An inter-cluster calling method and device, computer equipment and storage medium

Abstract

The application relates to an inter-cluster calling method and device, computer equipment and a storage medium. The method comprises the following steps: obtaining basic information of a first cluster and authorization verification information of the first cluster, and uploading the basic information of the first cluster and the authorization verification information of the first cluster to a block chain; in response to operation of the first cluster being called by a second cluster, obtaining identity information of the second cluster and identity identification information of the first cluster; according to the identity identification information of the first cluster, querying the identity information of the first cluster on the block chain and calling the authorization verification information of the first cluster; in the case that the identity information of the second cluster is contained in the authorization verification information, transmitting the authorization information of the first cluster to an on-chain node of the block chain of the second cluster, and calling data information of the first cluster through the authorization information. The method can improve the calling efficiency of multiple clusters.

Description

Technical Field

[0001] This application relates to the field of cluster management technology, and in particular to a multi-cluster management method, apparatus, computer equipment, and storage medium. Background Technology

[0002] Kubernetes (abbreviated as k8s, an abbreviation of "ubernete" using 8 instead of 8 characters) is an open-source application used to manage containerized applications across multiple hosts in a cloud platform. While Kubernetes allows for simple and efficient deployment of containers, its cluster management is complex, especially since deployment requires extensive pre-installation and pre-configuration of the operating system and software, demanding a high level of technical expertise from cluster administrators.

[0003] Traditional inter-cluster calls are achieved by breaking down Kubernetes cluster permissions into a set number of permissions, assigning permissions and permission nodes according to cluster roles, and generating a directed acyclic graph (DAG) of permissions on the server side using a parser. The call controller then distributes the permissions in the DAG to the corresponding clusters on the client side, thus completing the inter-cluster call. However, this existing technology includes a centralized control plane service program, which is not decentralized, increasing the complexity of the entire system and resulting in poor efficiency for multi-cluster calls. Summary of the Invention

[0004] Therefore, it is necessary to provide a method, apparatus, computer device, computer-readable storage medium, and computer program product for inter-cluster invocation in response to the above-mentioned technical problems.

[0005] Firstly, this application provides a method for inter-cluster invocation. The method includes:

[0006] Obtain basic information of the first cluster and authorization verification information of the first cluster, and upload the basic information of the first cluster and authorization verification information of the first cluster to the blockchain; the authorization verification information is the identity information of the cluster authorized to be accessed by the first cluster, and the data information includes identity information and authorization information;

[0007] In response to the second cluster calling the first cluster, the system obtains the identity information of the second cluster and the identity recognition information of the first cluster.

[0008] Based on the identity recognition information of the first cluster, query the identity information of the first cluster on the blockchain and retrieve the authorization verification information of the first cluster;

[0009] If the authorization verification information includes the identity information of the second cluster, the authorization information of the first cluster is transmitted to the on-chain node of the blockchain of the second cluster, and the data information of the first cluster is retrieved through the authorization information.

[0010] Optionally, obtaining the authorization verification information of the first cluster includes:

[0011] In response to user authorization, obtain the identity information of the clusters that are calling each other;

[0012] In the first cluster, the identity information of the mutually calling clusters, in addition to the identity information of the first cluster, is stored. The program calls the program through the authorization information to retrieve the identity information of each mutually calling cluster in the first cluster as the authorization verification information of the first cluster.

[0013] Optionally, uploading the basic information of the first cluster and the authorization verification information of the first cluster to the blockchain includes:

[0014] On the blockchain, based on the identity information of the first cluster, on-chain nodes of the first cluster are registered, and based on the on-chain nodes, the authorization information and authorization verification information of the first cluster are uploaded to the blockchain.

[0015] Optionally, the step of querying the identity information of the first cluster on the blockchain and retrieving the authorization verification information of the first cluster based on the identity identification information of the first cluster includes:

[0016] Based on the identity information of the first cluster, query the identity information of the first cluster that corresponds to the identity information of the first cluster from the identity information of each cluster on the blockchain;

[0017] Based on the identity information of the first cluster, the authorization verification information of the first cluster is retrieved on the chain node of the first cluster.

