CN111190738A - User mirroring method, device and system under multi-tenant system - Google Patents

Abstract

Translated fromChinese

本发明实施例提供一种多租户体系下的用户镜像方法、装置及系统，所述方法包括：业务发起方检测到业务需求时，向业务发起方对应的管理员查询业务发起方是否拥有镜像连接权限；接收业务发起方管理员的反馈结果，当反馈结果为业务发起方拥有镜像连接权限，向技术提供方发送业务需求；接收到技术提供方反馈的镜像连接请求，检测镜像连接请求与业务需求是否对应；当镜像连接请求与业务需求对应时，与技术提供方建立镜像连接，供技术提供方解决业务需求。采用本方法能够克服业务数据租户的隔离性，及时解决客户问题。

Embodiments of the present invention provide a user mirroring method, device and system under a multi-tenant system. The method includes: when a service initiator detects a service requirement, querying an administrator corresponding to the service initiator whether the service initiator has a mirroring connection Permissions: Receive the feedback result from the administrator of the service initiator, when the feedback result is that the service initiator has the mirror connection authority, send the business requirements to the technology provider; receive the mirror connection request fed back by the technology provider, and detect the mirror connection request and business requirements Is it corresponding? When the mirror connection request corresponds to the business requirement, establish a mirror connection with the technology provider for the technology provider to solve the business requirement. By adopting the method, the isolation of business data tenants can be overcome, and customer problems can be solved in time.

Description

User mirroring method, device and system under multi-tenant system

Technical Field

The invention relates to the field of data security, in particular to a user mirroring method, device and system under a multi-tenant system.

Background

With the increasing popularity of cloud services, more and more companies or organizations begin to use cloud services, more and more tenants in the cloud services, and a combination is a set of users, which share a specific set of business rules and a specific set of permissions in a system. A tenant is typically a company, organization or other group.

Currently, in one software system, multiple tenants are carried. Each tenant has isolated business rules and a privilege hierarchy.

However, in a multi-tenant system, when a user in a tenant needs a software service provider to provide technical support, due to isolation of a service data tenant, the software service provider usually cannot acquire problem data, cannot query relevant configuration of the problem tenant, and brings trouble to timely and quickly solve the problem of the customer.

Disclosure of Invention

Aiming at the problems in the prior art, the embodiment of the invention provides a user mirroring method, device and system under a multi-tenant system.

The embodiment of the invention provides a user mirroring method under a multi-tenant system, which comprises the following steps:

when a service initiator detects a service requirement, inquiring whether the service initiator has mirror image connection authority or not from an administrator corresponding to the service initiator;

receiving a feedback result of a service initiator administrator, and sending the service requirement to a technical provider when the feedback result is that the service initiator has mirror image connection authority;

receiving a mirror image connection request fed back by the technology provider, and detecting whether the mirror image connection request corresponds to the service requirement;

and when the mirror image connection request corresponds to the service requirement, establishing mirror image connection with the technology provider for the technology provider to solve the service requirement.

In one embodiment, the method further comprises:

acquiring an identity token fed back by the technology provider, and detecting whether the identity token is accurate;

and when the identity token is accurate, detecting whether the mirror image connection request corresponds to the service requirement.

In one embodiment, the method further comprises:

and when the service initiator detects the authorization closing information sent by the administrator corresponding to the service initiator, the mirror image connection is disconnected.

The embodiment of the invention provides a user mirroring device under a multi-tenant system, which comprises:

the system comprises a query module, a mirror image connection module and a mirror image connection module, wherein the query module is used for querying whether a service initiator has mirror image connection authority or not to an administrator corresponding to the service initiator when the service initiator detects a service requirement;

the first receiving module is used for receiving a feedback result of a service initiator administrator, and when the feedback result indicates that the service initiator has mirror image connection authority, the first receiving module sends the service requirement to a technical provider;

the second receiving module is used for receiving the mirror image connection request fed back by the technology provider and detecting whether the mirror image connection request corresponds to the service requirement or not;

and the connection establishing module is used for establishing mirror connection with the technology provider when the mirror connection request corresponds to the service requirement, so that the technology provider can solve the service requirement.

