent databases are prioritized, the first shared database is second, the second shared database is third, and the database selection is carried out.
4. The SaaS based cloud platform system according to claim 1, wherein the backup protection module comprises a backup database set for backup storage of a first database set, a second database set, and a third database set, and an information backup database for backup storage of an information database, the first database set is connected to a sixth exchange module through a first exchange module, the second database set is connected to the sixth exchange module through a second exchange module, the third database set is connected to the sixth exchange module through a third exchange module, the sixth exchange module is further connected to the backup database set, and a first switch, a second switch, and a third switch are respectively provided between the first exchange module, the second exchange module, the third exchange module, and the sixth exchange module; the information database is connected with the information standby database through a fourth exchange module, and a fourth switch is arranged between the fourth exchange module and the information standby database; and the first switch, the second switch, the third switch, the fourth switch and the second firewall are connected with the monitoring module, and the standby database set and the information standby database are arranged in a local area network.
5. The SaaS set forth in claim 4, wherein the storage modes of the standby database set are shared database+independent data table, and the storage modes of the information standby database are shared database+shared data table.
6. A data storage method of a SaaS-based cloud platform system, for storing data generated by the SaaS-based cloud platform system according to any one of claims 1 to 5, comprising:
s1, storing enterprise information into an information database through a registration module or a modification module;
s2, inputting a user name through a login module, and outputting the user name to an interaction module and a matching module respectively;
s3, the matching module finds corresponding enterprise information according to the input user name, and meanwhile, the tenant operates the interaction module through the identity information of the corresponding user name, generates data and transmits the data to the selection module;
s4, the matching module inputs the searched enterprise information to a judging module, the judging module selects a corresponding database and a corresponding transmission channel number according to a preset judging rule, and sends a selection signal to a selecting module;
S5, the selection module opens a corresponding signal transmission channel according to the selection signal, and the signals generated by the interaction module are stored in a corresponding database in the database cluster.
7. The data storage method of the SaaS-based cloud platform system according to claim 6, wherein the determining module comprises a control module, a storage module and a capacity detection module for detecting a capacity of a database cluster, and the selecting module comprises a fifth switching module; the control module is respectively connected with the matching module, the storage module, the capacity detection module, the monitoring module, the first exchange module, the second exchange module, the third exchange module, the fifth exchange module and the sixth exchange module, wherein the storage module stores the corresponding information of 'independent database number-user name-first transmission channel number-second transmission channel number-standby database number', 'first shared database number-user name-first transmission channel number-second transmission channel number-standby database number', 'second shared database number-first transmission channel number-second transmission channel number-standby database number', the first transmission channel number which is not used in the fifth exchange module and the first transmission channel number which is connected with the independent database, the first shared database number which is provided with the free capacity in the fifth exchange module and the first transmission channel number which is connected with the first shared database, the second shared database number which is provided with the free capacity in the fifth exchange module and the first transmission channel number which is connected with the second shared database, the first transmission channel number which is provided with the free capacity in the fifth exchange module, the first shared database number which is provided with the free capacity in the second shared database, and the preset cluster numbers between all the standby databases and the standby databases;
The specific steps of S5 are as follows:
s5.1, the control module receives enterprise information of the matching module, matches the enterprise information with a preset rule read from the storage module, matches the enterprise information with a database type corresponding to a tenant, and meanwhile judges as follows:
a. if the data generated by the tenant needs to be stored in the independent database, the control module judges whether the tenant has the corresponding independent database according to the corresponding information read from the storage module, if so, the first transmission channel corresponding to the fifth exchange module is opened to transmit the data to the independent database for storage, otherwise, one independent database number is randomly selected from unused independent database numbers respectively, one spare database number with spare capacity is randomly selected from a spare database set, the number of the first transmission channel corresponding to the independent database and the number of the second transmission channel are simultaneously selected, the number of the first transmission channel and the number of the second transmission channel are paired with the user name of the tenant to form new corresponding information for storage, and after the pairing is completed, the corresponding first transmission channel is opened to transmit the data generated by the tenant to the corresponding independent database for storage;
