Application access method, system, device, equipment and medium

Abstract

The embodiment of the present invention discloses an application access method, system, device, equipment and medium. Among them, the application access method includes: according to the user's employee relationship query request, obtaining a first correspondence between at least one platform tenant and an employee in the software platform; according to the first correspondence, determining the target platform tenant to which the current user belongs, and the current user's identity in the platform is an employee of the target platform tenant; according to the user's application query request, obtaining at least one application opened by the target platform tenant; according to the user's application access request, entering the multi-identity application opened by the target platform tenant as an employee or an authorized identity. The technical solution of the embodiment of the present invention can enable users to use a unified identity on the platform while also meeting the multi-identity requirements of some applications.

Description

Technical Field

[0001] Embodiments of the present invention relate to computer technology, and in particular to an application access method, system, device, equipment, and medium. Background Art

[0002] With the development of software platforms, more and more applications are deployed on these platforms. Each application maintains and stores its own data, resulting in data silos and disconnection between applications. To connect these applications, a common approach is to provide users with a unified identity on the software platform. This unified identity enables data linkage between applications.

[0003] Although the above method of providing a unified identity for users enables data association between various applications, the same user uses the same identity in all applications, which cannot meet the business needs of some applications. For example, user A's identity in application 1 is an employee of Company A, and his identity in application 2 is the financial officer of Company A and the financial agent of Company B. In this case, one user needs to have two identities in application 2. Obviously, a unified identity cannot meet the above needs.

[0004] In the existing technology, in order to meet the multi-identity requirements of some applications while users use a unified identity, users can register multiple accounts. For example, a user registers account 1 to manage the finances of Company A in Application 2, and then registers account B to act as an agent for the finances of Company B in Platform 2. On the one hand, users need to spend a lot of time to register accounts, which is labor-intensive. On the other hand, each user has multiple accounts, which increases the complexity of account data management. Summary of the Invention

[0005] The embodiments of the present invention provide an application access method, system, apparatus, device and medium, which, by combining the authorization system and the employee system, enable users to use a unified identity on the platform while also meeting the multiple identity requirements of some applications.

[0006] In a first aspect, an embodiment of the present invention provides an application access method, the method comprising:

[0007] Obtaining a first correspondence between at least one platform tenant and an employee in the software platform according to an employee relationship query request of the user;

[0008] Determine, based on the first correspondence, the target platform tenant to which the current user belongs, and the identity of the current user in the platform is an employee of the target platform tenant;

[0009] Obtaining at least one application activated by the target platform tenant according to the user's application query request;

[0010] According to the user's application access request, enter the multi-identity application opened by the target platform tenant as an employee or authorized identity.

[0011] In a second aspect, an embodiment of the present invention further provides an application access system, the system comprising: a server and a management terminal;

[0012] The server is used to provide tenant microservices, as well as user and identity microservices to various applications in the software platform;

[0013] The management terminal is used to provide a tenant management module and a user management module to the platform tenant management personnel;

[0014] The tenant microservice is used to provide the creation, query and modification functions of platform tenants;

[0015] The user and identity microservice is used to provide functions such as user registration and login, single sign-on, user identity query, and granting users access to set application permissions;

[0016] The tenant management module is used to provide platform tenant management functions and platform tenant application activation management functions to platform tenant management personnel;

[0017] The user management module is used to provide platform tenant managers with external employee authorization functions, employee management functions, and employee rights management functions.

[0018] In a third aspect, an embodiment of the present invention further provides an application access device, the device comprising:

[0019] A first correspondence relationship acquisition module, configured to acquire a first correspondence relationship between at least one platform tenant and an employee in the software platform according to an employee relationship query request of a user;

[0020] a target platform tenant determination module, configured to determine, based on the first correspondence, the target platform tenant to which the current user belongs, where the current user's identity in the platform is an employee of the target platform tenant;

[0021] An application acquisition module, configured to acquire at least one application activated by the target platform tenant according to the user's application query request;

[0022] The multi-identity application access module is used to access the multi-identity application opened by the target platform tenant as an employee or authorized identity according to the user's application access request.

[0023] In a fourth aspect, an embodiment of the present invention further provides an electronic device, comprising:

[0024] one or more processors;

[0025] a memory for storing one or more programs;

[0026] When the one or more programs are executed by the one or more processors, the one or more processors implement the application access method provided by any embodiment of the present invention.

[0027] In a fifth aspect, an embodiment of the present invention further provides a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the application access method provided by any embodiment of the present invention.

