Multi-tenant, multi-project, multi-unit and multi-level management method and system based on cloud computing

Abstract

The invention discloses a multi-tenant, multi-project, multi-unit and multi-level management method and system based on cloud computing, and relates to the technical field of immigrant management of multiple tenants, and the method comprises the steps: building a cloud computing container platform basic environment; based on a multi-tenant data isolation scheme, rapid construction and deployment of application programs and running environments of tenants are realized by utilizing a container platform; designing a multi-tenant configuration process, and completing initialization of tenant basic data; constructing a hierarchical authorization management model based on role control, and determining user permission; the identities of the tenants are verified through a multi-tenant recognition scheme, and resource request access is completed according to the permission range. Through the method, users of different levels and units can cooperatively work on the unified immigrant management platform, the data sharing and organization cooperation efficiency is improved, and the data security is guaranteed. The application of the cloud computing technology realizes intelligent resource allocation and reduces the labor cost.

Description

Technical Field

[0001] The present invention relates to the technical field of immigration management multi-tenant, and in particular to a multi-tenant, multi-project, multi-unit and multi-level management method and system based on cloud computing. Background Art

[0002] With the rapid development of cloud computing, more and more enterprises and organizations choose to migrate their businesses to the cloud to achieve resource sharing and optimization. However, traditional management methods have many limitations when dealing with complex multi-tenant environments. Traditional methods mainly rely on the isolation mechanism of physical servers or virtual machines. Although this method can achieve resource isolation between tenants, its disadvantages are low resource utilization and poor flexibility, making it difficult to cope with dynamic needs in multi-tenant business scenarios.

[0003] In traditional methods, when multiple tenants share the same cloud platform, they usually face the following problems: First, data isolation and security are difficult to guarantee. The data of different tenants are stored in the same physical or virtual environment. Although they can be isolated through logical partitions, once there is a loophole in the isolation mechanism, it is very easy to cause data leakage or tampering. Especially when the business complexity of different tenants is different, the design and implementation of the isolation solution is further difficult. Secondly, the allocation and scheduling of resources are inefficient. Traditional methods usually configure resources manually, and cannot dynamically adjust the use of resources according to the needs of tenants, resulting in resource waste or insufficient allocation, and cannot give full play to the elastic expansion advantages of cloud computing. In addition, the complexity of system management has also increased significantly. In a multi-project, multi-unit, and multi-level management environment, the traditional single authorization model is difficult to cope with complex permission control requirements, lacks flexibility and refined management capabilities, and easily leads to permission confusion, which in turn affects the overall security and stability of the system.

[0004] In addition, traditional methods are also limited in scalability. As the number of tenants increases, the number of physical or virtual machines also increases, making the system difficult to expand and the operation and maintenance costs rise sharply. The degree of automation of fault handling and recovery is low, and once a fault occurs, manual intervention may be required, resulting in service interruption or reduced efficiency. For units with multi-level management, traditional systems find it difficult to achieve collaborative work among units at all levels while maintaining independence, which makes management and operation and maintenance work cumbersome and inefficient. Summary of the invention

[0005] In view of the above-mentioned problems, the present invention is proposed.

[0006] Therefore, the technical problem solved by the present invention is: how to achieve efficient management of multi-tenants, multi-projects, multi-units, and multi-levels through container technology in a cloud computing environment, ensure data isolation, security, dynamic resource scheduling, and refined authority control, so as to overcome the limitations of traditional management methods.

[0007] In order to solve the above technical problems, the present invention provides the following technical solutions: a multi-tenant, multi-project, multi-unit and multi-level management method based on cloud computing, which includes the following steps:

[0008] Build the basic operating environment of cloud computing container platform;

[0009] Based on the multi-tenant data isolation solution, the container platform is used to quickly build and deploy tenant applications and operating environments;

[0010] Design multi-tenant configuration process and complete the initialization of tenant basic data resources;

[0011] Build a hierarchical authorization and hierarchical management model based on role-based access control and data domain integration, and output the scope of user permissions;

[0012] The tenant identity is verified through a multi-tenant identification solution, and the tenant resource access request is completed in combination with the corresponding permission scope.

[0013] As a preferred solution of the multi-tenant, multi-project, multi-unit and multi-level management method based on cloud computing described in the present invention, wherein: the basic operating environment of the cloud computing container platform is to complete the construction, implementation and operation and maintenance of the container platform by utilizing the open source container cloud platform and the localized container cloud platform to build services, and to complete infrastructure orchestration, container orchestration and scheduling, private application store management, fault monitoring and tracking, and recovery and self-healing functions based on cloud computing.