b. if the data generated by the tenant needs to be stored in the first shared database, the control module judges whether the tenant has a corresponding first shared database according to the corresponding information read from the storage module, if so, the first transmission channel corresponding to the fifth exchange module is opened to transmit the data to the data table corresponding to the first shared database for storage, otherwise, the capacity detection module randomly selects a first shared database number from the first shared database numbers with spare capacity, randomly selects a spare database number with spare capacity from the spare database set, simultaneously selects the number of the first transmission channel corresponding to the first shared database and the number of the second transmission channel, pairs the number with the user name of the tenant to form new corresponding information and stores the new corresponding information, after the pairing is completed, opens the corresponding first transmission channel, transmits the data generated by the tenant to the corresponding first shared database for storage, and after a certain first shared database is full, the capacity detection module transmits the number of the first shared database to the control module to delete the corresponding shared database number of the control module;
c. If the data generated by the tenant needs to be stored in the second shared database, the control module randomly selects a second shared database number from the first shared database number with spare capacity, randomly selects a spare database number with spare capacity in the spare database set, simultaneously selects the number of the first transmission channel and the number of the second transmission channel corresponding to the second shared database, opens the corresponding first transmission channel, transmits the data generated by the tenant to the second shared database for storage, and when a certain second shared database is full, the capacity detection module transmits the number of the second shared database to the control module, and the control module controls deletion of the second shared database number with spare capacity corresponding to the second shared database stored by the storage module.
8. The data storage method based on the SaaS cloud platform system of claim 7, further comprising S6, periodically and completely backing up the unrepeated data to the corresponding standby database set and the information standby database by a plurality of independent databases in the first database set, a plurality of first shared databases in the second database set and a plurality of second shared databases in the third database set,
When the first firewall is not attacked and the database clusters and the information databases do not need to backup data, the monitoring module controls the first switch, the second switch, the third switch and the fourth switch to be switched off, and the first database set, the second database set, the third database set and the information databases are respectively switched off from transmission channels between the standby database set and the information standby database;
when the first firewall is attacked, the monitoring module controls the first switch, the second switch, the third switch and the fourth switch to be closed, the first database set, the second database set, the third database set and the information database are respectively communicated with transmission channels between the standby database set and the information standby database, the first database set, the second database set, the third database set and the information database are used for completely backing up unrepeated data into the standby database set and the information standby database respectively, and the first switch, the second switch, the third switch and the fourth switch are opened after the data backup is completed;
when the first firewall is not attacked and the database clusters and the information databases need to be backed up, the monitoring module controls the first switch, the second switch, the third switch and the fourth switch to be closed, the first database set, the second database set, the third database set and the information database are respectively communicated with transmission channels among the first standby database, the second standby database, the third standby database and the information standby database, and the monitoring module controls the first database set, the second database set, the third database set and the information database to completely backup the unreported data into the standby database set and the information standby database respectively;
When the second firewall is attacked, the monitoring module controls the first switch, the second switch, the third switch and the fourth switch to be disconnected.
9. The data storage method based on the SaaS cloud platform system according to claim 8, wherein when the enterprise information of the tenant changes, the control module notifies the monitoring module that the enterprise information of the tenant changes, the monitoring module correspondingly controls the corresponding switch to be closed through the change flow of the database of the tenant stored data, backs up the data which is not backed up in the original database corresponding to the tenant to the corresponding original standby database, after the backup is completed, the original database is emptied, the control module obtains the database number which is not used or has a spare capacity in the storage module, randomly selects one database number as a new database, simultaneously obtains the first transmission channel number corresponding to the new database and the second transmission channel number between the first transmission channel number and the original standby database, and correspondingly forms corresponding information by the number of the new database, the original database number, the first transmission channel number, the second transmission channel number and the user name of the tenant, stores the corresponding information in the storage module and covers the original corresponding information, and the database is transmitted to the new database in the storage mode according to the new database in the corresponding transmission channel.
CN202310903808.XA 2023-07-24 2023-07-24 Cloud platform system based on SaaS and data storage method thereof Active CN116633691B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202310903808.XA CN116633691B (en) 2023-07-24 2023-07-24 Cloud platform system based on SaaS and data storage method thereof

