Heterogeneous system organization user data synchronization method, system, device and medium

Abstract

The invention relates to a heterogeneous system organization user data synchronization method, system and device and a medium. The method comprises the following steps: acquiring user identity authentication information and organization protocol information corresponding to different application systems through a unified identity authentication module, and performing key application information configuration on each application system by an application configuration module according to the organization protocol information, and the data real-time acquisition module monitors and acquires the configured key application information and the to-be-synchronized user identity authentication information corresponding to the key application information, and outputs the configured key application information and the to-be-synchronized user identity authentication information to the data processing module. The updating information of the target data is calculated through the data processing module according to the to-be-synchronized user identity authentication information, and the updating information corresponding to the application system is synchronized through the synchronization module according to the attribute of the updating information. By adopting the method, synchronization of multi-strategy users and organization data can be realized, and the cost of integrated projects is effectively reduced.

Description

Technical Field

[0001] The present invention relates to the field of identity authentication organization technology, and in particular to a method, system, device and medium for synchronizing user data in a heterogeneous system organization. Background Art

[0002] With the vigorous rise of the digital economy, informatization and digitalization have become the leading forces in leading innovation, driving transformation, and shaping advantages. Enterprise informatization construction and digital transformation are not only the inherent needs of the sustainable development of enterprises themselves, but also an important guarantee for improving market competitiveness. In order to quickly realize the needs of enterprise digital transformation, enterprises will adopt different systems from different suppliers, such as OA, CRM, WMS, SCM, MES, DCS, Internet of Things platform systems, etc. If it is necessary to log in between multiple application systems, the user's memory burden will be very serious. Most of the single sign-on systems on the market are centralized, and these systems usually have their own independent organization management and user management modules. For users, even if the consistency of organizational users is correctly guaranteed among various users, it is a complicated and arduous task. Therefore, there is an urgent need for a single sign-on system that can automatically synchronize organizational user data in multiple directions, and can unify single sign-on between various application systems, and can automatically update organizations and users without affecting the use of various application systems. However, at this stage, the application systems of enterprises are generally from different suppliers, using different technology stacks, and most of them are in the operation and maintenance period. If a unified identity authentication system is uniformly adapted, the transformation technology is difficult, the risk is high, and the transformation cost is high. Therefore, it is difficult to balance the scope of transformation of the application system and the centralized application that is convenient for internal personnel of the enterprise.

[0003] At present, many scholars have conducted in-depth research on the integration of multiple systems and have achieved certain research results. For example, patent CN202410822212.1 proposes a single sign-on authentication method and system based on Token verification. This method solves the problem that the existing single sign-on authentication technology still has Token verification that occupies more bandwidth and is inefficient during verification, resulting in a decrease in user experience; patent CN202311595939.2 discloses a single sign-on method, device and storage medium based on centralized authentication services. This method improves the user experience when users use the configured single point service protocol application; patent CN202311356332.9 discloses an identity management method and system based on an identity basic database. The system provides an identity management method for members of each school, specifically for identity authentication management of school members in the process of accessing educational resources of the school or other schools, solves the problems of unified identity authentication and data sharing between the teaching systems of various schools, promotes the sharing of public educational resources of various schools, meets the urgent needs of teachers and students for information applications, and provides efficient services for school teaching, scientific research and management.

[0004] However, there are some problems with the integration of application systems at present. For example, the traditional single sign-on system can solve the memory burden problem of users in multiple systems, but the transformation of the application system is relatively large. If there is a top-level plan from the beginning and a unified centralized user and permission management system is adopted, the problem can be solved, but in fact, these systems are often built by multiple suppliers, and many are in the operation and maintenance period. These systems have their own independent organization management and user management modules, and the technology stacks used by each system are not unified. If the traditional single sign-on method is adopted, the scope of change to the application system is large, the technical requirements for the transformation are high, the scope is wide, and the risk is high. If the transformation is improper, in serious cases, it will affect the operation of the system's production system and cause huge losses to the enterprise. Therefore, a centralized management system that unifies users and organizations is needed, and can automatically and synchronously update data between the application system and the management system through the management system, so as to achieve the purpose of decoupling from the application system and quickly realizing application integration, and effectively reduce the risk of transformation, and help information and digital transformation.

