Video industry application arrangement system, data isolation method thereof and terminal equipment

Abstract

The invention relates to a video industry application arrangement system, a data isolation method thereof and terminal equipment. The system comprises an application capability library, a capability arrangement engine connected with the application capability library and a preset module connected with the capability arrangement engine. According to the system, new applications of an industry are discharged as required through an application capability library, application description information is obtained by managing and coordinating life cycles, dependencies, deployment sequences and unique application identifiers of different capabilities through a capability arrangement engine according to application description files, and the application description information is bound to a preset template; the new application product only containing the arranged capability is recompiled through the preset template, the constructed new application product does not contain the capability which does not belong to the new application product, a user does not need to worry about the vertical unauthorized problem, and the constructed new application product does not contain the high-authority capability and does not contain the unauthorized capability. Therefore, a plurality of capabilities can be safely combined in one or more products for deployment, and the problem that resources are occupied due to excessive division is not worried about.

Description

Technical Field

[0001] The present application relates to the technical field of video information management, and in particular to a video industry application orchestration system and a data isolation method and terminal device thereof. Background Art

[0002] The video industry application system has difficulties in function expansion and updating. Since the existing video industry application system integrates all functions into a unified software system, the system is relatively large, the business logic is deeply coupled, and it also brings problems such as system instability and compatibility. When adding new applications with different functions, the management is chaotic. For example: when using container orchestration technology, it is common to divide a software system into multiple microservices, and each microservice is deployed using a container. This container orchestration technology is more suitable for large-scale or distributed environments.

[0003] However, for small and medium-sized video industry application systems, dividing them into too many containers for deployment will occupy the already limited server resources. Some server resources need to be allocated for the deployment, configuration, and resource management of the container orchestration system, and the division of microservice functions requires developers to manually classify which capabilities belong to which microservices. For example, if a microservice contains too many capabilities and the division granularity is too coarse, it is easy for an application to contain capabilities that do not belong to this application, and these capabilities are easily traversed, resulting in vertical unauthorized vulnerabilities, and low-privilege operations can perform high-privilege operations. If a microservice only contains a single capability and the division granularity is too fine, the number of microservices will increase dramatically, which will occupy more server resources and is not suitable for small and medium-sized application systems.

[0004] Using container orchestration technology requires sufficient understanding of container technology. For example, when using Helm to manage and deploy applications in a Kubernetes environment, you need to define the application deployment configuration based on the Helm Chart and write it manually. Helm is a package management tool for Kubernetes that simplifies the installation, upgrade, and uninstallation process of applications by using templated YAML files. A Helm Chart contains a set of related Kubernetes resource files that describe how the various components of an application are deployed in a cluster. Understanding these container orchestration technologies undoubtedly increases the difficulty of using application orchestration technology.

[0005] After the existing video industry application system is updated and upgraded to include multiple applications, maintaining the correctness and security of the data requires developers to spend a lot of time on code control management, and the data is stored in shared storage, which is prone to confusion and security issues when reading and writing. Summary of the invention

[0006] The present application provides a video industry application orchestration system and its data isolation method and terminal device, which are used to solve the technical problems that the container orchestration method of the existing video industry application system is prone to mutual confusion and security when reading and writing data stored in shared storage.

[0007] In order to achieve the above objectives, this application provides the following technical solutions:

[0008] On the one hand, a video industry application orchestration system is provided, comprising: an application capability library, a capability orchestration engine connected to the application capability library, and a preset module connected to the capability orchestration engine;

[0009] The application capability library is used to design, arrange and deploy new applications through a capability set and generate an application description file corresponding to the new application, and transmit the application description file to the capability arrangement engine, wherein the capability set includes basic capabilities and video industry capabilities;

[0010] The capability orchestration engine is used to write the unique application identifier and the orchestration capability of the application description file into a format file according to the deployment and dependency of the application description file and generate application description information, and transmit the application description information to the preset module;

[0011] The preset module is used to recompile a new application product containing only the programmed capabilities according to the application description information, and the new application product includes a single application product and a multi-application product.

[0012] Preferably, the preset module includes an authentication center module and a data storage agent module;

[0013] The authentication center module is used to perform an authentication of the legitimacy of the identifier according to the data storage request and the unique application identifier of the application description information to obtain an authentication result;

[0014] The data storage proxy module is used to store the read and write data of the data storage request in the cache middleware, file or database of the new application product corresponding to the unique application identifier based on the legality of the authentication result.

[0015] Preferably, the application capability library includes a basic capability module and an industry capability module;

[0016] The basic capability module is used to design and establish a new application, to orchestrate and deploy the basic capabilities required for the new application, and to generate a unique application identifier for the new application;

[0017] The industry capability module is used to compile and deploy the video industry capabilities required by the new application and generate a dependency relationship between the unique application identifier and the video industry capabilities.