[0028] The technical solution of the embodiment of the present invention first obtains the first correspondence between at least one platform tenant and an employee in the software platform based on the user's employee relationship query request, then determines the target platform tenant to which the current user belongs based on the first correspondence, and obtains at least one application opened by the target platform tenant based on the user's application query request, and finally enters the multi-identity application opened by the target platform tenant as an employee or authorized identity based on the user's application access request, which solves the problem in the prior art that when a unified identity is used on the platform, the multi-identity requirements of some applications cannot be met, and can enable users to use a unified identity on the platform while also meeting the multi-identity requirements of some applications. BRIEF DESCRIPTION OF THE DRAWINGS

[0029] Figure 1a This is a flowchart of an application access method in Embodiment 1 of the present invention;

[0030] Figure 1b This is a flowchart of accessing an application as an employee or an authorized identity in the first embodiment of the present invention;

[0031] Figure 2 This is a flow chart of an application access method in Embodiment 2 of the present invention;

[0032] Figure 3a This is a functional structure diagram of an application access system in Embodiment 3 of the present invention;

[0033] Figure 3b This is a technical architecture diagram of the application access system in the third embodiment of the present invention;

[0034] Figure 4 This is a schematic structural diagram of an application access device in a fourth embodiment of the present invention;

[0035] Figure 5 This is a structural diagram of a device provided in Example 5 of the present invention. DETAILED DESCRIPTION

[0036] The present invention will be further described in detail below with reference to the accompanying drawings and examples. It will be understood that the specific embodiments described herein are intended only to illustrate the present invention and are not intended to limit the present invention. It should also be noted that, for ease of description, the accompanying drawings only illustrate portions relevant to the present invention, not all structures.

[0037] Example 1

[0038] Figure 1a This is a flowchart of an application access method in Embodiment 1 of the present invention. The technical solution of this embodiment is applied to a device and is suitable for using a unified user identity on a software platform. The method can be performed by an application access device, which can be implemented by software and / or hardware and can be integrated into various general-purpose computer devices. The method specifically includes the following steps:

[0039] Step 110: Obtain a first correspondence between at least one platform tenant and an employee in the software platform according to the user's employee relationship query request.

[0040] A software platform is a platform that provides multiple applications deployed in the cloud to multiple individuals or businesses. Each individual or business using an application on the software platform is a platform tenant. For example, if the software platform provides application A, which is intended for internet users, then every internet user is a platform tenant.

[0041] In this embodiment, when a user initiates an employee relationship query request, the first correspondence between each platform tenant and the employees corresponding to each platform tenant in the current software platform is queried. The specific process of a user accessing an application as an employee is as follows: Figure 1b As shown, you can obtain a platform tenant in turn, and then query at least one employee corresponding to the currently obtained platform tenant, until the corresponding relationship between all platform tenants and their employees is obtained. Among them, the user can initiate an employee relationship query request by clicking the employee relationship query button on the page. A platform tenant can correspond to multiple employees, but an employee only belongs to one platform tenant, and the unified identity of this employee in the software platform is an employee of the platform tenant. For example, platform tenant A corresponds to 3 employees, namely employee 1, employee 2 and employee 3, and these 3 employees can only be employees of platform tenant A, and cannot be employees of other platform tenants, and these 3 employees have a unified identity in the software platform. For example, the unified identity of employee 1 on the platform is an employee of platform tenant A.

[0042] Step 120: Determine the target platform tenant to which the current user belongs based on the first corresponding relationship. The current user's identity in the platform is an employee of the target platform tenant.

[0043] In this embodiment, after obtaining the correspondence between at least one platform tenant and employee in the software platform, the target platform tenant corresponding to the current user is determined based on the first correspondence. Simply put, the target platform tenant corresponding to the current user is searched in the first correspondence to determine which platform tenant the current user belongs to.

[0044] Exemplarily, the first correspondence includes platform tenant A, whose corresponding employees are employee 1 and employee 2, and platform tenant B, whose corresponding employees are employee 3 and employee 4. It is necessary to determine which platform tenant the current user corresponds to based on the current user's identification information. For example, when the current user corresponds to platform tenant A, platform tenant A is used as the target platform tenant, and the current user's unified identity in the software platform is an employee of platform tenant A.

[0045] Step 130: According to the user's application query request, obtain at least one application activated by the target platform tenant.

