An internet platform multi-tenant data isolation and security protection method and system

By acquiring the request characteristic sequence of tenant programs, identifying periodic resource preemption signals, updating isolation configuration information, and building and adjusting protection strategies, the problem of malicious tenants inferring the business characteristics of adjacent tenants is solved, and data isolation security protection in multi-tenant environments is achieved.

CN122419972APending Publication Date: 2026-07-17GUANGZHOU ZHONGDE INFORMATION TECHNOLOGY CO LTD
View PDF 0 Cites 0 Cited by

Patent Information

Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
GUANGZHOU ZHONGDE INFORMATION TECHNOLOGY CO LTD
Filing Date
2026-06-08
Publication Date
2026-07-17

AI Technical Summary

Technical Problem

Existing multi-tenant data isolation solutions cannot distinguish between normal peak business access and malicious resource preemption attempts. This allows malicious tenants to infer the business characteristics of neighboring tenants by creating computing resource congestion and observing response latency fluctuations, thus compromising data isolation security.

Method used

By obtaining the current request feature sequence of tenant programs, periodic resource preemption signals are identified, isolation configuration information is updated, a reference protection strategy is constructed, and the target isolation strategy is determined through iterative adjustment. Interference is applied to eliminate temporal correlation and prevent tenant programs from inferring the business characteristics of adjacent tenants.

Benefits of technology

Effectively identify and prevent malicious preemption attempts, prevent tenant programs from using resource congestion to infer the business characteristics of adjacent tenants, and improve the data isolation security of multi-tenant environments.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN122419972A_ABST
    Figure CN122419972A_ABST
Patent Text Reader

Abstract

本申请公开一种互联网平台多租户数据隔离与安全防护方法及系统,涉及云计算安全技术技术领域,包括:响应租户程序运行时资源占用时序信号,获取当前租户程序基于目标处理核心的当前请求特征序列。因当前序列含周期性资源抢占信号,获取预设历史时段内的历史请求特征序列。又因历史序列为随机业务请求信号,更新当前隔离配置信息得到参考防护策略。在目标处理核心上执行该策略,获取当前延迟波动方差和资源响应状态信号。结合预设防护更新策略,基于上述信号对参考防护策略迭代调整,确定目标隔离策略。本发明可识别恶意抢占试探行为,通过迭代施加干扰消除时序关联,阻止租户程序利用资源拥堵推断相邻租户业务特征。
Need to check novelty before this filing date? Find Prior Art