[0018] Preferably, the basic capabilities include permission management, device management, application management and sub-application management; and / or, the video industry capabilities include real-time video, video playback, AI alarm, traffic management, key personnel and vehicle control, smart large screen, special personnel, people's welfare and seedling protection operations.

[0019] Preferably, the format file is a yaml format file or a json format file.

[0020] On the other hand, a data isolation method for a video industry application orchestration system is provided, which is applied to the video industry application orchestration system described above, and the data isolation method comprises the following steps:

[0021] Obtaining a new application product established by the video industry application orchestration system and obtaining a data storage request, wherein the data storage request includes an application identifier, read and write data, and storage requirements;

[0022] Performing identity legitimacy authentication on the application identifier of the data storage request and the unique application identifier of the new application product to obtain an authentication result;

[0023] If the authentication result is legal, the read and write data of the data storage request are stored in a cache middleware, file or database of the new application product corresponding to the unique application identifier.

[0024] Preferably, storing the read and write data of the data storage request in a cache middleware, file or database of the new application product corresponding to the unique application identifier comprises:

[0025] Determine the storage type of the read / write data according to the storage requirement, the storage type including cache middleware, file or database;

[0026] storing the read-write data in a cache middleware, a file or a database of the new application product corresponding to the unique application identifier according to the storage type;

[0027] Among them, if the storage type is cache middleware, the AOP aspect-oriented technology is used in combination with the unique application identifier to process the read-write data to obtain a key value; the read-write data and the key value are stored in the cache middleware of the new application product corresponding to the unique application identifier; when the new application product is a single application product, the unique application identifier is added to the cache address of the read-write data stored in the cache middleware to obtain an updated cache address; when the new application product is a multi-application product, the application identifier of the read-write data stored in the cache middleware is added to the key value to obtain a storage name;

[0028] If the storage type is a file, an interceptor is used in combination with the unique application identifier to store the read-write data in a file of the new application product corresponding to the unique application identifier; when the new application product is a single-application product, the unique application identifier is added to the storage bucket where the file stores the read-write data; when the new application product is a multi-application product, the unique application identifier is added to the file path where the file stores the read-write data to obtain an independent storage directory;

[0029] If the storage type is a database, the syntax tree obtained by parsing the execution statement of the database using an SQL parser is combined with the unique application identifier to store the read-write data in the database of the new application product corresponding to the unique application identifier; when the new application product is a single-application product, the unique application identifier is added to the library name of the database storing the read-write data to obtain a new execution statement of the reformatted database; when the new application product is a multi-application product, the unique application identifier is added to the filtering conditions for storing the read-write data in the database.

[0030] Preferably, determining the storage type of the read / write data according to the storage requirement includes:

[0031] If the storage requirement is data persistence, the storage type of the read-write data is database;

[0032] If the storage requirement is fast access speed, the storage type of the read-write data is cache middleware;

[0033] If the storage requirement is storage in file format, the storage type of the read-write data is file.

[0034] Preferably, the data isolation method of the video industry application orchestration system includes: if the authentication result is illegal, discarding the data storage request.

[0035] In another aspect, a terminal device is provided, comprising a processor and a memory;

[0036] The memory is used to store program codes and transmit the program codes to the processor;

[0037] The processor is used to execute the data isolation method of the video industry application orchestration system described above according to the instructions in the program code.

[0038] The video industry application orchestration system and its data isolation method and terminal device, the video industry application orchestration system includes an application capability library, a capability orchestration engine connected to the application capability library and a preset module connected to the capability orchestration engine; the application capability library is used to design, orchestrate and deploy new applications through a capability set and generate an application description file corresponding to the new application, and transmit the application description file to the capability orchestration engine; the capability orchestration engine is used to write the unique application identifier and orchestration capability of the application description file into a format file according to the deployment and dependency relationship of the application description file and generate application description information, and transmit the application description information to the preset module; the preset module is used to recompile a new application product containing only the orchestrated capabilities according to the application description information, and the new application product includes a single application product and a multi-application product.

[0039] It can be seen from the above technical solutions that the present application has the following advantages: the video industry application orchestration system discharges new applications of an industry on demand through the application capability library, and obtains application description information through the capability orchestration engine based on the application description file to manage and coordinate the life cycle, dependencies, deployment sequence and unique application identifier of different capabilities, and binds the application description information to the preset template; a new application product containing only the orchestrated capabilities is recompiled through the preset template, and the constructed new application product does not contain capabilities that do not belong to the new application product, so there is no need to worry about vertical overreaching problems. The constructed new application product does not contain high-authority capabilities, so multiple capabilities can be safely combined in one or more products for deployment without worrying about the problem of excessive division and occupation of resources. The container orchestration method of the existing video industry application system solves the technical problems of confusion and security when reading and writing data stored in shared storage.

[0040] The data isolation method of the video industry application orchestration system will allocate the read and write data to the new application product built by the video industry application orchestration system for storage according to the storage requirements of the data storage request after the data storage request has passed the legitimacy authentication. This can effectively prevent data confusion and leakage, ensure the security of the video industry application orchestration system, and reduce development workload. BRIEF DESCRIPTION OF THE DRAWINGS

[0041] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative labor.

