Data query method and device for hybrid cloud

Abstract

This invention discloses a data query method and apparatus for hybrid clouds, relating to the field of big data technology. The method includes: when a public cloud server detects a user login, it updates the user's identity identifier stored in the public cloud and retrieves the storage location information of the data queried by the user's query instruction in the private cloud from the stored data; if the public cloud server does not retrieve the storage location information of the data queried by the user's query instruction in the private cloud from the public cloud, it sends the user's query instruction and user identity identifier to the private cloud server; the private cloud server determines the user's query permission information based on the user's query instruction and user identity identifier; based on the user's query permission information, it retrieves the storage location information of the queried data in the private cloud; and it sends the storage location information of the queried data in the private cloud to the public cloud server for storage. This invention can improve the data query efficiency of hybrid clouds.

Description

Technical Field

[0001] This invention relates to the field of big data technology, and in particular to a data query method and apparatus for hybrid cloud. Background Technology

[0002] This section is intended to provide background or context for the embodiments of the invention set forth in the claims. The description herein is not an admission that it is prior art simply because it is included in this section.

[0003] Today, more and more enterprises are choosing hybrid cloud as their option, as it offers advantages such as high flexibility, strong scalability, high computing power, and strong continuity. Compared to public cloud, it allows for the storage of confidential information locally, enhancing data security and avoiding resource contention; compared to private cloud, it offers faster service response, easier scaling, and lower costs. In this context, enterprises need better planning for the use and allocation of internal resources, especially storage resources. A good storage solution can ensure both data security and fast data retrieval.

[0004] Research has found that 80% of existing user data query requests are repetitive, and 20% are minor queries. However, each time a user queries data in the hybrid cloud, the query command and user permissions need to be analyzed in order to obtain the corresponding data storage location information from the private cloud and then retrieve the data. This query method has low query efficiency, poor user experience, and the frequent data synchronization during each query consumes too many resources. Summary of the Invention

[0005] This invention provides a data query method for hybrid clouds to improve data query efficiency and user experience, while avoiding excessive resource consumption during data queries. This method is applied to a private cloud server in a hybrid cloud environment and includes:

[0006] When the public cloud server fails to obtain the storage location information of the data queried by the user's query command in the private cloud from the public cloud, it receives the user query command and user identity identifier provided by the public cloud server.

[0007] Determine the user's query permissions based on the user's query instructions and user identification.

[0008] Based on the user's query permission information, obtain the storage location information of the queried data in the private cloud;

[0009] The system sends the storage location information of the queried data in the private cloud to the public cloud server, so that the public cloud server can store the user's query command and the storage location information of the queried data in the private cloud in the public cloud.

[0010] This invention provides a database query method for hybrid clouds to improve data query efficiency and user experience, while avoiding excessive resource consumption during data queries. This method is applied to public cloud servers in a hybrid cloud environment and includes:

[0011] When a user login is detected, the user's login information is obtained; the user's login information includes the user's identity identifier;

[0012] Based on the user identity identifier, update the storage data of the user identity identifier in the public cloud; the storage data includes multiple user query commands and the storage location information of the data queried by each user query command in the private cloud;

[0013] Receive user query commands; based on the user query commands, retrieve the storage location information of the data queried by the user query commands in the private cloud from the stored data;

[0014] If the storage location information of the data queried by the user's query command in the private cloud is not obtained from the public cloud, the user's query command and user identity identifier are forwarded to the private cloud server. This allows the private cloud server to determine the user's query permission information based on the user's query command and user identity identifier. Based on the user's query permission information, the server obtains the storage location information of the queried data in the private cloud. Finally, the server sends the storage location information of the queried data in the private cloud to the public cloud server.

[0015] Receive information from the private cloud server regarding the storage location of the queried data in the private cloud;

[0016] The public cloud stores the user's query commands and the storage location information of the queried data in the private cloud.

[0017] This invention provides a data query device for hybrid clouds to improve data query efficiency and enhance user experience, while avoiding excessive resource consumption during data queries. The device is applied to a private cloud server in a hybrid cloud environment and includes:

[0018] The receiving module is used to receive the user query instruction and user identity identifier provided by the public cloud server when the public cloud server has not obtained the storage location information of the data queried by the user query instruction in the private cloud from the public cloud.

[0019] The permission determination module is used to determine the user's query permission information based on the user's query command and user identity identifier;

[0020] The data acquisition module is used to obtain the storage location information of the queried data in the private cloud based on the user's query permission information;

[0021] The sending module is used to send the storage location information of the queried data in the private cloud to the public cloud server, so that the public cloud server can store the user's query command and the storage location information of the queried data in the private cloud in the public cloud.

[0022] This invention provides a data query device for hybrid clouds to improve data query efficiency and enhance user experience, while avoiding excessive resource consumption during data queries. The device is applied to a public cloud server in a hybrid cloud environment and includes:

[0023] The monitoring module is used to obtain the user's login information when a user login is detected; the user's login information includes the user's identity identifier.

[0024] The update module is used to update the user identity identifier's storage data in the public cloud based on the user identity identifier; the storage data includes multiple user query commands and the storage location information of the data queried by each user query command in the private cloud;

[0025] The query module is used to receive user query commands and, based on the user query commands, retrieve the storage location information of the data queried by the user query commands in the private cloud from the stored data.