[0018] Optionally, retrieving data information from the first cluster using the authorization information includes:

[0019] Based on the authorization information, the authorized call scope of the second cluster is determined, and based on the authorized call scope, the content data within the authorized call scope of the first cluster is transmitted to the second cluster.

[0020] Optionally, the method further includes:

[0021] Obtain new authorization verification information from the first cluster and upload the new authorization verification information to the blockchain to replace the original authorization verification information;

[0022] Determine whether the new authorization verification information contains the identity information of the second cluster, and if the new authorization verification information does not contain the identity information of the second cluster, delete the authorization information in the on-chain node of the second cluster on the blockchain.

[0023] Secondly, this application also provides an inter-cluster invocation device. The device includes:

[0024] The first acquisition module is used to acquire the basic information of the first cluster and the authorization verification information of the first cluster, and upload the basic information of the first cluster and the authorization verification information of the first cluster to the blockchain; the authorization verification information is the identity information of the cluster authorized to be accessed by the first cluster, and the data information includes identity information and authorization information;

[0025] The second acquisition module is used to acquire the identity information of the second cluster and the identity recognition information of the first cluster in response to the operation of the second cluster calling the first cluster.

[0026] The retrieval module is used to query the identity information of the first cluster on the blockchain based on the identity recognition information of the first cluster, and retrieve the authorization verification information of the first cluster;

[0027] The authorization module is used to transmit the authorization information of the first cluster to the on-chain node of the blockchain of the second cluster when the authorization verification information contains the identity information of the second cluster.

[0028] Optionally, the first acquisition module is specifically used for:

[0029] In response to user authorization, obtain the identity information of the clusters that are calling each other;

[0030] In the first cluster, the identity information of the mutually calling clusters, in addition to the identity information of the first cluster, is stored. The program calls the program through the authorization information to retrieve the identity information of each mutually calling cluster in the first cluster as the authorization verification information of the first cluster.

[0031] Optionally, the first acquisition module is specifically used for:

[0032] On the blockchain, based on the identity information of the first cluster, on-chain nodes of the first cluster are registered, and based on the on-chain nodes, the authorization information and authorization verification information of the first cluster are uploaded to the blockchain.

[0033] Optionally, the retrieval module is specifically used for:

[0034] Based on the identity information of the first cluster, query the identity information of the first cluster that corresponds to the identity information of the first cluster from the identity information of each cluster on the blockchain;

[0035] Based on the identity information of the first cluster, the authorization verification information of the first cluster is retrieved on the chain node of the first cluster.

[0036] Optionally, the authorization module is specifically used for:

[0037] Based on the authorization information, the authorized call scope of the second cluster is determined, and based on the authorized call scope, the content data within the authorized call scope of the first cluster is transmitted to the second cluster.

[0038] Optionally, the device further includes:

[0039] The third acquisition module is used to acquire new authorization verification information from the first cluster and upload the new authorization verification information to the blockchain to replace the original authorization verification information.

[0040] The judgment module is used to determine whether the new authorization verification information contains the identity information of the second cluster, and if the new authorization verification information does not contain the identity information of the second cluster, delete the authorization information in the on-chain node of the second cluster on the blockchain.

[0041] Thirdly, this application provides a computer device. The computer device includes a memory and a processor, the memory storing a computer program, and the processor executing the computer program to implement the steps of the method described in any one of the first aspects.

[0042] Fourthly, this application provides a computer-readable storage medium having a computer program stored thereon that, when executed by a processor, implements the steps of the method described in any one of the first aspects.

[0043] Fifthly, this application provides a computer program product. The computer program product includes a computer program that, when executed by a processor, implements the steps of the method described in any one of the first aspects.