The embodiment of the invention provides a user mirroring method under a multi-tenant system, which comprises the following steps:

when receiving a service requirement, a technology provider applies authorization to a corresponding administrator;

when detecting that the authorization of an administrator corresponding to the technology provider is successful, detecting whether the service requirement is effective;

when the service requirement is effective, sending a mirror image connection request to a service initiator corresponding to the service requirement, and switching to a node where the service initiator is located according to node information in the service requirement;

when detecting that the service initiator responds to the mirror image connection request, establishing mirror image connection with the service initiator, and solving the service requirement for the service initiator through the mirror image connection.

In one embodiment, the method further comprises:

and generating an identity token corresponding to the service initiator according to the service requirement, and sending the identity token to the service initiator when the mirror image connection request is sent.

In one embodiment, the method further comprises:

and when the technology provider detects the authorization closing information sent by the administrator corresponding to the technology provider, the mirror image connection is disconnected.

The embodiment of the invention provides a user mirroring device under a multi-tenant system, which comprises:

the receiving module is used for applying for authorization to a corresponding administrator when the technical provider receives the service requirement;

the detection module is used for detecting whether the service requirement is effective or not after the authorization of the administrator corresponding to the technology provider is successful;

the sending module is used for sending a mirror image connection request to a service initiator corresponding to the service requirement when the service requirement is effective, and switching to a node where the service initiator is located according to node information in the service requirement;

and the connection establishing module is used for establishing mirror connection with the service initiator when detecting that the service initiator responds to the mirror connection request, and solving the service requirement for the service initiator through the mirror connection.

The embodiment of the invention provides a user mirroring system under a multi-tenant system, which comprises the user mirroring devices under the multi-tenant system of the two service initiators.

According to the user mirroring method, device and system under the multi-tenant system, when the service initiator detects the service requirement, whether the service initiator has mirroring connection permission or not is inquired to an administrator corresponding to the service initiator; receiving a feedback result of a service initiator administrator, and sending a service requirement to a technical provider when the feedback result is that the service initiator has mirror image connection authority; receiving a mirror image connection request fed back by a technology provider, and detecting whether the mirror image connection request corresponds to a service requirement; and when the mirror image connection request corresponds to the service requirement, establishing mirror image connection with the technology provider for the technology provider to solve the service requirement. The isolation of the service data tenants is overcome, and the client problem is solved in time.

Drawings

In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the description of the embodiments or the prior art will be briefly described below, and it is obvious that the drawings in the following description are some embodiments of the present invention, and those skilled in the art can also obtain other drawings according to the drawings without creative efforts.

FIG. 1 is a flowchart of a user mirroring method under a multi-tenant architecture in an embodiment of the present invention;

FIG. 2 is a flowchart of a user mirroring method under a multi-tenant architecture according to another embodiment of the present invention;

FIG. 3 is a block diagram of a user mirroring device in a multi-tenant architecture according to an embodiment of the present invention;

FIG. 4 is a block diagram of a user mirroring device in a multi-tenant architecture according to another embodiment of the present invention;

fig. 5 is a structural diagram of a user mirroring system under a multi-tenant architecture in an embodiment of the present invention.

Detailed Description

In order to make the objects, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the drawings in the embodiments of the present invention, and it is obvious that the described embodiments are some, but not all, embodiments of the present invention. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.

Fig. 1 is a schematic flow diagram of a user mirroring method under a multi-tenant system according to a first embodiment of the present invention, and as shown in fig. 1, an embodiment of the present invention provides a user mirroring method under a multi-tenant system, including:

step S101, when a service initiator detects a service requirement, the service initiator inquires whether the service initiator has a mirror image connection authority or not to an administrator corresponding to the service initiator.

Specifically, the service requirement is a requirement when a service initiator encounters technical difficulty and needs a software service provider to provide technical support, the service initiator may be an employee in a company or an organization, and after encountering the technical difficulty, the service initiator queries whether the administrator of the company or the organization has the authority of mirror image connection of other software service providers except the company, wherein the mirror image connection value technology provider, namely the service provider, can simulate the behavior of a target user to solve the requirement of the service initiator without using an account password of the target user for login.