[0026] The sending module is used to forward the user's query command and user identification to the private cloud server when the storage location information of the data queried by the user's query command in the private cloud is not obtained from the public cloud. This allows the private cloud server to determine the user's query permission information based on the user's query command and user identification; obtain the storage location information of the queried data in the private cloud based on the user's query permission information; and send the storage location information of the queried data in the private cloud to the public cloud server.

[0027] The receiving module is used to receive the storage location information of the queried data in the private cloud sent by the private cloud server.

[0028] The storage module is used to store user query commands and the storage location information of the queried data in the private cloud in the public cloud.

[0029] This invention also provides a computer device, including a memory, a processor, and a computer program stored in the memory and executable on the processor. When the processor executes the computer program, it implements the above-described data query method for hybrid clouds.

[0030] This invention also provides a computer-readable storage medium storing a computer program that, when executed by a processor, implements the above-described hybrid cloud data query method.

[0031] This invention also provides a computer program product, which includes a computer program that, when executed by a processor, implements the above-described hybrid cloud data query method.

[0032] In this embodiment of the invention, when the public cloud server fails to obtain the storage location information of the data queried by the user's query instruction in the private cloud from the public cloud, it receives the user query instruction and user identity identifier provided by the public cloud server; determines the user's query permission information based on the user query instruction and user identity identifier; obtains the storage location information of the queried data in the private cloud based on the user's query permission information; and sends the storage location information of the queried data in the private cloud to the public cloud server, so that the public cloud server stores the user query instruction and the storage location information of the queried data in the private cloud in the public cloud. Compared to existing hybrid cloud data query solutions, this approach first retrieves the storage location information of the data queried by the user's query command in the private cloud from the public cloud. If this information is not found, the public cloud server sends the user's query command and user identification to the private cloud server to obtain the storage location information of the queried data in the private cloud. Simultaneously, the private cloud server sends the storage location information of the queried data in the private cloud back to the public cloud server for storage. This allows users to directly retrieve the storage location information of the queried data in the private cloud the next time they query the same data, thereby improving the data query efficiency of hybrid cloud and enhancing the user experience.

[0033] In this embodiment of the invention, upon detecting a user login, the user's login information is obtained; the user's login information includes a user identity identifier; based on the user identity identifier, the storage data of the user identity identifier in the public cloud is updated; the storage data includes multiple user query instructions and the storage location information of the data queried by each user query instruction in the private cloud; the user's input query instruction is received; based on the user's input query instruction, the storage location information of the data queried by the user's input query instruction in the private cloud is obtained from the storage data; if the storage location information of the data queried by the user's input query instruction in the private cloud is not obtained from the public cloud, the user's input query instruction and user identity identifier are forwarded to the private cloud server; so that the private cloud server determines the user's query permission information based on the user's query instruction and user identity identifier; based on the user's query permission information, the storage location information of the queried data in the private cloud is obtained; the storage location information of the queried data in the private cloud is sent to the public cloud server; the storage location information of the queried data in the private cloud sent by the private cloud server is received; the user's input query instruction and the storage location information of the queried data in the private cloud are stored in the public cloud. Compared to existing hybrid cloud data query solutions, this approach first retrieves the storage location information of the data queried by the user's query command in the private cloud from the public cloud. If this information is not found, the public cloud server sends the user's query command and user identification to the private cloud server to obtain the storage location information. Simultaneously, the private cloud server sends this information back to the public cloud server for storage. This allows users to directly retrieve the storage location information of the queried data in the private cloud when querying the same data again, thereby improving the data query efficiency of the hybrid cloud and enhancing the user experience. Furthermore, upon detecting a user login, the corresponding stored data is updated based on the user's identification, reducing the data update frequency and avoiding frequent data synchronization for each query, thus preventing excessive resource consumption. Attached Figure Description

[0034] To more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort. In the drawings:

[0035] Figure 1 This is a flowchart illustrating a hybrid cloud data query method for a private cloud server applied to a hybrid cloud, as provided in an embodiment of the present invention.

[0036] Figure 2This is a flowchart illustrating a hybrid cloud data query method for a public cloud server applied to a hybrid cloud, as provided in an embodiment of the present invention.

[0037] Figure 3 This is an architecture diagram of the hybrid cloud system provided in the embodiments of the present invention;

[0038] Figure 4 This is a flowchart illustrating a data query method for a private cloud server provided in an embodiment of the present invention;

[0039] Figure 5 This is a schematic diagram of a hybrid cloud data query device for a private cloud server applied to a hybrid cloud, provided in an embodiment of the present invention.

[0040] Figure 6 This is a schematic diagram of a hybrid cloud data query device for a public cloud server applied to a hybrid cloud, provided in an embodiment of the present invention.

[0041] Figure 7 This is a schematic diagram of a computer device provided in an embodiment of the present invention. Detailed Implementation

[0042] To make the objectives, technical solutions, and advantages of the embodiments of the present invention clearer, the embodiments of the present invention will be further described in detail below with reference to the accompanying drawings. Here, the illustrative embodiments of the present invention and their descriptions are used to explain the present invention, but are not intended to limit the present invention.