[0014] As a preferred solution of the multi-tenant, multi-project, multi-unit and multi-level management method based on cloud computing described in the present invention, wherein: the infrastructure orchestration is that the container management platform integrates service resources to provide infrastructure services for running containerized applications;

[0015] The container orchestration and scheduling is an automated process used for deployment, expansion, operation and maintenance of containerized applications on cloud platforms;

[0016] Through container orchestration technology, a large number of container instances are automatically managed based on cloud computing to complete multi-tenant application management under cloud computing;

[0017] The private application store management enables users of the container management platform to deploy applications consisting of multiple containers in the application store with one click;

[0018] The fault monitoring, tracking and self-recovery include monitoring the running status of cloud platform applications and automatically restarting or migrating applications when they fail.

[0019] As a preferred solution of the multi-tenant, multi-project, multi-unit and multi-level management method based on cloud computing described in the present invention, wherein: the multiple data isolation solutions are to add a tenant ID field to all tenant business tables to distinguish different tenants, and configure the corresponding data source strategy of the tenant application, so that the tenants can choose logical isolation according to the actual business needs of management, isolate the data and business between tenants, and for physically isolated tenants, use the container platform to package and copy the relevant operating environment and dependencies into independent containers to complete the construction and deployment of the tenant operating environment.

[0020] As a preferred solution of the multi-tenant, multi-project, multi-unit and multi-level management method based on cloud computing described in the present invention, wherein: the multi-tenant configuration process completes the initialization of tenant basic data resources by configuring tenant dynamic resources and static resources.

[0021] As a preferred solution of the multi-tenant, multi-project, multi-unit and multi-level management method based on cloud computing described in the present invention, wherein: the hierarchical authorization and hierarchical management model based on the integration of role-controlled access rights and data domains is to incorporate multiple dimensions into the consideration scope of authentication authority design, through the fine division of role allocation and access control strategy;

[0022] Different tenants, different projects, different categories, different levels of units and departments have corresponding authority scopes, allowing authorized users to access specific data.

[0023] As a preferred solution of the multi-tenant, multi-project, multi-unit and multi-level management method based on cloud computing described in the present invention, wherein: the multi-tenant identification solution is based on different data isolation solutions, and uses domain name identification and database statement automatic matching to match and screen tenant information and tenant resources to meet the application management needs of different tenants;

[0024] Domain name identification is to match the domain name address requested by the user with the domain name address assigned to the tenant in the tenant basic configuration, obtain the database connection information of the specific tenant, and switch to the tenant data source to obtain the corresponding resources, applications and data;

[0025] Automatic database statement matching is a multi-tenant solution that uses automatic statement splicing and interceptor technology. When a user requests access, the browser request is intercepted by a filter to obtain the tenant's unique identifier, and the unique identifier is automatically spliced ​​into the database statement as a condition to complete the corresponding business operation and filter the tenant data.

[0026] Another object of the present invention is to provide a multi-tenant, multi-project, multi-unit, and multi-level management system based on cloud computing, which can provide efficient data isolation solutions, flexible resource allocation mechanisms, and refined hierarchical authorization management models by building a cloud computing platform based on container technology, so as to realize multi-tenant, multi-project, multi-unit, and multi-level collaborative management and meet the different business needs of various tenants. The system realizes the rapid construction, expansion, and maintenance of tenants' applications and operating environments through technical means such as automated deployment, container orchestration, and scheduling, while ensuring the security and independence of each tenant's data. The problems of low resource utilization, insufficient data security, high management complexity, and limited expansion capabilities in the multi-tenant environment existing in the existing management system are solved. Through this system, the utilization efficiency of resources can be greatly improved, the system management process can be simplified, the isolation and security of tenant data can be enhanced, and efficient and scalable cloud computing solutions can be provided for complex business scenarios of multi-tenants, multi-projects, and multi-units.

