Enterprise office management system and method based on SaaS platform

Abstract

The invention is suitable for the technical field of office data management, and particularly relates to an enterprise office management system and method based on an SaaS platform, and the method comprises the steps: S100, obtaining the enterprise office data of all tenants in the SaaS platform, reading the attributes, enabling the attributes to at least comprise a source and a type, and obtaining the enterprise office data of all tenants in the SaaS platform based on the attributes, segmenting and packaging the enterprise office data to obtain a plurality of data packets, clustering the data packets into sensitive packets and shared packets, and masking the shared packets; and S200, configuring a numbering rule, and determining the number of each data packet. According to the method, the side chain is inserted into the data lake, so that each tenant can only access the data resources in the permission range of the tenant, unauthorized data access is prevented, the data isolation effect is effectively ensured, the tenants can be verified for multiple times by calculating the registration codes, and the corresponding data is rapidly extracted after the verification succeeds, so that the data isolation efficiency is improved. And the access efficiency of the data lake is greatly improved.

Description

Technical Field

[0001] The present invention relates to the technical field of office data management, and in particular to an enterprise office management system and method based on a SaaS platform. Background Art

[0002] The SaaS platform is a software delivery model based on cloud computing. Users can access software applications hosted by service providers through the Internet without having to install, manage or maintain the software and its infrastructure. The SaaS platform generally adopts a shared infrastructure, that is, multiple tenants share the same set of infrastructure (such as servers, storage, databases and networks, etc.), and each tenant's data, configuration and operating environment are independent of each other.

[0003] However, the above-mentioned multi-tenant model may lead to loose data isolation and potential data security issues; therefore, "how to isolate data and perform multi-level verification" is a technical problem that the present invention needs to solve. Summary of the invention

[0004] The purpose of the present invention is to provide an enterprise office management system and method based on a SaaS platform to solve the problem of "how to isolate data and perform multi-level verification" raised in the above background technology.

[0005] To achieve the above object, the present invention provides the following technical solutions: An enterprise office management method based on a SaaS platform, the method comprising: S100: Acquire the enterprise office data of all tenants in the SaaS platform and read out the attributes, wherein the attributes at least include: source and type, and based on the attributes, segment and package the enterprise office data to obtain a plurality of data packets, cluster the data packets into sensitive packets and shared packets, and mask the shared packets; S200: Configure the numbering rule, determine the number of each data packet, integrate all data packets and numbers, generate a data lake, count the number of tenants in the SaaS platform, create a side chain corresponding to each tenant, insert the side chain into the data lake, and migrate the shared package to the side chain; S300: trace back the attributes, establish a mapping between the data packet and the tenant, integrate the data packet number corresponding to each tenant, obtain an index code, select a mapping function, synchronize the mapping function to the data lake, input the index code into the mapping function, calculate a registration code, and send the registration code to the corresponding tenant; S400: When a read request uploaded by a tenant is received, the query code is extracted, and it is determined whether the query code is the same as the registration code. If so, the read request is migrated to the side chain, and the query code is used to decode the shared package in the side chain. The query code is input into the mapping function, and the corresponding index code is output. The target unit is selected in the data lake, and the read permission of the target unit is opened to the tenant.

[0006] Furthermore, the S100 includes: Extracting feature segments from the enterprise office data, integrating the feature segments, and generating a search catalog; Based on the search catalog and attributes, search rules are constructed, and the search rules are integrated into the data lake.

[0007] Furthermore, the S100 further includes: Based on the attributes, the enterprise office data is segmented into a plurality of fragments, and each fragment is packaged to generate a data packet; A tag generated by the attributes is inserted into the data packet.

[0008] Further, the S200 includes: Inserting a processing layer into the data lake and embedding a validation mechanism into the processing layer; Several storage layers are mounted in the processing layer, the call times of each data packet are recorded, and the data packets are classified into different storage layers based on the call times.