[0043] In the description of this specification, the terms "comprising," "including," "having," and "containing" are open-ended terms, meaning that they include but are not limited to. The terms "an embodiment," "a specific embodiment," "some embodiments," and "for example," etc., refer to specific features, structures, or characteristics described in connection with that embodiment or example that are included in at least one embodiment or example of this application. In this specification, the illustrative expressions of the above terms do not necessarily refer to the same embodiment or example. Furthermore, the specific features, structures, or characteristics described can be combined in any suitable manner in one or more embodiments or examples. The order of steps involved in the various embodiments is used to illustrate the implementation of this application, and the order of steps is not limited and can be adjusted appropriately as needed.

[0044] Currently, compared to public clouds, hybrid clouds allow for the storage of confidential information locally, resulting in higher data security and avoiding resource contention. Compared to private clouds, they offer faster service response, easier scalability, and lower costs. In this context, enterprises need better planning for the use and allocation of internal resources, especially storage resources. A good storage solution can guarantee both data security and fast data retrieval.

[0045] Research has revealed that 80% of existing user data query requests are repetitive, while 20% are minor queries. However, existing hybrid cloud data query methods require analysis of query commands and user permissions for repetitive queries, resulting in low query efficiency, poor user experience, and excessive resource consumption due to frequent data synchronization during each query.

[0046] In response to the above research, this invention provides a hybrid cloud data query solution that can quickly meet 80% of data query needs, improve the data query efficiency of hybrid cloud, enhance user experience, and at the same time avoid excessive resource consumption during data query, thereby improving system performance.

[0047] In this embodiment of the invention, the hybrid cloud includes a private cloud and a public cloud, with data categorized and stored in databases in different locations according to the data confidentiality level. Furthermore, the private cloud also implements strict permission classification for users, with each user having access to different databases to read and update, and permission redundancy is performed periodically to ensure database security and reasonable permission configuration.

[0048] The hybrid cloud data query method provided in this embodiment of the invention can be executed using a private cloud server and a public cloud server of the hybrid cloud, respectively.

[0049] like Figure 1 The diagram shows a flowchart of a hybrid cloud data query method for a private cloud server applied to a hybrid cloud, provided by an embodiment of the present invention. The method may include the following steps:

[0050] Step 101: When the public cloud server fails to obtain the storage location information of the data queried by the user query command in the private cloud from the public cloud, it receives the user query command and user identity identifier provided by the public cloud server.

[0051] Step 102: Determine the user's query permission information based on the user's query instruction and user identity identifier;

[0052] Step 103: Based on the user's query permission information, obtain the storage location information of the queried data in the private cloud;

[0053] Step 104: Send the storage location information of the queried data in the private cloud to the public cloud server; so that the public cloud server stores the user's query command and the storage location information of the queried data in the private cloud in the public cloud.

[0054] In this embodiment of the invention, when the public cloud server fails to obtain the storage location information of the data queried by the user's query instruction in the private cloud from the public cloud, it receives the user query instruction and user identity identifier provided by the public cloud server; determines the user's query permission information based on the user query instruction and user identity identifier; obtains the storage location information of the queried data in the private cloud based on the user's query permission information; and sends the storage location information of the queried data in the private cloud to the public cloud server, so that the public cloud server stores the user query instruction and the storage location information of the queried data in the private cloud in the public cloud. Compared to existing hybrid cloud data query solutions, this approach first retrieves the storage location information of the data queried by the user's query command in the private cloud from the public cloud. If this information is not found, the public cloud server sends the user's query command and user identification to the private cloud server to obtain the storage location information of the queried data in the private cloud. Simultaneously, the private cloud server sends the storage location information of the queried data in the private cloud back to the public cloud server for storage. This allows users to directly retrieve the storage location information of the queried data in the private cloud the next time they query the same data, thereby improving the data query efficiency of hybrid cloud and enhancing the user experience.

[0055] In this embodiment of the invention, the query permission information may include either permission granted or permission denied.

[0056] Step 103 above may specifically include:

[0057] If the query permission information indicates that the user has the necessary permissions, retrieve the storage location information of the queried data in the private cloud.

[0058] In this embodiment of the invention, in order to further improve the accuracy and efficiency of the query, it may also include: parsing the user's query instruction when the query permission information is that there is no permission;

[0059] Step 102 above may also include:

[0060] Based on the user's identity identifier and the parsed user query command, determine the user's query permission information.

[0061] In this embodiment of the invention, after determining the user's query permission information based on the user's identity identifier and the parsed user query instruction, the method may further include:

[0062] If the user has the necessary permissions, the parsed user query command and the storage location information of the data queried by the parsed user query command in the private cloud will be sent to the public cloud server, so that the public cloud server can store the parsed user query command and the storage location information of the data queried by the parsed user query command in the private cloud in the public cloud.

[0063] In this embodiment of the invention, after determining the user's query permission information based on the user's identity identifier and the parsed user query instruction, the method may further include:

[0064] If the query permission information indicates that the user has no permission, a message indicating that the user has no permission to query will be sent to the public cloud server. This will enable the public cloud server to interpret the user's query command and the message indicating that the user has no permission to query in the public cloud storage.

