Method and system for multi-tenant application isolation in cloud computing platform

Abstract

The invention discloses a method for multi-tenant application isolation in a cloud computing platform. The method comprises the steps that before deploying a user application, a cloud computing security management center and a user sign a security contract, and after signing, the cloud computing security management center builds an authority record for the user application; after the cloud computing security management center receives the environment deployment information of the user application sent by a cloud computing management platform, if the authority record of the user application is inquired, a security policy of the user application is generated according to the authority record and the environment deployment information, and is sent to the cloud computing management platform; after the cloud computing management platform receives the security policy, the cloud computing operating environment of the user application is deployed according to the security policy. According to the method, the safe operation of applications of different tenants under a multi-tenant framework in the isolated cloud platform environment is realized. The invention also discloses a system for multi-tenant application isolation in the cloud computing platform.

Description

technical field [0001] The present invention relates to the technical field of cloud computing, in particular to a method and system for isolating multi-tenant applications in a cloud computing platform. Background technique [0002] The cloud computing platform provides an environment for development, operation, management and monitoring of cloud applications. [0003] In the current cloud computing environment, the relationship between the user and the cloud computing platform service provider is unreliable, which brings great harm to the security of the cloud computing platform. On the one hand, cloud computing users want to ensure that their jobs are run correctly in the cloud computing platform, their data information is invisible to other users or organizations, and will not be used maliciously; on the other hand, the cloud computing platform There are multiple users in the cloud, it must ensure that the unsafe operations of a small number of users on the platform wil...

AI Technical Summary

Problems solved by technology

[0005] Most of the current cloud computing providers (such as Amazon, etc.) only focus on user data isolation under the multi-tenant architecture, and there is no perfect multi-tenant architecture application isolation solution, so they cannot provide Platform as a Service PaaS (Platform as a Service) cloud computing service

Other cloud computing providers (such as Google, etc.) provide PaaS cloud computing services through a single-tenant method, avoiding multi-tenant security issues, but the resource utilization rate is low

Images