[0042] Figure 1 This is a framework flow chart of the video industry application orchestration system described in the embodiment of the present application;

[0043] Figure 2 A schematic diagram of a video industry application orchestration system according to an embodiment of the present application;

[0044] Figure 3 This is a flowchart of the steps of the data isolation method of the video industry application orchestration system described in the embodiment of the present application;

[0045] Figure 4 A schematic diagram of a framework of a data isolation method for a video industry application orchestration system according to an embodiment of the present application;

[0046] Figure 5 A schematic diagram of a data storage framework in a data isolation method for a video industry application orchestration system according to an embodiment of the present application;

[0047] Figure 6 A schematic diagram of a terminal device described in an embodiment of the present application. DETAILED DESCRIPTION

[0048] In order to make the purpose, features, and advantages of the invention of this application more obvious and easy to understand, the technical solutions in the embodiments of this application will be clearly and completely described below in conjunction with the drawings in the embodiments of this application. Obviously, the embodiments described below are only part of the embodiments of this application, not all of them. Based on the embodiments in this application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0049] In the description of the embodiments of the present application, the terms "first" and "second" are used for descriptive purposes only and cannot be understood as indicating or implying relative importance or implicitly indicating the number of the indicated technical features. Therefore, the features defined as "first" and "second" may explicitly or implicitly include one or more of the features. In the description of the embodiments of the present application, the meaning of "multiple" is two or more, unless otherwise clearly and specifically defined.

[0050] In the embodiments of the present application, unless otherwise clearly specified and limited, the terms "installed", "connected", "connected", "fixed" and the like should be understood in a broad sense, for example, it can be a fixed connection, a detachable connection, or an integral one; it can be a mechanical connection or an electrical connection; it can be a direct connection or an indirect connection through an intermediate medium, it can be the internal connection of two elements or the interaction relationship between two elements. For those of ordinary skill in the art, the specific meanings of the above terms in the embodiments of the present application can be understood according to the specific circumstances.

[0051] Patent terms:

[0052] The video industry application system is a monitoring technology that uses video equipment to collect, record and transmit video signals in real time. It is widely used in public security, traffic management, environmental protection and other fields. With the continuous development of technology, the video industry application system has gradually developed from the initial simple video stream processing and basic display functions to the intelligent and networked direction. Among them, intelligent video analysis technology (such as face recognition, behavior analysis, event alarm, etc.) has become an important part of the video industry application system.

[0053] Container orchestration is an automated process for managing the deployment, expansion, operation, and maintenance of containerized applications. In order to achieve these goals, a number of container orchestration tools and platforms have emerged on the market, such as Kubernetes, Docker Swarm, and Tencent Cloud Container Service. These tools provide a set of APIs and command-line tools for defining, deploying, and managing containerized applications. By using container orchestration, developers and operations personnel can manage the container lifecycle more efficiently and ensure the stability and reliability of applications in distributed environments.

[0054] Mybatis is an excellent semi-automatic lightweight persistence layer framework based on ORM framework. It supports customized SQL, stored procedures and advanced mapping. The implementation of MyBatis plug-in is based on JDK (Java language software development kit) dynamic proxy technology. For MyBatis, plug-in is an interceptor used to enhance the functions of core objects. The essence of enhanced functions is to achieve with the help of underlying dynamic proxy, so that plug-in has the opportunity to modify the behavior or results of methods.

[0055] Interceptor is an important component in Spring MVC framework Q. It is an implementation of AOP (Aspect Oriented Programming) that specifically intercepts requests to the control layer. Interceptors can be used to determine user permissions, intercept WebSocket requests, etc.

[0056] Buckets are the carriers of objects, and can be understood as "containers" for storing objects, and there is no upper limit on the capacity of such "containers". Objects are stored in buckets in a flat structure, without the concept of folders and directories. Users can choose to store objects in a single bucket or multiple buckets.

[0057] Database interception is a technical means, its main purpose is to intercept SQL query statements in the database and change its execution process or results. Database interception mainly includes three steps: monitoring database operations, intercepting specific SQL query statements, and modifying query statements or returning results. This technology is usually used for security protection, performance optimization, data hiding, etc.

[0058] A SQL parser is a piece of software that understands and interprets the meaning of Structured Query Language (SQL) statements and converts them into operations that can be executed by a database management system.

[0059] ‌ Database filter conditions‌ refer to the conditions or rules used to limit the query results when querying the database; filter conditions can filter the results based on specific attributes or values ​​of the data to ensure that the returned data meets specific requirements.