[0065] like Figure 2 The diagram shows a flowchart of a data query method for a public cloud server in a hybrid cloud environment, provided by an embodiment of the present invention. This method may include the following steps:

[0066] Step 201: When a user login is detected, obtain the user's login information; the user's login information includes the user's identity identifier;

[0067] Step 202: Update the storage data of the user identity identifier in the public cloud according to the user identity identifier; the storage data includes multiple user query instructions and the storage location information of the data queried by each user query instruction in the private cloud;

[0068] Step 203: Receive the user query command input by the user; Based on the user query command input by the user, retrieve the storage location information of the data queried by the user query command in the private cloud from the stored data;

[0069] Step 204: If the storage location information of the data queried by the user's query instruction in the private cloud is not obtained from the public cloud, the user's query instruction and user identity identifier are forwarded to the private cloud server; so that the private cloud server can determine the user's query permission information based on the user's query instruction and user identity identifier; obtain the storage location information of the queried data in the private cloud based on the user's query permission information; and send the storage location information of the queried data in the private cloud to the public cloud server.

[0070] Step 205: Receive the storage location information of the queried data in the private cloud sent by the private cloud server;

[0071] Step 206: Store the user's query command and the storage location information of the queried data in the private cloud on the public cloud.

[0072] In this embodiment of the invention, upon detecting a user login, the user's login information is obtained; the user's login information includes a user identity identifier; based on the user identity identifier, the storage data of the user identity identifier in the public cloud is updated; the storage data includes multiple user query instructions and the storage location information of the data queried by each user query instruction in the private cloud; the user's input query instruction is received; based on the user's input query instruction, the storage location information of the data queried by the user's input query instruction in the private cloud is obtained from the storage data; if the storage location information of the data queried by the user's input query instruction in the private cloud is not obtained from the public cloud, the user's input query instruction and user identity identifier are forwarded to the private cloud server; so that the private cloud server determines the user's query permission information based on the user's query instruction and user identity identifier; based on the user's query permission information, the storage location information of the queried data in the private cloud is obtained; the storage location information of the queried data in the private cloud is sent to the public cloud server; the storage location information of the queried data in the private cloud sent by the private cloud server is received; the user's input query instruction and the storage location information of the queried data in the private cloud are stored in the public cloud. Compared to existing hybrid cloud data query solutions, this approach first retrieves the storage location information of the data queried by the user's query command in the private cloud from the public cloud. If this information is not found, the public cloud server sends the user's query command and user identification to the private cloud server to obtain the storage location information. Simultaneously, the private cloud server sends this information back to the public cloud server for storage. This allows users to directly retrieve the storage location information of the queried data in the private cloud when querying the same data again, thereby improving the data query efficiency of the hybrid cloud and enhancing the user experience. Furthermore, upon detecting a user login, the corresponding stored data is updated based on the user's identification, reducing the data update frequency and avoiding frequent data synchronization for each query, thus preventing excessive resource consumption.

[0073] In this embodiment of the invention, if the private cloud server determines that the user has no permission to query, it may further include:

[0074] It receives the parsed user query command and the storage location information of the data queried by the parsed user query command in the private cloud sent by the private cloud server. The parsed user query command is obtained by the private cloud server after parsing the user query command when the user's query permission information is not valid.

[0075] The parsed user query command and the storage location information of the data queried by the parsed user query command in the private cloud.

[0076] In this embodiment of the invention, it may further include:

[0077] If the private cloud server determines that the user's query permission information is still not authorized based on the user's identity and the parsed user query command, the user will receive a message from the private cloud server indicating that the user has no permission to query.

[0078] The user's query command and the message indicating that the user does not have permission to query are parsed in the public cloud storage.

[0079] The following is about Figure 1 and Figure 2 The data query method for hybrid clouds is explained in detail.

[0080] In this embodiment of the invention, the private cloud server receives the user query instruction and user identity identifier provided by the public cloud server when the public cloud server fails to obtain the storage location information of the data queried by the user query instruction in the private cloud from the public cloud.

[0081] It should be noted that public clouds can store data that users frequently query and that can be made public to users. On a public cloud, each user identity (user ID) corresponds to a storage area. The data stored in this storage area can be multiple user query commands and the storage location information of the data queried by each user query command in the private cloud. In other words, the stored data can be the historical query data of the user corresponding to the user identity.

[0082] In practice, when a public cloud server detects a user login, it obtains the user's login information, which may include the user's identity identifier. Then, the public cloud server automatically updates the user's identity identifier stored in the public cloud based on the user's identity identifier.

[0083] After a user enters a query command, the public cloud server retrieves the storage location information of the data queried by the user's query command in the private cloud from the stored data. If the storage location information of the data queried by the user's query command in the private cloud cannot be obtained from the public cloud, the public cloud server forwards the user's query command and user identity to the private cloud server.

[0084] In this embodiment of the invention, after receiving the user query instruction and user identity identifier provided by the public cloud server, the private cloud server determines the user's query permission information based on the user query instruction and user identity identifier.

[0085] In practice, the private cloud server pre-stores configured user permission information, which includes the range of databases a user can read. The private cloud server can determine whether a user has the necessary database permissions to query the data requested by the user's query command based on the user's identity and the query command itself. Query permission information can include either "permitted" or "not permitted."

