Administrative human resource management data platform system

Abstract

The invention discloses an administrative human resource management data platform system, which comprises at least two heterogeneous systems, wherein the heterogeneous systems relate to personnel information and personnel authority; the application management module ensures that a heterogeneous system registered and authorized in the system can access and synchronize employee data; only the registered and authorized heterogeneous system can access and synchronize employee data; the role management association setting module is used for uniformly maintaining and distributing roles and permissions of the heterogeneous system; the data synchronization module is used for automatically guaranteeing real-time updating and consistency of data through a standardized interface; the system not only can improve the management efficiency of enterprises, administrative functional departments, commercial institutions, financial institutions and other enterprises and realize refined authority control of new and old employees, but also can enhance the security and compliance of authority setting, so that the system is convenient to use and popularize. And the automatic process can effectively reduce human errors, and improve the satisfaction and productivity of employees at the same time.

Description

Technical Field

[0001] The present invention relates to the technical field of administrative human resource management systems, in particular to the technical field of employee authority management systems that assign roles and grades. Background Art

[0002] Human resource management refers to a series of management work that an enterprise or organization performs to effectively develop, allocate, use and safeguard human resources through management activities such as planning, organizing, leading and controlling. The core goal of human resource management is to ensure that an enterprise or organization can attract, develop, motivate and retain outstanding talents to achieve organizational strategies and operational goals.

[0003] At present, with the advancement of information technology, there are more and more convenient work systems on the market for various departments of companies in administrative, commercial or financial industries. This has led to human resource management personnel often having to switch back and forth between multiple systems to view and manage the work permissions of each employee in their respective systems. This has low work efficiency and a large workload for each user to manually modify permissions.

[0004] Existing human resource management systems, such as a human resource management system and management method disclosed in the invention application with publication number CN116739538A and a blockchain-based human resource management system disclosed in the invention application with publication number CN118013581A, although they perform routine management of human resources, do not allow human resource management personnel to quickly assign permissions to each employee, resulting in the need for human resource management personnel to individually configure permissions for each employee whenever a new employee joins or the duties of an old employee change, resulting in a lot of repetitive work, which not only delays the rapid entry of new employees, but also makes it difficult for old employees to quickly adapt to changes in the organizational structure. At the same time, manual operations are also prone to arbitrary and uncontrollable granting of permissions.

[0005] Chinese patent CN105303084A discloses a permission management system and method, which is used in games, chat platforms, etc., and gives different levels of permissions to different users. Although the system involves permission level allocation, the system is just an ordinary personnel classification, dividing personnel into administrators and ordinary members, and the roles and responsibilities corresponding to administrators and ordinary members are different. The essence of the system is that administrators manage ordinary members. Such allocation only distinguishes between administrators and ordinary members. It is a simple two-dimensional division of labor roles and cannot be applied to administrative human resources management, etc., which divides the same type of members (for example: corporate employees, administrative agency staff, etc.) into different work permissions, thereby realizing different permissions for different positions of corporate employees and administrative agency staff, and corporate management and administrative management have different responsibilities in different industries and scenarios. The permissions are very complicated. Not only are the permissions of each level different, but the permissions of the same level in different departments are also different. For example, the level permissions of P9 and P10 of Alibaba are different, and the permissions of P9 in different departments are also different. Such a complex scenario cannot be realized in the above system that only distinguishes between administrators and ordinary members. In the existing technology, the allocation of these permissions is manually input by the human resources department, which consumes a lot of manpower. Not only does it increase a lot of labor costs in the input stage, but also in the case of changes in authority, the subsequent modifications are also huge and inefficient. In addition, in the case of existing manual input and modification, there is no function to track the history of permission changes, which not only has poor security, but also cannot carry out subsequent human resources audit work, thereby causing security risks in the management of enterprises and administrative functional departments.

[0006] In addition, the existing technology such as "Tencent Electronic Signature Enterprise Edition" also has a permission management function, but Tencent Electronic Signature controls the user's viewing and operation permissions through roles. Administrators can assign different roles to employees in different positions to control their permissions. However, Tencent Electronic Signature is a product that provides electronic contract signing and evidence preservation services for enterprises and individuals. It is used to manage various receipts, rental contracts signed by both parties, etc. The signing process and results are all fixedly preserved through blockchain technology. The system is only a tool for signing contracts, which is the management of contracts, not the management of human resources and people. Tencent Electronic Signature distinguishes between different roles to initiate contract applications and approve contract templates. It is just a normal contract approval process. Salesmen and handlers initiate contracts, and business administrators can modify contract templates, seal modules, etc. The system's permissions are only to prevent salesmen from arbitrarily modifying the contract content when signing electronic contracts online. It is the management of the contract itself, not the management of personnel. Tencent Electronic Signature is a role setting within this system. There is no communication synchronization, and permissions cannot be updated between multiple systems.