[0060] AOP is an aspect-oriented technology in the software industry. AOP is the abbreviation of Aspect Oriented Programming, which means: aspect-oriented programming, a technology that achieves unified maintenance of program functions through pre-compilation and dynamic proxy during runtime. AOP is a continuation of OOP, a hot topic in software development, an important part of the Spring framework, and a derivative paradigm of functional programming. AOP can be used to isolate various parts of the business logic, thereby reducing the coupling between the various parts of the business logic, improving the reusability of the program, and improving development efficiency.

[0061] The embodiment of the present application provides a video industry application arrangement system and its data isolation method and terminal device, which solves the technical problem that the container arrangement method of the existing video industry application system is easy to cause mutual confusion and security when reading and writing data stored in shared storage. In this embodiment, the video industry application arrangement system and its data isolation method and terminal device can also be applied to industry applications such as information management systems, government business-industry applications and video industry applications.

[0062] Embodiment 1:

[0063] Figure 1 This is a framework flow chart of the video industry application orchestration system described in the embodiment of the present application. Figure 2 This is a schematic diagram of the video industry application orchestration system described in an embodiment of the present application.

[0064] like Figure 1 and Figure 2 As shown, an embodiment of the present application provides a video industry application orchestration system, including an application capability library 10, a capability orchestration engine 20 connected to the application capability library 10, and a preset module 30 connected to the capability orchestration engine 20.

[0065] like Figure 1 and Figure 2 As shown, in the embodiment of the present application, the application capability library 10 is used to design, arrange and deploy new applications through capability sets and generate application description files corresponding to the new applications, and transmit the application description files to the capability arrangement engine 20. The capability set includes basic capabilities and video industry capabilities.

[0066] It should be noted that the application capability library 10 is a flexible and diverse capability set for designing, arranging and quickly deploying new applications and generating application description files corresponding to the new applications. The video industry application orchestration system builds new applications through the application capability library 10 and generates application description files for building new applications. In this embodiment, the application description file includes a unique application identifier, a sub-application domain name, and an orchestration capability.

[0067] In the embodiment of the present application, the capability orchestration engine 20 is used to write the unique application identifier and the orchestration capability of the application description file into the format file according to the deployment and dependency of the application description file, generate application description information, and transmit the application description information to the preset module 30. The format file is a yaml format file or a json format file.

[0068] It should be noted that the capability orchestration engine 20 is responsible for managing and coordinating the lifecycles, dependencies, deployment sequences, etc. of different capabilities, defining the deployment and dependencies of new applications through application description files, writing unique application identifiers and orchestration capabilities into yaml format files or json format files, and generating application description information, which is then transmitted to the preset template 30 for binding. The video industry application orchestration system generates application description information according to the application description files of the application capability library 10 through the capability orchestration engine 20.

[0069] In an embodiment of the present application, the preset module 30 is used to recompile a new application product containing only the programmed capabilities according to the application description information, and the new application product includes a single application product and a multi-application product.

[0070] It should be noted that the preset template 30 can recompile a new application product that only contains the orchestrated capabilities. The preset template 30 includes the request entry for each capability. According to the rules set by the preset template 30, when the preset template 30 receives the unique application identifier in the application description information, the request entry of this capability will compile a new application product. Therefore, the preset template 30 does not include request entries that do not belong to the capabilities of this new application product. In this embodiment, a single application product is an application for independent storage. A multi-application product is an application for exclusive or shared storage. The rules set by the preset template 30 refer to setting a compilation identifier (such as $UniqueId) at the request entry of each capability in the preset template 30; if the compilation identifier is not replaced with a unique application identifier, the capability orchestration engine 20 will not process the request entry.

[0071] In an embodiment of the present application, the video industry application orchestration system uses a capability orchestration engine 20 to define the deployment and dependency of the application based on the application description file, writes the unique application identifier, sub-application domain name and orchestration capability into a yaml format file or a json format file to obtain the application description information, and recompiles a new application product containing only the orchestrated capabilities based on the application description information through the preset module 30. The preset template 30 combines the unique application identifier, sub-application domain name, and orchestration capability name to form a resource access route for direct access capabilities. It can be a single application product that is independently deployed and stored by a single application, or it can be a multi-application product that is mixed and deployed with multiple applications and shared or exclusively stored, thereby improving data security.

[0072] It should be noted that compared with the existing container orchestration technology, in order to generate new applications, it is necessary to have sufficient understanding of the corresponding container technology, in order to divide microservices, it is necessary to be sufficiently proficient in specific businesses, and it takes a lot of time to carry out customized development and transformation. If the amount of transformation is small, it will take at least one working day. The capability orchestration engine 20 and preset module 30 of the video industry application orchestration system can allow developers to focus more on the development of business-related industry capabilities (such as video capabilities), speed up the development of new applications, and can orchestrate a new application based on existing capabilities in a short time (15 minutes), so that the video industry application orchestration system can build new applications quickly.

