Multi-tenant database replication and sharding
A multi-tenant, cloud-based Software-as-a-Service (SaaS) manufacturing platform offers a variety of industrial applications to end customers—including but not limited to MES, ERP, quality management, supply chain management, and customer relationship management (CRM)—and implements associated architectural features that address a number of issues relating to data sharing, security, scalability, and other concerns.
1 . A system, comprising:
a memory that stores executable components; and
a processor, operatively coupled to the memory, that executes the executable components, the executable components comprising:
internal services that implement a manufacturing cloud system, wherein
the manufacturing cloud system is a multi-tenant Software-as-a-Service (SaaS) system that executes an industrial manufacturing execution system (MES) on a cloud platform,
the manufacturing cloud system collects and stores industrial data owned by multiple customer entities in multiple data silos, and the cloud platform comprises at least:
a first data center that stores data for, and is accessible by, a first subset of the multiple customer entities within a first region, the first subset including a first entity of the multiple customer entities, and
a second data center residing in a different country than the first data center and that stores data for, and is accessible by, a second subset of the multiple customer entities within a second region, the second subset including a second entity of the multiple customer entities;
a tagging component configured to tag items of the industrial data associated with the first entity with metadata to yield tagged data, wherein the metadata for a data item, of the items of the industrial data, identifies a data type of the data item and indicates whether the data item is sharable with the second entity;
a service communicator component configured to determine a scope of the tagged data permitted to be shared with the second entity based on the metadata, a business relationship between the first entity and the second entity defined by tenant map data that defines business relationships between the multiple customer entities, and an egress rule that defines types or sets of data that are not to be passed to data centers outside a country in which the first data center resides, wherein the business relationship is at least one of a relationship between a supplier and a manufacturer, a relationship between a manufacturer and a shipper, or a relationship between a manufacturer and a retailer; and
a data packaging component configured to route at least a subset of the tagged data from the first data center to the second data center in accordance with the scope of the tagged data permitted to be shared with the second entity, wherein the data packaging component is configured to redact a portion of the tagged data in accordance with the egress rule to yield the subset of the tagged data.
2 . The system of claim 1 , wherein
the data packaging component is further configured to archive the tagged data in response to elapse of a duration of time subsequent to collection of the tagged data, and
the duration of time is defined by retention rules associated with respective data types.
3 . The system of claim 1 , wherein the metadata further identifies the second entity with which the data item is sharable.
4 . The system of claim 1 , wherein the tagged data comprises at least one of recipe data defining control process parameters for manufacturing a type of product or material, employee information, production statistics, or device configuration data.
5 . The system of claim 1 , wherein the data packaging component is configured to package the subset of the tagged data as a deployment artifact, and to route the deployment artifact to the second data center.
6 . The system of claim 1 , wherein the tenant map data defines at least one of a limitation or a condition on sharing of data between the first entity and the second entity.
7 . The system of claim 1 , wherein the egress rule further defines permitted data boundaries for the country in which the first data center resides.
8 . The system of claim 1 , wherein the manufacturing cloud system further executes, on the cloud platform, at least one of an enterprise resource planning (ERP) system, a quality management system, a supply chain management system, or a customer relationship management (CRM) system.
9 . The system of claim 1 , wherein the executable components further comprise a data sharing component configured to distribute, based on the metadata, a portion of the tagged data from a first data silo, of the multiple data silos, to one or more second data silos of the multiple data silos accessible by the second entity.