[0046] In this embodiment, after determining the target platform tenant to which the current user belongs, in response to an application query request initiated by the user, at least one application activated by the target platform tenant is queried, that is, all applications used by the target platform tenant in the current software platform are queried, where the applications activated by the target platform tenant may include single-identity applications and multi-identity applications.

[0047] Step 140: According to the user's application access request, access the multi-identity application opened by the target platform tenant as an employee or authorized identity.

[0048] In this embodiment, after determining all applications enabled by the target platform tenant, the user can select an application as the target application and access it. The target application can be a single-identity application or a multi-identity application. Single-identity applications can only be accessed as an employee, while multi-identity applications can be accessed as an employee or an authorized identity. For example, the current user can access single-identity application A as an employee of platform tenant A. For multi-identity applications, the current user can access multi-identity application B as an employee of platform tenant A or as an authorized identity of another platform tenant.

[0049] A multi-identity application is one that requires multiple identities. For example, a user is a bookkeeping agent for multiple companies. This user is an employee of Company A and also manages the financial management of Company B. In this case, the user needs to manage the data of both Company A and Company B within the financial system (an application within the software platform). This application requires multiple identities, meaning that the financial system is a multi-identity application. A user can only access a single-identity application as an employee of a platform tenant. A user can access a multi-identity application as multiple identities, including an employee of a platform tenant or an authorized identity.

[0050] Optionally, the application access method in this embodiment further includes:

[0051] Obtaining, according to the user's authorization relationship query request, a second correspondence between at least one platform tenant in the software platform and the user under each application;

[0052] Displaying at least one multi-identity application with access rights to the user according to the second correspondence;

[0053] According to the user's application access request, the target multi-identity application is entered with the authorized identity. In this optional embodiment, the process of the user accessing the application with the authorized identity is as follows: Figure 1b As shown, based on the authorization relationship query request initiated by the user, the second correspondence between at least one platform tenant in the software platform and the user under each application used by the user is queried, and then based on the second correspondence, one or more multi-identity applications with access rights are displayed to the user, and finally, based on the target multi-identity application selected by the user, the user enters the target multi-identity application with an authorized identity.

[0054] For example, in response to a user clicking a button to query the authorization relationship, the second correspondence between the platform tenant, application, and user is queried. The second correspondence can be a correspondence between the platform tenant ID, application ID, and user ID. Then, based on the current user ID, one or more multi-identity applications with access rights (i.e., the applications corresponding to the current user ID) are determined and displayed to the user. Finally, based on the application access request initiated by the user, the user enters the target multi-identity application with the authorized identity. It is worth noting that at this time, the user is using the authorized identity and cannot access single-identity applications. Single-identity applications can only be accessed as an employee of the platform tenant.

[0055] Optionally, the application access method in this embodiment further includes:

[0056] Determining the type of the target application according to the user's operation of accessing the target application, where the type of the target application includes a single-identity application and a multi-identity application;

[0057] When the target application is a single-identity application, determine whether the target platform tenant to which the current user belongs has activated the target application. If so, enter the target application as an employee;

[0058] When the target application is a multi-identity application and the target platform tenant to which the current user belongs has activated the target application, determine whether the current user has been granted access rights to the target application by other tenants. If so, provide the current user with access identity options and access the target application based on the identity selected by the user; the access identity options include employee identity and authorized identity;

[0059] When the target application is a multi-identity application and the target platform tenant to which the current user belongs has not activated the target application, determine whether the current user has been granted access rights to the target application by other tenants. If so, enter the target application with the authorized identity.

[0060] In this optional embodiment, an application access method is provided when a user directly enters a target application. First, based on the user's operation requesting access to the target application, the type of the target application is determined. For example, by reading the attribute information of the target application, it is determined whether the target application is a single-identity application or a multi-identity application. When the target application is a single-identity application, it is determined whether the target platform tenant to which the current user belongs has activated the current target application. If so, the target application is accessed as an employee; otherwise, the current user is denied access to the target application. When the target application is a multi-identity application and the target platform tenant to which the current user belongs has activated the target application, it can be further determined whether other platform tenants (platform tenants other than the target platform tenant) have granted the current user access rights to the target application. If so, access identity options are displayed to the current user, and the target application can be accessed according to the employee identity or authorized identity selected by the user, thereby realizing the multi-identity requirements of the target application. When the target application is a multi-identity application and the target platform tenant to which the current user belongs has not activated the target application, it means that the current user cannot access the target application as an employee. It is then further determined whether the current user has been granted access rights to the target application by other tenants. If so, the target application is entered as an authorized identity; otherwise, the current user is denied access to the target application.