[0073] The present application provides a video industry application orchestration system, including an application capability library, a capability orchestration engine connected to the application capability library, and a preset module connected to the capability orchestration engine; the application capability library is used to design, orchestrate and deploy new applications through a capability set and generate an application description file corresponding to the new application, and transmit the application description file to the capability orchestration engine; the capability orchestration engine is used to write the unique application identifier and orchestration capability of the application description file into a format file according to the deployment and dependency of the application description file and generate application description information, and transmit the application description information to the preset module; the preset module is used to recompile a new application product containing only the orchestrated capabilities according to the application description information, and the new application product includes a single application product and a multi-application product. The video industry application orchestration system uses the application capability library to sort out new applications for an industry on demand, manages and coordinates the lifecycles, dependencies, deployment sequences and unique application identifiers of different capabilities based on application description files through the capability orchestration engine to obtain application description information, and binds the application description information to a preset template; recompiles a new application product that only contains the orchestrated capabilities through the preset template, and the constructed new application product does not contain capabilities that do not belong to the new application product, so there is no need to worry about vertical authority violations. The constructed new application product does not contain high-authority capabilities, so multiple capabilities can be safely combined in one or more products for deployment without worrying about the problem of excessive division and occupation of resources; it solves the technical problems of container orchestration of existing video industry application systems, which are prone to mutual confusion and security when reading and writing data stored in shared storage.

[0074] It should be noted that the video industry application orchestration system builds multiple video industry application systems through an application capability library, a capability orchestration engine and preset modules, and summarizes and decouples independent capabilities of general or specific scenarios from large functions for orchestration.

[0075] like Figure 2 As shown, in one embodiment of the present application, the preset module 30 includes an authentication center module 31 and a data storage agent module 32;

[0076] The authentication center module 31 is used to perform an authentication of the legitimacy of the identifier according to the data storage request and the unique application identifier of the application description information to obtain an authentication result;

[0077] The data storage proxy module 32 is used to store the read and write data of the data storage request in the cache middleware, file or database of the new application product corresponding to the unique application identifier based on the authentication result being legal.

[0078] It should be noted that the authentication center module 31 can receive data storage requests sent by the client or user. The data storage request includes an application identifier, the legitimacy of the authentication identifier, and the unique application identifier in the application description information is associated with the industry capability. If it is illegal, the data storage request will be discarded to ensure that only authorized users with unique application identifiers can access the data, and completely isolate different application requests at the source code level to improve security. This allows the video industry application orchestration system to completely isolate different access requests at the source code level, improving the security of building new application products. The data storage proxy module 32 can, based on the unique application identifier, uniformly proxy the data storage requests flowing to the shared storage or exclusive storage of the new application product, read and write data to the cache middleware, file or database, and achieve decoupling from the business logic, solving the data isolation problem between multiple new application products. In this embodiment, the data storage request also includes read and write data and storage requirements.

[0079] like Figure 2 As shown, in one embodiment of the present application, the application capability library 10 includes a basic capability module 11 and an industry capability module 12;

[0080] The basic capability module 11 is used to design and establish a new application, compose and deploy the basic capabilities required for the new application, and generate a unique application identifier for the new application;

[0081] The industry capability module 12 is used to compile and deploy the video industry capabilities required by the new application and generate a dependency relationship between the unique application identifier and the video industry capabilities.

[0082] It should be noted that basic capabilities include permission management, device management, application management, and sub-application management. Video industry capabilities include real-time video, video playback, AI alarm, flow management, key personnel and vehicle control, smart screen, special personnel, people's convenience, and seedling protection operations. In this embodiment, the basic capability module 11 is used to create a new application to obtain a new application, and select the basic capabilities required for the new application on the interface of the basic capability module 11 and generate a unique application identifier for the new application. The industry capabilities (such as video capabilities) required for the new application are selected through the industry capability module 12, and the unique application identifier is recorded and associated with the industry capability. The application capability library 10 integrates the basic capability module 11 and the industry capability module 12 for the industry (such as the video industry) to meet the application requirements of various scenarios, so that the video industry application orchestration system can build new applications according to demand. The video industry application orchestration system can quickly organize the existing multiple basic capabilities and video industry capabilities into a new industry application on demand through the basic capability module 11 and the industry capability module 12 of the application capability library 10. In other embodiments, the industry capability module 12 can also be applied to industries such as safe smart eyes, bright kitchens and stoves, medical supervision, urban management smart eyes, drowning prevention, safe campuses, gas stations, etc.

[0083] In an embodiment of the present application, the application management of the basic capability module 11 creates a new application, creates a sub-application corresponding to the new application in the sub-application management, selects the basic capabilities required for the new application on the interface, and generates a unique application identifier for the new application, and the sub-application generates a unique sub-application domain name.

[0084] In an embodiment of the present application, the basic capabilities and video industry capabilities included in the newly created new application through the application capability library 10 process data storage requests, and the business logic is not affected by the application identifier of the data storage request and does not need to be concerned.

