CN117389684A - A SaaS multi-tenant data isolation method and system - Google Patents

Abstract

The invention discloses a SaaS multi-tenant data isolation method and system, comprising the following steps: creating a database cluster, configuring a dynamic storage volume, setting tenant identification rules, creating a data source in a software service, acquiring a data operation request, screening the database by using the identification rules, and completing data source switching. The invention has the advantages that: and switching database connection by utilizing the tenant identification in the data operation request by acquiring the data operation request sent by the current tenant. The method has the advantages that complete isolation is achieved in the aspect of data isolation, meanwhile, the kubernetes container management platform is utilized to improve the development efficiency of SaaS products, and meanwhile, the operation and maintenance cost is reduced.

Description

A SaaS multi-tenant data isolation method and system

Technical field

The present invention relates to the field of computer technology, and in particular to a method and system for multi-tenant data isolation based on tenant attributes.

Background technique

SaaS is the abbreviation of Software-as-a-Service (Software as a Service). It is a model of providing software through the Internet. Manufacturers uniformly deploy application software on their own servers and tenants rent it on demand. Under normal circumstances, vendors that adopt a single-tenant architecture need to deploy multiple software services and their own databases for different tenants, which increases operation and maintenance costs and cannot achieve rapid delivery.

Contents of the invention

In view of the shortcomings of the existing technology, the present invention provides a SaaS multi-tenant data isolation method and system. You can obtain the data operation request sent by the current tenant and use the tenant ID in the data operation request to switch the database connection. In terms of data isolation, complete isolation is achieved, and the kubernetes container management platform is used to improve the efficiency of SaaS product development and reduce operation and maintenance costs.

In order to achieve the above object of the invention, the technical solutions adopted by the present invention are as follows:

A SaaS multi-tenant data isolation method, including the following steps:

1) Create a database cluster: Use Kubernetes' StatefulSet to create a database cluster. StatefulSet ensures that each tenant's database has a unique name and IP address to ensure database isolation and reliability.

2) Configure dynamic storage volumes: Use the dynamic storage volume function of Kubernetes to store data in an external storage system to improve the scalability and availability of the database.

3) Set tenant identification rules: Define tenant identification rules to associate tenants with their databases. This can be defined based on a domain name, account login name, or other unique identifier.

4) Create data sources in the software service: When the software service starts, create data sources for all tenants. The data source should contain information such as the tenant's database name, IP address, and port number.

5) Obtain data operation request: The software service obtains data operation request from the client. Data operation requests can be to query, update or delete data, and also need to obtain client type, identification, request path, user attributes and other related information.

6) Filter the database using identification rules: Use tenant identification rules to filter the database to ensure that only tenants can access their own databases. Route the request to the appropriate database based on the tenant ID in the request.

7) Complete data source switching: Switch the data source to the corresponding database according to the data operation request. Ensure that data operation requests are sent to the correct database for data read, write, or delete operations.

Furthermore, the SaaS multi-tenant data isolation method also includes data encryption: using encryption technology to protect data security, including: symmetric encryption, asymmetric encryption and hash functions.

Further, the SaaS multi-tenant data isolation method also includes database auditing: implementing database auditing to track access to the database in order to identify abnormal activities and prevent data leakage.

Further, the SaaS multi-tenant data isolation method also includes data backup: perform data backup regularly to prevent data loss or damage. Includes physical backup, mirroring and replication technologies to achieve data backup.

The invention discloses a SaaS multi-tenant data isolation system, which can be used to implement the above-mentioned SaaS multi-tenant data isolation method. Specifically, it includes:

Tenant management module, including the following functions:

User registration and authentication: Allow users to register and authenticate to gain access to tenant systems.

Tenant creation and configuration: Allows administrators to create and configure tenants, including setting the tenant's name, identifier, and access permissions.

Tenant permission management: Allows administrators to assign and manage tenant permissions, restricting their access and operating system scope.

Tenant data isolation: Ensure that each tenant's data is isolated in the system and can only be accessed and manipulated by itself.

Database management module, including the following functions:

Database cluster management: Create and manage multiple database clusters, each cluster is used to store data for one or more tenants.

Database allocation and maintenance: Assign each tenant to an independent database to ensure data isolation and reliability.

Database backup and recovery: Back up your database regularly and provide a recovery mechanism to prevent data loss or corruption.

Data isolation and access control module, including the following functions:

Data partitioning and isolation: Use multi-tenant data partitioning technology to store each tenant's data in a separate database to ensure isolation between data.