[0009] Furthermore, the method further comprises: Opening the data interface of the processing layer, extracting the newly added data from the processing layer, preprocessing the newly added data, and transferring the preprocessed data to the storage layer; Build a control link between the side chain and the data packet.

[0010] Further, the S300 includes: Create a management platform for registration codes and mapping functions, and open management permissions to tenants; Get the tenant's constituent departments, determine the data packet number corresponding to each constituent department, and integrate them to generate a department code.

[0011] Further, the S400 includes: Insert a private key into the read request, verify the private key using the public key pre-integrated in the side chain, and migrate the read request to the side chain after the verification passes; An identifier is added to the read request to determine the source of the read request and to create a role-based access mechanism.

[0012] Furthermore, the system comprises: The mask module is used to obtain the enterprise office data of all tenants in the SaaS platform and read out the attributes, wherein the attributes at least include: source and type, and based on the attributes, the enterprise office data is segmented and packaged to obtain a number of data packets, the data packets are clustered into sensitive packets and shared packets, and the shared packets are masked; The migration module is used to configure the numbering rules, determine the number of each data packet, integrate all data packets and numbers, generate a data lake, count the number of tenants in the SaaS platform, create side chains corresponding to the tenants, insert the side chains into the data lake, and migrate the shared packages to the side chains; A sending module is used to trace back the attributes, establish a mapping between the data packet and the tenant, integrate the number of the data packet corresponding to each tenant, obtain an index code, select a mapping function, synchronize the mapping function to the data lake, input the index code into the mapping function, calculate a registration code, and send the registration code to the corresponding tenant; The open module is used to extract the query code when receiving the read request uploaded by the tenant, determine whether the query code is the same as the registration code, and if so, migrate the read request to the side chain, and use the query code to decode the shared package in the side chain, input the query code into the mapping function, output the corresponding index code, select the target unit in the data lake, and open the read permission of the target unit to the tenant.

[0013] Furthermore, the mask module includes: A generating unit, used to extract feature segments from the enterprise office data, integrate the feature segments, and generate a search catalog; An integration unit, used to construct a search rule according to the search catalog and attributes, and integrate the search rule into the data lake; A packaging unit, used for segmenting the enterprise office data according to the attribute to obtain a plurality of fragments, and packaging each fragment to generate a data packet; The inserting unit is used to insert a label generated by the attribute into the data packet.

[0014] Furthermore, the migration module includes: An embedding unit, configured to insert a processing layer into the data lake and embed a verification mechanism into the processing layer; The classification unit is used to mount several storage layers to the processing layer, record the number of calls of each data packet, and classify the data packets into different storage layers based on the number of calls.

[0015] Compared with the prior art, the present invention has the following beneficial effects: By segmenting and packaging the corporate office data, refined data management is achieved and data management efficiency is improved. By building a data lake, data from different tenants and departments can be uniformly stored, eliminating data silos and greatly improving data access and management efficiency. By inserting side chains into the data lake, each tenant can only access data resources within the scope of their authority, preventing unauthorized data access and effectively ensuring data isolation. By calculating the registration code, tenants can be verified multiple times, and after successful verification, the corresponding data can be quickly extracted, greatly improving the access efficiency of the data lake. BRIEF DESCRIPTION OF THE DRAWINGS

[0016] Figure 1 A flowchart of an enterprise office management method based on a SaaS platform provided in an embodiment of the present invention; Figure 2 A first sub-process flowchart of the enterprise office management method based on the SaaS platform provided in an embodiment of the present invention; Figure 3 A second sub-process flowchart of the enterprise office management method based on the SaaS platform provided in an embodiment of the present invention; Figure 4 A third sub-process flowchart of the enterprise office management method based on the SaaS platform provided in an embodiment of the present invention; Figure 5 A fourth sub-process flowchart of the enterprise office management method based on the SaaS platform provided in an embodiment of the present invention; Figure 6 A block diagram of the composition of an enterprise office management system based on a SaaS platform provided in an embodiment of the present invention; Figure 7 A block diagram of the composition of a mask module in an enterprise office management system based on a SaaS platform provided by an embodiment of the present invention; Figure 8 A block diagram of the composition of the migration module in the enterprise office management system based on the SaaS platform provided in an embodiment of the present invention; Fig. 9 A block diagram of the composition of a sending module in an enterprise office management system based on a SaaS platform provided in an embodiment of the present invention; Fig.10 A block diagram of the composition of open modules in an enterprise office management system based on a SaaS platform provided in an embodiment of the present invention. DETAILED DESCRIPTION

