Data authority control module, data access system and data access method

A data access and data authority technology, applied in digital data protection, electronic digital data processing, instruments, etc., can solve the problem that data authority cannot provide unified management, etc.

Pending Publication Date: 2021-09-10
INSPUR SOFTWARE CO LTD
View PDF6 Cites 1 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

Traditional data applications can share one user center and one database, which is relatively simple to implement. In today's big data scenario, the applications of data services are diversified, and the products that provide data services are diversified, and data permissions cannot provide unified management.
[0003] The main idea of ​​many data entry products now is to imitate traditional databases to provide unified data entry, in which the control of data permissions still imitates traditional databases, providing permission control for libraries, tables and columns, and the control of data content access permissions still relies on upper-layer applications , in today's big data scenario, the application of data services is diversified, the products that provide data services are diversified, and data permissions cannot provide unified management

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Data authority control module, data access system and data access method

Examples

Experimental program
Comparison scheme
Effect test

Embodiment 1

[0043] The invention provides a data authority control module, which is configured at the data access request receiving place of the data entry system. The data entry system is used to provide a unified interface for the database and the application system, and the data access request includes tokens, user information and data access statements .

[0044] The data authority control module includes a rule configuration module, a token verification module, an authority assembly module, and an interface module. The rule configuration module interacts with operation and maintenance users through the rule configuration interface to support operation and maintenance users to configure authority rules and obtain authority configuration information; The token verification module is used to verify the authenticity of the token; the permission assembly module is used to assemble the permission control statement according to the permission configuration information and user information, o...

Embodiment 2

[0073] The data access system of the present invention includes a database, an application system, and a data entry system that provides a unified interface for the database and the application system. The data access request receiving part of the data entry system is configured with a data authority control module as disclosed in Embodiment 1, and the data authority The configuration module is used to support operation and maintenance users to configure permission rules and obtain permission configuration information; it is used to verify the authenticity of tokens, to assemble permission control statements according to permission configuration information and user information, to obtain initial permission assembly access statements, and to use Assemble the access control statement according to the data access statement and the corresponding initial permission assembly access statement to obtain the final permission assembly access statement; it is used to submit the final perm...

Embodiment 3

[0075] A data access method of the present invention, through the data access control module disclosed in embodiment 1, realizes the access control of data between the application system and the database, and the method includes the following steps:

[0076] S100. The operation and maintenance user configures permission rules through the data permission control module to obtain permission control information;

[0077] S200. The application system initiates a data access request to the data entry system, where the data access request includes a token, user information, and a data access statement;

[0078] S300. Verify the authenticity of the token through the data authority control module;

[0079] S400. Based on the data authority control module, assemble the authority control statement according to the authority configuration information and user information, obtain the initial authority assembled access statement, and assemble the access statement according to the data acce...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention discloses a data authority control module, a data access system and a data access method, belongs to the technical field of data access, and aims to solve the technical problem of how to provide a uniform access entry for applications in a plurality of data products and realize fine-grained data content access authority control in the access entry in a big data scene. The data authority control module comprises a rule configuration module which interacts with an operation and maintenance user through a rule configuration interface and is used for supporting the operation and maintenance user to configure authority rules and obtaining authority configuration information; a token verification module which is used for verifying the authenticity of a token; an authority splicing module which is used for splicing authority control statements according to the authority configuration information and user information, and splicing the authority control statements according to data access statements and corresponding initial authority splicing access statements; and an interface module which is used for submitting the final authority splicing access statement to a subsequent process for data access, and is used for receiving an access result and returning the access result to an application system.

Description

technical field [0001] The invention relates to the technical field of data access, in particular to a data authority control module, a data access system and a data access method. Background technique [0002] Most data permission technologies are implemented at the application layer. The specific method is: set roles at the database level, control the role's control permissions on libraries, tables and columns, assemble data content access permissions at the application layer, and pass them to the database Perform data acquisition. Traditional data applications can share one user center and one database, which is relatively simple to implement. In today's big data scenario, the applications of data services are diversified, the products that provide data services are diversified, and data permissions cannot provide unified management. [0003] The main idea of ​​many data entry products now is to imitate traditional databases to provide unified data entry, in which the co...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Applications(China)
IPC IPC(8): G06F21/62G06F21/60
CPCG06F21/6218G06F21/604G06F2221/2141
Inventor 张田
Owner INSPUR SOFTWARE CO LTD
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products