[0061] Optionally, in the first corresponding relationship, a user is an employee of a platform tenant, and in the second corresponding relationship, a user is granted access rights to at least one application by at least one platform tenant.

[0062] In this optional embodiment, the correspondence between the platform tenants, users and applications in the first correspondence and the second correspondence is further clarified. Specifically, in the first correspondence, in order to ensure the unified identity of the user on the software platform, a user can only belong to an employee of one platform tenant. At this time, the user's unified identity in the software platform is an employee of a certain platform tenant; in order to meet the multi-identity requirements of some applications, in the second correspondence, a user can be granted access rights to at least one application by one or more platform tenants, that is, the current user can access the application as an employee of the platform tenant and can also access the application with an authorized identity, thereby realizing the multi-identity requirements of some applications.

[0063] The technical solution of the embodiment of the present invention first obtains the first correspondence between at least one platform tenant and an employee in the software platform based on the user's employee relationship query request, then determines the target platform tenant to which the current user belongs based on the first correspondence, and obtains at least one application opened by the target platform tenant based on the user's application query request, and finally enters the multi-identity application opened by the target platform tenant as an employee or authorized identity based on the user's application access request, which solves the problem in the prior art that when a unified identity is used on the platform, the multi-identity requirements of some applications cannot be met, and can enable users to use a unified identity on the platform while also meeting the multi-identity requirements of some applications.

[0064] Example 2

[0065] Figure 2 This is a flowchart of an application access method in the second embodiment of the present invention. This embodiment further refines the above embodiment and provides specific steps for accessing a multi-identity application opened by a target platform tenant as an employee or authorized identity according to a user's application access request, as well as specific steps before obtaining a first correspondence between at least one platform tenant and an employee in the software platform according to a user's employee relationship query request. Figure 2 An application access method provided in the second embodiment of the present invention is described, which includes the following steps:

[0066] Step 210: At least one platform tenant in the software platform performs employee management of the platform tenant and / or external employee management.

[0067] In this embodiment, at least one platform tenant in the software platform can manage both its own employees and external employees. Specifically, a platform tenant can add, delete, or query employees, and grant or revoke application access permissions for external employees. For example, platform tenant A can tag user 1 and user 2 as employees of platform tenant A. For employee 3 of platform tenant B, platform tenant A can grant them access permissions to one of their applications.

[0068] Optionally, at least one platform tenant in the software platform performs employee management of the platform tenant and / or external employee management, including:

[0069] At least one platform tenant in the software platform marks at least one user as an employee of the current platform tenant through the system management terminal; and / or,

[0070] At least one platform tenant in the software platform grants an external employee access to a set application through a system management terminal, where the external employee is an employee who is not a current platform tenant.

[0071] In this optional embodiment, a specific method for a platform tenant to manage employees of the platform tenant and / or external employees is provided, including: the platform tenant in the software platform can mark users as employees of the current platform tenant through the system management terminal; for external employees, the platform tenant can grant external employees access to set applications through the system management terminal, where external employees refer to employees who are not the current platform tenant, that is, employees of other platform tenants.

[0072] Step 220: According to the user's employee relationship query request, obtain a first corresponding relationship between at least one platform tenant and an employee in the software platform.

[0073] Step 230: Determine the target platform tenant to which the current user belongs based on the first corresponding relationship. The identity of the current user in the platform is an employee of the target platform tenant.

[0074] Step 240: According to the user's application query request, obtain at least one application activated by the target platform tenant.

[0075] Step 250: When the user requests to access a multi-identity application opened by the target platform tenant, the user enters the multi-identity application as an employee or authorized identity; when the user requests to access a single-identity application opened by the target platform tenant, the user enters the single-identity application as an employee.

[0076] In this embodiment, after obtaining at least one application opened by the target platform tenant, the user initiates an instruction to enter a single-identity application or a multi-identity application. When the user requests to enter a single-identity application opened by the target platform tenant, the single-identity application is entered as an employee; when the user requests to enter a multi-identity application, the multi-identity application can be entered as an employee or an authorized identity, where the authorized identity is granted to the user by other platform tenants in the platform who have opened the current multi-identity application.

[0077] For example, the user queries and finds that the applications opened by the current platform tenant include single-identity applications A and B, and multi-identity applications C and D. Then, based on the single-identity application A selected by the user, the user can access the single-identity application A as an employee; the user can also select the multi-identity application C. The platform will display access identity options to the user, and based on the user's selection, the user can access the multi-identity application C as an employee of the target platform tenant, or access the multi-identity application C with the authorized identity granted to the user by other tenants.