[0044] The aforementioned inter-cluster invocation method, apparatus, computer equipment, and storage medium acquire basic information and authorization verification information of the first cluster, and upload these information to the blockchain. The authorization verification information is the identity information of the cluster authorized for access by the first cluster, and the data information includes identity information and authorization information. In response to a second cluster invoking the first cluster, the method acquires the identity information of the second cluster and the identity recognition information of the first cluster. Based on the identity recognition information of the first cluster, it queries the identity information of the first cluster on the blockchain and retrieves the authorization verification information of the first cluster. If the authorization verification information includes the identity information of the second cluster, it transmits the authorization information of the first cluster to the on-chain node of the second cluster's blockchain. By transmitting inter-cluster authorization information through the blockchain, inter-cluster data invocation is achieved, avoiding the complex process of data allocation and invocation through complex procedures, thus improving the efficiency of multi-cluster invocation. Attached Figure Description

[0045] Figure 1 This is a flowchart illustrating the process of calling methods between clusters in one embodiment;

[0046] Figure 2 This is a flowchart illustrating an example of inter-cluster calls in one embodiment;

[0047] Figure 3 This is a structural block diagram of an inter-cluster invocation device in one embodiment;

[0048] Figure 4 This is an internal structural diagram of a computer device in one embodiment. Detailed Implementation

[0049] To make the objectives, technical solutions, and advantages of this application clearer, the following detailed description is provided in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative and not intended to limit the scope of this application.

[0050] The inter-cluster invocation method provided in this application can be applied to a terminal, a server, or a system including both a terminal and a server, and is implemented through interaction between the terminal and the server. The terminal can include, but is not limited to, various personal computers, laptops, tablets, etc. This terminal uses blockchain to transmit authorization information between clusters, thereby enabling data invocation between clusters. This avoids the complex process of data allocation and invocation through complex procedures, improving the efficiency of multi-cluster invocation.

[0051] In one embodiment, such as Figure 1As shown, a method for inter-cluster invocation is provided. Taking the application of this method to a terminal as an example, the method includes the following steps:

[0052] Step S101: Obtain the basic information of the first cluster and the authorization verification information of the first cluster, and upload the basic information of the first cluster and the authorization verification information of the first cluster to the blockchain.

[0053] The authorization verification information is the identity information of the cluster that the first cluster is authorized to access, and the data information includes identity information and authorization information.

[0054] In this embodiment, the terminal designates the authorized cluster as the first cluster and the cluster it needs to access from the first cluster as the second cluster. The terminal obtains the basic information and authorization verification information of the first cluster by accessing the data to be uploaded to the blockchain from the data sent by the first cluster. The cluster is a Kubernetes (k8s, an abbreviation of "ubernete") cluster. The terminal then uploads the obtained basic information and authorization verification information of the first cluster to the on-chain node of that first cluster on the blockchain.

[0055] Step S102: In response to the second cluster calling the first cluster, obtain the identity information of the second cluster and the identity recognition information of the first cluster.

[0056] In this embodiment, in response to the second cluster's call to the first cluster, the terminal obtains the identity information of the second cluster and the identity recognition information of the first cluster transmitted by the second cluster. The identity recognition information is the identification information of the first cluster's identity information, used to query the identity information of the first cluster on the blockchain.

[0057] Step S103: Based on the identity recognition information of the first cluster, query the identity information of the first cluster on the blockchain and retrieve the authorization verification information of the first cluster.

[0058] In this embodiment, the terminal queries the identity information of the first cluster from the identity information of each cluster on the blockchain based on the identity information of the first cluster, and retrieves the authorization verification information of the first cluster based on the identity information of the first cluster.

[0059] Step S104: If the authorization verification information contains the identity information of the second cluster, the authorization information of the first cluster is transmitted to the on-chain node of the blockchain of the second cluster, and the data information of the first cluster is retrieved through the authorization information.

[0060] In this embodiment, the terminal determines whether the authorization verification information of the first cluster contains the identity information of the second cluster. If the authorization verification information does not contain the identity information of the second cluster, the terminal refuses to transmit the authorization information of the first cluster to the second cluster. If the authorization verification information contains the identity information of the second cluster, the terminal transmits the authorization information of the first cluster to the on-chain node of the blockchain of the second cluster. The terminal retrieves data information from the first cluster using the authorization information and transmits the data information to the second cluster.

[0061] Based on the above scheme, blockchain is used to transmit authorization information between clusters, thereby enabling data calls between clusters. This avoids the process of data allocation and calling through complex procedures and improves the calling efficiency of multiple clusters.

