Multi-authority group inheritance management method and device based on distributed control

Abstract

The invention discloses a multi-weight group inheritance management method and device based on distributed control. The method comprises the following steps that a corresponding authority group node is formed according to an authority group of an account; node marks are generated according to the authority group nodes; the first account sends the corresponding first node mark to the second account; the second account records the first node mark in an authority group of the second account; the second account calls the first node mark in the second permission group to access the permission groupof the first account, and calls the permission granted by the first account. Authorization between accounts is carried out by using a permission group node mark form; during permission inheritance, an inherited permission can be called by recording a node mark corresponding to a permission group, and therefore the problems that a permission list formed by a traditional permission list recording mode is large in capacity and traditional authorization is inconvenient to manage are prevented; operations of authorization and permission inheritance can be carried out between any accounts through the method, and decentralized distributed operation is achieved.

Description

technical field

[0001] The invention relates to the field of rights management, in particular to a distributed control-based multi-rights group inheritance management method and device. Background technique

[0002] Traditional permission control involves the following obvious problems in the link of whether permissions are inherited:

[0003] Single permission relationship management is complex and heavy workload: roles abstract the corresponding function list permissions, and there is a many-to-many relationship with accounts, but there is no inheritance relationship between roles, they are all parallel relationships, and a user can have multiple permissions at the same time. role group;

[0004] The management of mutually exclusive inheritance relationships with a single blacklist is more complicated: traditional inheritance implements inheritance in the form of a blacklist. For example, as long as there is no mutually exclusive relationship between the A permission grou...

Images