Business report data authority control method based on double-layer permission control

Abstract

The invention discloses a business report data permission control method based on double-layer permission control, which comprises the following steps: acquiring a plurality of basic elements consisting of business report data permissions, and endowing the basic elements with corresponding keys, the basic elements including departments, roles and personnel; calculating a corresponding authorized personnel range based on an outer-layer permission algorithm, and storing a constructed outer-layer permission set to an alliance chain; calculating an intersection of the range of the authorized personnel and the viewing range of the obtained business report, completing the construction of an inner-layer permission set, and storing the inner-layer permission set in a private chain; and obtaining user information and a corresponding secret key, respectively solving intersections with the outer-layer permission set and the inner-layer permission set, and controlling and displaying a service report, so that different persons can view different data ranges under the same data item.

Description

technical field [0001] The invention relates to the technical field of data authority system development, in particular to a business report data authority control method based on double-layer authority control. Background technique [0002] In the data era, raw data can be presented in the form of business reports after being processed by back-end technology or big data technology, which can be in the form of statistical tables or statistical graphics. Users can guide management based on the data presented in charts and help with decision-making. [0003] At present, there are rights management through monitoring account login on the market, and different rights are granted according to different roles, or the most fine-grained personal rights management is achieved through hardware. However, the rights management only on the login side is relatively extensive and fine-grained to everyone. The post-development workload is very heavy, and it is relatively difficult to adjus...

AI Technical Summary

Problems solved by technology

[0003] At present, there are rights management through monitoring account login on the market, and different rights are granted according to different roles, or the most fine-grained personal rights management is achieved through hardware. However, the rights management only on the login side is relatively extensive and fine-grained to everyone. The post-development workload is very heavy, and it is relatively difficult to adjust permissions after personnel change roles. These permission controls are limited to the functional level, that is, users with viewing permissions can see the same data content, and it is impossible to control different people to see different data items. range effect

However, actual business report data has data viewing range requirements, that is, different people see the same data item but the range of data values ​​is different. Business reports in actual scenarios often distinguish data according to different jurisdictions. There is no permission control method for business report data to enable different people to view different data ranges under the same data item

Images