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202310903808.XA CN116633691B (en) 2023-07-24 2023-07-24 Cloud platform system based on SaaS and data storage method thereof

Publications (2)

Publication Number Publication Date
CN116633691A CN116633691A (en) 2023-08-22
CN116633691B true CN116633691B (en) 2023-10-27

Family

ID=87610209

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202310903808.XA Active CN116633691B (en) 2023-07-24 2023-07-24 Cloud platform system based on SaaS and data storage method thereof

Country Status (1)

Country Link
CN (1) CN116633691B (en)

Citations (16)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
KR20080037489A (en) * 2006-10-26 2008-04-30 민성현 The method of organic sharing for database
CN101777047A (en) * 2009-01-08 2010-07-14 国际商业机器公司 System, equipment and method for accessing database under multiple-tenant environment
CN104123616A (en) * 2014-07-25 2014-10-29 南京邮电大学 Cloud computing system towards multiple tenants
CN106529331A (en) * 2016-10-31 2017-03-22 用友网络科技股份有限公司 Multi-tenant data isolation scheme applied to PaaS (Platform-as-a-Service) platform
CN106547849A (en) * 2016-10-18 2017-03-29 华南师范大学 A kind of construction method of the multi-tenant database for meeting tenant's differentiated demand
WO2017193739A1 (en) * 2016-05-10 2017-11-16 中兴通讯股份有限公司 Data sharing method and apparatus
CN111061759A (en) * 2018-10-17 2020-04-24 联易软件有限公司 Data query method and device
CN111522869A (en) * 2020-03-26 2020-08-11 中国南方电网有限责任公司 Setting computing cloud data management method and setting computing system suitable for multiple tenants
CN111582773A (en) * 2020-06-22 2020-08-25 南京德睿能源研究院有限公司 Multi-tenant technology-based micro-grid energy cloud model control method and system
CN111797155A (en) * 2020-07-08 2020-10-20 南阳师范学院 Remote control type security data sharing system
CN111814197A (en) * 2020-09-10 2020-10-23 平安国际智慧城市科技股份有限公司 Data sharing method and device, server and storage medium
CN112200635A (en) * 2020-10-21 2021-01-08 中国电子科技集团公司第十五研究所 Multi-tenant data isolation method and system based on tenant attributes
CN112860451A (en) * 2021-01-21 2021-05-28 中国建设银行股份有限公司 Multi-tenant data processing method and device based on SaaS
CN113781159A (en) * 2021-08-23 2021-12-10 河南宇章信息技术有限公司 Intelligent finance and tax integrated service platform based on multi-tenant SaaS technology
WO2022205160A1 (en) * 2021-03-31 2022-10-06 京东方科技集团股份有限公司 Method and apparatus for application deployment in software-as-a-service platform, and storage medium
CN116167082A (en) * 2023-02-22 2023-05-26 中国农业银行股份有限公司 Data processing method and device, electronic equipment and storage medium

Family Cites Families (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US11693835B2 (en) * 2018-10-17 2023-07-04 Oracle International Corporation Dynamic database schema allocation on tenant onboarding for a multi-tenant identity cloud service