[0078] The technical solution of an embodiment of the present invention is as follows: first, at least one platform tenant in a software platform performs employee management of the platform tenant and / or external employee management; then, based on an employee relationship query request of a user, a first correspondence between at least one platform tenant and an employee in the software platform is obtained; and based on the first correspondence, a target platform tenant to which the current user belongs is determined; further, based on an application query request of the user, at least one application opened by the target platform tenant is obtained; in response to a user selecting a target single-identity application operation, the user enters the single-identity application as an employee; or, in response to a user selecting a target multi-identity application operation, the user is presented with access identity options, and the user enters the multi-identity application as the identity selected by the user; the access identity options include an employee identity and an authorized identity, which can enable the user to use a unified identity on the platform while also meeting the multi-identity requirements of some applications.

[0079] Example 3

[0080] Figure 3a This is a structural diagram of an application access system provided by Embodiment 3 of the present invention, the application access system comprising: a server 1 and a management terminal 2;

[0081] The server 1 is used to provide tenant microservices 11 and user and identity microservices 12 to various applications in the software platform.

[0082] In this embodiment, the application access system's server 1 provides tenant microservices 11 and user and identity microservices 12 to each application in the software platform. Specifically, tenant microservices 11 provide functions related to platform tenant management, such as creating, modifying, and querying platform tenants; user and identity microservices 12 provide functions related to user management, such as managing user login and registration in applications, user SSO (Single Sign On), user identity in the software platform, and granting users specific application permissions. Furthermore, the system encapsulates the various functions of the tenant microservices 11 and user and identity microservices 12 into an API (Application Programming Interface) for invocation by each application in the software platform.

[0083] The management terminal 2 is used to provide a tenant management module 21 and a user management module 22 to the platform tenant management personnel.

[0084] In this embodiment, the management terminal 2 of the application access system is used to provide the platform tenant management personnel with a tenant management module 21 and a user management module 22. Specifically, the tenant management module 21 is used to provide the platform tenant management personnel with functions related to platform tenant management, such as platform tenant data management and platform tenant application activation management; the user management module 22 is used to provide the platform tenant management personnel with functions related to user identity management, such as platform tenant employee management and platform tenant external employee authorization management.

[0085] Specifically, the tenant microservice 11 is used to provide platform tenant creation, query and modification functions;

[0086] The user and identity microservice 12 is used to provide functions of user registration and login, single sign-on, user identity query, and granting users the ability to set application access permissions.

[0087] In this embodiment, a tenant microservice 11 and a user and identity microservice 12 are provided to provide specific functions to the application. Among them, the tenant microservice can be used to provide the creation, query and modification functions of the platform tenant; the user and identity microservice is used to provide user registration and login, user single sign-on, user identity query and granting access rights to identity applications to users.

[0088] The tenant management module 21 is used to provide platform tenant management functions and platform tenant application activation management functions to platform tenant management personnel;

[0089] The user management module 22 is used to provide platform tenant managers with external employee authorization functions, employee management functions, and employee authority management functions.

[0090] In this embodiment, specific functions are provided by the tenant management module 21 and the user management module 22 to the platform tenant management personnel, among which the tenant management module 21 is used to provide the platform tenant management personnel with platform tenant management functions and platform tenant application activation management functions; the user management module 22 is used to provide the platform tenant management personnel with external employee authorization functions, employee management functions and employee authority management functions.

[0091] In addition, the specific technical architecture of the application access system is as follows Figure 3bAs shown, the platform application interacts with the microservice that provides API services through https, and is reverse-proxied to the real server through nginx. At the same time, data monitoring of the API is enabled for nginx to ensure the security of information calls. When the application initiates a request, the microservice of the application access system calls the Redis cache to query the corresponding data. If the cache is not hit, it will further query the database. The database is separated from the master and slave, and a scheduled backup method is used to ensure data security. For the management end 2 of the application access system, the https request to the application access system is triggered by the page operation event, and the corresponding data is returned to the page for the user to view.

[0092] The technical solution of the embodiment of the present invention first obtains the first correspondence between at least one platform tenant and an employee in the software platform based on the user's employee relationship query request, then determines the target platform tenant to which the current user belongs based on the first correspondence, and obtains at least one application opened by the target platform tenant based on the user's application query request, and finally enters the multi-identity application opened by the target platform tenant as an employee or authorized identity based on the user's application access request, which solves the problem in the prior art that when a unified identity is used on the platform, the multi-identity requirements of some applications cannot be met, and can enable users to use a unified identity on the platform while also meeting the multi-identity requirements of some applications.

