Multi-tenant security isolation method and device applied to low-code platform

Abstract

The invention provides a multi-tenant security isolation method applied to a low-code platform. The multi-tenant security isolation method can be applied to the technical field of cloud computing and information security. The method comprises the following steps: configuring a first security isolation strategy for at least one tenant, wherein the first security isolation strategy comprises N1 levels of isolation measures; acquiring a real-time running state and a security demand of an application of at least one tenant; according to the real-time running state and the safety requirement of the application, the safety isolation strategy of at least one tenant is dynamically adjusted, so that the safety isolation strategy of at least one tenant is adjusted from the first safety isolation strategy to the second safety isolation strategy, and the second safety isolation strategy comprises N2-level isolation measures; the N1-level isolation measure and the N2-level isolation measure comprise at least two of a physical isolation measure, a logic isolation measure, a data isolation measure, a functional module isolation measure and a network isolation measure. The invention further provides a security isolation device, equipment, a storage medium and a program product.

Description

Technical Field

[0001] The present application relates to the field of cloud computing and information security technology, and in particular to a multi-tenant security isolation method and device applied to a low-code platform. Background Art

[0002] With the development of computer technology and software development technology, users have an increasingly strong demand for digital transformation. In order to quickly respond to business and market changes, more and more users choose to use low-code platforms to build applications. However, in the current low-code platform, since a large number of tenants share the same underlying infrastructure, how to ensure data security between tenants has become an urgent problem to be solved.

[0003] In related technologies, a single isolation method is usually used to isolate different tenants. For example, existing low-code platforms usually use a single isolation strategy such as physical isolation, or use virtual machines or containers to isolate at the hardware level. There is a lack of more comprehensive data security protection measures, which makes it difficult to meet the needs of different tenants for data security and privacy, and it is easy to cause resource waste. In addition, the isolation strategy in the existing technology is usually static and cannot be dynamically adjusted according to the real-time operating status and security requirements of the application, resulting in a difficult balance between security and business flexibility. Summary of the invention

[0004] In view of the above problems, the present application provides a multi-tenant security isolation method, device, electronic device, medium and program product applied to a low-code platform.

[0005] According to the first aspect of the present application, a multi-tenant security isolation method applied to a low-code platform is proposed, comprising:

[0006] Configuring a first security isolation policy for at least one tenant, wherein the first security isolation policy includes N1-level isolation measures, wherein the N1-level isolation measures include at least two of physical isolation measures, logical isolation measures, data isolation measures, functional module isolation measures, and network isolation measures, and N1 is a positive integer greater than or equal to 2;

[0007] Obtaining the real-time operating status and security requirements of the application of the at least one tenant; and

[0008] According to the real-time running status and security requirements of the application, the security isolation policy of the at least one tenant is dynamically adjusted so that the security isolation policy of the at least one tenant is adjusted from the first security isolation policy to the second security isolation policy, wherein the second security isolation policy includes N2-level isolation measures, wherein the N2-level isolation measures include at least two of physical isolation measures, logical isolation measures, data isolation measures, functional module isolation measures and network isolation measures, N2 is a positive integer greater than or equal to 2, and at least one isolation measure in the N2-level isolation measures is different from each isolation measure in the N1-level isolation measures.

[0009] Furthermore, the method also includes: determining whether it is necessary to integrate with other security measures; when it is necessary to integrate with other security measures, integrating the N2 level isolation measures with other security measures so that the second security isolation strategy also includes other security measures, wherein the other security measures include at least one of encryption measures, authentication measures and access control measures.

[0010] Furthermore, obtaining the real-time operating status and security requirements of the application of at least one tenant includes: monitoring the network traffic, system logs and user behavior of the application in real time through a real-time monitoring system deployed in the low-code platform.

[0011] Furthermore, dynamically adjusting the security isolation policy of at least one tenant according to the real-time operating status and security requirements of the application includes: dynamically adjusting the security isolation policy of at least one tenant according to the real-time operating status of the application and based on preset security rules, wherein the preset security rules include multiple groups of real-time operating status and security isolation policies with corresponding relationships.

[0012] Furthermore, obtaining the real-time operating status and security requirements of the application of at least one tenant includes: obtaining security requirements input by a user through a user interface deployed in the low-code platform, wherein the security requirements input by the user include a user-defined security isolation level.

[0013] Furthermore, dynamically adjusting the security isolation policy of the at least one tenant according to the real-time running status and security requirements of the application includes: dynamically adjusting the security isolation policy of the at least one tenant according to a user-defined security isolation level.

[0014] Furthermore, the method also includes: when the security level of the second security isolation policy is higher than the security level of the first security isolation policy, running a load balancing mechanism and a redundancy mechanism to enable the core service of the at least one tenant to operate normally.

[0015] Furthermore, the method also includes: displaying the first security isolation strategy and its isolation effect, and the second security isolation strategy and its isolation effect in a visual manner.

[0016] According to the second aspect of the present application, a multi-tenant security isolation device applied to a low-code platform is also proposed, including:

[0017] A configuration module, configured to configure a first security isolation policy for at least one tenant, wherein the first security isolation policy includes N1-level isolation measures, wherein the N1-level isolation measures include at least two of physical isolation measures, logical isolation measures, data isolation measures, functional module isolation measures, and network isolation measures, and N1 is a positive integer greater than or equal to 2;

[0018] an acquisition module, configured to acquire the real-time running status and security requirements of the application of the at least one tenant; and

[0019] An adjustment module is used to: dynamically adjust the security isolation policy of at least one tenant according to the real-time running status and security requirements of the application, so that the security isolation policy of at least one tenant is adjusted from the first security isolation policy to the second security isolation policy, wherein the second security isolation policy includes N2-level isolation measures, wherein the N2-level isolation measures include at least two of physical isolation measures, logical isolation measures, data isolation measures, functional module isolation measures and network isolation measures, N2 is a positive integer greater than or equal to 2, and at least one isolation measure in the N2-level isolation measures is different from each isolation measure in the N1-level isolation measures.

[0020] According to the third aspect of the present application, an electronic device is also proposed, comprising: one or more processors; a memory for storing one or more computer programs, wherein the one or more processors execute the one or more computer programs to implement the steps of any one of the above methods.

[0021] According to a fourth aspect of the present application, a computer-readable storage medium is also proposed, on which a computer program or instruction is stored, and when the computer program or instruction is executed by a processor, the steps of any one of the above methods are implemented.

[0022] According to a fifth aspect of the present application, a computer program product is also proposed, comprising a computer program or instructions, wherein the computer program or instructions implement the steps of any one of the above methods when executed by a processor.

[0023] In the technical solution provided in the embodiment of the present application, the security of multiple tenants using the low-code platform is effectively improved by adopting multi-level isolation measures. In addition, by adopting dynamic isolation technology, the multi-level isolation measures can be adjusted in real time according to the real-time operating status and security requirements of the tenant's application, which can achieve a rapid response to security threats while maintaining the performance and business continuity of the tenant's application using the low-code platform, thereby enhancing the flexibility of the system and enabling the low-code platform to adapt to different business scenarios. BRIEF DESCRIPTION OF THE DRAWINGS

[0024] The above contents and other purposes, features and advantages of the present application will become more apparent through the following description of the embodiments of the present application with reference to the accompanying drawings, in which:

[0025] Figure 1 An application scenario diagram schematically illustrates a multi-tenant security isolation method, apparatus, device, medium, and program product applied to a low-code platform according to an embodiment of the present application;

[0026] Figure 2 A flowchart of a multi-tenant security isolation method applied to a low-code platform according to an embodiment of the present application is schematically shown;

[0027] Figure 3 A flowchart of a multi-tenant security isolation method applied to a low-code platform according to other embodiments of the present application is schematically shown;

[0028] Figure 4 A detailed flow chart of step S10 of a multi-tenant security isolation method applied to a low-code platform according to an embodiment of the present application is schematically shown;

[0029] Figure 5 A detailed flow chart of step S10 of a multi-tenant security isolation method applied to a low-code platform according to other embodiments of the present application is schematically shown;

[0030] Figure 6 A detailed flow chart of step S20 of the multi-tenant security isolation method applied to a low-code platform according to an embodiment of the present application is schematically shown;

[0031] Figure 7 A detailed flow chart of step S30 of the multi-tenant security isolation method applied to a low-code platform according to an embodiment of the present application is schematically shown;

[0032] Figure 8 A detailed flow chart of step S30 of a multi-tenant security isolation method applied to a low-code platform according to other embodiments of the present application is schematically shown;

[0033] Fig. 9A structural block diagram of a multi-tenant security isolation device applied to a low-code platform according to an embodiment of the present application is schematically shown; and

[0034] Fig.10 A block diagram of an electronic device suitable for implementing a multi-tenant security isolation method applied to a low-code platform according to an embodiment of the present application is schematically shown. DETAILED DESCRIPTION

[0035] Below, embodiments of the present application will be described with reference to the accompanying drawings. However, it should be understood that these descriptions are exemplary only and are not intended to limit the scope of the present application. In the following detailed description, for ease of explanation, many specific details are set forth to provide a comprehensive understanding of the embodiments of the present application. However, it is apparent that one or more embodiments may also be implemented without these specific details. In addition, in the following description, descriptions of known structures and technologies are omitted to avoid unnecessary confusion of the concepts of the present application.