[0005] Many scholars have conducted some technical discussions to easily implement the single sign-on problem of multiple application systems. One of them is to adopt a centralized user and organization management method. In this way, all application systems share a set of users and organizations. In the integration process, due to the different construction times of each system, the enterprise's application system is generally built before the unified identity authentication system. In the early stage, there is a lack of unified planning, so each application system has its own user organization management module, corresponding to the menu authority and other functional modules. If unified integration is required, a lot of modification work needs to be done on the application system, which is large and complicated, greatly increasing the system cost and risk. Another part of the single sign-on method uses a unified identity authentication system that is only responsible for login authentication, issuing authentication tokens, and verifying the legitimacy of the logged-in user. However, this method can only perform login verification. If users and organizations change in multiple systems, it is difficult to synchronize between various application systems. There are also some systems that can synchronize users and organizations, but they are all synchronized from the unified identity authentication system to the application system. This synchronization method is simple in logic, but it requires manual synchronization and user changes in the application system cannot be synchronized to other application systems. User management is still overly dependent on the unified identity authentication system, and it is not very friendly to the synchronization of heterogeneous systems. The synchronization logic of the application system needs to be updated. Summary of the invention

[0006] Based on this, it is necessary to provide a method, system, computer device and storage medium for synchronizing user data of heterogeneous system organizations, which can effectively reduce the synchronization cost of users in heterogeneous enterprise system organizations, in response to the above technical problems.

[0007] A method for synchronizing user data in a heterogeneous system is applied to a heterogeneous data synchronization system, wherein the heterogeneous data synchronization system includes: a unified identity authentication module, an application configuration module, a real-time data acquisition module, a data processing module, a synchronization module, and a data synchronization monitoring module. The method includes:

[0008] The user identity authentication information and organizational protocol information corresponding to different application systems are obtained through the unified identity authentication module. The application configuration module configures the key application information of each application system according to the organizational protocol information, so that the real-time data acquisition module listens to and collects the configured key application information and the user identity authentication information to be synchronized corresponding to the key application information, and outputs the configured key application information and the user identity authentication information to be synchronized to the data processing module.

[0009] The data processing module calculates the update information of the target data according to the identity authentication information of the user to be synchronized, and the synchronization module synchronizes the update information corresponding to the application system according to the attributes of the update information.

[0010] A user data synchronization system for heterogeneous system organization, the system comprising:

[0011] The unified identity authentication module is used to build a centralized unified identity authentication management system. The unified identity authentication management system includes a centralized organizational system and user system, and supports CAS, OAuth2, JWT, TOKEN and OPENID protocol information authentication methods. Each heterogeneous application system selects different protocol information to uniformly authenticate the legitimacy of the current application system and the current user authentication information to complete single sign-on.

[0012] The application configuration module is used to configure application-related information in the unified identity authentication system, including application basic information, application system data source, and application data synchronization table information, and configure the mapping relationship between heterogeneous data in the same application system.

[0013] The real-time data collection module is used to monitor and collect the changed data in the tables of the configured application systems that need to be synchronized and the organization and user tables in the unified identity authentication system, and put the collected data sets into the message queue.

[0014] The data processing module is used to process the collected data, calculate the data that needs to be updated or added and the target content of the update, and put it into the topic that needs to be updated.

[0015] The synchronization module is used to extract the data that needs to be updated from the updated topic, perform synchronous update operations on organizations and users, and write failed data into the corresponding unified identity authentication system synchronization log table.

[0016] The data synchronization monitoring module is used to monitor the data synchronization results processed by the synchronization module, and feed the data that failed to be synchronized back to the administrator, who then resynchronizes the data or does not process it.

[0017] A computer device comprises a memory and a processor, wherein the memory stores a computer program, and when the processor executes the computer program, the following steps are implemented:

[0018] The user identity authentication information and organizational protocol information corresponding to different application systems are obtained through the unified identity authentication module. The application configuration module configures the key application information of each application system according to the organizational protocol information, so that the real-time data acquisition module listens to and collects the configured key application information and the user identity authentication information to be synchronized corresponding to the key application information, and outputs the configured key application information and the user identity authentication information to be synchronized to the data processing module.

[0019] The data processing module calculates the update information of the target data according to the identity authentication information of the user to be synchronized, and the synchronization module synchronizes the update information corresponding to the application system according to the attributes of the update information.

[0020] A computer-readable storage medium stores a computer program, which, when executed by a processor, implements the following steps:

[0021] The user identity authentication information and organizational protocol information corresponding to different application systems are obtained through the unified identity authentication module. The application configuration module configures the key application information of each application system according to the organizational protocol information, so that the real-time data acquisition module listens to and collects the configured key application information and the user identity authentication information to be synchronized corresponding to the key application information, and outputs the configured key application information and the user identity authentication information to be synchronized to the data processing module.

