SAP safety sensitive information system based on many-sided authorization and dynamic password

Abstract

The invention discloses an SAP safety sensitive information system based on many-sided authorization and dynamic password, and can realize that data tables which contain sensitive information are managed according to demands and users and can be classified into specific tables. The system comprises a customized configuration table and a dynamic password table, a customized authorization check functional module, a dynamic password generating module and a many-sided authorization validation module. The system can carry out registration and locking management on a table which contains sensitive information, different users are authorized according to the characteristic of the table, so as to perform the many-sided restriction validation; meanwhile, a dynamic password is set in validation each time; and only if many-sided validation all passes, the registered sensitive information table is unblocked. The SAP safety sensitive information system provided by the invention can protect sensitive information about finance and remuneration very well, and the security, privacy and usability of the system are improved.

Description

technical field [0001] The invention relates to a SAP ERP system, in particular to a SAP security sensitive information system based on multi-party authorization and dynamic password. Background technique [0002] At present, the State Grid Corporation of China generally uses the SAP ERP system. The ERP system carries the core confidential data of the enterprise, especially financial, human resources, salary and other data. As the company's core secrets, data protection must be done well. The data storage system of the system is not yet perfect. For example, sensitive data related to compensation is stored in plain text in the logical database table; in addition, the ERP system cannot encrypt and restrict data access, and the large turnover of system construction and operation personnel inevitably leads to Exposure to sensitive information of the enterprise will lead to a huge security risk of leakage of sensitive information in the system. [0003] like image 3 As shown, ...

AI Technical Summary

Problems solved by technology

[0004] It can be seen that the control of sensitive information by the SAP ERP system is controlled by permissions, and it cannot directly control a specific data table, resulting in the following defects in the existing technology: (1) Complicated operation: many users need to Reassigning roles and modifying the original roles requires a lot of work and is error-prone; (2) Relatively low security: users only need to have permissions to access, and users with large permissions that are most prone to problems are still unable to access Control function; (3) Inflexible control: Since only the authority group can be controlled, if only a certain table in a certain authority group is required to be controlled, it cannot be flexibly controlled

Images