[0036] The terms used herein are only for describing specific embodiments and are not intended to limit the present application. The terms "include", "comprising", etc. used herein indicate the existence of the features, steps, operations and / or components, but do not exclude the existence or addition of one or more other features, steps, operations or components.

[0037] All terms (including technical and scientific terms) used herein have the meanings commonly understood by those skilled in the art unless otherwise defined. It should be noted that the terms used herein should be interpreted as having a meaning consistent with the context of this specification and should not be interpreted in an idealized or overly rigid manner.

[0038] When using expressions such as "at least one of A, B, and C, etc.", they should generally be interpreted according to the meaning of the expression commonly understood by those skilled in the art (for example, "a system having at least one of A, B, and C" should include but is not limited to a system having A alone, B alone, C alone, A and B, A and C, B and C, and / or A, B, C, etc.).

[0039] In the technical solution of the present application, the user information (including but not limited to user personal information, user image information, user device information, such as location information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved are all information and data authorized by the user or fully authorized by all parties, and the collection, storage, use, processing, transmission, provision, disclosure and application of the relevant data comply with relevant laws, regulations and standards, take necessary confidentiality measures, do not violate public order and good morals, and provide corresponding operation entrances for users to choose to authorize or refuse.

[0040] In the scenario of using personal information for automated decision-making, the methods, devices, and systems provided in the embodiments of the present application provide users with corresponding operation portals for users to choose to agree or reject the results of automated decision-making; if the user chooses to reject, the expert decision-making process will be entered. The expression "automated decision-making" here refers to the activity of automatically analyzing and evaluating an individual's behavioral habits, interests and hobbies, or economic, health, credit status, etc. through a computer program, and making decisions. The expression "expert decision-making" here refers to the activity of making decisions by people who specialize in a certain field, have specialized experience, knowledge and skills, and have reached a certain level of professionalism.

[0041] First, the technical terms described in this article are explained and described as follows.

[0042] Low-code platform: A rapid software or application development platform that allows users to create applications using a graphical interface and model-driven logic without traditional programming.

[0043] Multi-tenant deployment: A software architecture technology that allows a single software instance to provide services to multiple tenants (users) while ensuring that the data and behavior of each tenant are independent and do not interfere with each other. The important feature of multi-tenant architecture is the balance between resource sharing and isolation. By sharing computing resources, storage space, network and other infrastructure, tenants can significantly reduce operating costs and improve resource utilization efficiency. At the same time, multi-tenant architecture ensures that each tenant's data is not violated and maintains data integrity and privacy by implementing strict data isolation and sophisticated access control policies.

[0044] An embodiment of the present application provides a multi-tenant security isolation method applied to a low-code platform, comprising the following steps: configuring a first security isolation strategy for at least one tenant, wherein the first security isolation strategy includes N1-level isolation measures, wherein the N1-level isolation measures include at least two of physical isolation measures, logical isolation measures, data isolation measures, functional module isolation measures and network isolation measures, and N1 is a positive integer greater than or equal to 2; obtaining the real-time operating status and security requirements of the application of the at least one tenant; and dynamically adjusting the security isolation strategy of the at least one tenant according to the real-time operating status and security requirements of the application, so that the security isolation strategy of the at least one tenant is adjusted from the first security isolation strategy to a second security isolation strategy, wherein the second security isolation strategy includes N2-level isolation measures, wherein the N2-level isolation measures include at least two of physical isolation measures, logical isolation measures, data isolation measures, functional module isolation measures and network isolation measures, and N2 is a positive integer greater than or equal to 2, and at least one of the N2-level isolation measures is different from each of the N1-level isolation measures. In the method provided in the embodiment of the present application, by adopting multi-level isolation measures, the security of multiple tenants using the low-code platform is effectively improved, for example, security-related risks such as data leakage and unauthorized access between multiple tenants are effectively prevented. In addition, by adopting dynamic isolation technology, the multi-level isolation measures can be adjusted in real time according to the real-time operating status and security requirements of the tenant's application, which can achieve a rapid response to security threats while maintaining the performance and business continuity of the tenant's application using the low-code platform, thereby enhancing the flexibility of the system and enabling the low-code platform to adapt to different business scenarios.

[0045] Figure 1 An application scenario diagram of a multi-tenant security isolation method applied to a low-code platform according to an embodiment of the present application is schematically shown.

[0046] like Figure 1 As shown, the application scenario 100 according to this embodiment may include a multi-tenant usage scenario based on a low-code platform. The network 104 is used to provide a medium for a communication link between the first terminal device 101, the second terminal device 102, the third terminal device 103 and the server 105. The network 104 may include various connection types, such as wired, wireless communication links or optical fiber cables, etc.

[0047] The user can use the first terminal device 101, the second terminal device 102, and the third terminal device 103 to interact with the server 105 through the network 104 to receive or send messages, etc. Various communication client applications can be installed on the first terminal device 101, the second terminal device 102, and the third terminal device 103, such as shopping applications, web browser applications, search applications, instant messaging tools, email clients, social platform software, etc. (only for example).

[0048] The first terminal device 101, the second terminal device 102, and the third terminal device 103 may be various electronic devices having display screens and supporting web browsing, including but not limited to smart phones, tablet computers, laptop computers, desktop computers, and the like.

[0049] The server 105 may be a server that provides various services, such as a background management server (only as an example) that provides support for websites browsed by users using the first terminal device 101, the second terminal device 102, and the third terminal device 103. The background management server may analyze and process the received data such as user requests, and feed back the processing results (such as web pages, information, or data obtained or generated according to user requests) to the terminal device.

[0050] It should be noted that the multi-tenant security isolation method applied to the low-code platform provided in the embodiment of the present application can generally be executed by the server 105. Accordingly, the multi-tenant security isolation device applied to the low-code platform provided in the embodiment of the present application can generally be set in the server 105. The multi-tenant security isolation method applied to the low-code platform provided in the embodiment of the present application can also be executed by a server or server cluster that is different from the server 105 and can communicate with the first terminal device 101, the second terminal device 102, the third terminal device 103 and / or the server 105. Correspondingly, the multi-tenant security isolation device applied to the low-code platform provided in the embodiment of the present application can also be set in a server or server cluster that is different from the server 105 and can communicate with the first terminal device 101, the second terminal device 102, the third terminal device 103 and / or the server 105.

[0051] It should be understood that Figure 1 The number of terminal devices, networks and servers in the embodiment is only for illustration. Any number of terminal devices, networks and servers may be provided according to implementation requirements.

[0052] The following will be based on Figure 1 The scene described by Figure 2~Figure 8 The multi-tenant security isolation method applied to the low-code platform of the disclosed embodiment is described in detail.

[0053] Reference Figure 2The multi-tenant security isolation method applied to a low-code platform provided in an embodiment of the present application may include steps S10~S30.

[0054] In step S10, a first security isolation strategy is configured for at least one tenant, wherein the first security isolation strategy includes N1-level isolation measures, wherein the N1-level isolation measures include at least two of physical isolation measures, logical isolation measures, data isolation measures, functional module isolation measures and network isolation measures, and N1 is a positive integer greater than or equal to 2.

[0055] It should be noted that in this article, physical isolation means completely isolating data or application environments at the physical level to ensure data security. In some exemplary embodiments, the specific execution steps to achieve physical isolation may include: determining the need and scope of physical isolation, for example, this may include identifying data and applications that need to be physically isolated; allocating independent physical servers or storage devices to different tenants or business units in the data center corresponding to the low-code platform; implementing physical isolation security measures, for example, setting up access control systems and surveillance cameras to prevent unauthorized physical access.