[0022] The data processing module calculates the update information of the target data according to the identity authentication information of the user to be synchronized, and the synchronization module synchronizes the update information corresponding to the application system according to the attributes of the update information.

[0023] The above-mentioned method, system, device and medium for synchronizing user data of heterogeneous system organizations first use a unified identity authentication module to obtain user identity authentication information and organizational protocol information of different application systems. Through the application configuration module, key application information is configured for each application system, so that the real-time data acquisition module can monitor and collect the configured key application information and the user identity authentication information to be synchronized. In the data processing stage, the system calculates the update information of the target data according to the user identity authentication information to be synchronized through the data processing module, and synchronizes the application system information according to the attributes of the update information using the synchronization module. Through this process, it can ensure that the user identity information and organizational data between different heterogeneous systems are consistent, thereby effectively solving the transformation risks and implementation difficulties brought about by the traditional single sign-on method. In addition, the core advantage of this technical solution lies in its "micro-modification" design concept. When facing multiple application systems, enterprises only need to make small adjustments to each system to achieve the unification of user data, reducing the risk of system integration. This method not only reduces the technical transformation cost of the enterprise, but also improves the stability and security of the system operation, making the user login and data synchronization process in multiple heterogeneous systems smoother and more efficient. In summary, the modular design and micro-modification strategy provides an effective solution for enterprise user identity and organizational data management in a multi-application system environment, significantly reduces integration risks, and improves the reliability of data synchronization, thus providing strong support for the sustainable development of the enterprise. BRIEF DESCRIPTION OF THE DRAWINGS

[0024] Figure 1A schematic diagram of a flow chart of a method for synchronizing user data in a heterogeneous system organization according to an embodiment;

[0025] Figure 2 A schematic diagram of a data synchronization process in an embodiment;

[0026] Figure 3 A schematic diagram of a unified identity authentication system data change and data synchronization process in one embodiment;

[0027] Figure 4 A schematic diagram of a synchronization process for application system data changes in an embodiment;

[0028] Figure 5 A structural block diagram of a user data synchronization system for a heterogeneous system organization in one embodiment;

[0029] Figure 6 FIG. 4 is a diagram showing the internal structure of a computer device in one embodiment. DETAILED DESCRIPTION

[0030] In order to make the purpose, technical solution and advantages of the present invention more clearly understood, the present invention is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present invention and are not intended to limit the present invention.

[0031] In one embodiment, Figure 1 As shown, a method for synchronizing user data in a heterogeneous system organization is provided. The method is applied to a heterogeneous data synchronization system as an example for explanation. The heterogeneous data synchronization system includes: a unified identity authentication module, an application configuration module, a real-time data acquisition module, a data processing module, a synchronization module, and a data synchronization monitoring module. Specifically, the following steps are included:

[0032] Step 102, obtain the user identity authentication information and organizational protocol information corresponding to different application systems through the unified identity authentication module, and the application configuration module configures the key application information of each application system according to the organizational protocol information, so that the real-time data acquisition module listens to and collects the configured key application information and the user identity authentication information to be synchronized corresponding to the key application information, and outputs the configured key application information and the user identity authentication information to be synchronized to the data processing module.

[0033] Specifically, a centralized unified identity authentication management system is built. The system has a centralized organizational system and user system, and supports multiple protocol authentication methods such as CAS, OAuth2, JWT, TOKEN, OPENID, etc. The application system can select different protocols to uniformly authenticate the legitimacy of the current user and achieve single sign-on.

[0034] Furthermore, the application-related information is configured in the unified identity authentication system, the core of which includes application basic information, application system data source, application data synchronization table information, etc., and the mapping relationship between data is configured. 1) The application system basic information configuration includes the name of the application, the description of the application system, the login address of the application system, and the synchronization method of the application system user and organization (one-way / two-way / asynchronous). After the configuration is completed, different synchronization strategy data sets S = {S1, S2, ..., S n}, M={M1,M2,...,M n}、N={N1,N2,...,N n}, where S represents the one-way synchronization data set from the unified authentication center to the application, M represents the two-way synchronization data set, N represents no synchronization is required, and n represents the number of applications. 2) Application system data source configuration, mainly for the heterogeneous data source configuration of the application system, including data source types oracle, mysql, sqlserver, postgresql, etc. 3) For the above S and M set type application data, data mapping relationship configuration is required. For example, the data fields that need to be synchronized in the user table of the unified identity authentication system are recorded as set US, and the target application user table field set is recorded as UT. The mapping relationship is set F, and the corresponding mapping relationship is US(n)=UT(F(n)), n is the configured mapping relationship, such as F(US(userID)->UT(userID)). 4) After the configuration relationship is confirmed, add the corresponding SSOSourceInfo field in the application system, determine the source ID field of the application update, and configure the unique AppId of the corresponding application. Subsequent filtering processing based on the content of this field can solve the problem of circular updates.