[0086] In this embodiment of the invention, when the query permission information indicates that the user has permission, the private cloud server obtains the storage location information of the data queried by the user's query instruction in the private cloud; and encrypts the storage location information of the queried data in the private cloud before sending it to the public cloud server; the public cloud server stores the user's query instruction and the storage location information of the queried data in the private cloud in the public cloud.

[0087] In this embodiment of the invention, when the query permission information indicates no permission, considering the possibility of inaccurate user query input, the private cloud server can further parse the user query command. Based on the parsed user query command and user identity identifier, the user's query permission information is re-determined. If the re-determined user query permission information indicates permission is granted, the storage location information of the data queried by the parsed user query command in the private cloud is obtained. The parsed user query command and the storage location information of the data queried by the parsed user query command in the private cloud are then encrypted and sent to the public cloud server. The public cloud server stores the parsed user query command and the storage location information of the data queried by the parsed user query command in the public cloud.

[0088] In this embodiment of the invention, if the re-determined user's query permission information is still "no permission", the private cloud server sends a "no permission to query" prompt message to the public cloud server; the public cloud server stores the parsed user query command and the "no permission to query" prompt message in the public cloud storage.

[0089] In this embodiment of the invention, the parsed user query command stored in the public cloud and the storage location information of the data queried by the parsed user query command in the private cloud can be understood as records of cross-level queries. It is necessary to periodically review the reasonableness of cross-level query records and re-examine user permissions to ensure data security.

[0090] To better understand the hybrid cloud data query method provided in the embodiments of the present invention, Figure 3 This is an architecture diagram of a hybrid cloud system provided in an embodiment of the present invention. The hybrid cloud includes multiple private cloud servers and public cloud servers. For example... Figure 3 As shown:

[0091] A user action monitoring module is set up in the public cloud server: This module monitors user login status. When a user logs in with a user ID, it will automatically update the user data in the data storage module of the public cloud based on the data storage location and query conditions returned by the private cloud.

[0092] The public cloud server has a data storage module: this module is mainly used to store the user's query conditions and the data location of the data queried by the query conditions in the private cloud storage.

[0093] Each private cloud server is equipped with a user permission management module. The main functions of this module include: user permission management, configuring the database range that each user can read; and user permission verification, which requires user permission verification for requests that exceed the user's access level.

[0094] Each private cloud server is equipped with a query condition parsing module: after user permission verification, if the user's permission verification result is no permission, the module can parse the user's query statement and replace the user's query instruction with a query instruction from a user with higher permissions to perform a database query.

[0095] Each private cloud server is equipped with a data storage module: this module is mainly used to store all the data in the system. This data is subject to strict access control. Users on the public cloud cannot query or update it. Querying and updating require permission review and application.

[0096] It should be noted that the public cloud server does not perform real-time data synchronization in the database. That is, when the private cloud server sends the storage location information of the queried data in the private cloud (or the parsed user query command and the storage location information of the data queried by the parsed user query command in the private cloud, or the parsed user query command and the message indicating that the user does not have permission to query) to the public cloud server for storage, the public cloud server sends an update database signal to the database when the user action monitoring module detects that the user has logged in (i.e., when the user has a query request). The database then updates the user information (data address, query conditions) in the database according to the storage location and query conditions sent by the private cloud server.

[0097] This reduces the frequency of data updates, avoiding excessive resource consumption and data redundancy caused by frequent data synchronization.

[0098] Figure 4 A flowchart illustrating a data query method for a private cloud server provided in an embodiment of the present invention. Figure 4 Based on Figure 3 This is implemented using a private cloud server, as shown. The specific steps are as follows:

[0099] 1. Send query criteria and user ID to the public cloud;

[0100] 2. The user permission management module of the private cloud server determines whether the user has query permissions based on the query conditions and user ID;

[0101] 3. If you have the necessary permissions, you can directly query the database to obtain the location information of the data queried based on the query criteria in the private cloud and return it to the public cloud;

[0102] 4. If permissions are not granted, the query condition parsing module will parse the query conditions and encrypt the parsed query conditions before returning them to the public cloud.

[0103] 5. Based on the parsed query conditions, continue querying the database to obtain the location information of the data queried by the parsed query conditions in the private cloud, and return it to the public cloud;

[0104] 6. After the query conditions are parsed by the query condition parsing module, a cross-level query report corresponding to the query conditions is generated and re-checked periodically.

[0105] Thus, the above-mentioned hybrid cloud data query method first ensures data security by storing information through database sharding; secondly, it encrypts newly added query data in the public cloud, which not only ensures security but also allows for rapid updates when needed by users; moreover, it avoids real-time synchronization of data in the public cloud database, but prepares the database and updates data when the user logs in, thus avoiding frequent data synchronization, thereby avoiding excessive resource consumption and reducing data redundancy.

[0106] The acquisition, storage, use, and processing of data in the technical solution of this invention all comply with the relevant provisions of national laws and regulations.

[0107] This invention also provides a hybrid cloud data query device for a private cloud server in a hybrid cloud environment, as described in the following embodiments. Since the principle by which this device solves the problem is similar to the hybrid cloud data query method for a private cloud server in a hybrid cloud environment, the implementation of this device can refer to the implementation of the hybrid cloud data query method for a private cloud server in a hybrid cloud environment; repeated details will not be elaborated further.