[0056] Logical isolation refers to isolation achieved through software logic, such as database views, user permissions, etc. In some exemplary embodiments, specific execution steps for achieving logical isolation may include: designing a logical isolation architecture, including using virtualization technology to create an isolated virtual environment; setting up independent database instances and application instances for different tenants or business units; and implementing logical access control to ensure that only authorized users and processes can access specific data and applications.

[0057] Data isolation means that in a multi-tenant architecture, the data of different tenants remain independent to prevent data leakage and confusion and to ensure data security and privacy. In some exemplary embodiments, the specific execution steps to achieve data isolation may include: classifying data and determining the isolation level according to sensitivity and importance; using data encryption technology to encrypt and store sensitive data; and implementing data access control policies to achieve different access to data at different isolation levels.

[0058] Module isolation means: in the software architecture, different functional modules are isolated to improve the stability and security of the system. In some exemplary embodiments, the specific execution steps to achieve module isolation may include: identifying and classifying the functional modules of the low-code platform; designing an independent operating environment and resource allocation for each module; and implementing interface isolation between modules to ensure that the communication between modules is controlled and secure.

[0059] Network isolation means: data isolation at the network level is achieved through network security technologies, such as firewalls, virtual private networks, etc. In some exemplary embodiments, specific execution steps for achieving network isolation may include: designing a network isolation architecture, including using firewalls, routers, switches, or virtual private networks to isolate different network areas; allocating independent network segments and IP address ranges to different tenants or business units; and implementing network access control policies, such as virtual local area networks, network access control lists, etc., to limit network traffic and access.

[0060] In an embodiment of the present application, the initial security isolation strategy configured for at least one tenant using the low-code platform is a multi-level security isolation strategy. In this article, the multi-level security isolation strategy means: including at least two of the above-mentioned physical isolation measures, logical isolation measures, data isolation measures, functional module isolation measures, and network isolation measures. Correspondingly, the single-level security isolation strategy means: including one of the above-mentioned physical isolation measures, logical isolation measures, data isolation measures, functional module isolation measures, and network isolation measures.

[0061] It should be noted that, for the convenience of description, the initial security isolation strategy is described as the first security isolation strategy, and the multi-level isolation measures included in the first security isolation strategy are described as N1-level isolation measures, where N1 is a positive integer greater than or equal to 2.

[0062] In some embodiments, there are m tenants using the low-code platform, and m is a positive integer greater than or equal to 2. In step S10, initial security isolation policies can be configured for the m tenants respectively. For example, among the m tenants, the initial security isolation policy of 1 tenant is a multi-level security isolation policy, and the initial security isolation policy of the other m-1 tenants is a single-level security isolation policy. For another example, among the m tenants, the initial security isolation policy of m1 tenants is a multi-level security isolation policy, and the initial security isolation policy of the other m-m1 tenants is a single-level security isolation policy, wherein m1 is a positive integer greater than or equal to 2 and less than m. For another example, among the m tenants, the initial security isolation policy of all m tenants is a multi-level security isolation policy.

[0063] In some embodiments, a variety of different security isolation policies may be pre-set, each security isolation policy includes different multi-level isolation measures, and then the administrator manually assigns a corresponding security isolation policy to each tenant.

[0064] For example, refer to Figure 4 , step S10 may specifically include sub-steps S101 to S103.

[0065] In sub-step S101, a security isolation policy library may be preset. Specifically, a variety of security isolation policies may be pre-defined in the low-code platform, and each policy may contain a different combination of isolation measures. For example, policy A includes physical isolation and logical isolation, policy B includes data isolation and functional module isolation, policy C includes network isolation and logical isolation, etc.

[0066] In sub-step S102, tenant information may be obtained. For example, the low-code platform may provide a user interface that allows input or import of basic tenant information and security requirements.

[0067] In sub-step S103, policy matching and allocation are performed. Specifically, the administrator of the low-code platform selects one or more matching policies from the preset security isolation policy library according to the security requirements of the tenant, and then applies them to the corresponding tenant environment. For example, if a tenant requires physical isolation and logical isolation, the administrator selects policy A for allocation and then applies it to the tenant environment.

[0068] Optionally, the administrator can configure the selected policy through the platform interface, including but not limited to defining specific parameters and rules for isolation.

[0069] Optionally, after the policy is implemented, a feedback mechanism can be provided to allow administrators to adjust and optimize the policy based on tenant feedback and system monitoring results.

[0070] In some embodiments, a corresponding security isolation policy can be automatically assigned to the tenant according to its security requirements. For example, if a tenant requires not only physical isolation but also logical isolation, a security isolation policy including both physical isolation measures and logical isolation measures can be automatically assigned to the tenant.

[0071] For example, refer to Figure 5 , step S10 may specifically include sub-steps S104~S106.

[0072] In sub-step S104, tenant requirements may be analyzed, for example, by collecting tenant security isolation requirements through questionnaires, automatic scanning, or preset templates.

[0073] In sub-step S105, intelligent matching can be performed according to tenant needs. Specifically, an intelligent matching algorithm can be built into the low-code platform to automatically select the most appropriate strategy from a preset security isolation strategy library according to the tenant's needs.

[0074] In sub-step S106, the matching security isolation policy is automatically configured and deployed. Specifically, the security isolation policy can be automatically configured according to the matching result and deployed to the tenant environment.

[0075] Optionally, the security status of the tenant environment can be continuously monitored, and policy parameters can be automatically adjusted based on the monitoring results to ensure the effectiveness and adaptability of the isolation measures.

[0076] Optionally, tenants can be allowed to provide feedback and use this feedback as a basis for optimizing policies to achieve more refined personalized security isolation.

[0077] In an embodiment of the present application, during the configuration stage, isolation strategies at multiple levels, such as physical, logical, data, module and network, are provided to tenants of the low-code platform to provide more comprehensive security protection; by configuring multi-level security isolation strategies, a multi-level and multi-dimensional security protection mechanism can be created for the low-code platform and each tenant to ensure the security of the low-code platform and the integrity of the data of each tenant.

[0078] Return to reference Figure 2 In step S20, the real-time operating status and security requirements of the application of the at least one tenant are obtained.

[0079] In some embodiments, the network traffic, system logs, and user behavior of the application can be monitored in real time through a real-time monitoring system deployed in the low-code platform.

[0080] In this embodiment, the network traffic, system logs and user behaviors of the application are monitored in real time by means of the real-time monitoring system deployed in the low-code platform, so that various detailed information of the application during operation can be accurately and timely captured. For example, by analyzing the network traffic, it can be found whether there is a large amount of abnormal data transmission, which may indicate the risk of data leakage; checking the system log can trace the errors and abnormal operations of the application; observing the user behavior can detect whether there are any violations or abnormal operations, which provides reliable data support for the subsequent accurate judgment of the security status, identification of potential security threats and reasonable adjustment of security policies, and helps to discover and solve security risks in advance. In addition, it is conducive to the realization of active security warning and disposal. For example, based on the comprehensive information obtained by real-time monitoring, it is possible to proactively predict possible security issues in advance according to the changing trends of these indicators, realize active security warning, and take corresponding measures in time to ensure the security of tenant applications, effectively reducing the probability of security incidents and the losses caused.

[0081] For example, refer to Figure 6 , step S20 may specifically include sub-steps S201~S203.

[0082] In sub-step S201, a real-time monitoring system deployed in the low-code platform is used to monitor network traffic, system logs, user behavior, etc. in real time and continuously to identify potential security threats.

[0083] In sub-step S202, an intrusion detection system and an intrusion prevention system are used to monitor and respond to abnormal behaviors.

[0084] In sub-step S203, a security information and event management system is used to centrally collect, analyze and report security events.

[0085] In some exemplary embodiments, for an enterprise-level low-code platform, the platform hosts applications of multiple different business departments (i.e., tenants), such as a financial management application of a finance department, a customer relationship management application of a sales department, and a project management application of a research and development department.

[0086] In step S20, for the application of the financial department, its real-time monitoring system focuses on monitoring the network traffic related to fund transactions, such as in-depth monitoring of the traffic involving bank transfer interface calls, and recording detailed system logs, including the entry, modification and review records of each financial data, while paying close attention to the user's operation behavior in the financial system, such as the approval process operation of large fund transfers.