[0027] In order to solve the above technical problems, the present invention provides the following technical solutions: a multi-tenant, multi-project, multi-unit and multi-level management system based on cloud computing, including: a cloud computing container platform module, a multi-tenant data isolation module, a multi-tenant configuration module, a hierarchical authorization and management module and a tenant identification and access control module;

[0028] The cloud computing container platform module is used to build a cloud computing environment, provide container management and orchestration functions, provide infrastructure for the construction and deployment of tenant applications and operating environments, and package, schedule, expand, run and monitor tenant applications through container technology;

[0029] The multi-tenant data isolation module ensures data isolation between different tenants and provides logical isolation or physical isolation according to tenant business requirements;

[0030] The multi-tenant configuration module is responsible for initializing tenant basic data resources. By designing the configuration process, it automatically allocates the required resources to each tenant, completing customized management of tenants according to their own needs;

[0031] The hierarchical authorization and management module designs authorization management strategies for different tenants, projects, units and levels by building a role-based access rights model;

[0032] The tenant identification and access control module verifies the tenant identity, confirms the tenant identity through a tenant identification solution, and grants the tenant resource access rights based on the authorization model.

[0033] A computer device includes a memory and a processor, wherein the memory stores a computer program, and when the processor executes the computer program, the steps of the multi-tenant, multi-project, multi-unit, and multi-level management method based on cloud computing are implemented as described above.

[0034] A computer-readable storage medium stores a computer program, which, when executed by a processor, implements the steps of the multi-tenant, multi-project, multi-unit, and multi-level management method based on cloud computing as described above.

[0035] The beneficial effects of the present invention are as follows: the present invention realizes the rapid construction and deployment of tenant applications and operating environments by introducing a cloud computing container platform, thereby solving the problems of inefficient resource scheduling and complex manual deployment in traditional systems; based on a multi-tenant data isolation solution, the independence and security of data of different tenants are ensured; a hierarchical authorization management model is designed, combining role control with data domain management, thereby solving the problem of complex authority management; a multi-tenant identification solution is utilized to ensure the legality and compliance of resource access requests; at the same time, the automated resource scheduling of cloud computing reduces manual intervention and improves the intelligence and rationality of resource allocation. BRIEF DESCRIPTION OF THE DRAWINGS

[0036] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the following briefly introduces the drawings required for describing the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work. Among them:

[0037] Figure 1 An overall flow chart of a multi-tenant, multi-project, multi-unit, and multi-level management method based on cloud computing provided by the first embodiment of the present invention;

[0038] Figure 2 A structural diagram of combining multiple data isolation modes in a multi-tenant, multi-project, multi-unit, and multi-level management method based on cloud computing provided in the first embodiment of the present invention;

[0039] Figure 3 A multi-tenant configuration management diagram of a multi-tenant, multi-project, multi-unit, and multi-level management method based on cloud computing provided by the first embodiment of the present invention;

[0040] Figure 4 A permission access structure diagram in a multi-tenant, multi-project, multi-unit, and multi-level management method based on cloud computing provided in the first embodiment of the present invention;

[0041] Figure 5 A time comparison chart of different modes of resource deployment and configuration work in a multi-tenant, multi-project, multi-unit, and multi-level management method based on cloud computing provided in the third embodiment of the present invention. DETAILED DESCRIPTION

[0042] In order to make the above-mentioned purposes, features and advantages of the present invention more obvious and easy to understand, the specific implementation methods of the present invention are described in detail below in conjunction with the drawings of the specification. Obviously, the described embodiments are part of the embodiments of the present invention, but not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary persons in the art without creative work should fall within the scope of protection of the present invention.

[0043] Example 1, reference Figure 1 to Figure 4 As an embodiment of the present invention, a multi-tenant, multi-project, multi-unit, and multi-level management method based on cloud computing is provided, including:

[0044] Build the basic operating environment of cloud computing container platform;

[0045] Based on the multi-tenant data isolation solution, the container platform is used to quickly build and deploy tenant applications and operating environments;

[0046] Design multi-tenant configuration process and complete the initialization of tenant basic data resources;

[0047] Build a hierarchical authorization and hierarchical management model based on role-based access control and data domain integration, and output the scope of user permissions;

[0048] The tenant identity is verified through a multi-tenant identification solution, and the tenant resource access request is implemented based on its permission scope.

[0049] Reference Figure 1 First, build the overall basic operating environment of the cloud computing container platform, and then the tenant applies for the resources used by the tenant in the cloud platform, including server resources, storage resources, SMS resources, API interface resources and database resources. The container platform realizes the rapid construction and deployment of tenant applications and operating environments according to the tenant application plan, and then authorizes the tenant interface resources, functional resources and data resources through the constructed hierarchical authorization and hierarchical management model. Finally, the tenant verifies the tenant identity through the multi-tenant identification solution, and realizes the tenant resource request access based on its authority scope.