[0062] Optionally, obtaining the authorization verification information of the first cluster includes: in response to the user's authorization operation, obtaining the identity information of the mutually calling clusters; storing the identity information of the mutually calling clusters in addition to the identity information of the first cluster in the first cluster, and using the authorization information to call the program to retrieve the identity information of each mutually calling cluster in the first cluster as the authorization verification information of the first cluster.

[0063] In this embodiment, the terminal responds to the user's authorization operation by obtaining the identity information of the mutually invoked clusters. When one cluster needs to access the first cluster, the terminal stores the identity information of the mutually invoked clusters, in addition to the identity information of the first cluster, within the first cluster. The terminal retrieves the identity information of each mutually invoked cluster from the first cluster through an authorization information invocation program, using it as the authorization verification information for the first cluster. This authorization information invocation program is a Kube-BlockChain information invocation program, which can invoke user-specified information within the cluster and upload this information to the blockchain.

[0064] Based on the above scheme, the authorization verification information of the first cluster is retrieved by calling the authorization information call program, which improves the efficiency of uploading the authorization verification information of the first cluster to the blockchain.

[0065] Optionally, the basic information of the first cluster and the authorization and verification information of the first cluster can be uploaded to the blockchain, including:

[0066] On the blockchain, based on the identity information of the first cluster, on-chain nodes of the first cluster are registered, and based on the on-chain nodes, the authorization information and authorization verification information of the first cluster are uploaded to the blockchain.

[0067] In this embodiment, the terminal registers an on-chain node on the blockchain based on the identity information of the first cluster, and instructs the on-chain node to upload the authorization and verification information of the first cluster to the blockchain. The identity information of the on-chain node is the identity information of the first cluster. Users can obtain the identity information of the first cluster by querying the identity information of the on-chain node on the blockchain.

[0068] Based on the above scheme, by establishing on-chain nodes for the first cluster, an information transmission interface is provided for the subsequent transmission of authorization verification information of the first cluster and the transmission of the authorization information of the first cluster to the blockchain.

[0069] Optionally, based on the identity information of the first cluster, query the identity information of the first cluster on the blockchain and retrieve the authorization verification information of the first cluster, including: based on the identity information of the first cluster, query the identity information of the first cluster corresponding to the identity information of the first cluster in the identity information of each cluster on the blockchain; based on the identity information of the first cluster, retrieve the authorization verification information of the first cluster on the on-chain node of the first cluster.

[0070] In this embodiment, the terminal, based on the obtained identity information of the first cluster, queries the identity information of each on-chain node that matches the identity information of the first cluster. Based on the identity information of that on-chain node, the terminal retrieves the authorization verification information of the first cluster stored on that on-chain node.

[0071] Based on the above scheme, the accuracy of retrieving the authorization verification information of the first cluster is improved by retrieving the identity recognition information.

[0072] Optionally, the authorization information includes the authorized call scope information for each cluster. Data information from the first cluster is retrieved using this authorization information, including:

[0073] Based on the authorization information, the authorized call scope of the second cluster is determined, and the content data within the authorized call scope of the first cluster is transmitted to the second cluster according to the authorized call scope.

[0074] In this embodiment, the terminal determines the authorized access scope of the second cluster based on the authorization information transmitted to the second cluster. The authorized access scope is the range within which the first cluster authorizes other clusters to access data information from the first cluster. Based on this authorized access scope, the terminal transmits the content data within the authorized access scope of the first cluster to the second cluster, thereby completing the task of the second cluster accessing the content data of the first cluster.

[0075] Based on the above scheme, by restricting the scope of authorized calls for each cluster, the strength of permission management for calls between clusters is improved.

[0076] Optionally, the method further includes: obtaining new authorization verification information for the first cluster, uploading the new authorization verification information to the blockchain, and replacing the original authorization verification information; determining whether the new authorization verification information contains the identity information of the second cluster, and deleting the authorization information in the on-chain nodes of the second cluster on the blockchain if the new authorization verification information does not contain the identity information of the second cluster.