Access control and permission management: Set access permissions for each tenant to limit the scope of data they can access and operate.

Data encryption and security: Use encryption technology to protect the security of data, encrypting it during data transmission and storage.

Data manipulation and query module, including the following functions:

Data query and filtering: Allow tenants to perform data query and filtering operations to obtain and manipulate data based on their permissions and access levels.

Data update and deletion: Allow tenants to update and delete data they own, ensuring data integrity and consistency.

Data operation logs and audits: Record all data operations and query logs to audit and track data access and change history.

System monitoring and reporting module, including the following functions:

System performance monitoring: Monitor system performance and resource usage to ensure system stability and reliability.

Error and exception handling: Capture and handle errors and exceptions that occur in the system to ensure system availability and stability.

High availability and failover: Implement a high-availability architecture to ensure system continuity and reliability, even in the event of hardware failure or network outage.

Reporting and Analysis: Generate and deliver a variety of reports and analytics, including tenant usage, system performance, and data access statistics.

The invention also discloses a computer device, which includes a memory, a processor and a computer program stored in the memory and executable on the processor. When the processor executes the program, it implements the above SaaS multi-tenant data isolation method.

The invention also discloses a computer-readable storage medium on which a computer program is stored. When the program is executed by a processor, the above-mentioned SaaS multi-tenant data isolation method is implemented.

Compared with the prior art, the advantages of the present invention are:

Physical isolation between each tenant's data is achieved, and the data of each tenant is completely separated, which improves high data security. Using container orchestration technology to deploy database instances greatly reduces operation and maintenance costs and facilitates data management and backup. Customized dynamic data sources can be automatically switched through user tenant identification. No additional processing is required during business software development, which improves application development and iteration efficiency.

Description of the drawings

Figure 1 is a flow chart of SaaS multi-tenant data isolation according to an embodiment of the present invention.

Detailed ways

In order to make the purpose, technical solutions and advantages of the present invention more clear, the present invention will be further described in detail below based on the accompanying drawings and examples.

As shown in Figure 1, the present invention provides a SaaS multi-tenant data isolation method, which includes the following steps:

1) Create a database;

Database installation can be simplified using Kubernetes' StatefulSet. StatefulSet is a special type of Kubernetes deployment that ensures that each tenant's database has a unique name and IP address. This helps ensure database isolation and reliability.

2) Configure dynamic storage volumes;

Dynamic Storage Volumes are a Kubernetes feature that allows data to be stored in external storage systems. This helps improve database scalability and availability.

3) Set tenant identification rules;

Tenant identification rules are a method used to associate tenants with their databases. Tenant identification rules can be based on domain names, account login names, or other unique identifiers.

4) Create data sources in software services;

The software service should create data sources for all tenants when started. The data source should contain the tenant's database name, IP address, and port number.

5) Get data operation request;

The software service should obtain data operation requests from the client. Data operation requests can be to query, update or delete data. At the same time, it is necessary to obtain client type, identification, request path, user attributes and other related information.

6) Filter the database through identification rules;

The software service should use tenant identification rules to filter the database. This helps ensure that only tenants have access to their own databases.

7) Complete the data source switching;

The software service should complete the switching of data sources according to the data operation request. This helps ensure that data manipulation requests are sent to the correct database.

Here are some additional considerations:

data encryption

Data encryption can be used to protect data from unauthorized access. Data encryption can be achieved by using various techniques such as symmetric encryption, asymmetric encryption and hash functions.

Database audit

Database auditing can be used to track access to the database. Database auditing can be used to identify unusual activity and prevent data breaches.

data backup

Data backup can be used to protect data from loss or damage. Data backup can be achieved through the use of various technologies such as physical backup, mirroring and replication.

By using the above methods and technologies, data security in the SaaS environment can be ensured and data leakage prevented.

In yet another embodiment of the present invention, a SaaS multi-tenant data isolation system is provided. The system can be used to implement the above-mentioned SaaS multi-tenant data isolation method. Specifically, it includes:

Tenant management module, including the following functions:

User registration and authentication: Allow users to register and authenticate to gain access to tenant systems.

Tenant creation and configuration: Allows administrators to create and configure tenants, including setting the tenant's name, identifier, access permissions, etc.

Tenant permission management: Allows administrators to assign and manage tenant permissions, restricting their access and operating system scope.

Tenant data isolation: Ensure that each tenant's data is isolated in the system and can only be accessed and manipulated by itself.

Database management module, including the following functions:

Database cluster management: Create and manage multiple database clusters, each cluster is used to store data for one or more tenants.