[0085] Embodiment 2:

[0086] Figure 3 This is a flowchart of the steps of the data isolation method of the video industry application orchestration system described in the embodiment of the present application. Figure 4 A schematic diagram of the framework of the data isolation method of the video industry application orchestration system described in an embodiment of the present application.

[0087] like Figure 3 and Figure 4 As shown, the embodiment of the present application provides a data isolation method for a video industry application orchestration system, which is applied to the above-mentioned video industry application orchestration system. The data isolation method includes the following steps:

[0088] S1. Obtain a new application product established by the video industry application orchestration system and obtain a data storage request, where the data storage request includes an application identifier, read and write data, and storage requirements.

[0089] It should be noted that the content of the video industry application orchestration system has been described in Example 1, and the content of the video industry application orchestration system will not be repeated in this embodiment. In step S1, one is to obtain a new application product established by the video industry application orchestration system, and the other is to obtain a data storage request from a client or user to access the video industry application orchestration system to provide data for subsequent steps.

[0090] S2. Perform an authentication of the application identifier of the data storage request and the unique application identifier of the new application product to obtain an authentication result.

[0091] It should be noted that in step S2, the consistency comparison between the application identifier of the data storage request in step S1 and the unique application identifier of the new application product is performed to implement the authentication of the legality of the identifier. In this embodiment, if the application identifier of the data storage request is consistent with the unique application identifier of the new application product, the authentication result is legal; if the application identifier of the data storage request is inconsistent with the unique application identifier of the new application product, the authentication result is illegal, and the data isolation method of the video industry application orchestration system discards the data storage request. It can be understood that the data isolation method of the video industry application orchestration system does not execute the data storage request.

[0092] S3. If the authentication result is legal, the read and write data of the data storage request is stored in the cache middleware, file or database of the new application product corresponding to the unique application identifier.

[0093] It should be noted that in step S3, the data storage request is authenticated as legal according to step S2, and the read and write data of the data storage request are stored in the cache middleware, file or database of the new application product corresponding to the unique application identifier.

[0094] In an embodiment of the present application, after the data storage request has passed the legitimacy authentication, the data isolation method of the video industry application orchestration system will allocate the read and write data to the new application product constructed by the video industry application orchestration system according to the storage requirements of the data storage request for storage, which can effectively prevent data confusion and leakage, ensure the security of the video industry application orchestration system, and reduce development workload.

[0095] Figure 5 This is a schematic diagram of the framework of data storage in the data isolation method of the video industry application orchestration system described in an embodiment of the present application.

[0096] like Figure 5 As shown, in one embodiment of the present application, storing the read and write data of the data storage request in the cache middleware, file or database of the new application product corresponding to the unique application identifier includes:

[0097] Determine the storage type for read and write data based on storage requirements. Storage types include cache middleware, files, or databases.

[0098] storing the read-write data in a cache middleware, file or database of the new application artifact corresponding to the unique application identifier according to the storage type;

[0099] Among them, if the storage type is cache middleware, the AOP aspect-oriented technology is used in combination with the unique application identifier to process the read and write data to obtain the key value; the read and write data and the key value are stored in the cache middleware of the new application product corresponding to the unique application identifier; when the new application product is a single application product, the unique application identifier is added to the cache address where the cache middleware stores the read and write data to obtain an updated cache address; when the new application product is a multi-application product, the application identifier of the cache middleware storing the read and write data is added to the key value to obtain the storage name;

[0100] If the storage type is file, an interceptor is used in combination with a unique application identifier to store the read-write data in a file of a new application product corresponding to the unique application identifier; when the new application product is a single application product, a unique application identifier is added to the storage bucket for file storage of read-write data; when the new application product is a multi-application product, a unique application identifier is added to the file path for file storage of read-write data to obtain an independent storage directory;

[0101] If the storage type is database, the SQL parser is used to parse the execution statement of the database to obtain the syntax tree and combine it with the unique application identifier to store the read and write data in the database of the new application product corresponding to the unique application identifier; when the new application product is a single application product, the unique application identifier is added to the library name of the database storing the read and write data to obtain a new execution statement of the reformatted database; when the new application product is a multi-application product, the unique application identifier is added to the filtering conditions for storing the read and write data in the database.