[0108] like Figure 5 The diagram shown is a schematic of a hybrid cloud data query device for a private cloud server applied to a hybrid cloud, according to an embodiment of the present invention. The device may include:

[0109] The receiving module 501 is used to receive the user query instruction and user identity identifier provided by the public cloud server when the public cloud server fails to obtain the storage location information of the data queried by the user query instruction in the private cloud from the public cloud.

[0110] The permission determination module 502 is used to determine the user's query permission information based on the user's query command and user identity identifier;

[0111] The data acquisition module 503 is used to obtain the storage location information of the queried data in the private cloud based on the user's query permission information;

[0112] The sending module 504 is used to send the storage location information of the queried data in the private cloud to the public cloud server, so that the public cloud server stores the user query command and the storage location information of the queried data in the private cloud in the public cloud.

[0113] In this embodiment of the invention, the query permission information may include whether the user has permission or not.

[0114] The data acquisition module can be used specifically for:

[0115] If the query permission information indicates that the user has the necessary permissions, retrieve the storage location information of the queried data in the private cloud.

[0116] In this embodiment of the invention, a parsing module is also included, which can be used for:

[0117] If the user has no permission to query, the query command will be parsed.

[0118] The permission determination module can also be used for:

[0119] Based on the user's identity identifier and the parsed user query command, determine the user's query permission information.

[0120] In this embodiment of the invention, the sending module can also be used after the permission determination module determines the user's query permission information based on the user's identity identifier and the parsed user query instruction:

[0121] If the user has the necessary permissions, the parsed user query command and the storage location information of the data queried by the parsed user query command in the private cloud will be sent to the public cloud server, so that the public cloud server can store the parsed user query command and the storage location information of the data queried by the parsed user query command in the private cloud in the public cloud.

[0122] In this embodiment of the invention, the sending module can also be used after the permission determination module determines the user's query permission information based on the user's identity identifier and the parsed user query instruction:

[0123] If the query permission information indicates that the user has no permission, a message indicating that the user has no permission to query will be sent to the public cloud server. The public cloud storage will then parse the user's query command and the message indicating that the user has no permission to query.

[0124] This invention also provides a hybrid cloud data query device for a public cloud server in a hybrid cloud environment, as described in the following embodiments. Since the principle by which this device solves the problem is similar to the hybrid cloud data query method for a public cloud server in a hybrid cloud environment, the implementation of this device can refer to the implementation of the hybrid cloud data query method for a public cloud server in a hybrid cloud environment, and will not be repeated here.

[0125] like Figure 6 The diagram shown is a schematic of a hybrid cloud data query device for a public cloud server applied to a hybrid cloud, according to an embodiment of the present invention. The device may include:

[0126] The listening module 601 is used to obtain the user's login information when a user login is detected; the user's login information includes the user's identity identifier.

[0127] The update module 602 is used to update the storage data of the user identity identifier in the public cloud according to the user identity identifier; the storage data includes multiple user query instructions and the storage location information of the data queried by each user query instruction in the private cloud;

[0128] The query module 603 is used to receive user query instructions input by the user; and to obtain the storage location information of the data queried by the user query instructions in the private cloud from the stored data according to the user query instructions input by the user.

[0129] The sending module 604 is used to forward the user's query instruction and user identification to the private cloud server when the storage location information of the data queried by the user's query instruction in the private cloud is not obtained from the public cloud; so that the private cloud server can determine the user's query permission information based on the user's query instruction and user identification; obtain the storage location information of the queried data in the private cloud based on the user's query permission information; and send the storage location information of the queried data in the private cloud to the public cloud server.

[0130] The receiving module 605 is used to receive the storage location information of the queried data in the private cloud sent by the private cloud server.

[0131] Storage module 606 is used to store user query commands and the storage location information of the queried data in the private cloud in the public cloud.

[0132] In this embodiment of the invention, the receiving module can also be used for:

[0133] It receives the parsed user query command and the storage location information of the data queried by the parsed user query command in the private cloud sent by the private cloud server. The parsed user query command is obtained by the private cloud server after parsing the user query command when the user's query permission information is not valid.

[0134] The storage module can also be used to store the parsed user query commands in the public cloud and the storage location information of the data queried by the parsed user query commands in the private cloud.

[0135] In this embodiment of the invention, the receiving module can also be used for:

[0136] If the private cloud server determines that the user's query permission information is still not authorized based on the user's identity and the parsed user query command, the user will receive a message from the private cloud server indicating that the user has no permission to query.

[0137] The storage module is also used for: parsing user query commands and prompts indicating that the user does not have permission to query in the public cloud storage.

[0138] This invention also provides a computer device, such as... Figure 7 The diagram shown is a schematic of a computer device in an embodiment of the present invention. The computer device 700 includes a memory 710, a processor 720, and a computer program 730 stored in the memory 710 and executable on the processor 720. When the processor 720 executes the computer program 730, it implements the above-mentioned data query method for hybrid cloud.

[0139] This invention also provides a computer-readable storage medium storing a computer program that, when executed by a processor, implements the above-described hybrid cloud data query method.

[0140] This invention also provides a computer program product, which includes a computer program that, when executed by a processor, implements the above-described hybrid cloud data query method.