[0017] In order to make the purpose, technical solution and advantages of the present invention more clearly understood, the present invention is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present invention and are not intended to limit the present invention.

[0018] In Example 1, Figure 1 The implementation process of the enterprise office management method based on the SaaS platform provided by an embodiment of the present invention is shown and described in detail below: S100: Obtain the enterprise office data of all tenants in the SaaS platform and read out the attributes, wherein the attributes at least include: source and type, and based on the attributes, segment and package the enterprise office data to obtain a number of data packets, cluster the data packets into sensitive packets and shared packets, and mask the shared packets.

[0019] Record the application data, configuration, etc. of each tenant in the SaaS platform, and identify them as enterprise office data. Obtain the attributes of each enterprise office data, including the source application, tenant, and specific type of the enterprise office data. According to the attributes, segment the enterprise office data and package the data obtained after segmentation. The benefit of segmentation is that it can manage the enterprise office data in a refined manner and improve data extraction efficiency, while packaging is to facilitate the continued processing of data.

[0020] Determine the sensitivity of each data packet, where the sensitivity is determined by the SaaS platform manager. In actual operations, data packets such as finance, personnel, and sales are more sensitive, while data packets such as production information, corporate promotional data, or public regulations are less sensitive. Divide the data packets into sensitive packets and shared packets, and mask the data in the shared packets according to the preset masking rules, where the preset masking rules can be for masking the numbers in the shared packets.

[0021] In actual use, after the tenant passes the identity authentication, he can view the data in the shared package. When he needs to retrieve the data in the sensitive package, he can use the registration code entered by the tenant and the mapping function to calculate the index code, and then he can view the data in the data package with the corresponding number of the index code.

[0022] S200: Configure numbering rules, determine the number of each data packet, integrate all data packets and numbers, generate a data lake, count the number of tenants in the SaaS platform, create side chains corresponding to the tenants one by one, insert the side chains into the data lake, and migrate the shared packages to the side chains.

[0023] In order to quickly retrieve data packets, it is necessary to determine the number of each data packet according to the pre-configured numbering rules, create a data lake, and transfer the data packets to the data lake; create the same number of side chains according to the number of tenants. The role of the side chain is to isolate the access process of each tenant to achieve unified storage and separate scheduling of corporate office data; migrate the shared package to the side chain, and when the tenant completes the pre-built verification in the side chain, the data in the shared package can be accessed.

[0024] In the data lake, each sensitive package corresponds to only one number. Through this storage and management method, sensitive packages can be mixed and stored to prevent tracing the source of the data and ensure the anonymity of sensitive packages.

[0025] S300: trace back the attributes, establish a mapping between the data packet and the tenant, integrate the numbers of the data packets corresponding to each tenant, obtain the index code, select the mapping function, synchronize the mapping function to the data lake, input the index code into the mapping function, calculate the registration code, and send the registration code to the corresponding tenant.

[0026] According to the source of enterprise office data, a mapping between data packages and tenants is established, and the index code is generated using the number of the data package corresponding to the tenant. A mapping function is selected from the existing data and migrated to the data lake, that is, the mapping function for each tenant is different. The mapping function is a reversible hash function, and the index code is input into the mapping function to obtain a registration code, which is then sent to the tenant. In the above manner, a connection is established between the tenant and the data package.

[0027] In actual use, when the side chain receives the access request from the tenant, it looks up the registration code and inputs the registration code into the mapping function corresponding to the side chain to calculate the index code, thereby quickly locating the data packet corresponding to the tenant.