[0035] Furthermore, through the data collection module, the tables of the application systems that need to be synchronized and the data of the organization and user tables in the unified identity authentication system are monitored and collected, and the collected data is put into the message queue. Different data source types correspond to different collection methods. If the corresponding database does not enable the mode for collecting logs, such as MySQL, binlog needs to be enabled.

[0036] Step 104: The data processing module calculates the update information of the target data according to the user identity authentication information to be synchronized, and the synchronization module synchronizes the update information corresponding to the application system according to the attributes of the update information.

[0037] Specifically, by processing the collected data, the data that needs to be updated or added and the target content of the update are calculated and put into the topic that needs to be updated. Specifically, the corresponding log change message is taken out from the corresponding unified identity authentication topic, and a judgment is made based on the data source field. If it is a new addition to the unified identity authentication system, the data that needs to be updated will be processed by field mapping according to the mapping configuration, and the data that needs to be updated and the corresponding configuration information will be pushed to the topic that needs to be updated. If it is a new addition to the application system, the log information of the corresponding application system in SSOSourceInfo needs to be removed during calculation to prevent data change duplication and conflict. The calculation model that needs to be updated is as follows: y=ABC.

[0038] The set A is all the data sets that need to be updated;

[0039] Set B is a data set with the same data source SSOSourceInfo and application system AppId. The corresponding formula is:

[0040]

[0041] Where n is the number of sets A;

[0042] Set C is a data set where the application system is configured for one-way synchronization and the data SSOSourceInfo is not a unified identity authentication system. The corresponding formula is:

[0043]

[0044] Where n is the number of sets A, SID is the ID of the unified identity authentication system, and S is the data set that the unified authentication center synchronizes to the application in one direction.

[0045] Furthermore, the data to be updated is taken out from the updated tiopic through the synchronization module of the organization and user information, and the synchronization update operation of the organization and the user is performed. For the failed data, it is written into the corresponding unified identity authentication system synchronization log table.

[0046] Furthermore, the data synchronization results are monitored through the data synchronization monitoring module, and the failed data administrator or relevant authorized personnel can resynchronize or not process the data that failed to update.

[0047] In the above-mentioned method for synchronizing user data of heterogeneous systems, the unified identity authentication module is first used to obtain user identity authentication information and organizational agreement information of different application systems. Through the application configuration module, key application information is configured for each application system, so that the real-time data acquisition module can monitor and collect the configured key application information and the user identity authentication information to be synchronized. In the data processing stage, the system calculates the update information of the target data according to the user identity authentication information to be synchronized through the data processing module, and synchronizes the application system information according to the attributes of the update information using the synchronization module. Through this process, it can ensure that the user identity information and organizational data between different heterogeneous systems are consistent, thereby effectively solving the transformation risks and implementation difficulties brought about by the traditional single sign-on method. In addition, the core advantage of this technical solution lies in its "micro-modification" design concept. When facing multiple application systems, enterprises only need to make small adjustments to each system to achieve the unification of user data, reducing the risk of system integration. This method not only reduces the technical transformation cost of the enterprise, but also improves the stability and security of the system operation, making the user login and data synchronization process in multiple heterogeneous systems smoother and more efficient. In summary, the modular design and micro-modification strategy provides an effective solution for enterprise user identity and organizational data management in a multi-application system environment, significantly reduces integration risks, and improves the reliability of data synchronization, thus providing strong support for the sustainable development of the enterprise.

[0048] In one of the embodiments, key application information includes: application basic information, application system data source, application data synchronization table information and mapping relationship between data. Application basic information includes: application name, application system description, application system login address and synchronization mode between users and organizations in the application system. Synchronization modes include: one-way synchronization, two-way synchronization and no synchronization. Configuring the application system data source is to configure the type of heterogeneous data source in the application system. Types of data sources include: oracle, mysql, sqlsever and postgresql.

[0049] It is worth mentioning that the application configuration module: configures application-related information in the unified identity authentication system. Its core includes application basic information, application system data source, application data synchronization table information, etc., and configures the mapping relationship between data.

[0050] 1) The basic information configuration of the application system includes the name of the application, the description of the application system, the login address of the application system, and the synchronization method of the application system users and organizations. The synchronization methods mainly include one-way / two-way / asynchronous.