[0077] In this embodiment, when a user changes the clusters they are mutually invoking, the terminal obtains new authorization verification information for the first cluster and uploads this new authorization verification information to the blockchain based on the on-chain nodes of the first cluster. The terminal then deletes the previously uploaded authorization verification information for the first cluster from the blockchain. The terminal determines on the blockchain whether the new authorization verification information contains the identity information of the second cluster. If the new authorization verification information contains the identity information of the second cluster, the terminal does not perform any processing. If the new authorization verification information does not contain the identity information of the second cluster, the terminal deletes the authorization information from the on-chain nodes of the second cluster on the blockchain.

[0078] Based on the above solution, by uploading new authorization verification information, the permission information of authorized clusters can be managed, thereby improving the management efficiency between clusters.

[0079] This application also provides an example of inter-cluster calls, as shown in Figure 2. The specific processing steps include the following:

[0080] Step S201: In response to the user's authorization operation, obtain the identity information of the clusters that call each other.

[0081] Step S202: In the first cluster, store the identity information of the mutually calling clusters in addition to the identity information of the first cluster, and call the program through the authorization information to retrieve the identity information of each mutually calling cluster in the first cluster as the authorization verification information of the first cluster.

[0082] Step S203: On the blockchain, based on the identity information of the first cluster, register the on-chain nodes of the first cluster, and based on the on-chain nodes, upload the authorization information and authorization verification information of the first cluster to the blockchain.

[0083] Step S204: In response to the second cluster calling the first cluster, obtain the identity information of the second cluster and the identity recognition information of the first cluster.

[0084] Step S205: Based on the identity information of the first cluster, query the identity information of the first cluster corresponding to the identity information of the first cluster in the identity information of each cluster on the blockchain.

[0085] Step S206: Based on the identity information of the first cluster, retrieve the authorization verification information of the first cluster from the on-chain node of the first cluster.

[0086] Step S207: If the authorization verification information contains the identity information of the second cluster, the authorization information of the first cluster is transmitted to the on-chain node of the blockchain of the second cluster.

[0087] Step S208: Based on the authorization information, determine the authorized call scope of the second cluster, and based on the authorized call scope, transfer the content data within the authorized call scope of the first cluster to the second cluster.

[0088] It should be understood that although the steps in the flowcharts of the embodiments described above are shown sequentially according to the arrows, these steps are not necessarily executed in the order indicated by the arrows. Unless explicitly stated herein, there is no strict order restriction on the execution of these steps, and they can be executed in other orders. Moreover, at least some steps in the flowcharts of the embodiments described above may include multiple steps or multiple stages. These steps or stages are not necessarily completed at the same time, but can be executed at different times. The execution order of these steps or stages is not necessarily sequential, but can be performed alternately or in turn with other steps or at least some of the steps or stages of other steps.

[0089] Based on the same inventive concept, this application also provides an inter-cluster invocation apparatus for implementing the inter-cluster invocation method described above. The solution provided by this apparatus is similar to the implementation described in the above method; therefore, the specific limitations in one or more embodiments of the inter-cluster invocation apparatus provided below can be found in the limitations of the inter-cluster invocation method described above, and will not be repeated here.

[0090] In one embodiment, such as Figure 3 As shown, an inter-cluster invocation device is provided, comprising: a first acquisition module 310, a second acquisition module 320, an invocation module 330, and an authorization module 340, wherein:

[0091] The first acquisition module 310 is used to acquire basic information of the first cluster and authorization verification information of the first cluster, and upload the basic information of the first cluster and authorization verification information of the first cluster to the blockchain; the authorization verification information is the identity information of the cluster authorized to be accessed by the first cluster, and the data information includes identity information and authorization information;

[0092] The second acquisition module 320 is used to acquire the identity information of the second cluster and the identity recognition information of the first cluster in response to the operation of the second cluster calling the first cluster.

[0093] The retrieval module 330 is used to query the identity information of the first cluster on the blockchain based on the identity recognition information of the first cluster, and retrieve the authorization verification information of the first cluster.

[0094] The authorization module 340 is used to transmit the authorization information of the first cluster to the on-chain node of the blockchain of the second cluster when the authorization verification information includes the identity information of the second cluster.

[0095] Optionally, the first acquisition module 310 is specifically used for:

[0096] In response to user authorization, obtain the identity information of the clusters that are calling each other;

[0097] In the first cluster, the identity information of the mutually calling clusters, in addition to the identity information of the first cluster, is stored. The program calls the program through the authorization information to retrieve the identity information of each mutually calling cluster in the first cluster as the authorization verification information of the first cluster.