[0028] S400: When a read request uploaded by a tenant is received, the query code is extracted, and it is determined whether the query code is the same as the registration code. If so, the read request is migrated to the side chain, and the query code is used to decode the shared package in the side chain. The query code is input into the mapping function, and the corresponding index code is output. The target unit is selected in the data lake, and the read permission of the target unit is opened to the tenant.

[0029] After receiving the read request uploaded by the tenant, determine whether the query code is the same as the registration code. If they are the same, use the query code to decode the shared package so that the tenant can view the data in the shared package. Continue to input the query code into the mapping function, output the corresponding index code, and use the index code to find the target unit in the data lake. The target unit is the sensitive package corresponding to the index code, and the read permission of the target unit is opened to the tenant.

[0030] In Example 2, Figure 2 The implementation process of the enterprise office management method based on the SaaS platform provided by an embodiment of the present invention is shown. The S100 is described in detail below: S101: extracting feature segments from the enterprise office data, integrating the feature segments, and generating a search catalog.

[0031] Construct a search directory, where the search directory consists of several directory items, each of which corresponds to a feature segment; by querying the directory items, the feature segments can be quickly retrieved and filtered, thereby greatly improving the access efficiency of enterprise office data; the feature segment is the characteristic part of the enterprise office data, which can be personnel, time or matters, etc.

[0032] S102: Constructing search rules based on the search catalog and attributes, and integrating the search rules into the data lake.

[0033] Construct search rules, where the search rules can be keyword search, time search, relationship search, etc.

[0034] In Example 3, Figure 2 The implementation process of the enterprise office management method based on the SaaS platform provided by the embodiment of the present invention is shown, and S100 is further described in detail as follows: S103: Based on the attributes, the enterprise office data is segmented into a plurality of fragments, and each fragment is packaged to generate a data packet.

[0035] Enterprise office data is segmented and packaged, and the resulting data packets are transferred to the data lake for storage.

[0036] S104: Inserting a label generated by the attribute into the data packet.

[0037] By inserting tags into data packets, the identifiability and management capabilities of the data packets can be enhanced.

[0038] In Example 4, Figure 3 The implementation process of the enterprise office management method based on the SaaS platform provided by an embodiment of the present invention is shown, and S200 is described in detail below: S201: Inserting a processing layer into the data lake, and embedding a verification mechanism into the processing layer.

[0039] The data lake is divided into a processing layer and a storage layer. The processing layer is mainly used to verify and calculate the query code, while the storage layer is mainly used to store sensitive packages. The verification mechanism is the specific verification method for the query code, such as comparing it with a pre-stored comparison table.

[0040] S202: Mounting a plurality of storage layers to the processing layer, recording the number of calls of each data packet, and classifying the data packets into different storage layers based on the number of calls.

[0041] According to the number of calls of each data packet, the data packets are classified into different storage layers. The data packets here are specifically sensitive packets. The storage layers are divided according to the number of calls. This classification method helps to optimize the storage management of data packets and reasonably allocate storage resources according to the access frequency, thereby improving storage performance and call efficiency.

[0042] In Example 5, Figure 4 The implementation process of the enterprise office management method based on the SaaS platform provided by an embodiment of the present invention is shown, and S300 is described in detail below: S301: Create a management platform for registration codes and mapping functions, and open management permissions to tenants.

[0043] S302: Obtain the constituent departments of the tenant, determine the number of the data packet corresponding to each constituent department, and integrate them to generate a department code.

[0044] Multiple registration codes or mapping functions can be integrated in each side chain to achieve detailed data management; in other words, different departments within the enterprise can also access different enterprise office data through different registration codes (i.e. department codes), further realizing the isolation of internal data and improving the security of sensitive data.

