Method for isolating data in multi-tenant architecture

Abstract

The invention relates to a method for isolating data in a multi-tenant architecture. A data base and a data base table are created remotely for the tenants, the remote data base table is issued as the WSDL (web service description language) service, and the WSDL service is registered in a cloud computing server so as to be convenient for the tenants to call and use. When a plurality of tenants access to the server at the same time, the server configures according to the uniqueness of the domain name and related authorities and distinguishes by using the fields in the data base table so that the basic data of each tenant can be partially isolated, and then the server creates an independent data base for each tenant, therefore, the data of the tenants can be fully isolated, and the operation of the tenants can not affect one another and is safe.

Description

technical field [0001] The invention relates to the technical field of cloud computing, in particular to a method for data isolation in a multi-tenant architecture in cloud computing. Background technique [0002] The traditional enterprise-level application delivery and operation mode is to customize and develop a set of completely own systems according to the needs of customers. Customers need to purchase and maintain various required hardware and software resources. In recent years, with the development of Internet technology and the wave of global information revolution triggered by cloud computing, multi-tenant software architecture has emerged as a new software architecture model. It provides software services through the Internet. The service provider deploys the application software on the server in a unified manner. The tenant can order the required software services from the service provider according to their own needs, and pay the manufacturer according to the fu...

AI Technical Summary

Problems solved by technology

[0004] In terms of the data layer, the supplier can isolate the tenant's data by dividing the database, dividing the storage area, dividing the structure description or table, and if necessary, it needs to perform symmetric or asymmetric encryption to protect sensitive data, but different isolation methods are different. implementation complexity and risk

[0005] In terms of the program layer, suppliers can use the application mounting environment to separate the application operating environments of different tenants on the process, and protect the application operating environments of each tenant when cross-process communication cannot be performed. However, the supplier's computing The environment must be strong enough

Images