Database allocation and maintenance: Assign each tenant to an independent database to ensure data isolation and reliability.

Database backup and recovery: Back up your database regularly and provide a recovery mechanism to prevent data loss or corruption.

Data isolation and access control module, including the following functions:

Data partitioning and isolation: Use multi-tenant data partitioning technology to store each tenant's data in a separate database to ensure isolation between data.

Access control and permission management: Set access permissions for each tenant to limit the scope of data they can access and operate.

Data encryption and security: Use encryption technology to protect the security of data, encrypting it during data transmission and storage.

Data manipulation and query module, including the following functions:

Data query and filtering: Allow tenants to perform data query and filtering operations to obtain and manipulate data based on their permissions and access levels.

Data update and deletion: Allow tenants to update and delete data they own, ensuring data integrity and consistency.

Data operation logs and audits: Record all data operations and query logs to audit and track data access and change history.

System monitoring and reporting module, including the following functions:

System performance monitoring: Monitor system performance and resource usage to ensure system stability and reliability.

Error and exception handling: Capture and handle errors and exceptions that occur in the system to ensure system availability and stability.

High availability and failover: Implement a high-availability architecture to ensure system continuity and reliability, even in the event of hardware failure or network outage.

Reporting and analysis module, including the following functions: Generate and provide a variety of reports and analysis, including tenant usage, system performance and data access statistics, etc.

These functional modules work together to ensure that the SaaS multi-tenant data isolation system can safely and reliably store, access and operate data from different tenants.

In yet another embodiment of the present invention, a terminal device is provided. The terminal device includes a processor and a memory. The memory is used to store a computer program. The computer program includes program instructions. The processor is used to execute the computer program. A storage medium stores program instructions. The processor may be a Central Processing Unit (CPU), or other general-purpose processor, Digital Signal Processor (DSP), Application Specific Integrated Circuit (ASIC), or off-the-shelf programmable gate Array (Field-Programmable GateArray, FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc., which are the computing core and control core of the terminal, are suitable for implementing one or more instructions, and are specifically suitable for To load and execute one or more instructions to implement the corresponding method flow or corresponding functions; the processor described in the embodiment of the present invention can be used to operate the SaaS multi-tenant data isolation method.

In yet another embodiment of the present invention, the present invention also provides a storage medium, specifically a computer-readable storage medium (Memory). The computer-readable storage medium is a memory device in a terminal device and is used to store programs and data. . It can be understood that the computer-readable storage medium here may include a built-in storage medium in the terminal device, and of course may also include an extended storage medium supported by the terminal device. The computer-readable storage medium provides storage space, and the storage space stores the operating system of the terminal. Furthermore, one or more instructions suitable for being loaded and executed by the processor are also stored in the storage space. These instructions may be one or more computer programs (including program codes). It should be noted that the computer-readable storage medium here may be a high-speed RAM memory or a non-volatile memory (non-volatile memory), such as at least one disk memory.

One or more instructions stored in the computer-readable storage medium can be loaded and executed by the processor to implement the corresponding steps of the SaaS multi-tenant data isolation method in the above embodiment; one or more instructions in the computer-readable storage medium are provided by The processor loads and executes the SaaS multi-tenant data isolation method.

Those skilled in the art will appreciate that embodiments of the present invention may be provided as methods, systems, or computer program products. Thus, the invention may take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the invention may take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, etc.) having computer-usable program code embodied therein.

The invention is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the invention. It will be understood that each process and/or block in the flowchart illustrations and/or block diagrams, and combinations of processes and/or blocks in the flowchart illustrations and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing device to produce a machine, such that the instructions executed by the processor of the computer or other programmable data processing device produce a use A device for realizing the functions specified in one process or multiple processes of the flowchart and/or one block or multiple blocks of the block diagram.

These computer program instructions may also be stored in a computer-readable memory that causes a computer or other programmable data processing apparatus to operate in a particular manner, such that the instructions stored in the computer-readable memory produce an article of manufacture including the instruction means, the instructions The device implements the functions specified in a process or processes of the flowchart and/or a block or blocks of the block diagram.

These computer program instructions may also be loaded onto a computer or other programmable data processing device, causing a series of operating steps to be performed on the computer or other programmable device to produce computer-implemented processing, thereby executing on the computer or other programmable device. Instructions provide steps for implementing the functions specified in a process or processes of a flowchart diagram and/or a block or blocks of a block diagram.