[0087] Specifically, in sub-step S201, the financial application network traffic is monitored in real time and continuously through a specific traffic analysis algorithm. Once abnormal traffic fluctuations are found, such as a large number of fund transfer requests in a short period of time or access requests from unfamiliar IP addresses, combined with abnormal financial data modification records in the system log and user operation behaviors that do not comply with the regular approval process, potential security threats can be quickly identified, such as possible risks of fund theft or financial data leakage.

[0088] In sub-step S202, the intrusion detection system sets strict rules for financial applications, such as detecting abnormal database access patterns. When an unauthorized program is detected trying to export financial data in batches, the intrusion prevention system is immediately activated to block the access request, send an alert to the system administrator, and record relevant intrusion behavior information.

[0089] In sub-step S203, the security information and event management system collects all information from the financial application real-time monitoring system, intrusion detection system and intrusion prevention system, and uses data mining algorithms to analyze the correlation between these security events. For example, it discovers the connection between network traffic anomalies, database intrusion attempts and abnormal operations of specific users within a certain time period, and generates a detailed security event report. The report not only contains basic information about the event, such as the time of occurrence, the application modules involved, and related user accounts, but also provides possible risk sources and response suggestions based on data analysis.

[0090] In other exemplary embodiments, for a low-code application scenario of an e-commerce platform, there are store applications of many merchant tenants on the low-code platform.

[0091] In step S20, for the merchant's store application, the real-time monitoring system monitors the traffic related to transaction processes such as product browsing, ordering, and payment in the network traffic. The system log records operational information such as product inventory updates, order processing, and customer reviews. User behavior focuses on the merchant's management operations on product information and customers' browsing and purchasing behavior in the store.

[0092] Specifically, in sub-step S201, the real-time monitoring system continuously monitors the payment link in the network traffic. If it is found that the payment success rate of a certain store suddenly drops sharply and is accompanied by a large number of order cancellations from the same region, and the system log shows abnormal inventory modifications and merchants frequently modifying product prices and other abnormal behaviors, the system identifies possible security threats of malicious competition or fraud, such as competitors interfering with normal operations through false orders or merchants themselves engaging in unfair price manipulation.

[0093] In sub-step S202, the intrusion detection system detects suspected malicious script injection in the store application. The script attempts to tamper with the product display page to mislead consumers. The intrusion prevention system quickly isolates the affected page module, prevents the script from further execution, and notifies the merchant and platform administrator to repair the page and strengthen security, while tracking and recording the source of the malicious script.

[0094] In sub-step S203, the security information and event management system integrates various security information from e-commerce store applications and analyzes the high-incidence types and regional distribution of security events during specific promotional activities. For example, it is found that certain popular products are vulnerable to malicious order attacks during promotions. The report elaborates on the characteristics and patterns of these security events to provide a basis for the platform to formulate targeted security strategies, such as strengthening the allocation of security protection resources for popular product stores before promotional activities and optimizing the risk verification mechanism in the payment link.

[0095] In some embodiments, in step S20, security requirements input by a user through a user interface deployed in the low-code platform may be obtained, wherein the security requirements input by the user include a user-defined security isolation level.

[0096] In this embodiment, a method for user-defined isolation levels is provided through user-defined security isolation levels, so that the isolation strategy is more flexible and can better adapt to the business needs of different users. Specifically, users are allowed to input security requirements including customized security isolation levels through the user interface of the low-code platform, fully respecting and meeting the unique security requirements and business characteristics of different tenants. In addition, the tenant's own business's awareness and needs for security may change during the development process. This user-defined method allows tenants to flexibly change the security isolation level at any time according to business adjustments (such as expanding new business areas, increasing sensitive data processing, etc.), so that security protection can keep up with the pace of business development in a timely manner and avoid potential risks caused by the mismatch between security policies and businesses.

[0097] In some exemplary embodiments, for an enterprise-level low-code platform, the platform hosts applications of multiple different business departments (i.e., tenants). Due to the different nature of their business and data sensitivity, the security requirements of different departments vary significantly.

[0098] For example, the finance department handles a large amount of sensitive financial data, such as the company's capital flow, employee salary information, etc. Users in the finance department enter their security requirements through the user interface in the low-code platform. The finance department can customize the security isolation level to advanced, which means that at the network level, strict firewall rules are set between the server where the financial application is located and the application servers of other departments, and only specific IP addresses authorized by the finance department are allowed to access. In terms of data storage, financial data is encrypted and stored in a separate storage area, completely isolated from other department data, and the user interface for accessing financial data requires multiple authentications, including passwords, dynamic verification codes, and fingerprint recognition. In this way, even if the low-code platform is attacked from the outside or security vulnerabilities occur in other department applications, financial data can be kept as secure as possible to prevent financial risks caused by information leakage.

[0099] For another example, the R&D department focuses on the technical R&D and innovation of the company's products. Its security needs are unique, and the security isolation level is set to be intermediate to advanced. In terms of network, the application development environment of the R&D department is isolated to a certain extent from other networks within the company to prevent sensitive information such as code and technical documents in the R&D process from being leaked to other departments. But at the same time, in order to facilitate the acquisition of necessary technical resources and internal collaboration, a secure connection channel is established with the company's code warehouse, technical document library, etc., and strict identity authentication and encryption processing are performed on the access to the channel. For example, R&D personnel use certificate-based authentication to log in to the code warehouse, and each submission and download of the code is encrypted and transmitted, and detailed operation logs are recorded. In terms of data storage, R&D code and technical documents are managed using a version control system, and only authorized R&D personnel can access and modify specific code branches and document versions. For some core technical algorithms and product design documents that have not yet been made public, encrypted storage technology is further adopted, and only specific R&D core team members have decryption keys. In addition, the storage area of ​​the R&D department regularly backs up data, and stores the backup data in a secure data center off-site to prevent local data loss or damage from causing serious impact on R&D work.

[0100] Return to reference Figure 2 In step S30, according to the real-time running status and security requirements of the application, the security isolation policy of the at least one tenant is dynamically adjusted, so that the security isolation policy of the at least one tenant is adjusted from the first security isolation policy to the second security isolation policy, wherein the second security isolation policy includes N2-level isolation measures, wherein the N2-level isolation measures include at least two of physical isolation measures, logical isolation measures, data isolation measures, functional module isolation measures and network isolation measures, N2 is a positive integer greater than or equal to 2, and at least one isolation measure in the N2-level isolation measures is different from each isolation measure in the N1-level isolation measures.

[0101] In an embodiment of the present application, the adjusted security isolation strategy is a multi-level security isolation strategy. It should be noted that, for the convenience of description, the adjusted security isolation strategy is described as a second security isolation strategy, and the multi-level isolation measures included in the second security isolation strategy are described as N2-level isolation measures, where N2 is a positive integer greater than or equal to 2.

[0102] In some embodiments, there are m tenants using the low-code platform, where m is a positive integer greater than or equal to 2. In step S30, the security isolation policy of at least one of the m tenants may be adjusted.

[0103] For example, among the m tenants, the initial security isolation policy of one tenant is a multi-level security isolation policy, and the initial security isolation policy of the other m-1 tenants is a single-level security isolation policy. In this case, the multi-level security isolation policy of the one tenant can be adjusted to a second security isolation policy including N2-level isolation measures, and / or the single-level security isolation policy of at least one tenant among the other m-1 tenants can be adjusted to a second security isolation policy including N2-level isolation measures.

[0104] For another example, among the m tenants, the initial security isolation policy of m1 tenants is a multi-level security isolation policy, and the initial security isolation policy of the other m-m1 tenants is a single-level security isolation policy, where m1 is a positive integer greater than or equal to 2 and less than m. In this case, the multi-level security isolation policy of at least one of the m1 tenants can be adjusted to a second security isolation policy including N2-level isolation measures, and / or the single-level security isolation policy of at least one of the other m-m1 tenants can be adjusted to a second security isolation policy including N2-level isolation measures.

[0105] For another example, among the m tenants, the initial security isolation strategy of all the m tenants is a multi-level security isolation strategy. In this case, the multi-level security isolation strategy of at least one of the m tenants can be adjusted to a second security isolation strategy including N2-level isolation measures.

[0106] In the embodiments of the present application, dynamic isolation technology is used to dynamically adjust the isolation strategy according to the real-time operating status and security requirements of the application, for example, when abnormal behavior or security threats are detected, the isolation level is temporarily enhanced. In this way, the problem of resource waste caused by excessive security isolation can be avoided, and the personalized security isolation requirements of tenants can also be met.