[0093] Example 4

[0094] Figure 4 This is a structural diagram of an application access device provided in a fourth embodiment of the present invention. The application access device includes: a first correspondence relationship acquisition module 410, a target platform tenant determination module 420, an application acquisition module 430 and a target application access module 440.

[0095] A first correspondence relationship acquisition module 410 is configured to acquire a first correspondence relationship between at least one platform tenant and an employee in the software platform according to an employee relationship query request of a user;

[0096] The target platform tenant determination module 420 is configured to determine the target platform tenant to which the current user belongs based on the first correspondence, where the current user's identity in the platform is an employee of the target platform tenant;

[0097] The application acquisition module 430 is configured to acquire at least one application activated by the target platform tenant according to the user's application query request;

[0098] The multi-identity application access module 440 is configured to access the multi-identity application opened by the target platform tenant as an employee or authorized identity according to the user's application access request.

[0099] The technical solution of the embodiment of the present invention first obtains the first correspondence between at least one platform tenant and an employee in the software platform based on the user's employee relationship query request, then determines the target platform tenant to which the current user belongs based on the first correspondence, and obtains at least one application opened by the target platform tenant based on the user's application query request, and finally enters the multi-identity application opened by the target platform tenant as an employee or authorized identity based on the user's application access request, which solves the problem in the prior art that when a unified identity is used on the platform, the multi-identity requirements of some applications cannot be met, and can enable users to use a unified identity on the platform while also meeting the multi-identity requirements of some applications.

[0100] Optionally, the application access device further includes:

[0101] A second correspondence relationship acquisition module, configured to acquire, according to the user's authorization relationship query request, a second correspondence relationship between at least one platform tenant in the software platform and the user under each application;

[0102] a multi-identity application display module, configured to display at least one multi-identity application with access rights to the user according to the second correspondence;

[0103] The target multi-identity application access module is used to enter the target multi-identity application with an authorized identity according to the user's application access request.

[0104] Optionally, the application access device further includes:

[0105] A type determination module, configured to determine the type of a target application according to a user's operation of accessing the target application, wherein the type of the target application includes a single-identity application and a multi-identity application;

[0106] A first access module is configured to, when the target application is a single-identity application, determine whether the target platform tenant to which the current user belongs has activated the target application, and if so, access the target application as an employee;

[0107] A second access module is configured to, when the target application is a multi-identity application and the target platform tenant to which the current user belongs has activated the target application, determine whether the current user has been granted access rights to the target application by other tenants; if so, provide the current user with access identity options and access the target application according to the identity selected by the user; the access identity options include employee identity and authorized identity;

[0108] The third access module is used to determine whether the current user has been granted access rights to the target application by other tenants when the target application is a multi-identity application and the target platform tenant to which the current user belongs has not activated the target application. If so, the user enters the target application with an authorized identity.

[0109] Optionally, in the first corresponding relationship, a user is an employee of a platform tenant, and in the second corresponding relationship, a user is granted access rights to at least one application by at least one platform tenant.

[0110] Optionally, the multi-identity application access module 440 is specifically configured to:

[0111] When a user requests to access a multi-identity application opened by the target platform tenant, the user enters the multi-identity application as an employee or authorized identity;

[0112] When a user requests to access a single-identity application opened by the target platform tenant, the user enters the single-identity application as an employee.

[0113] Optionally, the application access device further includes:

[0114] The employee management module is used to perform employee management of the platform tenant and / or external employee management for the at least one platform tenant in the software platform before obtaining a first correspondence between the at least one platform tenant and an employee in the software platform according to an employee relationship query request of the user.

[0115] Optionally, the employee management module is specifically used to:

[0116] At least one platform tenant in the software platform marks at least one user as an employee of the current platform tenant through the system management terminal; and / or,

[0117] At least one platform tenant in the software platform grants an external employee access to a set application through a system management terminal, where the external employee is an employee who is not an employee of the current platform tenant.

[0118] The application access device provided in the embodiment of the present invention can execute the application access method provided in any embodiment of the present invention, and has the corresponding functional modules and beneficial effects of the execution method.