[0051] 2) Application system data source configuration, mainly for the application system's heterogeneous data sources configuration, including data source types oracle, mysql, sqlserver, postgresql, etc.

[0052] 3) For the above-mentioned one-way synchronization and two-way synchronization type application data, data mapping relationship configuration is required.

[0053] 4) After the configuration relationship is confirmed, the corresponding SSOSourceInfo field will be added to the application system to determine the source field of the application update. Subsequent filtering and processing will be performed based on the content of this field to solve the problem of circular updates.

[0054] In one embodiment, the application configuration module configures the data source of each application system according to the organization agreement information, and if the synchronization mode is one-way synchronization or two-way synchronization, the key application information is configured for the data source of the current application system. If the synchronization mode is not synchronized, the data source configuration of the current application system is terminated, and a security exception is displayed through the UI interface of the application system, so that the administrator can resynchronize or manually adjust the user authentication information.

[0055] It is worth noting that the data collection module monitors and collects data on changes in the tables of the application systems that need to be synchronized and the organization and user tables in the unified identity authentication system, and puts the collected data into the message queue. If the corresponding database does not enable the mode for collecting logs, such as MySQL, binlog needs to be enabled.

[0056] In one of the embodiments, according to the mapping relationship of the data source of the configured key application information, a corresponding SSOSourceInfo field is added in the application system corresponding to the mapping relationship to determine the source field of the application update in the application system.

[0057] In one of the embodiments, the real-time data collection module collects the configured key application information and the user identity authentication information to be synchronized corresponding to the key application information from the application database of the current application system for monitoring, and puts the configured key application information and the user identity authentication information to be synchronized into a message queue according to the type of data source, and outputs it to the data processing module.

[0058] In one embodiment, the processing module calculates the update information of the target data of the application corresponding to the user identity authentication information to be synchronized according to the user identity authentication information to be synchronized, and stores the update information in the topic to be updated of the current application system. If the type corresponding field of the data source of the update information extracted from the topic to be updated is the newly added or updated user identity authentication information, the field mapping processing is performed according to the mapping relationship of the update information to obtain the configuration key information corresponding to the data to be updated and the data to be updated, and the configuration key information corresponding to the data to be updated and the data to be updated is pushed to the topic to be updated. If the type corresponding field of the data source of the update information extracted from the topic to be updated is the newly added or updated application system, the newly added or updated operation log information of the corresponding application system in the SSOSourceInfo field is removed according to the mapping relationship of the update information, and the configuration key information corresponding to the data to be updated and the data to be updated is pushed to the topic to be updated. According to the attributes of the update information, the data to be updated is taken out from the topic to be updated, the synchronization operation of the organization and the user is performed on the data to be updated, the update information corresponding to the application system is synchronized by the synchronization module, and the synchronization operation is written into the synchronization log table of the unified identity authentication system.

[0059] It is worth noting that by processing the collected data, the data that needs to be updated or added and the target content of the update are calculated and put into the topic that needs to be updated. Specifically, the corresponding log change message is taken out from the corresponding unified identity authentication topic, and judged according to the data source field. If it is a new addition to the unified identity authentication system, the data that needs to be updated will be processed according to the field mapping configuration, and the data that needs to be updated and the corresponding configuration information will be pushed to the topic that needs to be updated. If it is a new addition to the application system, the log information of the corresponding application system in SSOSourceInfo needs to be eliminated during calculation to prevent duplicate data changes and conflicts.

[0060] In one of the embodiments, the synchronization process of the synchronization module is monitored by a data synchronization monitoring module. During the synchronization process, if the update information fails to be authenticated with the application system, the update information is fed to the administrator using the UI interface so that the administrator can resynchronize or manually adjust the update information.

[0061] In one embodiment, if Figure 2 As shown, a data synchronization process is provided, and the specific steps include the following contents:

[0062] ①Configure the basic information of the application system: including the name of the application, the description of the application, the application system ID, the key of the application system, the login URL and the authentication URL; ②Configure the application database related information: including the database connection type (such as MySQL, PostgreSQL, Oracle, etc.), the IP address of the database server, the port number, the database name, the user name and password, etc.; ③Configure the application synchronization strategy: configure the synchronization method of the organization and the user (one-way synchronization, two-way synchronization, no synchronization required) and configure the synchronization mapping relationship, including the user field mapping configuration and the organization field mapping configuration; ④Data collection: After the correct configuration is completed, the collection program will adapt the corresponding data collection method according to the configuration file, such as MySQL uses the corresponding binlog log to monitor, and collects the relevant user and organization table data. ⑤Data processing: The data processing program will consume and process the data in the message queue topic, and map the data according to the application type, and identify the data type that needs to be updated (add, delete, modify). ⑥Data update: Update the application system data that needs to be updated. When the system update fails, the administrator will be notified to re-update or ignore it.