[0102] It should be noted that the core of database storage is to intercept the execution statements of the database. Custom MyBatis plug-in technology is used. Before executing database query, update, and delete statements, the SQL parser is used to parse the execution statements into a hierarchical syntax tree, combined with a unique application identifier. When read-write data is stored in a shared database of multiple application products, a unique application identifier is added to the filter condition. When read-write data is stored in an independent database of a single application product, a unique application identifier is added to the library name, and then reformatted into a new execution statement, and then submitted to the database for execution to achieve data isolation. The core of cache middleware storage is the proxy cache key value (such as key value or topic value), which is in the form of custom annotations. Before the read-write cache, the key value is uniformly processed by the AOP aspect-oriented technology in combination with the unique application identifier. When read-write data is stored in the shared cache of multiple application products, the application identifier is added to the key value to achieve namespace-based isolation. When read-write data is stored in an independent cache of a single application product, a unique application identifier is added to the connected cache address to achieve physical isolation of cache data and avoid cache pollution of different applications. File storage is usually used to process uploaded files, documents, pictures and other unstructured data. In order to ensure the isolation and security of file data, the core of file storage is to globally intercept file reading and writing. A custom global interceptor is used. Before reading and writing files, combined with a unique application identifier, when the read and write data is stored in a shared file system of multiple application products, a unique application identifier is added to the file path to store it in an independent storage directory. When the read and write data is stored in an independent object storage of a single application product, a unique application identifier is added to the storage bucket to ensure the physical isolation of the file storage. In this embodiment, for different data storage types, a data isolation method for the video industry application orchestration system based on a custom MyBatis plug-in, annotation-based, and global interceptor-based data processing is proposed, which can effectively prevent data confusion and leakage, ensure the security of the system, and reduce development workload.

[0103] In one embodiment of the present application, determining the storage type of read / write data according to the storage requirement includes:

[0104] If the storage requirement is data persistence, the storage type for read and write data is database;

[0105] If the storage requirement is fast access speed, the storage type for read and write data is cache middleware;

[0106] If the storage requirement is to store in file format, the storage type of the read and write data is file.

[0107] It should be noted that the characteristic of database storage is data persistence. Even if the system is shut down, the data will not be lost. It is usually used to store data that needs to be stored for a long time and frequently accessed. It is usually determined by business needs and solidified in the code logic. MyBatis is used uniformly for reading and writing. The number is large and scattered. Here, custom MyBatis plug-in technology is used to uniformly intercept and process. Therefore, it is judged that the use of MyBatis technology is the use of database storage. The characteristics of cache middleware storage are: usually stored in the form of key-value pairs, fast access speed, used to reduce direct access to the database and improve system performance, data may not be persistent, and data may be lost after restarting the system. It is suitable for storing temporary and frequently accessed data. It is also determined by business needs and solidified in the code logic. Custom annotations (such as: @CustomCache) are used. It can be distinguished by annotations. The inclusion of this annotation is the use of cache middleware storage. The characteristic of file storage is that data is stored in the form of files, which can be text files, binary files, etc. The external interface uniformly provides file storage operation methods. Using these operation methods means using file storage.

[0108] Embodiment three:

[0109] Figure 6 A schematic diagram of a terminal device described in an embodiment of the present application.

[0110] like Figure 6 As shown, an embodiment of the present application provides a terminal device, including a processor and a memory;

[0111] A memory, used for storing program codes and transmitting the program codes to a processor;

[0112] The processor is used to execute the data isolation method of the video industry application orchestration system according to the instructions in the program code.

[0113] It should be noted that the processor is used to execute the steps of the data isolation method embodiment of the video industry application arrangement system according to the instructions in the program code. Alternatively, the processor implements the functions of each module / unit in the above-mentioned system / device embodiments when executing the computer program.

[0114] Exemplarily, the computer program may be divided into one or more modules / units, one or more modules / units are stored in a memory and executed by a processor to complete the present application. One or more modules / units may be a series of computer program instruction segments capable of completing a specific function, and the instruction segments are used to describe the execution process of the computer program in a terminal device.

[0115] The terminal device may be a computing device such as a desktop computer, a notebook, a PDA, or a cloud server. The terminal device may include, but is not limited to, a processor and a memory. Those skilled in the art will appreciate that this does not constitute a limitation on the terminal device, and may include more or fewer components than shown in the figure, or a combination of certain components, or different components. For example, the terminal device may also include input and output devices, network access devices, buses, etc.

[0116] The processor may be a central processing unit (CPU), other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (dSIC), field-programmable gate arrays (FPGAs) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. A general-purpose processor may be a microprocessor or any conventional processor, etc.

[0117] The memory may be an internal storage unit of the terminal device, such as a hard disk or memory of the terminal device. The memory may also be an external storage device of the terminal device, such as a plug-in hard disk, a smart memory card (SMC), a secure digital (SD) card, a flash card, etc. equipped on the terminal device. Furthermore, the memory may include both an internal storage unit of the terminal device and an external storage device. The memory is used to store computer programs and other programs and data required by the terminal device. The memory may also be used to temporarily store data that has been output or is to be output.

[0118] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0119] In the several embodiments provided in the present application, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be an indirect coupling or communication connection through some interfaces, devices or units, which can be electrical, mechanical or other forms.

[0120] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0121] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0122] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application is essentially or the part that contributes to the prior art or all or part of the technical solution can be embodied in the form of a software product. The computer software product is stored in a storage medium, including several instructions for a computer device (which can be a personal computer, server, or network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM), random access memory (RAM), disk or optical disk and other media that can store program codes.

[0123] As described above, the above embodiments are only used to illustrate the technical solutions of the present application, rather than to limit them. Although the present application has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present application.