[0050] The basic operating environment of the cloud computing container platform is to complete the construction, implementation and operation and maintenance of the container platform by using the open source container cloud platform + localized container cloud platform construction service, and realize infrastructure orchestration, container orchestration and scheduling, private application store management, fault monitoring and tracking, and recovery and self-healing functions based on cloud computing;

[0051] Infrastructure orchestration means that the container management platform can integrate any service resources to implement a flexible infrastructure service layer for running containerized applications, including network, storage, load balancing, DNS and security modules;

[0052] Container orchestration and scheduling is an automated process for the deployment, expansion, operation and maintenance of containerized applications on cloud platforms. Through container orchestration technology, a large number of container instances can be automatically managed based on cloud computing to ensure that they can run efficiently and reliably in a distributed environment, and realize multi-tenant application management under cloud computing;

[0053] Private application store management enables users of the container management platform to deploy applications consisting of multiple containers in the application store with one click. Users can manage the deployed applications and automatically upgrade them when new versions of the applications are available. The platform provides an application store maintained by the community, which includes a range of popular applications. Users of the container management platform can also create their own private application stores;

[0054] Fault monitoring, tracking and recovery self-healing can monitor the running status of cloud platform applications. When an application fails, it will automatically restart or migrate to ensure the availability of the application.

[0055] Reference Figure 2 ,Multiple data isolation solutions are to add a tenant ID field to all tenant business tables to distinguish different tenants, and configure the corresponding data source strategy for tenant applications, so that tenants can choose different granularity data isolation methods such as logical isolation (table row level, shared data tables are isolated by tenant ID fields) or physical isolation (database level, independent database or table space isolation) according to actual business needs such as the number of engineering immigrants they manage or security requirements, ensuring data isolation and business independence between tenants. For physically isolated tenants, the container platform is used to package and copy related operating environments such as applications, databases and their dependencies into independent containers, so as to achieve rapid construction and deployment of tenant operating environments.

[0056] Reference Figure 3-4 ,The multi-tenant configuration process is to complete the initialization of tenant ,basic data resources by configuring tenant dynamic resources and static resources.

[0057] (1) Dynamic resource configuration for tenants

[0058] By configuring interface resources, functional resources and data resources for tenants, the personalized customization of tenant application systems is achieved to meet the business needs and usage habits of different tenants. At the same time, the dynamic data source switching technology is used to ensure that users can automatically and quickly route requests to the correct dynamic resources according to the requests, which not only reasonably allocates platform resources, but also improves the platform's data processing capabilities and scalability.

[0059] (2) Tenant static resource configuration

[0060] By configuring the server resources, hard disk resources, SMS resources and API interface resources required by tenant applications, tenants can choose appropriate products and services based on their own business needs, and pay and use them according to a certain billing model.

[0061] The hierarchical authorization and hierarchical management model based on the integration of role-based access rights (RBAC) and data domains incorporates multiple dimensions such as sub-tenants, projects, and administrative divisions into the scope of consideration for authentication authority design. Through the fine division of role allocation and access control strategies, different tenants, different projects, different categories, and different levels of units and departments can have their own clear scope of authority, ensuring that only authorized users can access specific data, thereby effectively preventing data leakage, improving the overall security of the platform, and ensuring information security. Among them, role-based access rights control mainly controls the user's operating permissions, and the data domain mainly controls the user's operating scope. The main steps are as follows;

[0062] (1) Establishing basic roles

[0063] According to the actual division of business labor, the business function menus, pages and buttons of different projects are integrated into basic roles.

[0064] (2) Establishing data domain

[0065] According to the actual business management scope, establish the data domain scope of each project, and realize the logical combination of data domain scope through logic such as including subordinates, excluding subordinates, and, or.

[0066] (3) Unit authorization

[0067] According to the unit's responsibilities and management scope, authorization is granted to the projects involved in the unit and the role permissions and data domain scopes involved in each project of the unit.

[0068] (4) Departmental authorization

[0069] According to the management responsibilities of different departments of the unit, each department shall be authorized within the scope of the unit's authority.