[0141] In this embodiment of the invention, when the public cloud server fails to obtain the storage location information of the data queried by the user's query instruction in the private cloud from the public cloud, it receives the user query instruction and user identity identifier provided by the public cloud server; determines the user's query permission information based on the user query instruction and user identity identifier; obtains the storage location information of the queried data in the private cloud based on the user's query permission information; and sends the storage location information of the queried data in the private cloud to the public cloud server, so that the public cloud server stores the user query instruction and the storage location information of the queried data in the private cloud in the public cloud. Compared to existing hybrid cloud data query solutions, this approach first retrieves the storage location information of the data queried by the user's query command in the private cloud from the public cloud. If this information is not found, the public cloud server sends the user's query command and user identification to the private cloud server to obtain the storage location information of the queried data in the private cloud. Simultaneously, the private cloud server sends the storage location information of the queried data in the private cloud back to the public cloud server for storage. This allows users to directly retrieve the storage location information of the queried data in the private cloud the next time they query the same data, thereby improving the data query efficiency of hybrid cloud and enhancing the user experience.

[0142] In this embodiment of the invention, upon detecting a user login, the user's login information is obtained; the user's login information includes a user identity identifier; based on the user identity identifier, the storage data of the user identity identifier in the public cloud is updated; the storage data includes multiple user query instructions and the storage location information of the data queried by each user query instruction in the private cloud; the user's input query instruction is received; based on the user's input query instruction, the storage location information of the data queried by the user's input query instruction in the private cloud is obtained from the storage data; if the storage location information of the data queried by the user's input query instruction in the private cloud is not obtained from the public cloud, the user's input query instruction and user identity identifier are forwarded to the private cloud server; so that the private cloud server determines the user's query permission information based on the user's query instruction and user identity identifier; based on the user's query permission information, the storage location information of the queried data in the private cloud is obtained; the storage location information of the queried data in the private cloud is sent to the public cloud server; the storage location information of the queried data in the private cloud sent by the private cloud server is received; the user's input query instruction and the storage location information of the queried data in the private cloud are stored in the public cloud. Compared to existing hybrid cloud data query solutions, this approach first retrieves the storage location information of the data queried by the user's query command in the private cloud from the public cloud. If this information is not found, the public cloud server sends the user's query command and user identification to the private cloud server to obtain the storage location information. Simultaneously, the private cloud server sends this information back to the public cloud server for storage. This allows users to directly retrieve the storage location information of the queried data in the private cloud when querying the same data again, thereby improving the data query efficiency of the hybrid cloud and enhancing the user experience. Furthermore, upon detecting a user login, the corresponding stored data is updated based on the user's identification, reducing the data update frequency and avoiding frequent data synchronization for each query, thus preventing excessive resource consumption.

[0143] Those skilled in the art will understand that embodiments of the present invention can be provided as methods, systems, or computer program products. Therefore, the present invention can take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present invention can take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0144] This invention is described with reference to flowchart illustrations and / or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the invention. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, generate instructions for implementing the flowchart illustrations and / or block diagrams. Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.

[0145] These computer program instructions may also be stored in a computer-readable storage medium that can direct a computer or other programmable data processing device to function in a particular manner, such that the instructions stored in the computer-readable storage medium produce an article of manufacture including instruction means, which are implemented in a process Figure 1 One or more processes and / or boxes Figure 1 The function specified in one or more boxes.

[0146] These computer program instructions may also be loaded onto a computer or other programmable data processing equipment to cause a series of operational steps to be performed on the computer or other programmable equipment to produce a computer-implemented process, thereby providing instructions that execute on the computer or other programmable equipment for implementing the process. Figure 1 One or more processes and / or boxes Figure 1 The steps of the function specified in one or more boxes.

[0147] The specific embodiments described above further illustrate the purpose, technical solution, and beneficial effects of the present invention. It should be understood that the above descriptions are merely specific embodiments of the present invention and are not intended to limit the scope of protection of the present invention. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of the present invention should be included within the scope of protection of the present invention.

Claims

1. A hybrid cloud data query method, characterized in that, Private cloud servers used in hybrid cloud environments include: When the public cloud server fails to obtain the storage location information of the data queried by the user's query command in the private cloud from the public cloud, it receives the user query command and user identity identifier provided by the public cloud server. Determine the user's query permissions based on the user's query instructions and user identification. Based on the user's query permission information, obtain the storage location information of the queried data in the private cloud; Send the storage location information of the queried data in the private cloud to the public cloud server; so that the public cloud server stores the user's query command and the storage location information of the queried data in the private cloud in the public cloud; The query permission information includes whether the user has permission or not. Based on the user's query permission information, obtain the storage location information of the queried data in the private cloud, including: if the query permission information is that the user has permission, obtain the storage location information of the queried data in the private cloud. This also includes: parsing user query commands when the query permission information indicates that the user does not have permission; Determining a user's query permission information based on the user's query instruction and user identification also includes: determining a user's query permission information based on the user's identification and the parsed user query instruction; After determining the user's query permission information based on the user's identity identifier and the parsed user query instruction, the process also includes: if the query permission information indicates that the user has permission, sending the parsed user query instruction and the storage location information of the data queried by the parsed user query instruction in the private cloud to the public cloud server, so that the public cloud server stores the parsed user query instruction and the storage location information of the data queried by the parsed user query instruction in the private cloud in the public cloud. After determining the user's query permission information based on the user's identity and the parsed user query instruction, the process also includes: sending a "no permission to query" message to the public cloud server if the query permission information indicates no permission; and storing the parsed user query instruction and the "no permission to query" message in the public cloud.