[0063] In one embodiment, if Figure 3 As shown, a unified identity authentication system data change data synchronization process is provided, and the specific steps include the following contents:

[0064] ① The unified identity authentication system adds, deletes, and updates users or organizations. ② The collection program collects the data change log data of the unified identity authentication system in real time to the topic of the message queue. ③ The data processing program consumes and processes the topic data in real time, and performs update logic judgment and processing. ④ The update application processes the user operation identifier of the unified identity authentication system according to SSOSourceInfo, and updates the data of the application system that needs to be updated. If the update fails, the administrator is prompted to handle it manually.

[0065] In one embodiment, if Figure 4 As shown, a data change synchronization process for an application system is provided, and the specific steps include the following:

[0066] ① An application system adds, deletes, or updates users or organizations. ② The collection program collects the data change log data of the unified identity authentication system in real time to the topic of the message queue. ③ The data processing program consumes and processes the topic data in real time, and performs update logic judgment and processing. ④ The data processing program uses the SSOSourceInfo field content as the manual update mark for the application system, updates the user data and organizational data of the unified identity authentication system, and prompts the administrator to manually process if the update fails. ⑤ The data processing program updates the organization and user information of other applications based on the SSOSourceInfo information. If the update fails, the administrator is prompted to manually process.

[0067] It should be understood that although Figure 1-4 The steps in the flowchart are shown in sequence as indicated by the arrows, but these steps are not necessarily executed in the order indicated by the arrows. Unless otherwise specified in this document, there is no strict order restriction for the execution of these steps, and these steps can be executed in other orders. Moreover, Figure 1-4 At least part of the steps may include multiple sub-steps or multiple stages. These sub-steps or stages are not necessarily executed at the same time, but can be executed at different times. The execution order of these sub-steps or stages is not necessarily sequential, but can be executed in turn or alternately with other steps or at least part of the sub-steps or stages of other steps.

[0068] In one embodiment, as shown in Figure 5, a heterogeneous system organization user data synchronization system is provided, including: a unified identity authentication module 502, an application configuration module 504, a real-time data acquisition module 506, a data processing module 508, a synchronization module 510 and a data synchronization monitoring module 512, wherein:

[0069] The unified identity authentication module 502 is used to build a centralized unified identity authentication management system, which includes a centralized organizational system and a user system, and supports CAS, OAuth2, JWT, TOKEN, and OPENID protocol information authentication methods. Each heterogeneous application system selects different protocol information to uniformly authenticate the legitimacy of the current application system and the current user authentication information to complete single sign-on.

[0070] The application configuration module 504 is used to configure application related information in the unified identity authentication system, wherein the application related information includes application basic information, application system data source and application data synchronization table information, and configure the mapping relationship between heterogeneous data in the same application system;

[0071] The real-time data collection module 506 is used to monitor and collect the changed data in the tables of the configured application systems that need to be synchronized and the organization and user tables in the unified identity authentication system through the real-time data collection module, and put the collected data sets into the message queue;

[0072] The data processing module 508 is used to process the collected data, calculate the data that needs to be updated or added and the target content of the update, and put them into the topic that needs to be updated.

[0073] The synchronization module 510 is used to retrieve the data to be updated from the updated topic, perform synchronization update operations on the organization and the user, and write failed data into the corresponding unified identity authentication system synchronization log table.

[0074] The data synchronization monitoring module 512 is used to monitor the data synchronization results processed by the synchronization module, and feed the data that failed to be synchronized back to the administrator, who then resynchronizes or does not process the data.

[0075] For the specific definition of a heterogeneous system organization user data synchronization system, please refer to the definition of a heterogeneous system organization user data synchronization method above, which will not be repeated here. Each module in the above-mentioned heterogeneous system organization user data synchronization system can be implemented in whole or in part by software, hardware and a combination thereof. The above-mentioned modules can be embedded in or independent of the processor in the computer device in the form of hardware, or can be stored in the memory of the computer device in the form of software, so that the processor can call and execute the operations corresponding to the above modules.