Step S102, receiving a feedback result of a service initiator administrator, and sending the service requirement to a technology provider when the feedback result is that the service initiator has mirror image connection authority.

Specifically, the service initiator receives a feedback result of a corresponding administrator about the mirror image connection permission, and sends a service requirement to the technology provider when the feedback result indicates that the service initiator has the mirror image connection permission.

Step S103, receiving the mirror image connection request fed back by the technology provider, and detecting whether the mirror image connection request corresponds to the service requirement.

Specifically, the technology provider and the service initiator are the same nodes in the cloud service, the service initiator receives the mirror connection request fed back by the technology provider, and detects whether the mirror connection request is a scene connection request fed back according to the service requirement, specifically, according to whether the mirror connection request includes authorization information for the service requirement, the authorization information can be obtained according to the mirror connection request sent by the service initiator, such as a fixed key, and the like, the service initiator carries the key when sending the mirror connection request, and if the mirror connection request fed back by the technology provider carries the same key, the mirror connection request corresponds to the service requirement.

In addition, after receiving the mirror connection request fed back by the technology provider, an identity token fed back by the technology provider is also received, the identity token is a token generated by the technology provider according to the service requirement and is used for identity verification, and after the identity token is verified, whether the mirror connection request corresponds to the service requirement is detected.

And step S104, when the mirror image connection request corresponds to the service requirement, establishing mirror image connection with the technology provider for the technology provider to solve the service requirement.

Specifically, when the mirror connection request fed back by the technology provider corresponds to the service requirement, mirror connection is established with the technology provider, so that the technology provider can solve the service requirement according to the mirror connection.

In addition, when the service initiator and the technology provider perform mirror image connection, when the service initiator receives authorization closing information of an administrator, namely the administrator recovers the mirror image connection right of the service initiator due to safety problems and the like, the mirror image connection is disconnected.

In the user mirroring method under the multi-tenant system provided by the embodiment of the invention, when a service initiator detects a service requirement, whether the service initiator has mirroring connection permission or not is inquired for an administrator corresponding to the service initiator; receiving a feedback result of a service initiator administrator, and sending a service requirement to a technical provider when the feedback result is that the service initiator has mirror image connection authority; receiving a mirror image connection request fed back by a technology provider, and detecting whether the mirror image connection request corresponds to a service requirement; and when the mirror image connection request corresponds to the service requirement, establishing mirror image connection with the technology provider for the technology provider to solve the service requirement. The isolation of the service data tenants is overcome, and the client problem is solved in time.

Fig. 2 is a schematic flow chart of a user mirroring method under a multi-tenant system according to a second embodiment of the present invention, and as shown in fig. 2, another embodiment of the present invention provides a user mirroring method under a multi-tenant system, including:

step S201, when receiving the service requirement, the technology provider applies for authorization to the corresponding administrator.

Specifically, the technical provider may apply for authorization of mirror connection to an administrator of the software service provider company after receiving a service requirement sent by the service initiator, or the administrator of the software service provider company may actively authorize the technical provider, that is, the technical provider, after receiving the service requirement sent by the service initiator, and the technical provider only needs to receive the authorization and then provide the service.

Step S202, after detecting that the administrator corresponding to the technology provider successfully authorizes, detecting whether the service requirement is effective.

Specifically, after the technology provider detects that the authorization of the corresponding administrator is successful, it detects whether the service requirement is valid, that is, whether the service requirement is a false message, a dangerous message, or the like, and may detect from information such as a key or a security certificate of the service requirement.

Step S203, when the service requirement is valid, sending a mirror connection request to a service initiator corresponding to the service requirement, and switching to a node where the service initiator is located according to node information in the service requirement.

Specifically, when the service requirement is valid information, the technology provider sends a mirror connection request to the service initiator, and switches to the same node according to the node information of the service initiator in the service requirement.

In addition, after receiving the mirror connection request sent by the service initiator, the technology provider generates an identity token according to the mirror connection request, and the token generated by the identity token according to the service requirement in the mirror connection request is a token for the service initiator to verify the identity of the technology provider.

Step S204, when detecting that the service initiator responds to the mirror image connection request, establishing mirror image connection with the service initiator, and solving the service requirement for the service initiator through the mirror image connection.