[0107] It should be noted that dynamic isolation (or runtime isolation) technology means that resources are dynamically isolated as needed during the operation of software or applications. In some exemplary embodiments, the specific execution steps for implementing runtime isolation may include: monitoring the running status of the application to identify potential security threats; automatically adjusting the isolation strategy when abnormal behavior is detected, such as limiting the use of certain functions or adding additional security checks; and implementing runtime security measures, such as code sandboxing, anomaly detection, and automatic response mechanisms.

[0108] In the embodiment of the present application, through the above steps, the dynamic isolation technology can achieve a rapid response to security threats, improve the adaptability and response speed of the system, while maintaining system performance and business continuity. In addition, the flexibility of the system is enhanced, and the dynamic isolation technology can adjust the isolation level according to real-time security requirements, so that the low-code platform can adapt to different business scenarios.

[0109] In some exemplary embodiments, specifically, in step S30, the security isolation policy of at least one tenant can be dynamically adjusted according to the real-time running status of the application and based on preset security rules, wherein the preset security rules include multiple groups of corresponding real-time running status and security isolation policies.

[0110] In this embodiment, standardized security policy adjustment can be achieved. Specifically, the tenant security isolation policy is dynamically adjusted according to the preset security rules containing multiple sets of real-time operating states and security isolation policy correspondences, so that the security policy adjustment process is more standardized, orderly and predictable. For example, when it is monitored that the CPU usage of the tenant application is too high for a long time, the number of concurrent users exceeds the threshold, and other specific operating states appear, the isolation policy is automatically adjusted according to the preset rules, such as increasing server resource allocation, strengthening functional module isolation, etc., avoiding problems such as misjudgment or untimely adjustment that may be caused by human subjective judgment, ensuring that appropriate security policy responses can be made quickly and accurately under various common operating conditions, and improving the efficiency and accuracy of the entire security management process. In addition, known scenarios can be efficiently responded to: for various typical operating states and corresponding security risk scenarios that have been identified and sorted out in previous experience, quick matching and response can be achieved through preset rules, without the need to re-analyze and formulate response strategies every time, which can effectively ensure the safe operation of tenant applications in the face of known various business changes, load changes, etc., and reduce security vulnerabilities and business impacts caused by delayed security policy adjustment.

[0111] For example, refer to Figure 7 , the step S30 may further include sub-steps S301~S302.

[0112] In sub-step S301, the real-time running status data of the application may be analyzed to match the preset security rules.

[0113] For example, the collected application running status data is input into a pre-built analysis engine. The analysis engine has built-in preset security rule logic, which determines whether the current running status matches a set of preset security rule conditions by analyzing and comparing the data in real time. For example, if it is monitored that the network bandwidth utilization of a tenant application exceeds 90% for a short period of time and the number of concurrent users exceeds the preset threshold, and error messages related to database connection timeouts frequently appear in the system error log, the analysis engine will determine that the running status matches the preset security rules for network congestion and excessive database pressure.

[0114] In sub-step S302, a corresponding security isolation policy adjustment scheme may be determined and executed to dynamically adjust the security isolation policy of the at least one tenant.

[0115] For example, when the analysis engine determines that the running state matches a specific preset security rule, it automatically and dynamically adjusts the tenant's security isolation policy according to the security isolation policy adjustment plan corresponding to the rule. For example, it can modify the network configuration (such as adjusting firewall rules, routing policies, network traffic restrictions, etc.), change data storage and access rights (such as adjusting encryption levels, reducing or expanding data access scope, changing data backup frequency, etc.), isolate and enable functional modules (such as pausing non-critical functional modules to release system resources, isolating abnormal functional modules to prevent the spread of problems, etc.), and reallocating server resources (such as increasing or decreasing CPU and memory allocation to applications, migrating applications to server clusters with different performance, etc.).

[0116] For example, the preset security rules may include network traffic security rules. When the network inflow or outflow of the tenant application exceeds the set threshold (e.g., 100Mbps) on average for 5 consecutive minutes, and the distribution of the IP addresses of the traffic source or destination is abnormal (e.g., from a large number of different unfamiliar IP addresses or concentrated on a few external suspicious IP addresses), network isolation enhancement measures can be initiated, including but not limited to immediately blocking traffic access from abnormal IP addresses, limiting the network access rights of the application to a pre-defined whitelist range, improving the protection level of the network firewall (e.g., enabling stricter packet filtering rules, intrusion detection and defense mechanisms), and sending network traffic anomaly alerts to security administrators, while recording detailed traffic anomaly information (including the timestamp, IP address, traffic size and type of the abnormal traffic, etc.) for subsequent analysis.

[0117] For example, the preset security rules may include resource overload security rules. When the CPU usage of the tenant application remains above 95% for 10 minutes, the memory usage exceeds 90%, and the number of database connections exceeds 80% of the set maximum number of connections, and the system response time (such as page loading time, business operation completion time) is significantly extended (more than 2 times the normal average response time), the application function modules can be isolated, non-critical function modules (such as background statistical analysis modules, historical data query modules, etc.) can be suspended to release system resources, and critical business function modules (such as order processing, user login and authentication, etc.) can be migrated to an independent high-performance server resource pool; secondly, the data storage strategy is adjusted to temporarily reduce the data cache size and increase the frequency of data writing to disk to reduce memory pressure; finally, a resource overload alert is sent to the application administrator, suggesting that he check whether there is a memory leak in the application code or unreasonable resource release, and provide a detailed report on the current resource usage.

[0118] For example, the preset security rules may include data access security rules. When it is detected that the frequency of access to sensitive data (such as user's personal identity information, financial data, etc.) in the tenant application suddenly increases significantly (more than 5 times the normal access frequency) within a specific time period (such as 1 hour), and the user account or IP address of the access source does not belong to the regular authorization scope of the data, data isolation measures can be initiated to encrypt and lock the database table or data file where the sensitive data is located, and only users with high-level security authorization (such as manual approval by the security administrator or multi-factor authentication) can decrypt and access; at the same time, trace the source of data access anomalies, freeze the user accounts involved, ban the relevant IP addresses, and initiate a security audit process to record in detail all operation steps of abnormal data access (including SQL statements accessed, operation time, data modification content, etc.) for security incident investigation and analysis, and send data access anomaly alerts to data owners and security teams.

[0119] In some exemplary embodiments, specifically, in step S30, the security isolation policy of the at least one tenant may be dynamically adjusted according to a user-defined security isolation level.

[0120] In this embodiment, the security isolation strategy of the tenant is dynamically adjusted according to the user-defined security isolation level, which can ensure that the security protection measures are highly consistent with the security level expected by the tenant, and achieve accurate docking from the tenant's subjective security needs to the actual implementation of the security strategy, so that the tenant can truly feel that the security protection is customized according to their own needs, and enhance the tenant's trust in the platform's security capabilities. In addition, the security management process is simplified. For tenants, there is no need to deeply understand the complex security technical details and the specific configuration of various isolation measures. They only need to set the security isolation level through simple interface operations to drive the platform to make corresponding security policy adjustments, simplifying the process of tenants participating in security management, lowering the threshold for security management, and enabling non-professional tenants to easily control the security level of their own applications.

[0121] For example, refer to Figure 8 , the step S30 may further include sub-steps S303~S305.

[0122] In sub-step S303, the user-defined security isolation level may be received and parsed.

[0123] For example, a dedicated security isolation level setting area is set in the user interface of the low-code platform, where the user enters the desired security isolation level value or selects the corresponding security isolation level description option (such as low, medium, high, and very high). After receiving the user input, the platform parses it, determines the security isolation level information specified by the user, and converts it into a format that the system can recognize and process, such as converting the text description into a corresponding digital code or configuration parameter set.

[0124] In sub-step S304, a security policy template corresponding to the user-defined level is loaded.

[0125] For example, according to the parsed security isolation level information, the matching security isolation policy template is retrieved and loaded from the pre-stored security policy template library. These templates contain configuration parameters and rule sets for physical isolation measures, logical isolation measures, data isolation measures, functional module isolation measures, and network isolation measures for different security isolation levels.

[0126] In sub-step S305, the security policy template is applied to dynamically adjust the security isolation policy of at least one tenant.

[0127] For example, the loaded security policy template is applied to the corresponding tenant application to dynamically adjust its existing security isolation policy. The dynamic adjustment includes, but is not limited to, modifying the network configuration file to update the firewall rules, adjusting the network routing settings, updating the encryption method and permission settings for data storage, reconfiguring the access rights between functional modules, and modifying the user authentication and authorization process.