[0045] In Example 6, Figure 5 The implementation process of the enterprise office management method based on the SaaS platform provided by the embodiment of the present invention is shown, and S400 is described in detail below: S401: inserting a private key into the read request, verifying the private key using the public key pre-integrated in the side chain, and migrating the read request to the side chain after the verification is passed.

[0046] When the side link receives a read request, it uses the public key to verify the private key in the read request.

[0047] S402: adding an identifier to the read request, determining the source of the read request, and creating a role-based access mechanism.

[0048] In addition to assigning a department code to each department, read requests can also be classified to determine the source of the access request, where the source can be a tenant, department, or employee, etc. The advantage of this is that different sources can use different registration codes to retrieve different corporate office data.

[0049] You can also assign an employee code to each employee in the tenant, thereby building a role-based access mechanism, where the access mechanism is a specific method of allocating employee codes or department codes, such as by job title or department.

[0050] In Example 7, different from Example 1, in this embodiment of the present invention, the method further includes: Opening the data interface of the processing layer, extracting the newly added data from the processing layer, preprocessing the newly added data, and transferring the preprocessed data to the storage layer; Build a control link between the side chain and the data packet.

[0051] After new enterprise office data is generated, it is defined as new data and preprocessed. The specific steps of preprocessing include data cleaning and deduplication. The preprocessed data is transferred to the storage layer, so that the storage of various types of data can be achieved by utilizing the data lake. Through the control link, tenants can modify and view the enterprise office data in their corresponding data packets.

[0052] Figure 6 The following is a structural block diagram of an enterprise office management system based on a SaaS platform provided by an embodiment of the present invention. The enterprise office management system based on a SaaS platform 1 includes: The mask module 11 is used to obtain the enterprise office data of all tenants in the SaaS platform and read out the attributes, wherein the attributes at least include: source and type, and based on the attributes, the enterprise office data is segmented and packaged to obtain a plurality of data packets, the data packets are clustered into sensitive packets and shared packets, and the shared packets are masked; Migration module 12, used to configure numbering rules, determine the number of each data packet, integrate all data packets and numbers, generate a data lake, count the number of tenants in the SaaS platform, create side chains corresponding to tenants one by one, insert the side chains into the data lake, and migrate the shared packages to the side chains; The sending module 13 is used to trace back the attributes, establish a mapping between the data packet and the tenant, integrate the number of the data packet corresponding to each tenant, obtain an index code, select a mapping function, synchronize the mapping function to the data lake, input the index code into the mapping function, calculate a registration code, and send the registration code to the corresponding tenant; The open module 14 is used to extract the query code when receiving the read request uploaded by the tenant, determine whether the query code is the same as the registration code, and if so, migrate the read request to the side chain, and use the query code to decode the shared package in the side chain, input the query code into the mapping function, output the identification set, select the target unit in the data lake, and open the read permission of the target unit to the side chain.

[0053] Figure 7 The structure diagram of the enterprise office management system based on the SaaS platform provided by an embodiment of the present invention is shown, and the mask module 11 includes: A generating unit 111 is used to extract feature segments from the enterprise office data, integrate the feature segments, and generate a search catalog; An integration unit 112, configured to construct a search rule according to the search catalog and attributes, and integrate the search rule into the data lake; The packaging unit 113 is used to segment the enterprise office data according to the attribute to obtain a plurality of fragments, and to package each fragment to generate a data packet; The inserting unit 114 is configured to insert a label generated by an attribute into the data packet.

[0054] Figure 8 The structure diagram of the enterprise office management system based on the SaaS platform provided by an embodiment of the present invention is shown. The migration module 12 includes: An embedding unit 121, configured to insert a processing layer into the data lake and embed a verification mechanism into the processing layer; The classification unit 122 is used to mount several storage layers to the processing layer, record the number of calls of each data packet, and classify the data packets into different storage layers based on the number of calls.