Specifically, when it is detected that the service initiator responds to the mirror connection request, mirror connection is established with the service initiator, and the service requirement is solved for the service initiator through the mirror connection.

In addition, when the service initiator and the technology provider perform mirror image connection, and when the technology provider receives the authorization closing information of the administrator, namely the administrator recovers the mirror image connection right of the technology provider due to security problems and the like, the mirror image connection is disconnected.

According to the user mirroring method under the multi-tenant system, when a technical provider receives a service requirement, authorization is applied to a corresponding administrator; after the authorization of an administrator corresponding to the technology provider is successful, detecting whether the service requirement is effective; when the service requirement is effective, sending a mirror image connection request to a service initiator corresponding to the service requirement, and switching to a node where the service initiator is located according to node information in the service requirement; when detecting that the service initiator responds to the mirror image connection request, establishing mirror image connection with the service initiator, and solving the service requirement for the service initiator through the mirror image connection. The isolation of the service data tenants is overcome, and the client problem is solved in time.

Fig. 3 is a user mirroring apparatus under a multi-tenant system according to an embodiment of the present invention, including: aquery module 301, afirst receiving module 302, asecond receiving module 303, and aconnection establishing module 304, wherein:

thequery module 301 is configured to query, when the service initiator detects a service requirement, whether the service initiator has a mirror image connection right to an administrator corresponding to the service initiator.

Afirst receiving module 302, configured to receive a feedback result of a service initiator administrator, and send a service requirement to a technology provider when the feedback result indicates that the service initiator has a mirror image connection right.

Thesecond receiving module 303 is configured to receive the mirror image connection request fed back by the technology provider, and detect whether the mirror image connection request corresponds to the service requirement.

And theconnection establishing module 304 is configured to establish a mirror connection with the technology provider to solve the service requirement when the mirror connection request corresponds to the service requirement.

In one embodiment, the apparatus may further comprise:

and the acquisition module is used for acquiring the identity token fed back by the technology provider and detecting whether the identity token is accurate.

And the detection module is used for detecting whether the mirror connection request corresponds to the service requirement or not when the identity token is accurate.

In one embodiment, the apparatus may further comprise:

and the disconnection module is used for disconnecting the mirror image connection when the service initiator detects the authorization closing information sent by the administrator corresponding to the service initiator.

For specific limitations of the user mirroring apparatus under the multi-tenant system, refer to the limitations of the user mirroring method under the multi-tenant system in the first embodiment above, which are not described herein again. All or part of each module in the user mirroring device under the multi-tenant architecture can be realized by software, hardware and a combination thereof. The modules can be embedded in a hardware form or independent from a processor in the computer device, and can also be stored in a memory in the computer device in a software form, so that the processor can call and execute operations corresponding to the modules.

Fig. 4 is a user mirroring apparatus under a multi-tenant system according to an embodiment of the present invention, including: a receivingmodule 401, a detectingmodule 402, a sendingmodule 403, and aconnection establishing module 404, where:

the receivingmodule 401 is configured to apply for authorization to a corresponding administrator when the technology provider receives the service requirement.

The detectingmodule 402 is configured to detect whether the service requirement is valid after the administrator corresponding to the technology provider successfully authorizes the service requirement.

A sendingmodule 403, configured to send a mirror connection request to a service initiator corresponding to a service requirement when the service requirement is valid, and switch to a node where the service initiator is located according to node information in the service requirement.

Aconnection establishing module 404, configured to establish a mirror connection with the service initiator when it is detected that the service initiator responds to the mirror connection request, and solve a service requirement for the service initiator through the mirror connection.

In one embodiment, the apparatus may further comprise:

and the generating module is used for generating an identity token corresponding to the service initiator according to the service requirement and sending the identity token to the service initiator when the mirror image connection request is sent.

In one embodiment, the apparatus may further comprise:

and the disconnection module is used for disconnecting the mirror image connection when the technical provider detects the authorization closing information sent by the administrator corresponding to the technical provider.