[0119] Example 5

[0120] Figure 5 A schematic diagram of the structure of a device provided in the fifth embodiment of the present invention is shown in FIG. Figure 5 As shown, the electronic device includes a processor 50 and a memory 51; the number of processors 50 in the device can be one or more. Figure 5 In the embodiment, a processor 50 is used as an example; the processor 50 and the memory 51 in the device can be connected by a bus or other means. Figure 5 The bus connection is taken as an example.

[0121] The memory 51, as a computer-readable storage medium, can be used to store software programs, computer-executable programs, and modules, such as program instructions / modules corresponding to an application access method in an embodiment of the present invention (for example, the first correspondence relationship acquisition module 410, the target platform tenant determination module 420, the application acquisition module 430, and the multi-identity application access module 440 in the application access device). The processor 50 executes the software programs, instructions, and modules stored in the memory 51 to execute various functional applications and data processing of the device, thereby implementing the aforementioned application access method.

[0122] The method includes:

[0123] Obtaining a first correspondence between at least one platform tenant and an employee in the software platform according to an employee relationship query request of the user;

[0124] Determine, based on the first correspondence, the target platform tenant to which the current user belongs, and the identity of the current user in the platform is an employee of the target platform tenant;

[0125] Obtaining at least one application activated by the target platform tenant according to the user's application query request;

[0126] According to the user's application access request, enter the multi-identity application opened by the target platform tenant as an employee or authorized identity.

[0127] The memory 51 may mainly include a program storage area and a data storage area, wherein the program storage area may store an operating system and at least one application required for a function; the data storage area may store data created based on the use of the terminal, etc. In addition, the memory 51 may include a high-speed random access memory and may also include a non-volatile memory, such as at least one disk storage device, a flash memory device, or other non-volatile solid-state storage device. In some instances, the memory 51 may further include a memory remotely located relative to the processor 50, and these remote memories may be connected to the device via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0128] Example 6

[0129] Embodiment 6 of the present invention further provides a computer-readable storage medium having a computer program stored thereon, wherein the computer program, when executed by a computer processor, is used to perform an application access method, the method comprising:

[0130] Obtaining a first correspondence between at least one platform tenant and an employee in the software platform according to an employee relationship query request of the user;

[0131] Determine, based on the first correspondence, the target platform tenant to which the current user belongs, and the identity of the current user in the platform is an employee of the target platform tenant;

[0132] Obtaining at least one application activated by the target platform tenant according to the user's application query request;

[0133] According to the user's application access request, enter the multi-identity application opened by the target platform tenant as an employee or authorized identity.

[0134] Through the above description of the implementation methods, those skilled in the art can clearly understand that the present invention can be implemented with the help of software and necessary general-purpose hardware, and of course it can also be implemented by hardware, but in many cases the former is a better implementation method. Based on this understanding, the technical solution of the present invention is essentially or the part that contributes to the prior art can be embodied in the form of a software product, and the computer software product can be stored in a computer-readable storage medium, such as a computer floppy disk, read-only memory (ROM), random access memory (RAM), flash memory (FLASH), hard disk or optical disk, etc., including a number of instructions for enabling a computer device (which can be a personal computer, server, or network device, etc.) to execute the methods described in each embodiment of the present invention.

[0135] It is worth noting that in the embodiment of the above-mentioned application access device, the various units and modules included are only divided according to functional logic, but are not limited to the above-mentioned division, as long as the corresponding functions can be achieved; in addition, the specific names of the functional units are only for the convenience of distinguishing each other, and are not used to limit the scope of protection of the present invention.

[0136] Note that the above are only preferred embodiments of the present invention and the technical principles employed. Those skilled in the art will appreciate that the present invention is not limited to the specific embodiments described herein, and that various obvious changes, readjustments, and substitutions are possible for those skilled in the art without departing from the scope of the present invention. Therefore, although the present invention has been described in detail through the above embodiments, the present invention is not limited to the above embodiments and may include many other equivalent embodiments without departing from the scope of the present invention. The scope of the present invention is determined by the scope of the appended claims.