Claims

1. A video industry application arrangement system, characterized in that: include: An application capability library, a capability orchestration engine connected to the application capability library, and a preset module connected to the capability orchestration engine; The application capability library is used to design, arrange and deploy new applications through a capability set and generate an application description file corresponding to the new application, and transmit the application description file to the capability arrangement engine, wherein the capability set includes basic capabilities and video industry capabilities; The capability orchestration engine is used to write the unique application identifier and the orchestration capability of the application description file into the format file according to the deployment and dependency of the application description file and generate application description information, and transmit the application description information to the preset module; The preset module is used to recompile a new application product containing only the programmed capabilities according to the application description information, and the new application product includes a single application product and a multi-application product.

2. The video industry application arrangement system according to claim 1, characterized in that: The preset module includes an authentication center module and a data storage proxy module; The authentication center module is used to perform an authentication of the legitimacy of the identifier according to the data storage request and the unique application identifier of the application description information to obtain an authentication result; The data storage proxy module is used to store the read and write data of the data storage request in the cache middleware, file or database of the new application product corresponding to the unique application identifier based on the legality of the authentication result.

3. The video industry application arrangement system according to claim 1, characterized in that: The application capability library includes a basic capability module and an industry capability module; The basic capability module is used to design and establish a new application, to orchestrate and deploy the basic capabilities required for the new application, and to generate a unique application identifier for the new application; The industry capability module is used to compile and deploy the video industry capabilities required by the new application and generate a dependency relationship between the unique application identifier and the video industry capabilities.

4. The video industry application arrangement system according to claim 3, characterized in that: The basic capabilities include permission management, device management, application management and sub-application management; and / or, the video industry capabilities include real-time video, video playback, AI alarm, flow management, key personnel and vehicle control, smart large screen, special personnel, people's welfare and seedling protection action.

5. The video industry application arrangement system according to any one of claims 1 to 4, characterized in that: The format file is a yaml format file or a json format file.

6. A data isolation method for a video industry application orchestration system, applied to the video industry application orchestration system as claimed in any one of claims 1 to 5, characterized in that: The data isolation method includes the following steps: Obtaining a new application product established by the video industry application orchestration system and obtaining a data storage request, wherein the data storage request includes an application identifier, read and write data, and storage requirements; Performing identity legitimacy authentication on the application identifier of the data storage request and the unique application identifier of the new application product to obtain an authentication result; If the authentication result is legal, the read and write data of the data storage request are stored in a cache middleware, file or database of the new application product corresponding to the unique application identifier.

7. The data isolation method of the video industry application arrangement system according to claim 6 is characterized in that: Storing the read and write data of the data storage request in a cache middleware, file or database of the new application product corresponding to the unique application identifier includes: Determine the storage type of the read / write data according to the storage requirement, the storage type including cache middleware, file or database; storing the read-write data in a cache middleware, a file or a database of the new application product corresponding to the unique application identifier according to the storage type; Among them, if the storage type is cache middleware, the AOP aspect-oriented technology is used in combination with the unique application identifier to process the read-write data to obtain a key value; the read-write data and the key value are stored in the cache middleware of the new application product corresponding to the unique application identifier; when the new application product is a single application product, the unique application identifier is added to the cache address of the read-write data stored in the cache middleware to obtain an updated cache address; when the new application product is a multi-application product, the application identifier of the read-write data stored in the cache middleware is added to the key value to obtain a storage name; If the storage type is a file, an interceptor is used in combination with the unique application identifier to store the read-write data in a file of the new application product corresponding to the unique application identifier; when the new application product is a single-application product, the unique application identifier is added to the storage bucket where the file stores the read-write data; when the new application product is a multi-application product, the unique application identifier is added to the file path where the file stores the read-write data to obtain an independent storage directory; If the storage type is a database, the syntax tree obtained by parsing the execution statement of the database using an SQL parser is combined with the unique application identifier to store the read-write data in the database of the new application product corresponding to the unique application identifier; when the new application product is a single-application product, the unique application identifier is added to the library name of the database storing the read-write data to obtain a new execution statement of the reformatted database; when the new application product is a multi-application product, the unique application identifier is added to the filtering conditions for storing the read-write data in the database.

8. The data isolation method of the video industry application arrangement system according to claim 7 is characterized in that: Determining the storage type of the read / write data according to the storage requirement includes: If the storage requirement is data persistence, the storage type of the read-write data is database; If the storage requirement is fast access speed, the storage type of the read-write data is cache middleware; If the storage requirement is storage in file format, the storage type of the read-write data is file.

9. The data isolation method of the video industry application arrangement system according to claim 6, characterized in that: include: If the authentication result is illegal, the data storage request is discarded.

10. A terminal device, characterized in that: including a processor and a memory; The memory is used to store program codes and transmit the program codes to the processor; The processor is used to execute the data isolation method of the video industry application orchestration system as described in any one of claims 6 to 9 according to the instructions in the program code.

Images