2. A hybrid cloud data query method, characterized in that, Public cloud servers used in hybrid cloud environments include: When a user login is detected, the user's login information is obtained; the user's login information includes the user's identity identifier; Based on the user identity identifier, update the storage data of the user identity identifier in the public cloud; the storage data includes multiple user query commands and the storage location information of the data queried by each user query command in the private cloud; Receive user query commands; based on the user query commands, retrieve the storage location information of the data queried by the user query commands in the private cloud from the stored data; If the storage location information of the data queried by the user's query command in the private cloud is not obtained from the public cloud, the user's query command and user identity identifier are forwarded to the private cloud server. This allows the private cloud server to determine the user's query permission information based on the user's query command and user identity identifier. Based on the user's query permission information, the server obtains the storage location information of the queried data in the private cloud. Finally, the server sends the storage location information of the queried data in the private cloud to the public cloud server. Receive information from the private cloud server regarding the storage location of the queried data in the private cloud; The public cloud stores the user's query commands and the storage location information of the queried data in the private cloud; It also includes: receiving the parsed user query command sent by the private cloud server and the storage location information of the data queried by the parsed user query command in the private cloud. The parsed user query command is obtained by the private cloud server after parsing the user query command when the user's query permission information is not authorized. Information on the storage location of the parsed user query command in the public cloud and the data queried by the parsed user query command in the private cloud; If the private cloud server determines that the user's query permission information is still not authorized based on the user's identity and the parsed user query command, the user will receive a message from the private cloud server indicating that the user has no permission to query. The user's query command and the message indicating that the user does not have permission to query are parsed in the public cloud storage. The user identity identifier stored in the public cloud is the historical query data of the user corresponding to the user identity identifier.

3. A hybrid cloud data query apparatus, comprising: Private cloud servers used in hybrid cloud environments include: The receiving module is used to receive the user query instruction and user identity identifier provided by the public cloud server when the public cloud server has not obtained the storage location information of the data queried by the user query instruction in the private cloud from the public cloud. The permission determination module is used to determine the user's query permission information based on the user's query command and user identity identifier; The data acquisition module is used to obtain the storage location information of the queried data in the private cloud based on the user's query permission information; The sending module is used to send the storage location information of the queried data in the private cloud to the public cloud server; so that the public cloud server stores the user's query command and the storage location information of the queried data in the private cloud in the public cloud. The query permission information includes whether the user has permission or not. The data acquisition module is specifically used to: obtain the storage location information of the queried data in the private cloud when the query permission information is valid; It also includes a parsing module, which is used to parse user query commands when the query permission information indicates that the user does not have permission. The permission determination module is also used to: determine the user's query permission information based on the user's identity identifier and the parsed user query instruction; The sending module is also used to, after the permission determination module determines the user's query permission information based on the user's identity and the parsed user query instruction: if the query permission information indicates that the user has permission, send the parsed user query instruction and the storage location information of the data queried by the parsed user query instruction in the private cloud to the public cloud server, so that the public cloud server stores the parsed user query instruction and the storage location information of the data queried by the parsed user query instruction in the private cloud in the public cloud.

4. A data query device for hybrid cloud, characterized in that, Public cloud servers used in hybrid cloud environments include: The monitoring module is used to obtain the user's login information when a user login is detected; the user's login information includes the user's identity identifier. The update module is used to update the user identity identifier's storage data in the public cloud based on the user identity identifier; the storage data includes multiple user query commands and the storage location information of the data queried by each user query command in the private cloud; The query module is used to receive user query commands and, based on the user query commands, retrieve the storage location information of the data queried by the user query commands in the private cloud from the stored data. The sending module is used to forward the user's query command and user identification to the private cloud server when the storage location information of the data queried by the user's query command in the private cloud is not obtained from the public cloud. This allows the private cloud server to determine the user's query permission information based on the user's query command and user identification; obtain the storage location information of the queried data in the private cloud based on the user's query permission information; and send the storage location information of the queried data in the private cloud to the public cloud server. The receiving module is used to receive the storage location information of the queried data in the private cloud sent by the private cloud server. The storage module is used to store user query commands and the storage location information of the queried data in the private cloud in the public cloud; The receiving module is also used to: receive the parsed user query command sent by the private cloud server and the storage location information of the data queried by the parsed user query command in the private cloud. The parsed user query command is obtained by the private cloud server after parsing the user query command when the user's query permission information is not authorized. The storage module is also used for: storing the parsed user query commands in the public cloud and the storage location information of the data queried by the parsed user query commands in the private cloud; The user identity identifier stored in the public cloud is the historical query data of the user corresponding to the user identity identifier.

5. A computer device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that, When the processor executes the computer program, it implements the method of any one of claims 1 to 2.

6. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores a computer program that, when executed by a processor, implements the method of any one of claims 1 to 2.

7. A computer program product, characterized in that, The computer program product includes a computer program that, when executed by a processor, implements the method of any one of claims 1 to 2.

Images