[0076] In one embodiment, a computer device is provided. The computer device may be a terminal, and its internal structure diagram may be as follows: Figure 6 As shown. The computer device includes a processor, a memory, a network interface, a display screen and an input system connected through a system bus. Among them, the processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system and a computer program. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The network interface of the computer device is used to communicate with an external terminal through a network connection. When the computer program is executed by the processor, a method for synchronizing user data organized by a heterogeneous system is implemented. The display screen of the computer device can be a liquid crystal display screen or an electronic ink display screen, and the input system of the computer device can be a touch layer covered on the display screen, or a key, trackball or touchpad set on the computer device housing, or an external keyboard, touchpad or mouse, etc.

[0077] Those skilled in the art will understand that Figure 5-6 The structure shown in the figure is only a block diagram of a part of the structure related to the solution of the present invention, and does not constitute a limitation on the computer device to which the solution of the present invention is applied. The specific computer device may include more or fewer components than those shown in the figure, or combine certain components, or have a different arrangement of components.

[0078] In one embodiment, a computer device is provided, including a memory and a processor, wherein the memory stores a computer program, and when the processor executes the computer program, the following steps are implemented:

[0079] The user identity authentication information and organizational protocol information corresponding to different application systems are obtained through the unified identity authentication module. The application configuration module configures the key application information of each application system according to the organizational protocol information, so that the real-time data acquisition module listens to and collects the configured key application information and the user identity authentication information to be synchronized corresponding to the key application information, and outputs the configured key application information and the user identity authentication information to be synchronized to the data processing module.

[0080] The data processing module calculates the update information of the target data according to the identity authentication information of the user to be synchronized, and the synchronization module synchronizes the update information corresponding to the application system according to the attributes of the update information.

[0081] In one embodiment, a computer readable storage medium is provided, on which a computer program is stored, and when the computer program is executed by a processor, the following steps are implemented:

[0082] The user identity authentication information and organizational protocol information corresponding to different application systems are obtained through the unified identity authentication module. The application configuration module configures the key application information of each application system according to the organizational protocol information, so that the real-time data acquisition module listens to and collects the configured key application information and the user identity authentication information to be synchronized corresponding to the key application information, and outputs the configured key application information and the user identity authentication information to be synchronized to the data processing module.

[0083] The data processing module calculates the update information of the target data according to the identity authentication information of the user to be synchronized, and the synchronization module synchronizes the update information corresponding to the application system according to the attributes of the update information.

[0084] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to memory, storage, database or other media used in the embodiments provided by the present invention can include non-volatile and / or volatile memory. Non-volatile memory can include read-only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM) or flash memory. Volatile memory can include random access memory (RAM) or external cache memory. As an illustration and not limitation, RAM is available in many forms, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double data rate SDRAM (DDRSDRAM), enhanced SDRAM (ESDRAM), synchronous link (Synchlink) DRAM (SLDRAM), memory bus (Rambus) direct RAM (RDRAM), direct memory bus dynamic RAM (DRDRAM), and memory bus dynamic RAM (RDRAM).

[0085] The technical features of the above embodiments may be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0086] The above-mentioned embodiments only express several implementation methods of the present invention, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the invention patent. It should be pointed out that, for ordinary technicians in this field, several variations and improvements can be made without departing from the concept of the present invention, and these all belong to the protection scope of the present invention. Therefore, the protection scope of the patent of the present invention shall be subject to the attached claims.

Claims

1. A method for synchronizing user data in a heterogeneous system organization, characterized in that: Applied to a heterogeneous data synchronization system, the heterogeneous data synchronization system includes: a unified identity authentication module, an application configuration module, a real-time data acquisition module, a data processing module, a synchronization module and a data synchronization monitoring module; The method comprises: The user identity authentication information and organizational protocol information corresponding to different application systems are obtained through the unified identity authentication module, and the application configuration module configures key application information for each application system according to the organizational protocol information, so that the real-time data acquisition module monitors and collects the configured key application information and the user identity authentication information to be synchronized corresponding to the key application information, and outputs the configured key application information and the user identity authentication information to be synchronized to the data processing module; The data processing module calculates the update information of the target data according to the user identity authentication information to be synchronized, and the synchronization module synchronizes the update information corresponding to the application system according to the attributes of the update information.

2. The method according to claim 1, characterized in that The key application information includes: application basic information, application system data source, application data synchronization table information and mapping relationship between data; The basic application information includes: the name of the application, the description of the application system, the login address of the application system, and the synchronization mode between the user and the organization in the application system; the synchronization mode includes: one-way synchronization, two-way synchronization, and no synchronization; Configuring the data source of the application system is to configure the type of heterogeneous data source in the application system; the types of data source include: oracle, mysql, sqlsever and postgresql.