[0070] (5) User Authorization

[0071] According to the user's job responsibilities, each user is authorized within the scope of departmental authority. Users are divided into two categories: users at this level and administrators at this level. Administrators at this level can authorize users at this level; and superior administrators can authorize administrators at this level, thereby achieving hierarchical management of authority.

[0072] The multi-tenant identification solution is based on different data isolation solutions. It uses domain name identification and database statement automatic matching to match and filter tenant information and tenant resources to meet the application management needs of different tenants.

[0073] Domain name identification is to match the domain name address requested by the user with the domain name address assigned to the tenant in the tenant basic configuration, obtain the database connection information of the specific tenant, and accurately switch to the tenant data source to obtain the corresponding resources, applications and data;

[0074] Automatic database statement matching is a multi-tenant solution implemented by using automatic statement splicing and interceptor technology. When a user requests access, the filter intercepts the browser request to obtain the tenant's unique ID, and automatically splices the unique ID into the database statement as a condition to complete the corresponding business operations such as adding, deleting, modifying, and querying, thereby filtering tenant data. The steps include:

[0075] (1) Add the tenant data source execution environment and background information to the current thread, and add a multi-tenant identification mark.

[0076] (2) Define the tables that need to be filtered in the tenant data source execution environment, and filter the data in these tables through the tenant identification identifier. The remaining tables are public tables and do not require data filtering.

[0077] (3) Rewrite the relevant annotation content in the database link plug-in and add a multi-tenant interceptor.

[0078] (4) In the data call method that requires tenant data filtering, add the multi-tenant interceptor annotation to make it effective.

[0079] (5) Before the interface detects the interception annotation, it first inserts the tenant identification mark, and then filters the data according to the tenant identification mark. After completion, the tenant identification mark is deleted and the default connection mode is restored.

[0080] Embodiment 2 is an embodiment of the present invention, which provides a system for a multi-tenant, multi-project, multi-unit, and multi-level management method based on cloud computing, including: a cloud computing container platform module, a multi-tenant data isolation module, a multi-tenant configuration module, a hierarchical authorization and management module, and a tenant identification and access control module;

[0081] The cloud computing container platform module builds a cloud computing environment, provides container management and orchestration functions, provides infrastructure for the construction and deployment of tenant applications and operating environments, and packages, schedules, expands, runs, and monitors tenant applications through container technology;

[0082] The multi-tenant data isolation module ensures data isolation between different tenants and provides logical isolation or physical isolation according to tenant business needs;

[0083] The multi-tenant configuration module is responsible for initializing tenant basic data resources. By designing the configuration process, it automatically allocates the required resources to each tenant, and completes customized management of tenants according to their own needs.

[0084] The hierarchical authorization and management module designs authorization management strategies for different tenants, projects, units, and levels by building a role-based access rights model;

[0085] The tenant identification and access control module verifies the tenant identity, confirms the tenant identity through the tenant identification solution, and grants tenant resource access rights based on the authorization model.

[0086] If the functions are implemented in the form of software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, or the part that contributes to the prior art or the part of the technical solution, can be embodied in the form of a software product. The computer software product is stored in a storage medium, including several instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present invention. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), disk or optical disk, etc., which can store program code.

[0087] The logic and / or steps represented in the flowchart or otherwise described herein, for example, can be considered as an ordered list of executable instructions for implementing logical functions, and can be embodied in any computer-readable medium for use by an instruction execution system, device or apparatus (such as a computer-based system, a system including a processor, or other system that can fetch instructions from an instruction execution system, device or apparatus and execute instructions), or in conjunction with such instruction execution systems, devices or apparatuses. For the purposes of this specification, "computer-readable medium" can be any device that can contain, store, communicate, propagate or transmit a program for use by an instruction execution system, device or apparatus, or in conjunction with such instruction execution systems, devices or apparatuses.

[0088] More specific examples of computer-readable media (a non-exhaustive list) include the following: an electrical connection with one or more wires (electronic device), a portable computer disk case (magnetic device), a random access memory (RAM), a read-only memory (ROM), an erasable and programmable read-only memory (EPROM or flash memory), an optical fiber device, and a portable compact disk read-only memory (CDROM). In addition, the computer-readable medium may even be a paper or other suitable medium on which the program is printed, since the program may be obtained electronically, for example, by optically scanning the paper or other medium, followed by editing, deciphering or, if necessary, processing in another suitable manner, and then stored in a computer memory.