Claims

1. An application access method, characterized in that: include: Obtaining a first correspondence between at least one platform tenant and an employee in the software platform according to an employee relationship query request of the user; Determine, based on the first correspondence, the target platform tenant to which the current user belongs, and the identity of the current user in the platform is an employee of the target platform tenant; Obtaining at least one application activated by the target platform tenant according to the user's application query request; According to the user's application access request, access the multi-identity application opened by the target platform tenant as an employee or authorized identity; The method further comprises: Determining the type of the target application according to the user's operation of accessing the target application, where the type of the target application includes a single-identity application and a multi-identity application; When the target application is a single-identity application, determine whether the target platform tenant to which the current user belongs has activated the target application. If so, enter the target application as an employee; When the target application is a multi-identity application and the target platform tenant to which the current user belongs has activated the target application, determine whether the current user has been granted access rights to the target application by other tenants. If so, provide the current user with access identity options and access the target application based on the identity selected by the user; the access identity options include employee identity and authorized identity; When the target application is a multi-identity application and the target platform tenant to which the current user belongs has not activated the target application, determine whether the current user has been granted access rights to the target application by other tenants. If so, enter the target application with the authorized identity.

2. The method according to claim 1, characterized in that Also includes: Obtaining, according to the user's authorization relationship query request, a second correspondence between at least one platform tenant in the software platform and the user under each application; According to the second correspondence, displaying at least one multi-identity application with access rights to the user; Based on the user's application access request, enter the target multi-identity application with the authorized identity.

3. The method according to claim 2, characterized in that In the first corresponding relationship, a user is an employee of a platform tenant, and in the second corresponding relationship, a user is granted access rights to at least one application by at least one platform tenant.

4. The method according to claim 1, wherein Based on the user's application access request, access the multi-identity application opened by the target platform tenant as an employee or authorized identity, including: When a user requests to access a multi-identity application opened by the target platform tenant, the user enters the multi-identity application as an employee or authorized identity; When a user requests to access a single-identity application opened by the target platform tenant, the user enters the single-identity application as an employee.

5. The method according to claim 1, wherein Before obtaining a first correspondence between at least one platform tenant and an employee in the software platform according to an employee relationship query request of the user, the method further includes: At least one platform tenant in the software platform performs employee management of the platform tenant and / or external employee management.

6. The method according to claim 5, characterized in that At least one platform tenant in the software platform performs employee management of the platform tenant and / or external employee management, including: At least one platform tenant in the software platform marks at least one user as an employee of the current platform tenant through the system management terminal; and / or, At least one platform tenant in the software platform grants an external employee access to a set application through a system management terminal, where the external employee is an employee who is not an employee of the current platform tenant.

7. An application access system according to the method of claim 1, characterized in that: include: Server and management side; The server is used to provide tenant microservices, as well as user and identity microservices to various applications in the software platform; The management terminal is used to provide a tenant management module and a user management module to the platform tenant management personnel; The tenant microservice is used to provide the creation, query and modification functions of platform tenants; The user and identity microservice is used to provide functions such as user registration and login, single sign-on, user identity query, and granting users access to set application permissions; The tenant management module is used to provide platform tenant management functions and platform tenant application activation management functions to platform tenant management personnel; The user management module is used to provide platform tenant managers with external employee authorization functions, employee management functions, and employee rights management functions.

8. An application access device, characterized in that: include: A first correspondence relationship acquisition module, configured to acquire a first correspondence relationship between at least one platform tenant and an employee in the software platform according to an employee relationship query request of a user; a target platform tenant determination module, configured to determine, based on the first correspondence, the target platform tenant to which the current user belongs, where the current user's identity in the platform is an employee of the target platform tenant; An application acquisition module, configured to acquire at least one application activated by the target platform tenant according to the user's application query request; A multi-identity application access module is used to access the multi-identity application opened by the target platform tenant as an employee or authorized identity according to the user's application access request; The application access device further includes: A type determination module, configured to determine the type of a target application according to a user's operation of accessing the target application, wherein the type of the target application includes a single-identity application and a multi-identity application; A first access module is configured to, when the target application is a single-identity application, determine whether the target platform tenant to which the current user belongs has activated the target application, and if so, access the target application as an employee; A second access module is configured to, when the target application is a multi-identity application and the target platform tenant to which the current user belongs has activated the target application, determine whether the current user has been granted access rights to the target application by other tenants; if so, provide the current user with access identity options and access the target application according to the identity selected by the user; the access identity options include employee identity and authorized identity; The third access module is used to determine whether the current user has been granted access rights to the target application by other tenants when the target application is a multi-identity application and the target platform tenant to which the current user belongs has not activated the target application. If so, the user enters the target application with an authorized identity.

9. An electronic device comprising: one or more processors; a storage device for storing one or more programs, When the one or more programs are executed by the one or more processors, the one or more processors implement the application access method according to any one of claims 1 to 6.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the program is executed by a processor, the application access method according to any one of claims 1 to 6 is implemented.

Images