[0055] Fig. 9 The structure diagram of the enterprise office management system based on the SaaS platform provided by an embodiment of the present invention is shown, and the sending module 13 includes: An opening unit 131 is used to create a management platform for registration codes and mapping functions, and to open management rights to tenants; The integration unit 132 is used to obtain the constituent departments of the tenant, determine the number of the data packet corresponding to each constituent department, and integrate to generate a department code.

[0056] Fig.10 The structure diagram of the enterprise office management system based on the SaaS platform provided by an embodiment of the present invention is shown, and the open module 14 includes: The reading unit 141 is used to insert a private key into the read request, verify the private key using the public key pre-integrated in the side chain, and migrate the read request to the side chain after the verification is passed; The creation unit 142 is used to add an identifier to the read request, determine the source of the read request, and create a role-based access mechanism.

[0057] The mask module 11 is mainly used to complete step S100, the migration module 12 is mainly used to complete step S200, the sending module 13 is mainly used to complete step S300, and the opening module 14 is mainly used to complete step S400; The generating unit 111 is mainly used to complete step S101, the integrating unit 112 is mainly used to complete step S102, the packaging unit 113 is mainly used to complete step S103, and the inserting unit 114 is mainly used to complete step S104; The embedding unit 121 is mainly used to complete step S201, and the classification unit 122 is mainly used to complete step S202; The opening unit 131 is mainly used to complete step S301, and the integration unit 132 is mainly used to complete step S302; The reading unit 141 is mainly used to complete step S401, and the creating unit 142 is mainly used to complete step S402.

[0058] The technical features of the above-described embodiments may be arbitrarily combined. To make the description concise, not all possible combinations of the technical features in the above-described embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0059] The functions that can be achieved by the above-mentioned enterprise office management method based on the SaaS platform are all completed by computer equipment, and the computer equipment includes one or more processors and one or more memories, and at least one program code is stored in the one or more memories. The program code is loaded and executed by the one or more processors to realize the functions of the cloud computing-based intelligent advertising delivery method.

[0060] The processor takes out instructions from the memory one by one, analyzes the instructions, and then completes the corresponding operations according to the instruction requirements, generating a series of control commands, so that the various parts of the computer can automatically, continuously and coordinately move to become an organic whole, realize the input of programs, the input of data, and the calculation and output of results. The arithmetic operations or logical operations generated in this process are all completed by the operator; the memory includes a read-only memory, which is used to store computer programs, and a protection device is provided outside the memory.

[0061] Exemplarily, the computer program may be divided into one or more modules, one or more modules are stored in a memory and executed by a processor to implement the present invention. One or more modules may be a series of computer program instruction segments capable of implementing specific functions, and the instruction segments are used to describe the execution process of the computer program in a terminal device.

[0062] Those skilled in the art will understand that the description of the above service equipment is merely an example and does not constitute a limitation on the terminal equipment. It may include more or fewer components than described above, or a combination of certain components, or different components, for example, it may include input and output devices, network access devices, buses, etc.

Claims

1. An enterprise office management method based on a SaaS platform, characterized in that: The method comprises: S100: Acquire the enterprise office data of all tenants in the SaaS platform and read out the attributes, wherein the attributes at least include: source and type, and based on the attributes, segment and package the enterprise office data to obtain a plurality of data packets, cluster the data packets into sensitive packets and shared packets, and mask the shared packets; S200: Configure the numbering rule, determine the number of each data packet, integrate all data packets and numbers, generate a data lake, count the number of tenants in the SaaS platform, create a side chain corresponding to each tenant, insert the side chain into the data lake, and migrate the shared package to the side chain; S300: trace back the attributes, establish a mapping between the data packet and the tenant, integrate the data packet number corresponding to each tenant, obtain an index code, select a mapping function, synchronize the mapping function to the data lake, input the index code into the mapping function, calculate a registration code, and send the registration code to the corresponding tenant; S400: When a read request uploaded by a tenant is received, the query code is extracted, and it is determined whether the query code is the same as the registration code. If so, the read request is migrated to the side chain, and the query code is used to decode the shared package in the side chain. The query code is input into the mapping function, and the corresponding index code is output. The target unit is selected in the data lake, and the read permission of the target unit is opened to the tenant.