Those of ordinary skill in the art will realize that the embodiments described here are to help readers understand the implementation methods of the present invention, and it should be understood that the protection scope of the present invention is not limited to such specific statements and embodiments. Those of ordinary skill in the art can make various other specific modifications and combinations based on the technical teachings disclosed in the present invention without departing from the essence of the present invention, and these modifications and combinations are still within the protection scope of the present invention.

Claims (7)

1. A SaaS multi-tenant data isolation method, characterized by: including the following steps: 1) Create a database cluster: Use Kubernetes' StatefulSet to create a database cluster; StatefulSet ensures that each tenant's database has a unique name and IP address to ensure database isolation and reliability; 2) Configure dynamic storage volumes: Use the dynamic storage volume function of Kubernetes to store data in an external storage system to improve the scalability and availability of the database; 3) Set tenant identification rules: Define tenant identification rules to associate tenants with their databases; this can be defined based on domain names, account login names, or other unique identifiers; 4) Create data sources in the software service: When the software service is started, create data sources for all tenants; the data sources should include the tenant's database name, IP address and port number information; 5) Obtain data operation requests: The software service obtains data operation requests from the client; data operation requests include querying, updating or deleting data, and also need to obtain: client type, identification, request path and user attributes; 6) Use identification rules to filter databases: Use tenant identification rules to filter databases to ensure that only tenants can access their own databases; route requests to the corresponding database based on the tenant identification in the request; 7) Complete data source switching: According to the data operation request, switch the data source to the corresponding database; ensure that the data operation request is sent to the correct database for data reading, writing or deletion operations. 2. A SaaS multi-tenant data isolation method according to claim 1, characterized in that: the SaaS multi-tenant data isolation method also includes data encryption: using encryption technology to protect the security of data, including: symmetric encryption , asymmetric encryption and hash functions. 3. A SaaS multi-tenant data isolation method according to claim 1, characterized in that: the SaaS multi-tenant data isolation method also includes database auditing: implementing database auditing to track access to the database in order to identify abnormal activities. and prevent data breaches. 4. A SaaS multi-tenant data isolation method according to claim 1, characterized in that: the SaaS multi-tenant data isolation method also includes data backup: regular data backup to prevent data loss or damage; including physical Backup, mirroring and replication technologies to achieve data backup. 5. A SaaS multi-tenant data isolation system, characterized in that: the system can be used to implement the SaaS multi-tenant data isolation method described in one of claims 1 to 4. Specifically, it includes: Tenant management module, including the following functions: User registration and authentication: Allow users to register and authenticate to gain access to tenant systems; Tenant creation and configuration: allows administrators to create and configure tenants, including setting the tenant's name, identifier, and access rights; Tenant permission management: allows administrators to assign and manage tenant permissions, restrict their access and operating system scope; Tenant data isolation: Ensure that each tenant’s data is isolated in the system and can only be accessed and operated by itself; Database management module, including the following functions: Database cluster management: Create and manage multiple database clusters, each cluster is used to store data of one or more tenants; Database allocation and maintenance: assign each tenant to an independent database to ensure data isolation and reliability; Database backup and recovery: Back up the database regularly and provide a recovery mechanism to prevent data loss or damage; Data isolation and access control module, including the following functions: Data partitioning and isolation: Use multi-tenant data partitioning technology to store each tenant's data in a separate database to ensure isolation between data; Access control and permission management: Set access permissions for each tenant to limit the range of data they can access and operate; Data encryption and security: Use encryption technology to protect the security of data and encrypt it during data transmission and storage; Data manipulation and query module, including the following functions: Data query and filtering: Allow tenants to perform data query and filtering operations to obtain and operate data according to their permissions and access levels; Data update and deletion: Allow tenants to update and delete data they own, ensuring data integrity and consistency; Data operation logs and audits: record all data operations and query logs to audit and track data access and change history; System monitoring and reporting module, including the following functions: System performance monitoring: monitor system performance and resource usage to ensure system stability and reliability; Error and exception handling: Capture and handle errors and exceptions that occur in the system to ensure system availability and stability; High availability and failover: Implement a high-availability architecture to ensure system continuity and reliability, even in the event of hardware failure or network outage; Reporting and Analysis: Generate and deliver a variety of reports and analytics, including tenant usage, system performance, and data access statistics. 6. A computer device, characterized in that it includes a memory, a processor and a computer program stored in the memory and executable on the processor. When the processor executes the program, one of claims 1 to 4 is implemented. The described SaaS multi-tenant data isolation method. 7. A computer-readable storage medium, characterized in that a computer program is stored thereon, and when the program is executed by a processor, the SaaS multi-tenant data isolation method according to one of claims 1 to 4 is implemented.