[0089] It should be understood that the various parts of the present invention can be implemented by hardware, software, firmware or a combination thereof. In the above-mentioned embodiments, a plurality of steps or methods can be implemented by software or firmware stored in a memory and executed by a suitable instruction execution system. For example, if implemented by hardware, as in another embodiment, it can be implemented by any one of the following technologies known in the art or their combination: a discrete logic circuit having a logic gate circuit for implementing a logic function for a data signal, a dedicated integrated circuit having a suitable combination of logic gate circuits, a programmable gate array (PGA), a field programmable gate array (FPGA), etc.

[0090] Example 3, reference Figure 5 This is another embodiment of the present invention. In order to verify the beneficial effects of the present invention, scientific demonstration is carried out through economic benefit calculation and simulation experiments. This embodiment experiments the existing traditional method and the method of this embodiment respectively.

[0091] By comparing and analyzing the traditional method with the multi-tenant, multi-project, multi-unit and multi-level management method based on cloud computing, scientific and policy experiments are conducted on the time-consuming aspects of collaborative work, data sharing, application deployment, application expansion, application fault recovery, etc., to demonstrate the beneficial effects of the method and system proposed in this patent.

[0092] The traditional method mentioned in the present invention is a non-cloud platform method, that is, an ordinary business management information system.

[0093] Function comparison chart

[0094]

[0095]

[0096] Collaborative work: In the traditional way, collaborative work between units at all levels requires direct interface docking through different business applications and simultaneous offline related document approval. According to a sample survey of various business tasks, it takes an average of 1.1 days (26.4 hours). The collaborative management model based on this method can bring all units under unified management and integrate online and offline businesses, which takes an average of 0.57 hours, greatly improving the efficiency of collaborative work.

[0097] Data sharing: In the traditional way, the data sharing channels of each business are not smooth. In addition to being restricted by business management requirements, factors such as shared interface development and network security regulations must also be considered. Data sharing takes an average of 2.1 days (50.4 hours). Based on the unified cloud platform and collaborative management model of this method, the sharing channels between each business data are smooth, and the data sharing requirements can be easily achieved through a unified immigration big data system.

[0098] Application deployment: In traditional methods, application deployment requires manual operation, and often requires building a basic environment, deploying applications, configuring application solutions, and testing. Taking mature application deployment as an example, the entire application deployment takes an average of 13.44 hours. Based on the management model under cloud computing, resource environment construction and application configuration deployment can be automatically performed through container orchestration technology. The entire process is fully automated and takes an average of 0.1 hours.

[0099] Application expansion: In traditional methods, when the system has too much concurrent capacity during peak hours and application expansion is required, operations such as adding new server resources, deploying business applications, and adding load balancing are usually adopted. The entire process takes an average of 1.3 days (31.2 hours). Based on the management model under cloud computing, the number of container instances is automatically increased or decreased according to the load and performance requirements of the cloud platform to ensure smooth use of the platform during high concurrency, which takes an average of 0.1 hours.

[0100] Application fault recovery: In the traditional way, when a system fails, the service stops. The operation and maintenance personnel need to analyze the fault log to troubleshoot the fault, and then repair and restart the application. The whole process takes an average of 1.92 hours. Based on the management mode under cloud computing, the container management platform will monitor the running status of the application in real time. When the application fails, it will automatically restart or migrate to ensure the availability of the application, which takes an average of 0.05 hours.

[0101] It should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention rather than to limit it. Although the present invention has been described in detail with reference to the preferred embodiments, those skilled in the art should understand that the technical solutions of the present invention may be modified or replaced by equivalents without departing from the spirit and scope of the technical solutions of the present invention, which should all be included in the scope of the claims of the present invention.

Claims

1. A multi-tenant, multi-project, multi-unit, and multi-level management method based on cloud computing, characterized in that: include: Build the basic operating environment of cloud computing container platform; Based on the multi-tenant data isolation solution, the container platform is used to quickly build and deploy tenant applications and operating environments; Design multi-tenant configuration process and complete the initialization of tenant basic data resources; Build a hierarchical authorization and hierarchical management model based on role-based access control and data domain integration, and output the scope of user permissions; The tenant identity is verified through a multi-tenant identification solution, and the tenant resource access request is completed in combination with the corresponding permission scope.