For specific limitations of the user mirroring apparatus under the multi-tenant system, refer to the limitations of the user mirroring method under the multi-tenant system in the second embodiment above, which are not described herein again. All or part of each module in the user mirroring device under the multi-tenant architecture can be realized by software, hardware and a combination thereof. The modules can be embedded in a hardware form or independent from a processor in the computer device, and can also be stored in a memory in the computer device in a software form, so that the processor can call and execute operations corresponding to the modules.

Fig. 5 is a user mirroring system under a multi-tenant system according to an embodiment of the present invention, which includes two user mirroring apparatuses under the multi-tenant system in the above embodiments.

Finally, it should be noted that: the above examples are only intended to illustrate the technical solution of the present invention, but not to limit it; although the present invention has been described in detail with reference to the foregoing embodiments, it will be understood by those of ordinary skill in the art that: the technical solutions described in the foregoing embodiments may still be modified, or some technical features may be equivalently replaced; and such modifications or substitutions do not depart from the spirit and scope of the corresponding technical solutions of the embodiments of the present invention.

Claims (9)

Translated fromChinese

1.一种多租户体系下的用户镜像方法，其特征在于，所述方法包括：1. A user mirroring method under a multi-tenant system, wherein the method comprises:业务发起方检测到业务需求时，向所述业务发起方对应的管理员查询所述业务发起方是否拥有镜像连接权限；When the service initiator detects the service requirement, it queries the administrator corresponding to the service initiator whether the service initiator has the mirror connection authority;接收业务发起方管理员的反馈结果，当所述反馈结果为所述业务发起方拥有镜像连接权限，向技术提供方发送所述业务需求；Receive the feedback result from the administrator of the service initiator, and send the service requirement to the technology provider when the feedback result is that the service initiator has the mirror connection authority;接收到所述技术提供方反馈的镜像连接请求，检测所述镜像连接请求与所述业务需求是否对应；Receive the mirror connection request fed back by the technology provider, and detect whether the mirror connection request corresponds to the business requirement;当所述镜像连接请求与所述业务需求对应时，与所述技术提供方建立镜像连接，供所述技术提供方解决所述业务需求。When the mirror connection request corresponds to the business requirement, a mirror connection is established with the technology provider for the technology provider to solve the business requirement.2.根据权利要求1所述的多租户体系下的用户镜像方法，其特征在于，所述接收到所述技术提供方反馈的镜像连接请求之后，还包括：2. The user mirroring method under a multi-tenant system according to claim 1, wherein after receiving the mirroring connection request fed back by the technology provider, the method further comprises:获取所述技术提供方反馈的身份令牌，并检测所述身份令牌是否准确；Obtain the identity token fed back by the technology provider, and detect whether the identity token is accurate;当所述身份令牌准确时，检测所述镜像连接请求与所述业务需求是否对应。When the identity token is accurate, it is detected whether the mirror connection request corresponds to the service requirement.3.根据权利要求1所述的多租户体系下的用户镜像方法，其特征在于，所述与所述技术提供方建立镜像连接之后，还包括：3. The user mirroring method under a multi-tenant system according to claim 1, wherein after the mirroring connection is established with the technology provider, the method further comprises:当所述业务发起方检测到所述业务发起方对应的管理员发送的授权关闭信息时，断开所述镜像连接。When the service initiator detects the authorization closing information sent by the administrator corresponding to the service initiator, the mirror connection is disconnected.4.一种多租户体系下的用户镜像装置，其特征在于，所述装置包括：4. A user mirroring device under a multi-tenant system, wherein the device comprises:查询模块，用于在业务发起方检测到业务需求时，向所述业务发起方对应的管理员查询所述业务发起方是否拥有镜像连接权限；a query module, configured to query the administrator corresponding to the service initiator whether the service initiator has the mirror connection authority when the service initiator detects a service requirement;第一接收模块，用于接收业务发起方管理员的反馈结果，当所述反馈结果为所述业务发起方拥有镜像连接权限，向技术提供方发送所述业务需求；a first receiving module, configured to receive a feedback result from the administrator of the service initiator, and send the service requirement to the technology provider when the feedback result is that the service initiator has the mirror connection authority;第二接收模块，用于接收到所述技术提供方反馈的镜像连接请求，检测所述镜像连接请求与所述业务需求是否对应；a second receiving module, configured to receive a mirror connection request fed back by the technology provider, and detect whether the mirror connection request corresponds to the business requirement;连接建立模块，用于当所述镜像连接请求与所述业务需求对应时，与所述技术提供方建立镜像连接，供所述技术提供方解决所述业务需求。