2. The enterprise office management method based on the SaaS platform according to claim 1, characterized in that: The S100 includes: Extracting feature segments from the enterprise office data, integrating the feature segments, and generating a search catalog; Based on the search catalog and attributes, search rules are constructed, and the search rules are integrated into the data lake.

3. The enterprise office management method based on the SaaS platform according to claim 2 is characterized in that: The S100 further includes: Based on the attributes, the enterprise office data is segmented into a plurality of fragments, and each fragment is packaged to generate a data packet; A tag generated by the attributes is inserted into the data packet.

4. The enterprise office management method based on the SaaS platform according to claim 1, characterized in that: The S200 includes: Inserting a processing layer into the data lake and embedding a validation mechanism into the processing layer; Several storage layers are mounted in the processing layer, the call times of each data packet are recorded, and the data packets are classified into different storage layers based on the call times.

5. The enterprise office management method based on the SaaS platform according to claim 4 is characterized in that: The method further comprises: Opening the data interface of the processing layer, extracting the newly added data from the processing layer, preprocessing the newly added data, and transferring the preprocessed data to the storage layer; Build a control link between the side chain and the data packet.

6. The enterprise office management method based on the SaaS platform according to claim 1, characterized in that: The S300 includes: Create a management platform for registration codes and mapping functions, and open management permissions to tenants; Get the tenant's constituent departments, determine the data packet number corresponding to each constituent department, and integrate them to generate a department code.

7. The enterprise office management method based on the SaaS platform according to claim 1, characterized in that: The S400 includes: Insert a private key into the read request, verify the private key using the public key pre-integrated in the side chain, and migrate the read request to the side chain after the verification passes; An identifier is added to the read request to determine the source of the read request and to create a role-based access mechanism.

8. An enterprise office management system based on a SaaS platform, characterized in that: The system comprises: The mask module is used to obtain the enterprise office data of all tenants in the SaaS platform and read out the attributes, wherein the attributes at least include: source and type, and based on the attributes, the enterprise office data is segmented and packaged to obtain a number of data packets, the data packets are clustered into sensitive packets and shared packets, and the shared packets are masked; The migration module is used to configure the numbering rules, determine the number of each data packet, integrate all data packets and numbers, generate a data lake, count the number of tenants in the SaaS platform, create side chains corresponding to the tenants, insert the side chains into the data lake, and migrate the shared packages to the side chains; A sending module is used to trace back the attributes, establish a mapping between the data packet and the tenant, integrate the number of the data packet corresponding to each tenant, obtain an index code, select a mapping function, synchronize the mapping function to the data lake, input the index code into the mapping function, calculate a registration code, and send the registration code to the corresponding tenant; The open module is used to extract the query code when receiving the read request uploaded by the tenant, determine whether the query code is the same as the registration code, and if so, migrate the read request to the side chain, and use the query code to decode the shared package in the side chain, input the query code into the mapping function, output the corresponding index code, select the target unit in the data lake, and open the read permission of the target unit to the tenant.

9. The enterprise office management system based on the SaaS platform according to claim 8, characterized in that: The mask module comprises: A generating unit, used to extract feature segments from the enterprise office data, integrate the feature segments, and generate a search catalog; An integration unit, used to construct a search rule according to the search catalog and attributes, and integrate the search rule into the data lake; A packaging unit, used for segmenting the enterprise office data according to the attribute to obtain a plurality of fragments, and packaging each fragment to generate a data packet; The inserting unit is used to insert a label generated by the attribute into the data packet.

10. The enterprise office management system based on the SaaS platform according to claim 8, characterized in that: The migration module includes: An embedding unit, configured to insert a processing layer into the data lake and embed a verification mechanism into the processing layer; The classification unit is used to mount several storage layers to the processing layer, record the number of calls of each data packet, and classify the data packets into different storage layers based on the number of calls.

Images