10 . A method, comprising:
executing, by a system comprising a processor, a manufacturing cloud system, wherein
the manufacturing cloud system is a multi-tenant Software-as-a-Service (SaaS) system that executes an industrial manufacturing execution system (MES) on a cloud platform,
the manufacturing cloud system collects and stores industrial data owned by multiple customer entities in multiple data silos, and
the cloud platform comprises at least:
a first data center that stores data for, and is accessible by, a first subset of the multiple customer entities within a first region, the first subset including a first entity of the multiple customer entities, and
a second data center that resides in a different country than the first data center and that stores data for, and is accessible by, a second subset of the multiple customer entities within a second region, the second subset including a second entity of the multiple customer entities;
tagging, by the system, items of the industrial data associated with the first entity with metadata to yield tagged data, wherein the metadata for a data item, of the items of the industrial data, identifies a data type of the data item and indicates whether the data item is sharable with the second entity;
determining, by the system, a scope of the tagged data permitted to be shared with the second entity based on the metadata, and a business relationship between the first entity and the second entity defined by tenant map data that defines business relationships between the multiple customer entities, and an egress rule that defines types or sets of data that are not to be passed to data centers outside a country in which the first data center resides; and
routing, by the system, a subset of the tagged data from the first data center to the second data center in accordance with the scope of the tagged data permitted to be shared with the second entity,
wherein
the business relationship is at least one of a relationship between a supplier and a manufacturer, a relationship between a manufacturer and a shipper, or a relationship between a manufacturer and a retailer, and
the routing comprises redacting a portion of the tagged data in accordance with the egress rule to yield the subset of the tagged data.
11 . The method of claim 10 , further comprising archiving, by the system, the tagged data in response to elapse of a duration of time subsequent to collection of the tagged data, wherein the duration of time is defined by retention rules associated with respective data types.
12 . The method of claim 10 , wherein the metadata further identifies the second entity with which the data item is sharable.
13 . The method of claim 10 , wherein the tagged data comprises at least one of recipe data defining control process parameters for manufacturing a type of product or material, employee information, production statistics, or device configuration data.
14 . The method of claim 10 , wherein the routing further comprises:
packaging the subset of the tagged data as a deployment artifact, and routing the deployment artifact to the second data center.
15 . The method of claim 10 , wherein the tenant map data further defines at least one of a limitation or a condition on sharing of data between the first entity and the second entity.
16 . The method of claim 10 , wherein the manufacturing cloud system further executes, on the cloud platform, at least one of an enterprise resource planning (ERP) system, a quality management system, a supply chain management system, or a customer relationship management (CRM) system.
17 . A non-transitory computer-readable medium having stored thereon instructions that, in response to execution, cause system comprising a processor to perform operations, the operations comprising:
implementing a manufacturing cloud system, wherein
the manufacturing cloud system is a multi-tenant Software-as-a-Service (SaaS) system that executes an industrial manufacturing execution system (MES) on a cloud platform,
the manufacturing cloud system collects and stores industrial data owned by multiple customer entities in multiple data silos, and
the cloud platform comprises at least:
a first data center that stores data for, and is accessible by, a first subset of the multiple customer entities within a first region, the first subset including a first entity of the multiple customer entities, and
a second data center residing in a different country than the first data center that stores data for, and is accessible by, a second subset of the multiple customer entities within a second region, the second subset including a second
entity of the multiple customer entities;
tagging items of the industrial data associated with the first entity with metadata to yield tagged data, wherein the metadata for a data item, of the items of the industrial data, identifies a data type of the data item and indicates whether the data item is sharable with the second entity;
determining a scope of the tagged data permitted to be shared with the second entity based on the metadata, a business relationship between the first entity and the second entity defined by tenant map data that defines business relationships between the multiple customer entities, and an egress rule that defines types or sets of data that are not to be passed to data centers outside a country in which the first data center resides; and
routing a subset of the tagged data from the first data center to the second data center in accordance with the scope of the tagged data permitted to be shared with the second entity,
wherein
the business relationship is at least one of a relationship between a supplier and a manufacturer, a relationship between a manufacturer and a shipper, or a relationship between a manufacturer and a retailer, and
the routing comprises redacting a portion of the tagged data in accordance with the egress rule to yield the subset of the tagged data.
18 . The non-transitory computer-readable medium of claim 17 , wherein the tagged data comprises at least one of recipe data defining control process parameters for manufacturing a type of product or material, employee information, production statistics, or device configuration data.
19 . The non-transitory computer-readable medium of claim 17 , wherein the operations further comprise archiving the tagged data in response to elapse of a duration of time subsequent to collection of the tagged data, wherein the duration of time is defined by retention rules associated with respective data types.
20 . The non-transitory computer-readable medium of claim 17 , wherein the tenant map data further defines at least one of a limitation or a condition on sharing of data between the first entity and the second entity.