3. The method according to claim 2, characterized in that The application configuration module configures key application information for each application system according to the organization agreement information, including: The application configuration module configures the data source of each application system according to the organizational agreement information. If the synchronization mode is one-way synchronization or two-way synchronization, the key application information is configured for the data source of the current application system; if the synchronization mode is asynchronous, the data source configuration of the current application system is terminated, and the security exception is displayed through the UI interface of the application system, so that the administrator can resynchronize or manually adjust the user authentication information.

4. The method according to claim 2, characterized in that: After the application configuration module configures key application information for each application system according to the organization agreement information, the method further includes: According to the mapping relationship of the data source of the configured key application information, a corresponding SSOSourceInfo field is added in the application system corresponding to the mapping relationship to determine the source field of the application update in the application system.

5. The method according to claim 4, characterized in that The real-time data collection module monitors and collects the configured key application information and the user identity authentication information to be synchronized corresponding to the key application information, and outputs the configured key application information and the user identity authentication information to be synchronized to the data processing module, including: The real-time data acquisition module collects the configured key application information and the user identity authentication information to be synchronized corresponding to the key application information from the application database of the current application system for monitoring, and puts the configured key application information and the user identity authentication information to be synchronized into a message queue according to the type of data source, and outputs them to the data processing module.

6. The method according to claim 4, characterized in that Calculating the update information of the target data according to the to-be-synchronized user identity authentication information by the data processing module, and synchronizing the update information corresponding to the application system by the synchronization module according to the attributes of the update information, including: The processing module calculates the update information of the target data of the application corresponding to the user identity authentication information to be synchronized according to the user identity authentication information to be synchronized, and stores the update information in the topic to be updated of the current application system; if the type corresponding field of the data source of the update information extracted from the topic to be updated is the newly added or updated user identity authentication information, field mapping processing is performed according to the mapping relationship of the update information to obtain the configuration key information corresponding to the data to be updated and the data to be updated, and the configuration key information corresponding to the data to be updated and the data to be updated is pushed to the topic to be updated; if the type corresponding field of the data source of the update information extracted from the topic to be updated is the newly added or updated application system, the newly added or updated operation log information of the corresponding application system in the SSOSourceInfo field is eliminated according to the mapping relationship of the update information, and the data to be updated and the configuration key information corresponding to the data to be updated are pushed to the topic to be updated; According to the attributes of the update information, the data to be updated is taken out from the topic to be updated, the data to be updated is synchronized with the organization and the user, the update information corresponding to the application system is synchronized using the synchronization module, and the synchronization operation is written into the synchronization log table of the unified identity authentication system.

7. The method according to claim 6, characterized in that: After synchronizing the update information corresponding to the application system by using the synchronization module, the method further includes: The synchronization process of the synchronization module is monitored by the data synchronization monitoring module. During the synchronization process, if the update information fails to be authenticated with the application system, the update information is fed to the administrator via the UI interface so that the administrator can resynchronize or manually adjust the update information.

8. A user data synchronization system for heterogeneous system organizations, characterized in that: The system comprises: The unified identity authentication module is used to build a centralized unified identity authentication management system. The unified identity authentication management system includes a centralized organizational system and a user system, and supports CAS, OAuth2, JWT, TOKEN, and OPENID protocol information authentication methods. Each heterogeneous application system selects different protocol information to uniformly authenticate the legitimacy of the current application system and the current user authentication information to complete single sign-on. An application configuration module is used to configure application related information in the unified identity authentication system, wherein the application related information includes application basic information, application system data source and application data synchronization table information, and configure the mapping relationship between heterogeneous data in the same application system; The real-time data collection module is used to monitor and collect the changed data in the tables of the configured application systems that need to be synchronized and the organization and user tables in the unified identity authentication system through the real-time data collection module, and put the collected data sets into the message queue; The data processing module is used to process the collected data, calculate the data that needs to be updated or added, and the target content of the update, and put it into the topic that needs to be updated; The synchronization module is used to extract the data that needs to be updated from the updated topic, perform synchronization update operations on organizations and users, and write failed data into the corresponding unified identity authentication system synchronization log table; The data synchronization monitoring module is used to monitor the data synchronization results processed by the synchronization module, and feed the data that failed to be synchronized back to the administrator, who then resynchronizes or does not process the data.

9. A computer device comprising a memory and a processor, wherein the memory stores a computer program, wherein: When the processor executes the computer program, the steps of the method according to any one of claims 1 to 7 are implemented.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 7 are implemented.

Images