[0128] In an embodiment of the present application, a multi-level security isolation strategy is adopted in both the configuration stage and the adjustment stage. The multi-level security isolation strategy can provide comprehensive security protection at different levels, while allowing tenants to customize it according to specific needs to balance security and business efficiency.

[0129] Reference Figure 3 , the multi-tenant security isolation method applied to the low-code platform provided in the embodiment of the present application may include steps S10 to S70. It should be noted that steps S10 to S30 can refer to the above description.

[0130] In step S40, it can be determined whether it needs to be integrated with other security measures. For example, when the security isolation level determined by analyzing the real-time running state of the application or the security isolation level input by the user is above the intermediate level, it is determined that it needs to be integrated with other security measures.

[0131] In step S50, when it is necessary to integrate with other security measures, the N2 level isolation measures are integrated with other security measures so that the second security isolation strategy also includes other security measures, wherein the other security measures include at least one of encryption measures, authentication measures and access control measures.

[0132] For example, encryption measures can be implemented using a variety of encryption algorithms and technologies. For example, for data storage encryption, the Advanced Encryption Standard algorithm can be used to encrypt sensitive data stored in a database or file system. For data transmission encryption, the Transport Layer Security protocol can be used.

[0133] For example, authentication measures can be used to confirm the identity of a user or device. Authentication methods can include password-based authentication, such as a user entering a pre-set username and password when logging into an email or internal corporate office system. Multi-factor authentication can be used. For example, in a financial institution's online banking system, in addition to requiring users to enter their account passwords, users can also be required to enter a verification code sent via SMS text messages or use biometric identification technologies such as fingerprint recognition and facial recognition for secondary authentication. It is also possible to combine device identification (such as the device's MAC address, IMEI number, etc.) with user authentication.

[0134] For example, access control measures can include role-based access control. In an enterprise resource planning system, different roles are given different access rights. Access control measures can also include attribute-based access control, which can determine access rights based on more attributes.

[0135] In the embodiments of the present application, various isolation measures and other security measures can be flexibly combined according to actual conditions to achieve better security protection effects. For example, encryption measures can be added on the basis of physical isolation to prevent leakage of sensitive information; authentication measures can be added on the basis of logical isolation to prevent unauthorized access.

[0136] In the embodiments of the present application, by combining various isolation measures and other security measures, the comprehensive security protection capability can be enhanced. For example, in the application scenario of financial tenants, in addition to the original network isolation and other measures, encryption measures are integrated to encrypt the transmission and storage of financial transaction data to prevent data leakage; authentication measures are used to ensure that only legitimate users can access key business functions; access control measures are used to accurately limit the operation permissions of different roles to different functional modules and data, and resist various security threats in an all-round and multi-level manner, greatly enhancing the defense capabilities of tenant applications in the face of complex network attacks, internal data theft and other risks, and improving the overall security level. In addition, it can also flexibly respond to diverse security needs. For example, different tenants have different focuses and needs for security. This fusion mechanism can combine security measures on demand according to the characteristics and needs of specific tenants to achieve customized security protection. For example, e-commerce tenants may pay more attention to data encryption and user authentication to protect user shopping information and payment security; while corporate office tenants may focus on access control and logical isolation to ensure the confidentiality and integrity of office documents and business processes, and improve the adaptability of security solutions to the diverse needs of multiple tenants.

[0137] In step S60, when the security level of the second security isolation policy is higher than the security level of the first security isolation policy, a load balancing mechanism and a redundancy mechanism are run to enable the core service of the at least one tenant to run normally.

[0138] Specifically, if the security isolation policy of a tenant is upgraded and causes excessive resource consumption, the load balancing mechanism and redundancy mechanism can be activated to balance the performance of the entire system and ensure the stable operation of key services. For example, some requests can be distributed to other servers for processing through the load balancing algorithm to reduce the pressure on the main server; or some core services can be copied to the backup server to ensure that even if the main server fails, it will not affect the user experience.

[0139] It should be noted that in a multi-tenant environment of a low-code platform, by running a load balancing mechanism, the load balancer can distribute requests based on multi-dimensional factors such as the real-time traffic demand of each tenant's application, server resource usage, and tenant priority. For example, for some key business tenants (such as the core business departments of an enterprise or tenants with a higher payment level), the load balancer can be set to prioritize their service quality and use a weighted least connection algorithm, that is, to distribute requests based on the current number of server connections and the tenant's weight.

[0140] Low-code platforms can use clustering technology to configure redundant servers for each tenant or tenant group. For example, for financial tenant applications, due to their extremely high requirements for security and stability, a master-slave server cluster can be deployed for them. When the master server fails, the slave server can quickly take over the service, and the data is synchronized in real time between the master and slave servers to ensure business continuity. Network link redundancy is achieved by setting up multiple network connection paths in the network architecture of the low-code platform. For example, on the network link connecting the tenant application with the external network or other key services, two lines of different operators are deployed at the same time. When one line fails (such as network congestion or physical link damage), it automatically switches to another line to ensure that the tenant application and the external communication are not affected. Data redundancy uses the data storage architecture of the low-code platform to store multiple copies of tenant data. For example, in a distributed storage system, the core business data of tenants (such as order data of e-commerce tenants, financial data of enterprise tenants, etc.) is stored on storage nodes in different geographical locations, and redundancy algorithms such as erasure codes are used. Even if some storage nodes fail, the original data can be restored through the data of the remaining nodes to ensure data integrity and availability.

[0141] In the multi-tenant scenario of the low-code platform, the core services of different tenants are different. For e-commerce tenants, product catalog management, shopping cart functions, order processing and payment services are core services. These services are directly related to the user's shopping experience and the smooth progress of transactions. The core services of corporate office tenants may include document collaboration, project management, workflow approval, etc. For example, the document collaboration service needs to ensure that multiple users can edit documents online in real time and that data synchronization is accurate. The project management service must ensure the normal operation of project progress tracking, task allocation and resource allocation. The workflow approval service must ensure the smoothness of the approval process and data security.

[0142] In an exemplary embodiment, there are multiple enterprise tenants on the low-code enterprise service platform, covering different industries. In the initial state, the first security isolation strategy is adopted. The application services of each tenant distribute the access requests (such as login, document access, process initiation, etc.) of different enterprise employees to the corresponding server resource pool through the network load balancing device according to the IP hash algorithm. The data is stored in the enterprise-level storage array, and the redundancy of data storage is ensured by using a dual-machine hot standby method.

[0143] When some enterprise tenants face increased industry regulatory requirements due to business expansion, the platform upgrades their security isolation strategy to the second security isolation strategy. The load balancing mechanism begins to manage the core services of enterprise tenants in a refined manner. For example, for the core document collaboration service of enterprise office tenants, their requests are assigned to a server group that has been specially optimized for file transfer and concurrent processing capabilities, and the least connection algorithm is used to preferentially assign requests to the document server with the least current connections to ensure the smoothness of multiple people editing documents at the same time. In terms of redundancy mechanism, a disaster recovery center for enterprise tenant data is established in an off-site data center to achieve off-site redundant backup of data, and at the network level, redundant firewall devices are added between the enterprise internal network and the external network to prevent single point failures. When the internal network of a certain enterprise tenant is attacked by a network attack, the redundant firewall can share the traffic cleaning task to ensure that legitimate office application access requests (such as document access, process approval and other core services) can pass normally, thereby ensuring the normal office operation of enterprise tenants in a complex security environment and the orderly development of the enterprise's business activities.

[0144] In this embodiment, when the security level of the second security isolation policy is higher than that of the first security isolation policy, the load balancing mechanism and the redundancy mechanism are run, which can effectively deal with the increased resource consumption and load changes caused by the security policy upgrade, and ensure that the core services of at least one tenant can operate normally, thereby ensuring the stability of the core services. In addition, the system fault tolerance is enhanced. In a complex multi-tenant environment, various unforeseen failures and risks may occur at any time. The introduction of load balancing and redundancy mechanisms greatly enhances the fault tolerance of the entire system, enabling it to remain stable in the face of hardware failures, network attacks, high concurrent loads and other adverse factors, thereby improving the reliability and availability of the entire low-code platform multi-tenant system, and ensuring the continuous service capabilities of tenant applications as a whole.

[0145] In step S70, the first security isolation strategy and its isolation effect, and the second security isolation strategy and its isolation effect are displayed in a visual manner.