[0098] Optionally, the first acquisition module 310 is specifically used for:

[0099] On the blockchain, based on the identity information of the first cluster, on-chain nodes of the first cluster are registered, and based on the on-chain nodes, the authorization information and authorization verification information of the first cluster are uploaded to the blockchain.

[0100] Optionally, the retrieval module 330 is specifically used for:

[0101] Based on the identity information of the first cluster, query the identity information of the first cluster that corresponds to the identity information of the first cluster from the identity information of each cluster on the blockchain;

[0102] Based on the identity information of the first cluster, the authorization verification information of the first cluster is retrieved on the chain node of the first cluster.

[0103] Optionally, the authorization module 340 is specifically used for:

[0104] Based on the authorization information, the authorized call scope of the second cluster is determined, and based on the authorized call scope, the content data within the authorized call scope of the first cluster is transmitted to the second cluster.

[0105] Optionally, the device further includes:

[0106] The third acquisition module is used to acquire new authorization verification information from the first cluster and upload the new authorization verification information to the blockchain to replace the original authorization verification information.

[0107] The judgment module is used to determine whether the new authorization verification information contains the identity information of the second cluster, and if the new authorization verification information does not contain the identity information of the second cluster, delete the authorization information in the on-chain node of the second cluster on the blockchain.

[0108] Each module in the aforementioned inter-cluster invocation device can be implemented entirely or partially through software, hardware, or a combination thereof. These modules can be embedded in or independent of the processor in a computer device, or stored in the memory of a computer device as software, so that the processor can invoke and execute the operations corresponding to each module.

[0109] In one embodiment, a computer device is provided, which may be a terminal, and its internal structure diagram may be as follows: Figure 4 As shown, the computer device includes a processor, memory, communication interface, display screen, and input devices connected via a system bus. The processor provides computing and control capabilities. The memory includes non-volatile storage media and internal memory. The non-volatile storage media stores the operating system and computer programs. The internal memory provides an environment for the operation of the operating system and computer programs stored in the non-volatile storage media. The communication interface is used for wired or wireless communication with external terminals; wireless communication can be achieved through Wi-Fi, mobile cellular networks, NFC (Near Field Communication), or other technologies. When the computer program is executed by the processor, it implements an inter-cluster call method. The display screen can be an LCD screen or an e-ink screen. The input devices can be a touch layer covering the display screen, buttons, a trackball, or a touchpad mounted on the computer device casing, or an external keyboard, touchpad, or mouse.

[0110] Those skilled in the art will understand that Figure 4The structure shown is merely a block diagram of a portion of the structure related to the present application and does not constitute a limitation on the computer device to which the present application is applied. Specific computer devices may include more or fewer components than those shown in the figure, or combine certain components, or have different component arrangements.

[0111] In one embodiment, a computer device is provided, including a memory and a processor, wherein the memory stores a computer program, and the processor executes the computer program to implement the steps of the method described in any one of the first aspects.

[0112] In one embodiment, a computer-readable storage medium is provided having a computer program stored thereon, which, when executed by a processor, implements the steps of the method described in any one of the first aspects.

[0113] In one embodiment, a computer program product is provided, including a computer program that, when executed by a processor, implements the steps of the method described in any one of the first aspects.

[0114] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, data stored, data displayed, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties.

[0115] Those skilled in the art will understand that all or part of the processes in the methods of the above embodiments can be implemented by a computer program instructing related hardware. The computer program can be stored in a non-volatile computer-readable storage medium, and when executed, it can include the processes of the embodiments of the above methods. Any references to memory, databases, or other media used in the embodiments provided in this application can include at least one of non-volatile and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetic random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. By way of illustration and not limitation, RAM can take many forms, such as Static Random Access Memory (SRAM) or Dynamic Random Access Memory (DRAM). The databases involved in the embodiments provided in this application may include at least one type of relational database and non-relational database. Non-relational databases may include, but are not limited to, blockchain-based distributed databases. The processors involved in the embodiments provided in this application may be general-purpose processors, central processing units, graphics processing units, digital signal processors, programmable logic devices, quantum computing-based data processing logic devices, etc., and are not limited to these.

[0116] The technical features of the above embodiments can be combined in any way. For the sake of brevity, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0117] The embodiments described above are merely illustrative of several implementation methods of this application, and while the descriptions are specific and detailed, they should not be construed as limiting the scope of this patent application. It should be noted that those skilled in the art can make various modifications and improvements without departing from the concept of this application, and these all fall within the protection scope of this application. Therefore, the protection scope of this application should be determined by the appended claims.

Claims

1. An inter-cluster invocation method, characterized by, The method comprises: obtaining basic information of a first cluster and authorization verification information of the first cluster, and uploading the basic information of the first cluster and the authorization verification information of the first cluster to a blockchain; the authorization verification information is identity information of a cluster authorized by the first cluster to access, and the basic information comprises identity information and authorization information; in response to a second cluster calling an operation of the first cluster, identity information of the second cluster and identity identification information of the first cluster are obtained; according to the identity identification information of the first cluster, identity information of the first cluster is queried on the blockchain and authorization verification information of the first cluster is called, comprising: according to the identity identification information of the first cluster, identity information of the first cluster corresponding to the identity identification information of the first cluster is queried in identity information of each cluster on the blockchain; based on the identity information of the first cluster, the authorization verification information of the first cluster is called on a chain node of the first cluster; in the case that the authorization verification information contains the identity information of the second cluster, the authorization information of the first cluster is transmitted to a chain node of a blockchain of the second cluster, and data information of the first cluster is called through the authorization information; new authorization verification information of the first cluster is obtained, and the new authorization verification information is uploaded to the blockchain to replace the authorization verification information; it is judged whether the new authorization verification information contains the identity information of the second cluster, and in the case that the new authorization verification information does not contain the identity information of the second cluster, the authorization information in the chain node of the second cluster on the blockchain is deleted; The authorization verification information of the first cluster is obtained, comprising: in response to an authorization operation of a user, identity information of a cluster calling each other is obtained; in the first cluster, identity information of a cluster calling each other except the identity information of the first cluster is stored, and identity information of each cluster calling each other is called in the first cluster through an authorization information calling program as the authorization verification information of the first cluster; The data information of the first cluster is called through the authorization information, comprising: according to the authorization information, an authorization calling range of the second cluster is determined, and content data in the authorization calling range in the first cluster is transmitted to the second cluster according to the authorization calling range.

2. The method of claim 1, wherein, The basic information of the first cluster and the authorization verification information of the first cluster are uploaded to the blockchain, comprising: on the blockchain, According to the identity information of the first cluster, a chain node of the first cluster is registered, and based on the chain node, the authorization information of the first cluster and the authorization verification information of the first cluster are uploaded to the blockchain.

3. An inter-cluster invocation apparatus applying the inter-cluster invocation method according to claim 1, characterized by The device comprises: a first acquisition module, configured to acquire basic information of a first cluster and authorization verification information of the first cluster, and upload the basic information of the first cluster and the authorization verification information of the first cluster to a block chain; the authorization verification information is identity information of a cluster authorized by the first cluster to access, and the basic information comprises identity information and authorization information; a second acquisition module, configured to acquire identity information of a second cluster and identity identification information of the first cluster in response to an operation of the second cluster calling the first cluster; a calling module, configured to query the identity information of the first cluster on the block chain according to the identity identification information of the first cluster, and call the authorization verification information of the first cluster; and an authorization module, configured to transmit authorization information of the first cluster to a chain node of the block chain of the second cluster in a case where the identity information of the second cluster is contained in the authorization verification information.

4. A computer device comprising a memory and a processor, the memory storing a computer program, characterized in that, The computer program is executed by the processor to implement the steps of the method of any one of claims 1 to 2.

5. A computer-readable storage medium having stored thereon a computer program, characterized in that, The computer program is executed by the processor to implement the steps of the method of any one of claims 1 to 2.

6. A computer program product comprising a computer program, characterized in that, The computer program is executed by the processor to implement the steps of the method of any one of claims 1 to 2.

Images