A connection establishment module is configured to establish a mirror connection with the technology provider when the mirror connection request corresponds to the business requirement, so that the technology provider can solve the business requirement.5.一种多租户体系下的用户镜像方法，其特征在于，所述方法包括：5. A user mirroring method under a multi-tenant system, wherein the method comprises:技术提供方接收到业务需求时，向对应的管理员申请授权；When the technology provider receives the business requirements, it applies to the corresponding administrator for authorization;当检测到所述技术提供方对应的管理员授权成功后，检测所述业务需求是否有效；After detecting that the administrator corresponding to the technology provider is successfully authorized, detecting whether the business requirement is valid;当所述业务需求有效时，向所述业务需求对应的业务发起方发送镜像连接请求，并根据业务需求中的节点信息切换到所述业务发起方所在的节点；When the service requirement is valid, send a mirror connection request to the service initiator corresponding to the service requirement, and switch to the node where the service initiator is located according to the node information in the service requirement;当检测到所述业务发起方回应所述镜像连接请求时，与所述业务发起方建立镜像连接，通过所述镜像连接为所述业务发起方解决所述业务需求。When it is detected that the service initiator responds to the mirroring connection request, a mirroring connection is established with the service initiator, and the service requirement is solved for the service initiator through the mirroring connection.6.根据权利要求5所述的多租户体系下的用户镜像方法，其特征在于，所述方法还包括：6. The method for user mirroring under a multi-tenant system according to claim 5, wherein the method further comprises:根据所述业务需求生成与所述业务发起方对应的身份令牌，在发送所述镜像连接请求时，发送所述身份令牌至所述业务发起方。An identity token corresponding to the service initiator is generated according to the service requirement, and the identity token is sent to the service initiator when the mirror connection request is sent.7.根据权利要求5所述的多租户体系下的用户镜像方法，其特征在于，所述与所述业务发起方建立镜像连接之后，还包括：7. The user mirroring method under a multi-tenant system according to claim 5, wherein after the mirroring connection is established with the service initiator, the method further comprises:当所述技术提供方检测到所述技术提供方对应的管理员发送的授权关闭信息时，断开所述镜像连接。When the technology provider detects the authorization closing information sent by the administrator corresponding to the technology provider, the mirror connection is disconnected.8.一种多租户体系下的用户镜像装置，其特征在于，所述装置包括：8. A user mirroring device under a multi-tenant system, wherein the device comprises:接收模块，用于在技术提供方接收到业务需求时，向对应的管理员申请授权；The receiving module is used to apply to the corresponding administrator for authorization when the technology provider receives the business requirements;检测模块，用于在所述技术提供方对应的管理员授权成功后，检测所述业务需求是否有效；a detection module, configured to detect whether the business requirement is valid after the authorization of the administrator corresponding to the technology provider is successful;发送模块，用于当所述业务需求有效时，向所述业务需求对应的业务发起方发送镜像连接请求，并根据业务需求中的节点信息切换到所述业务发起方所在的节点；a sending module, configured to send a mirror connection request to the service initiator corresponding to the service requirement when the service requirement is valid, and switch to the node where the service initiator is located according to the node information in the service requirement;连接建立模块，用于当检测到所述业务发起方回应所述镜像连接请求时，与所述业务发起方建立镜像连接，通过所述镜像连接为所述业务发起方解决所述业务需求。The connection establishment module is configured to establish a mirror connection with the service initiator when it is detected that the service initiator responds to the mirror connection request, and solve the service requirement for the service initiator through the mirror connection.9.一种多租户体系下的用户镜像系统，其特征在于，包括权利要求4所述多租户体系下的用户镜像装置和权利要求8所述多租户体系下的用户镜像装置。9 . A user mirroring system under a multi-tenant system, characterized in that it comprises a user mirroring device under the multi-tenant system according to claim 4 and a user mirroring device under the multi-tenant system according to claim 8 . 10 .

Images