2. The multi-tenant, multi-project, multi-unit, and multi-level management method based on cloud computing according to claim 1, characterized in that: The cloud computing container platform basic operating environment uses open source container cloud platform and localized container cloud platform to build services to complete the construction, implementation and operation and maintenance of the container platform, and completes infrastructure orchestration, container orchestration and scheduling, private application store management, fault monitoring and tracking, and recovery and self-healing functions based on cloud computing.

3. The multi-tenant, multi-project, multi-unit, and multi-level management method based on cloud computing according to claim 2, characterized in that: The infrastructure orchestration is that the container management platform integrates service resources to provide infrastructure services for running containerized applications; The container orchestration and scheduling is an automated process used for deployment, expansion, operation and maintenance of containerized applications on cloud platforms; Through container orchestration technology, a large number of container instances are automatically managed based on cloud computing to complete multi-tenant application management under cloud computing; The private application store management enables users of the container management platform to deploy applications consisting of multiple containers in the application store with one click; The fault monitoring, tracking and self-recovery include monitoring the running status of cloud platform applications and automatically restarting or migrating applications when they fail.

4. The multi-tenant, multi-project, multi-unit, and multi-level management method based on cloud computing according to claim 3, characterized in that: The multiple data isolation solutions are to add a tenant ID field to all tenant business tables to distinguish different tenants, and configure the corresponding data source strategy for the tenant application, so that tenants can choose logical isolation according to the actual business needs of management, isolate the data and business between tenants, and for physically isolated tenants, use the container platform to package and copy the relevant operating environment and dependencies into independent containers to complete the construction and deployment of the tenant operating environment.

5. The multi-tenant, multi-project, multi-unit, and multi-level management method based on cloud computing according to claim 4, characterized in that: The multi-tenant configuration process completes the initialization of tenant basic data resources by configuring tenant dynamic resources and static resources.

6. The multi-tenant, multi-project, multi-unit, and multi-level management method based on cloud computing according to claim 5, characterized in that: The hierarchical authorization and hierarchical management model based on the integration of role-based control of access rights and data domains is to incorporate multiple dimensions into the consideration scope of authentication authority design through the fine division of role allocation and access control strategy; Different tenants, different projects, different categories, different levels of units and departments have corresponding authority scopes, allowing authorized users to access specific data.

7. The multi-tenant, multi-project, multi-unit, and multi-level management method based on cloud computing according to claim 6, characterized in that: The multi-tenant identification solution is based on different data isolation solutions, and uses domain name identification and database statement automatic matching to match and screen tenant information and tenant resources to meet the application management needs of different tenants; Domain name identification is to match the domain name address requested by the user with the domain name address assigned to the tenant in the tenant basic configuration, obtain the database connection information of the specific tenant, and switch to the tenant data source to obtain the corresponding resources, applications and data; Automatic database statement matching is a multi-tenant solution that uses automatic statement splicing and interceptor technology. When a user requests access, the browser request is intercepted by a filter to obtain the tenant's unique identifier, and the unique identifier is automatically spliced ​​into the database statement as a condition to complete the corresponding business operation and filter the tenant data.

8. A system using the multi-tenant, multi-project, multi-unit, and multi-level management method based on cloud computing as claimed in any one of claims 1 to 7, characterized in that: It includes cloud computing container platform module, multi-tenant data isolation module, multi-tenant configuration module, hierarchical authorization and management module, and tenant identification and access control module; The cloud computing container platform module is used to build a cloud computing environment, provide container management and orchestration functions, provide infrastructure for the construction and deployment of tenant applications and operating environments, and package, schedule, expand, run and monitor tenant applications through container technology; The multi-tenant data isolation module ensures data isolation between different tenants and provides logical isolation or physical isolation according to tenant business requirements; The multi-tenant configuration module is responsible for initializing tenant basic data resources. By designing the configuration process, it automatically allocates the required resources to each tenant, completing customized management of tenants according to their own needs; The hierarchical authorization and management module designs authorization management strategies for different tenants, projects, units and levels by building a role-based access rights model; The tenant identification and access control module verifies the tenant identity, confirms the tenant identity through a tenant identification solution, and grants the tenant resource access rights based on an authorization model.

9. A computer device comprising a memory and a processor, wherein the memory stores a computer program, wherein: When the processor executes the computer program, the steps of the multi-tenant, multi-project, multi-unit, and multi-level management method based on cloud computing are implemented as described in any one of claims 1 to 7.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the multi-tenant, multi-project, multi-unit, and multi-level management method based on cloud computing as described in any one of claims 1 to 7 are implemented.

Images