[0146] Specifically, it can provide users with intuitive and easy-to-understand information feedback through graphical interfaces or other interactive means, helping users understand the current security isolation situation and discover potential risks in a timely manner. For example, it can display the independent data flows and communication links between tenants, allowing users to see at a glance which data is protected. It can also display the memory space, disk space and file structure owned by each tenant, allowing users to more clearly understand their resource usage.

[0147] In this embodiment, the first security isolation strategy and its isolation effect and the second security isolation strategy and its isolation effect are displayed in a visual way, so that tenants and platform managers can intuitively and clearly understand the specific situation and changes of security protection. Tenants can clearly see the security status of their applications and the degree of protection under different strategies, which is convenient for them to make reasonable security decisions; platform managers can also quickly grasp the security configuration and overall security situation of each tenant through the visual interface, timely discover potential problems and optimize them, and enhance the transparency and controllability of the security management process. In addition, the visual display becomes an effective bridge for communication between tenants and the platform on security strategies. Both parties can communicate based on the intuitive display content and jointly discuss whether the security strategy is appropriate and whether it needs to be improved. At the same time, by comparing the visualization effects of different stages and different strategies, it is more convenient to evaluate the effectiveness of the security strategy, which provides an intuitive reference basis for further optimizing the security isolation strategy and integrating other security measures, which helps to continuously improve the security level of the entire multi-tenant environment.

[0148] It should be noted that although Figure 2~Figure 8 The steps in the flowchart are shown in sequence as indicated by the arrows, but the steps are not necessarily executed in the order indicated by the arrows. Unless otherwise specified in this document, there is no strict order restriction for the execution of the steps, and the steps can be executed in other orders. Figure 2~Figure 8 At least part of the steps in the flowchart shown may include multiple sub-steps or multiple stages. These sub-steps or stages are not necessarily executed at the same time, but can be executed at different times. The execution order of these sub-steps or stages is not necessarily sequential, but can be executed in turn or alternately with other steps or at least part of the sub-steps or stages of other steps.

[0149] Based on the above multi-tenant security isolation method applied to the low-code platform, the embodiment of the present application also provides a multi-tenant security isolation device applied to the low-code platform. Fig. 9 The device is described in detail.

[0150] Fig. 9A block diagram of a multi-tenant security isolation device applied to a low-code platform of the present application is shown. Fig. 9 As shown, an embodiment of the present application provides a multi-tenant security isolation device 900 applied to a low-code platform, including: a configuration module 901, an acquisition module 902, and an adjustment module 903.

[0151] The configuration module 901 is used to configure a first security isolation policy for at least one tenant, wherein the first security isolation policy includes N1-level isolation measures, wherein the N1-level isolation measures include at least two of physical isolation measures, logical isolation measures, data isolation measures, functional module isolation measures, and network isolation measures, and N1 is a positive integer greater than or equal to 2. In some embodiments, the configuration module 901 can be used to execute step S10 and its sub-steps described above, which will not be repeated here.

[0152] The acquisition module 902 is used to acquire the real-time running status and security requirements of the application of the at least one tenant. In some embodiments, the acquisition module 902 can be used to execute the above-described step S20 and its sub-steps, which will not be repeated here.

[0153] The adjustment module 903 is used to: dynamically adjust the security isolation policy of at least one tenant according to the real-time running status and security requirements of the application, so that the security isolation policy of at least one tenant is adjusted from the first security isolation policy to the second security isolation policy, wherein the second security isolation policy includes N2-level isolation measures, wherein the N2-level isolation measures include at least two of physical isolation measures, logical isolation measures, data isolation measures, functional module isolation measures and network isolation measures, N2 is a positive integer greater than or equal to 2, and at least one of the N2-level isolation measures is different from each of the N1-level isolation measures. In some embodiments, the adjustment module 903 can be used to execute step S30 and its sub-steps described above, which will not be repeated here.

[0154] Optionally, the device also includes: a judgment module, used to judge whether it is necessary to merge with other security measures; and a fusion module, used to: when it is necessary to merge with other security measures, merge the N2 level isolation measures with other security measures, so that the second security isolation strategy also includes other security measures, wherein the other security measures include at least one of encryption measures, authentication measures and access control measures.

[0155] Optionally, the acquisition module 902 is used to: monitor the network traffic, system logs and user behavior of the application in real time through a real-time monitoring system deployed in the low-code platform.

[0156] Optionally, the adjustment module 903 is used to dynamically adjust the security isolation policy of at least one tenant according to the real-time running status of the application and based on preset security rules, wherein the preset security rules include multiple groups of corresponding real-time running status and security isolation policies.

[0157] Optionally, the acquisition module 902 is used to: obtain security requirements input by a user through a user interface deployed in the low-code platform, wherein the security requirements input by the user include a user-defined security isolation level.

[0158] Optionally, the adjustment module 903 is used to dynamically adjust the security isolation policy of the at least one tenant according to a user-defined security isolation level.

[0159] Optionally, the device also includes: an operation module, which is used to run a load balancing mechanism and a redundancy mechanism when the security level of the second security isolation policy is higher than the security level of the first security isolation policy, so that the core service of the at least one tenant can run normally.

[0160] Optionally, the device further includes: a display module, configured to display the first security isolation strategy and its isolation effect, and the second security isolation strategy and its isolation effect in a visual manner.

[0161] In the device provided in the embodiment of the present application, by adopting multi-level isolation measures, the security of multiple tenants using the low-code platform is effectively improved, for example, security-related risks such as data leakage and unauthorized access between multiple tenants are effectively prevented. In addition, by adopting dynamic isolation technology, the multi-level isolation measures can be adjusted in real time according to the real-time operating status and security requirements of the tenant's application, which can achieve a rapid response to security threats while maintaining the performance and business continuity of the tenant's application using the low-code platform, thereby enhancing the flexibility of the system and enabling the low-code platform to adapt to different business scenarios.

[0162] According to an embodiment of the present application, any multiple modules in the configuration module 901, the acquisition module 902 and the adjustment module 903 can be combined into one module for implementation, or any one of the modules can be split into multiple modules. Alternatively, at least part of the functions of one or more of these modules can be combined with at least part of the functions of other modules and implemented in one module. According to an embodiment of the present application, at least one of the configuration module 901, the acquisition module 902 and the adjustment module 903 can be at least partially implemented as a hardware circuit, such as a field programmable gate array (FPGA), a programmable logic array (PLA), a system on a chip, a system on a substrate, a system on a package, an application-specific integrated circuit (ASIC), or can be implemented by hardware or firmware such as any other reasonable way of integrating or packaging the circuit, or implemented in any one of the three implementation methods of software, hardware and firmware or in any appropriate combination of any of them. Alternatively, at least one of the configuration module 901, the acquisition module 902 and the adjustment module 903 can be at least partially implemented as a computer program module, and when the computer program module is run, the corresponding function can be executed.

[0163] Fig.10 A block diagram of an electronic device suitable for implementing a multi-tenant security isolation method applied to a low-code platform according to an embodiment of the present application is schematically shown.

[0164] like Fig.10 As shown, the electronic device 1000 according to an embodiment of the present application includes a processor 1001, which can perform various appropriate actions and processes according to a program stored in a read-only memory (ROM) 1002 or a program loaded from a storage part 1008 into a random access memory (RAM) 1003. The processor 1001 may include, for example, a general-purpose microprocessor (such as a CPU), an instruction set processor and / or a related chipset and / or a dedicated microprocessor (for example, an application-specific integrated circuit (ASIC)), etc. The processor 1001 may also include an onboard memory for caching purposes. The processor 1001 may include a single processing unit or multiple processing units for performing different actions of the method flow according to an embodiment of the present application.

[0165] In RAM 1003, various programs and data required for the operation of electronic device 1000 are stored. Processor 1001, ROM 1002 and RAM 1003 are connected to each other via bus 1004. Processor 1001 performs various operations of the method flow according to the embodiment of the present application by executing the program in ROM 1002 and / or RAM 1003. It should be noted that the program can also be stored in one or more memories other than ROM 1002 and RAM 1003. Processor 1001 can also perform various operations of the method flow according to the embodiment of the present application by executing the program stored in the one or more memories.

[0166] According to an embodiment of the present application, the electronic device 1000 may further include an input / output (I / O) interface 1005, which is also connected to the bus 1004. The electronic device 1000 may further include one or more of the following components connected to the input / output (I / O) interface 1005: an input portion 1006 including a keyboard, a mouse, etc.; an output portion 1007 including a cathode ray tube (CRT), a liquid crystal display (LCD), etc., and a speaker, etc.; a storage portion 1008 including a hard disk, etc.; and a communication portion 1009 including a network interface card such as a LAN card, a modem, etc. The communication portion 1009 performs communication processing via a network such as the Internet. A drive 1010 is also connected to the input / output (I / O) interface 1005 as needed. A removable medium 1011, such as a magnetic disk, an optical disk, a magneto-optical disk, a semiconductor memory, etc., is installed on the drive 1010 as needed, so that the computer program read therefrom is installed into the storage portion 1008 as needed.

[0167] The present application also provides a computer-readable storage medium, which may be included in the device / apparatus / system described in the above embodiments; or may exist independently without being assembled into the device / apparatus / system. The above computer-readable storage medium carries one or more programs, and when the above one or more programs are executed, the method according to the embodiment of the present application is implemented.

[0168] According to an embodiment of the present application, the computer-readable storage medium may be a non-volatile computer-readable storage medium, for example, it may include but is not limited to: a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination thereof. In the present application, a computer-readable storage medium may be any tangible medium containing or storing a program, which may be used by or in combination with an instruction execution system, an apparatus or a device. For example, according to an embodiment of the present application, the computer-readable storage medium may include the ROM 1002 and / or RAM 1003 described above and / or one or more memories other than ROM 1002 and RAM 1003.

[0169] The embodiment of the present application also includes a computer program product, which includes a computer program, and the computer program includes a program code for executing the method shown in the flowchart. When the computer program product is run in a computer system, the program code is used to enable the computer system to implement the multi-tenant security isolation method applied to the low-code platform provided in the embodiment of the present application.

[0170] The computer program executes the above functions defined in the system / device of the embodiment of the present application when the processor 1001 executes the computer program. According to the embodiment of the present application, the system, device, module, unit, etc. described above can be implemented by a computer program module.

[0171] In one embodiment, the computer program may rely on tangible storage media such as optical storage devices, magnetic storage devices, etc. In another embodiment, the computer program may also be transmitted and distributed in the form of signals on a network medium, and downloaded and installed through the communication part 1009, and / or installed from the removable medium 1011. The program code contained in the computer program may be transmitted using any appropriate network medium, including but not limited to: wireless, wired, etc., or any suitable combination of the above.

[0172] In such an embodiment, the computer program can be downloaded and installed from the network through the communication part 1009, and / or installed from the removable medium 1011. When the computer program is executed by the processor 1001, the above functions defined in the system of the embodiment of the present application are performed. According to the embodiment of the present application, the system, device, means, module, unit, etc. described above can be implemented by a computer program module.

[0173] According to an embodiment of the present application, the program code for executing the computer program provided by the embodiment of the present application can be written in any combination of one or more programming languages, and specifically, these computing programs can be implemented using high-level process and / or object-oriented programming languages, and / or assembly / machine languages. Programming languages ​​include, but are not limited to, such as Java, C++, python, "C" language or similar programming languages. The program code can be executed entirely on the user computing device, partially on the user device, partially on the remote computing device, or completely on the remote computing device or server. In the case of a remote computing device, the remote computing device can be connected to the user computing device through any type of network, including a local area network (LAN) or a wide area network (WAN), or can be connected to an external computing device (e.g., using an Internet service provider to connect through the Internet).

[0174] The flow chart and block diagram in the accompanying drawings illustrate the possible architecture, function and operation of the system, method and computer program product according to various embodiments of the present application. In this regard, each box in the flow chart or block diagram can represent a module, a program segment or a part of a code, and the above-mentioned module, program segment or a part of a code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the box can also occur in a different order from the order marked in the accompanying drawings. For example, two boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram or flow chart, and the combination of the boxes in the block diagram or flow chart can be implemented with a dedicated hardware-based system that performs a specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0175] It will be appreciated by those skilled in the art that the features described in the various embodiments of the present application may be combined and / or combined in a variety of ways, even if such combinations or combinations are not explicitly described in the present application. In particular, without departing from the spirit and teachings of the present application, the features described in the various embodiments of the present application may be combined and / or combined in a variety of ways. All of these combinations and / or combinations fall within the scope of the present application.

Claims

1. A multi-tenant security isolation method applied to a low-code platform, characterized in that: The following steps are involved: Configuring a first security isolation policy for at least one tenant, wherein the first security isolation policy includes N1-level isolation measures, wherein the N1-level isolation measures include at least two of physical isolation measures, logical isolation measures, data isolation measures, functional module isolation measures, and network isolation measures, and N1 is a positive integer greater than or equal to 2; Obtaining the real-time operating status and security requirements of the application of the at least one tenant; and According to the real-time running status and security requirements of the application, the security isolation policy of the at least one tenant is dynamically adjusted so that the security isolation policy of the at least one tenant is adjusted from the first security isolation policy to the second security isolation policy, wherein the second security isolation policy includes N2-level isolation measures, wherein the N2-level isolation measures include at least two of physical isolation measures, logical isolation measures, data isolation measures, functional module isolation measures and network isolation measures, N2 is a positive integer greater than or equal to 2, and at least one isolation measure in the N2-level isolation measures is different from each isolation measure in the N1-level isolation measures.

2. The method according to claim 1, characterized in that The method further comprises: Determine whether integration with other security measures is necessary; and When it is necessary to integrate with other security measures, the N2 level isolation measures are integrated with other security measures so that the second security isolation strategy also includes other security measures, wherein the other security measures include at least one of encryption measures, authentication measures and access control measures.

3. The method according to claim 1, characterized in that Obtaining the real-time operating status and security requirements of the application of at least one tenant includes: monitoring the network traffic, system logs and user behavior of the application in real time through a real-time monitoring system deployed in the low-code platform.

4. The method according to claim 3, characterized in that: Dynamically adjusting the security isolation policy of at least one tenant according to the real-time operating status and security requirements of the application includes: dynamically adjusting the security isolation policy of at least one tenant according to the real-time operating status of the application based on preset security rules, wherein the preset security rules include multiple groups of corresponding real-time operating status and security isolation policies.

5. The method according to claim 1, characterized in that: Obtaining the real-time operating status and security requirements of the application of at least one tenant includes: obtaining the security requirements input by the user through the user interface deployed in the low-code platform, wherein the security requirements input by the user include a user-defined security isolation level.

6. The method according to claim 5, characterized in that Dynamically adjusting the security isolation policy of the at least one tenant according to the real-time running status and security requirements of the application includes: dynamically adjusting the security isolation policy of the at least one tenant according to a user-defined security isolation level.

7. The method according to any one of claims 1 to 6, characterized in that The method also includes: when the security level of the second security isolation policy is higher than the security level of the first security isolation policy, running a load balancing mechanism and a redundancy mechanism to enable the core service of the at least one tenant to operate normally.

8. The method according to any one of claims 1 to 6, characterized in that The method also includes: displaying the first security isolation strategy and its isolation effect, and the second security isolation strategy and its isolation effect in a visual manner.

9. A multi-tenant security isolation device applied to a low-code platform, characterized in that: include: A configuration module, configured to configure a first security isolation policy for at least one tenant, wherein the first security isolation policy includes N1-level isolation measures, wherein the N1-level isolation measures include at least two of physical isolation measures, logical isolation measures, data isolation measures, functional module isolation measures, and network isolation measures, and N1 is a positive integer greater than or equal to 2; an acquisition module, configured to acquire the real-time running status and security requirements of the application of the at least one tenant; and An adjustment module is used to: dynamically adjust the security isolation policy of at least one tenant according to the real-time running status and security requirements of the application, so that the security isolation policy of at least one tenant is adjusted from the first security isolation policy to the second security isolation policy, wherein the second security isolation policy includes N2-level isolation measures, wherein the N2-level isolation measures include at least two of physical isolation measures, logical isolation measures, data isolation measures, functional module isolation measures and network isolation measures, N2 is a positive integer greater than or equal to 2, and at least one isolation measure in the N2-level isolation measures is different from each isolation measure in the N1-level isolation measures.

10. An electronic device, comprising: one or more processors; a memory for storing one or more computer programs, It is characterized in that the one or more processors execute the one or more computer programs to implement the steps of the method according to any one of claims 1 to 8.

11. A computer-readable storage medium having a computer program or instruction stored thereon, characterized in that: When the computer program or instruction is executed by a processor, the steps of the method according to any one of claims 1 to 8 are implemented.

12. A computer program product comprising a computer program or instructions, characterized in that When the computer program or instruction is executed by a processor, the steps of the method according to any one of claims 1 to 8 are implemented.

Images