Patent Citations (16)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
KR20080037489A (en) * 2006-10-26 2008-04-30 민성현 The method of organic sharing for database
CN101777047A (en) * 2009-01-08 2010-07-14 国际商业机器公司 System, equipment and method for accessing database under multiple-tenant environment
CN104123616A (en) * 2014-07-25 2014-10-29 南京邮电大学 Cloud computing system towards multiple tenants
WO2017193739A1 (en) * 2016-05-10 2017-11-16 中兴通讯股份有限公司 Data sharing method and apparatus
CN106547849A (en) * 2016-10-18 2017-03-29 华南师范大学 A kind of construction method of the multi-tenant database for meeting tenant's differentiated demand
CN106529331A (en) * 2016-10-31 2017-03-22 用友网络科技股份有限公司 Multi-tenant data isolation scheme applied to PaaS (Platform-as-a-Service) platform
CN111061759A (en) * 2018-10-17 2020-04-24 联易软件有限公司 Data query method and device
CN111522869A (en) * 2020-03-26 2020-08-11 中国南方电网有限责任公司 Setting computing cloud data management method and setting computing system suitable for multiple tenants
CN111582773A (en) * 2020-06-22 2020-08-25 南京德睿能源研究院有限公司 Multi-tenant technology-based micro-grid energy cloud model control method and system
CN111797155A (en) * 2020-07-08 2020-10-20 南阳师范学院 Remote control type security data sharing system
CN111814197A (en) * 2020-09-10 2020-10-23 平安国际智慧城市科技股份有限公司 Data sharing method and device, server and storage medium
CN112200635A (en) * 2020-10-21 2021-01-08 中国电子科技集团公司第十五研究所 Multi-tenant data isolation method and system based on tenant attributes
CN112860451A (en) * 2021-01-21 2021-05-28 中国建设银行股份有限公司 Multi-tenant data processing method and device based on SaaS
WO2022205160A1 (en) * 2021-03-31 2022-10-06 京东方科技集团股份有限公司 Method and apparatus for application deployment in software-as-a-service platform, and storage medium
CN113781159A (en) * 2021-08-23 2021-12-10 河南宇章信息技术有限公司 Intelligent finance and tax integrated service platform based on multi-tenant SaaS technology
CN116167082A (en) * 2023-02-22 2023-05-26 中国农业银行股份有限公司 Data processing method and device, electronic equipment and storage medium

Non-Patent Citations (8)

* Cited by examiner, † Cited by third party
Title
Design of database architecture in the saas-based multi-tenant educational information system;Jiangman Xu et al.;《2011 6th International Conference on Computer Science & Education (ICCSE)》;全文 *
Extending multi-tenant architectures: a database model for a multi-target support in SaaS applications;Antonio Rico et al.;《Enterprise Information Systems》;全文 *
SaaS-多租户SaaS平台的数据库方案;cwl_java;《腾讯云》;全文 *
SaaS模式下多租户数据库的研究;何海棠;朱晓辉;陈苏蓉;;郑州铁路职业技术学院学报(第03期);全文 *
sanshengshui.多租户实现之基于Mybatis,Mycat的共享数据库，共享数据架构.《腾讯云》.2019,全文. *
一种新型高效的多租户共享数据模型;何文哲;范冰冰;;计算机应用与软件(第08期);全文 *
基于SAAS模式的共享模型的数据扩展技术研究;唐圣潘;周肆清;丁长松;;计算机技术与发展(第08期);全文 *
实时数据库在变电站自动化系统中的应用;崔江峰, 王冬青, 刘沛, 苗世洪;继电器(第12期);全文 *

Also Published As

Publication number Publication date
CN116633691A (en) 2023-08-22

Similar Documents

Publication Publication Date Title
CN107193490B (en) Distributed data storage system and method based on block chain
CN108809836B (en) Multicast data message forwarding method and device
CN110474806B (en) Power communication network key node identification method
CN109600433B (en) Method and device for summarizing data in system
CN108287835A (en) A kind of data clearing method and device
CN100421078C (en) Method and system for affinity management
CN104378270A (en) Data center system and data center method for networks
CN108111401A (en) A kind of colonization method across instantaneous communication system
CN111788791A (en) Computer-implemented voting process and system
CN103139164A (en) Mail sending method and device based on classified information system
CN110808839A (en) Processing method, device, equipment and medium for block chain abnormal data
CN101072206B (en) Secondary authenticating method and system for instant messaging system
CN109146683A (en) A kind of information management and Verification System using block chain
CN116633691B (en) Cloud platform system based on SaaS and data storage method thereof
JP2740105B2 (en) Distributed database control method
CN113300933A (en) Session content management method and device, computer equipment and readable storage medium
CN113779624A (en) Private data sharing method based on intelligent contracts
CN107908713A (en) A kind of distributed dynamic cuckoo filtration system and its filter method based on Redis clusters
CN103414756A (en) Task distributing method and distributing node and system
CN110610398A (en) Book sharing method based on intelligent contracts
CN112419060B (en) Asset hosting system, asset management method, node and medium
CN110704501B (en) User account correlation method and device
CN113256470A (en) Weapon equipment management system and method based on block chain
CN111259422A (en) Block chain account system construction method for self-defining authority
US20180227125A1 (en) Multi-use long string anti-tampering authentication system

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant