Data sharing method based on multi-tenant isolation

Abstract

The application discloses a data sharing method based on multi-tenant isolation, relates to the field of tenant data sharing, and comprises the following steps: collecting personalized information and house renting information of tenants; setting a multi-tenant cellular network, planning the multi-tenant cellular network for the tenants according to the personalized information of the tenants, and obtaining a special grid code of the tenants; setting a sharing authorization list of the tenants, and sharing the tenants according to the sharing authorization list to make the shared tenants make a sharing request and a sharing action; and performing data checking and data updating on the multi-tenant cellular network after data sharing, improving the isolation and privacy of tenant information, improving the efficiency and security of data sharing between tenants, efficiently managing multi-tenant data, improving the utilization rate of data, and meeting the needs of tenants for data security and privacy.

Description

Technical Field

[0001] The present invention relates to the field of tenant data sharing, and in particular to a data sharing method based on multi-tenant isolation. Background Art

[0002] In Internet applications, to better utilize resources, improve maintenance and management, and reduce development costs, people usually encapsulate underlying resources, basic business logic, or some industry solutions to form a business platform, which is then provided to various access parties in the form of services. In this case, to ensure data security and prevent data interference, it is necessary to ensure that each access party can only view and operate its own data. Therefore, data isolation has become a necessary capability of such a platform.

[0003] Currently, in a multi-tenant mode, there are two main methods for isolating multi-tenant data: the first is to add the tenant identifier to the code of the multi-tenant application. Specifically, the tenant identifier is used as a parameter of the application program interface, and is transmitted layer by layer from the front-end user interface to the business control layer, the service layer, and then to the back-end database access API. Each layer of the API adds code to distinguish tenants inside the API according to the tenant identifier to achieve secure isolation of data between tenants; the second is to set an isolation point in the code of the multi-tenant application and generate a private class loader for each tenant. At the isolation point, the class loader corresponding to each tenant is used to load the data to achieve secure isolation of data between tenants.

[0004] In the existing technology, under the premise of multi-tenant isolation, data sharing of tenant information exists between multiple tenants. How to ensure the isolation status between multiple tenants while also realizing data sharing between tenants? However, when sharing data between multiple tenants, the security and privacy of tenant information will be affected. Whether tenant information is timely, how to deal with discarded data, and how the access process is carried out before data sharing between tenants are the problems we need to solve. To this end, a data sharing method based on multi-tenant isolation is now provided. Summary of the Invention

[0005] In order to solve the above technical problems, the present invention aims to provide a data sharing method based on multi-tenant isolation, comprising the following steps:

[0006] Step S1: Collecting tenants’ personalized information and rental information;

[0007] Step S2: Setting up a multi-tenant cellular network, planning the multi-tenant cellular network for the tenant based on the tenant's personalized information, and obtaining the tenant's exclusive grid code;

[0008] Step S3: Set the tenant's sharing authorization list, and according to the sharing authorization list, the sharing tenant makes a sharing request and performs a sharing action on the shared tenant;

[0009] Step S4: Perform data verification and data update on the multi-tenant cellular network after data sharing.

[0010] Furthermore, the process of collecting tenants' personalized information and rental information includes:

[0011] The personalized information includes tenant basic data, transaction data and experience data;

[0012] The rental information includes historical rental time, historical rental duration and historical rental price;

[0013] Set up data collection terminals;

[0014] The personalized information and rental information of tenants are collected in real time through the data collection terminal.

[0015] Furthermore, a multi-tenant cellular network is set up, and a process of planning a multi-tenant cellular network for a tenant based on the tenant's personalized information includes:

[0016] The multi-tenant cellular network is provided with a plurality of tenant cellular grid points and login ports;

[0017] Private units and shared units are set in the tenant cellular grid points, and several tenant cellular grid points are numbered;

[0018] When a tenant enters the login port for the first time, the multi-tenant cellular network collects the tenant's personalized information, performs login processing on the tenant's personalized information based on the tenant's personalized information, and obtains the tenant's login identity code;

[0019] According to the tenant's rental information, the tenant cellular grid point is planned for the tenant, and the tenant cellular grid point number is obtained. The tenant cellular grid point number and the tenant's login identity code are processed to obtain the tenant's exclusive grid code, and the tenant cellular grid point is anonymized.

[0020] Furthermore, the process of anonymizing the tenant cellular grid points includes:

[0021] Based on anonymization technology and the tenant's exclusive grid code, the anonymized personalized information and rental information are stored in the private unit of the tenant's cellular grid point, and the tenant's personalized information and rental information are copied to obtain the tenant's twin tenant data, and the twin tenant data is stored in the shared unit of the tenant's cellular grid point.

[0022] Furthermore, a sharing authorization list is set for the tenants, and according to the sharing authorization list, the process of the sharing tenant making a sharing request to the shared tenant includes:

[0023] When the shared tenant sends a data sharing request to the sharing tenant, the sharing tenant receives the data sharing request and "agrees" or "rejects" the data sharing request;

[0024] If the shared tenant "rejects" the data sharing request, the shared tenant sends a "reject sharing request" signal to the shared tenant;

[0025] If the shared tenant "agrees" to the data sharing request, the shared tenant sends an "agree to sharing request" signal to the shared tenant, generates a shared temporary code through a random algorithm, and encrypts the personalized information and rental information in the shared unit based on the shared temporary code;

[0026] Based on the "share request approval" signal, a two-way information channel is established between the sharing tenant and the shared tenant. The shared tenant is granted sharing permissions through a secure transmission protocol, and the shared tenant stores the received shared temporary code in the tenant's cellular grid point.

[0027] Furthermore, the process of a shared tenant performing a sharing action on a shared tenant includes:

[0028] When the shared tenant sends a temporary shared code to the sharing tenant through sharing permissions, the sharing tenant verifies the temporary shared code according to the sharing authorization list;

[0029] If there is a shared temporary code that is the same as the shared temporary code in the shared authorization list, the shared user is allowed to enter the shared unit to view the information;

[0030] If there is no shared temporary code in the shared authorization list that is the same as the shared temporary code, the two-way information channel will be cut off;

[0031] After the data sharing is completed, all information channels of the tenant cellular grid point will be cut off, and the tenant cellular grid point will enter a solitary state when there is no information channel.

[0032] Furthermore, the process of performing data verification on the multi-tenant cellular network after data sharing includes:

[0033] Establish a shared audit log;

[0034] The shared audit log includes a sharing timestamp, a sharing behavior description, a shared tenant behavior description, and a shared suggestion description;

[0035] The shared suggestion description includes an invalid description and an irrelevant description;

[0036] Based on the shared audit log, data is checked for tenant cellular grid points that have entered the solitary state;

[0037] Using natural language algorithms, sensitive behaviors are extracted from shared behavior descriptions and shared tenant behavior descriptions to obtain shared sensitive behaviors and shared sensitive behaviors.

[0038] Perform similarity comparison on shared sensitive behaviors and shared sensitive behaviors to obtain sensitive similarity values;

[0039] Set sensitive similarity threshold;

[0040] If the sensitive similarity value is greater than the sensitive similarity threshold, the sharing behavior is a safe behavior;

[0041] If the sensitive similarity value is less than or equal to the sensitive similarity threshold, the shared user will be prohibited from the channel operation.

[0042] Furthermore, the process of updating data in the multi-tenant cellular network after data sharing includes:

[0043] Perform data update analysis on the shared suggestion description, extract keywords from invalid descriptions and irrelevant descriptions, obtain invalid and irrelevant words, generate a tenant information update signal, and send the tenant information update information to the shared tenant;

[0044] The shared tenant selectively deletes invalid and irrelevant information of the personalized information and rental information within the shared tenant's tenant cellular grid point based on the received tenant information update signal, thereby completing the data update of the shared tenant's personalized information and rental information.

[0045] Compared with the prior art, the beneficial effects of the present invention are: collecting tenants' personalized information and rental information, setting up a multi-tenant cellular network, planning a multi-tenant cellular network for tenants based on the tenants' personalized information, facilitating systematic management and isolation of multiple tenants, storing tenants' personalized information and rental information, obtaining tenants' exclusive grid codes, improving the privacy, security and uniqueness of tenant-related information, setting up tenants' sharing authorization lists, facilitating the determination of sharing requests between tenants, restricting shared access, further improving data security and privacy, and according to the sharing authorization list, sharing tenants make sharing requests and sharing behaviors to shared tenants, strictly controlling sharing behaviors, ensuring multi-tenant data isolation, and also ensuring the security and privacy of data sharing between tenants; performing data verification and data update on the multi-tenant cellular network after data sharing, providing real-time feedback on tenant-related information, improving the practicality and shareability of tenant-related information, timely updating the latest data of tenant-related information, and improving the shareability of tenant-related data. BRIEF DESCRIPTION OF THE DRAWINGS

[0046] Figure 1 This is a schematic diagram of a data sharing method based on multi-tenant isolation according to an embodiment of the present application. DETAILED DESCRIPTION

[0047] like Figure 1 As shown, the data sharing method based on multi-tenant isolation includes the following steps:

[0048] Step S1: Collecting tenants’ personalized information and rental information;

[0049] Step S2: Setting up a multi-tenant cellular network, planning the multi-tenant cellular network for the tenant based on the tenant's personalized information, and obtaining the tenant's exclusive grid code;

[0050] Step S3: Set the tenant's sharing authorization list, and according to the sharing authorization list, the sharing tenant makes a sharing request and performs a sharing action on the shared tenant;

[0051] Step S4: Perform data verification and data update on the multi-tenant cellular network after data sharing.

[0052] It should be further explained that, in the specific implementation process, the process of collecting tenants' personalized information and rental information includes:

[0053] The personalized information includes tenant basic data, transaction data and experience data; the tenant basic data includes tenant name, mobile phone number, gender and address; the transaction data includes rental time, transaction records, consumption records, billing information and payment method; the experience data includes evaluation records, rating records and feedback records;

[0054] The rental information includes historical rental time, historical rental duration and historical rental price;

[0055] Set up data collection terminals;

[0056] The data collection terminal is used to collect tenants' personalized information and rental information;

[0057] The personalized information and rental information of tenants are collected in real time through the data collection terminal.

[0058] It should be further explained that, in the specific implementation process, the process of setting up a multi-tenant cellular network, planning a multi-tenant cellular network for a tenant based on the tenant's personalized information, and obtaining a tenant's exclusive grid code includes:

[0059] The multi-tenant cellular network is provided with a plurality of tenant cellular grid points and login ports;

[0060] A private unit and a shared unit are set in the tenant cellular grid point, and a number of tenant cellular grid points are numbered and recorded as i, where i=1, 2, ..., n, n>0 and n is an integer;

[0061] It should be further explained that, in the specific implementation process, there is no correlation between the cellular grid points of each tenant and they cannot interact directly. The data information in the private unit of each tenant cellular grid point is only visible to the tenant and there is no permission to share and view it publicly. The data information in the shared unit of each tenant cellular grid point can be used to share the information with others, and the data in the shared unit can be updated in real time to clear invalid data and useless data.

[0062] A data recording terminal is provided in the tenant cellular grid point; the data recording terminal is used to receive the tenant's personalized information and store the tenant's personalized information in the tenant cellular grid point;

[0063] The login port is used for tenant identity authentication;

[0064] When a tenant enters the login port for the first time, the multi-tenant cellular network collects the tenant's personalized information, performs login processing on the tenant's personalized information based on the tenant's personalized information, and obtains the tenant's login identity code;

[0065] It should be further explained that, in the specific implementation process, the specific process of logging in the tenant's personalized information includes: performing binary conversion on the tenant's basic data to obtain the tenant's binary data, scrambling the tenant's binary data, extracting m-bit data of the scrambled tenant's binary data, and obtaining the tenant's login identity code;

[0066] According to the tenant's rental information, the tenant cellular grid point is planned for the tenant, and the number of the tenant cellular grid point is obtained. The number of the tenant cellular grid point and the tenant's login identity code are processed to obtain the tenant's exclusive grid code;

[0067] It should be further explained that the specific process of processing the tenant's cellular grid point number and the tenant's login identity code includes: segmenting the tenant's login identity code into x segments, placing the tenant's cellular grid point number multiple times between the tenant's login identity code segments, and obtaining the tenant's exclusive grid code;

[0068] Through anonymization technology, the tenant's personalized information and rental information are anonymized, and according to the tenant's exclusive grid code, the anonymized personalized information and rental information are stored in the private unit of the tenant's cellular grid point. The tenant's personalized information and rental information are copied to obtain the tenant's twin tenant data, and the twin tenant data is stored in the shared unit of the tenant's cellular grid point.

[0069] It should be further explained that, in the specific implementation process, the process of setting the tenant's sharing authorization list and, based on the sharing authorization list, the sharing tenant making a sharing request to the shared tenant and the sharing behavior includes:

[0070] The shared authorization list is used to store shared temporary codes;

[0071] The shared tenants refer to tenants who share data;

[0072] The shared tenant refers to the tenant who views and browses the data of other tenants;

[0073] It should be further explained that, in the specific implementation process, the shared authorization list is stored in the private unit of the tenant's cellular grid point and is only visible to the tenant himself. The shared temporary code is generated according to a random algorithm, and the shared temporary code is non-repeating and one-time.

[0074] When the shared tenant sends a data sharing request to the sharing tenant, the sharing tenant receives the data sharing request and "agrees" or "rejects" the data sharing request;

[0075] If the shared tenant "rejects" the data sharing request, the shared tenant sends a "reject sharing request" signal to the shared tenant;

[0076] If the sharing tenant "agrees" to the data sharing request, the sharing tenant sends an "agree to sharing request" signal to the shared tenant, generates a sharing temporary code through a random algorithm, stores the sharing temporary code in the sharing authorization list, and uses the sharing temporary code to encrypt the personalized information and rental information in the shared unit, establishes a two-way information channel between the sharing tenant and the shared tenant, sends the sharing temporary code to the shared tenant through a secure transmission protocol, and grants the shared tenant sharing permissions. The shared tenant stores the received sharing temporary code in the tenant's cellular grid point;

[0077] When the shared tenant wants to share data with the sharing tenant, the shared tenant sends a temporary sharing code to the sharing tenant through sharing permissions. The sharing tenant verifies the temporary sharing code according to the sharing authorization list. If the temporary sharing code is the same as the temporary sharing code in the sharing authorization list, the shared user is allowed to enter the shared unit to view the information. If the temporary sharing code is not the same as the temporary sharing code in the sharing authorization list, the two-way information channel is cut off.

[0078] After data sharing is completed, all information channels of the tenant cellular grid point are cut off, and the tenant cellular grid point enters a solitary state when there is no information channel;

[0079] It should be further explained that, in the specific implementation process, the two-way information channel is one-time. After the data sharing is completed, the two-way information channel is automatically cut off. If it is to be used again, it needs to be established by the shared tenant.

[0080] It should be further explained that, in the specific implementation process, the process of data verification and data update for the multi-tenant cellular network after data sharing includes:

[0081] Establish a shared audit log;

[0082] The shared audit log is used to record sharing time, sharing behavior, and shared tenant behavior;

[0083] The shared audit log includes a sharing timestamp, a sharing behavior description, a shared tenant behavior description, and a shared suggestion description;

[0084] The shared suggestion description includes an invalid description and an irrelevant description;

[0085] It should be further explained that, in the specific implementation process, shared audit logs facilitate the recording of sharing between tenants, monitor the sharing process, and enhance the visualization of shared data security;

[0086] Based on the shared audit log, data is checked for tenant cellular grid points that have entered the solitary state;

[0087] Using natural language algorithms, sensitive behaviors are extracted from shared behavior descriptions and shared tenant behavior descriptions to obtain shared sensitive behaviors and shared sensitive behaviors.

[0088] Perform similarity comparison on shared sensitive behaviors and shared sensitive behaviors to obtain sensitive similarity values;

[0089] Set sensitive similarity threshold;

[0090] If the sensitive similarity value is greater than the sensitive similarity threshold, the sharing behavior is a safe behavior;

[0091] If the sensitive similarity value is less than or equal to the sensitive similarity threshold, the shared user will be prohibited from operating the channel, and the shared user will not be able to share data or perform any actions related to the shared data;

[0092] Perform data update analysis on the shared suggestion description, extract keywords from invalid descriptions and irrelevant descriptions, obtain invalid and irrelevant words, generate a tenant information update signal, and send the tenant information update information to the shared tenant;

[0093] The shared tenant deletes invalid and irrelevant information from the personalized information and rental information within the tenant cellular grid point of the shared tenant according to the received tenant information update signal, thereby completing the data update of the shared tenant's personalized information and rental information.

[0094] The above embodiments are only used to illustrate the technical method of the present invention and are not intended to limit the present invention. Although the present invention has been described in detail with reference to the preferred embodiments, those skilled in the art should understand that the technical method of the present invention may be modified or replaced by equivalents without departing from the spirit and scope of the technical method of the present invention.

Claims

1. A data sharing method based on multi-tenant isolation, characterized in that: The following steps are involved: Step S1: Collecting tenants’ personalized information and rental information; Step S2: Setting up a multi-tenant cellular network, planning a multi-tenant cellular network for the tenant based on the tenant's personalized information, and obtaining the tenant's exclusive grid code: The multi-tenant cellular network is provided with a plurality of tenant cellular grid points and login ports; Private units and shared units are set in the tenant cellular grid points, and several tenant cellular grid points are numbered; When a tenant enters the login port for the first time, the multi-tenant cellular network collects the tenant's personalized information, performs login processing on the tenant's personalized information based on the tenant's personalized information, and obtains the tenant's login identity code; Based on the tenant's rental information, the tenant's cellular grid point is planned, and the tenant's cellular grid point number is obtained. The tenant's cellular grid point number and the tenant's login identity code are processed to obtain the tenant's exclusive grid code, and the tenant's cellular grid point is anonymized; Step S3: Set up the tenant's sharing authorization list, and according to the sharing authorization list, the sharing tenant makes a sharing request and performs a sharing action on the shared tenant; specifically, the steps include: When the shared tenant sends a data sharing request to the sharing tenant, the sharing tenant receives the data sharing request and "agrees" or "rejects" the data sharing request; If the sharing tenant performs a "reject" operation on the data sharing request, the sharing tenant sends a "reject sharing request" signal to the shared tenant; If the sharing tenant "agrees" to the data sharing request, the sharing tenant sends an "agree to sharing request" signal to the shared tenant. The sharing tenant generates a temporary sharing code through a random algorithm, stores the temporary sharing code in the sharing authorization list, and encrypts the personalized information and rental information in the shared unit based on the temporary sharing code. Based on the "sharing request approval" signal, a two-way information channel is established between the sharing tenant and the shared tenant. The shared temporary code is sent to the shared tenant through a secure transmission protocol, and the shared tenant is granted sharing permissions. The shared tenant stores the received shared temporary code in the tenant's cellular grid point. When the shared tenant sends a temporary shared code to the sharing tenant through sharing permissions, the sharing tenant verifies the temporary shared code according to the sharing authorization list; If there is a shared temporary code that is the same as the shared temporary code in the shared authorization list, the shared user is allowed to enter the shared unit to view the information; If there is no shared temporary code in the shared authorization list that is the same as the shared temporary code, the two-way information channel will be cut off; After data sharing is completed, all information channels of the tenant cellular grid point are cut off, and the tenant cellular grid point enters a solitary state when there is no information channel; Step S4: Perform data verification and data update on the multi-tenant cellular network after data sharing.

2. The data sharing method based on multi-tenant isolation according to claim 1 is characterized in that: The process of collecting tenants' personalized information and rental information includes: The personalized information includes tenant basic data, transaction data and experience data; The rental information includes historical rental time, historical rental duration and historical rental price; Set up data collection terminals; The personalized information and rental information of tenants are collected in real time through the data collection terminal.

3. The data sharing method based on multi-tenant isolation according to claim 2 is characterized in that: The process of anonymizing tenant cellular grid points includes: Based on anonymization technology and the tenant's exclusive grid code, the anonymized personalized information and rental information are stored in the private unit of the tenant's cellular grid point, and the tenant's personalized information and rental information are copied to obtain the tenant's twin tenant data, and the twin tenant data is stored in the shared unit of the tenant's cellular grid point.

4. The data sharing method based on multi-tenant isolation according to claim 3 is characterized in that: The process of verifying data on a multi-tenant cellular network after data sharing includes: Establish a shared audit log; The shared audit log includes a sharing timestamp, a sharing behavior description, a shared tenant behavior description, and a shared suggestion description; The shared suggestion description includes an invalid description and an irrelevant description; Based on the shared audit log, data is checked for tenant cellular grid points that have entered the solitary state; Using natural language algorithms, sensitive behaviors are extracted from shared behavior descriptions and shared tenant behavior descriptions to obtain shared sensitive behaviors and shared sensitive behaviors. Perform similarity comparison on shared sensitive behaviors and shared sensitive behaviors to obtain sensitive similarity values; Set sensitive similarity threshold; If the sensitive similarity value is greater than the sensitive similarity threshold, the sharing behavior is a safe behavior; If the sensitive similarity value is less than or equal to the sensitive similarity threshold, the shared user will be prohibited from the channel operation.

5. The data sharing method based on multi-tenant isolation according to claim 4 is characterized in that: The process of updating data in a multi-tenant cellular network after data sharing includes: Perform data update analysis on the shared suggestion description, extract keywords from invalid descriptions and irrelevant descriptions, obtain invalid and irrelevant words, generate a tenant information update signal, and send the tenant information update information to the shared tenant; The shared tenant selectively deletes invalid and irrelevant information of the personalized information and rental information within the shared tenant's tenant cellular grid point based on the received tenant information update signal, thereby completing the data update of the shared tenant's personalized information and rental information.

Images