[0007] In summary, the existing human resource management and authority management are isolated single systems. Human resource management is limited to the management of manual entry in a single system, and authority management is limited to the management of a specific transaction processing process, such as: game characters, corporate contract signing, enterprise OA system, enterprise ERP system, etc.

[0008] Human resources are the core resources of all kinds of enterprises, institutions and administrative departments. The low efficiency of human resource management leads to low efficiency and high cost of the entire society. For example, the rights of employee A can be modified, added or deleted in the company's financial management software, but they cannot be directly updated synchronously in the OA system, ERP system, sales department contract system, R&D department project development system, etc. This leads to the inability to connect different systems of the company and achieve unified rights, resulting in the need to enter and modify the rights of the same employee A in each system separately. This not only leads to low management efficiency, but also makes it easy for inconsistent rights to appear in each system because they are entered separately. It is even easy to cause management loopholes during employee transfers and resignations. For example, the above-mentioned employee A in the Finance Department resigns and all his rights are deleted in the financial management system. However, the R&D system retains his previous rights because it is not updated in a timely manner, which can easily lead to major risks such as leakage of R&D data. Similarly, similar problems exist in medical institutions, colleges and universities, government administrative departments, etc. Summary of the invention

[0009] The purpose of the present invention is to solve the problems in the prior art and propose an administrative human resources management data middle-end system that can realize real-time synchronous update of personnel permissions in all management systems within the organization, improve management efficiency and reduce management risks.

[0010] To achieve the above objectives, the present invention proposes an administrative human resources management data middle platform system, comprising At least two heterogeneous systems: Heterogeneous systems involve personnel information and personnel permissions; Application management module: ensure that heterogeneous systems registered and authorized in this system can access and synchronize employee data; and only registered and authorized heterogeneous systems can access and synchronize employee data; Role management association setting module: unified maintenance and allocation of roles and permissions for heterogeneous systems; Data synchronization module: automatically ensures real-time update and consistency of data through standardized interfaces; HR Audit Module: records all data access and change activities, and supports auditing and problem tracking.

[0011] Preferably, the application management module includes an application registration module, a data authorization module, and a synchronization configuration module. The application registration module is an external heterogeneous system that first registers to obtain employee data. System information, server information and IP address are required for application registration. After successful registration, the system will generate a unique APP code for identification and authorization of data access; the data authorization module grants different levels of data access rights to different applications based on system requirements; the synchronization configuration module receives updated personnel data based on the interface address provided by the system to ensure information synchronization.

[0012] Preferably, the data access permission includes general information and sensitive information, and the sensitive information includes mobile phone number and ID card number.

[0013] Preferably, the role management association setting module includes a role management module, a personnel role association module, and a management scope setting module. The role management module uniformly manages the roles of all heterogeneous systems to ensure the consistency of role data; the personnel role association module sets the roles of personnel in all heterogeneous systems in the data middle-office system; the management scope setting module grants corresponding management scope permissions based on the responsibilities of personnel in different heterogeneous systems.

[0014] Preferably, the role management module assigns system roles to all personnel without entering heterogeneous systems to assign role permissions; assigns process roles to all personnel, and the role information can be directly read in the process engine to find the corresponding personnel and perform process flow; the management scope permissions set by the management scope setting module are applied to system roles and process roles.

[0015] Preferably, the data synchronization module includes a synchronization registration module, a synchronization update module, and an access acquisition module. The synchronization registration module opens user accounts and user access rights for new employees, and synchronizes the information of user accounts and user access rights to all heterogeneous systems; when the synchronization update module detects changes in personnel information, it automatically triggers the synchronization mechanism and updates the latest personnel information to all heterogeneous systems; the access acquisition module allows other heterogeneous systems registered with this system to access and obtain employee data through standardized interfaces.

[0016] Preferably, the data personnel information includes basic information of employees, role information, role association and personnel management scope.

[0017] Preferably, the standardized interface adopts a RESTFUL API interface.

[0018] Preferably, the information synchronization log module and the interface call log module, the information synchronization log module is that after the data is changed, the system notifies all heterogeneous systems through the message queue to complete the information synchronization and record the synchronization log; the interface call log module is that all data interface calls record the call log information.

[0019] Preferably, the call log information includes application information, server information, access parameters and return results.

[0020] Beneficial effects of the present invention: 1) Effectively improve management efficiency: This system provides a unified platform for personnel information and authority information. When logging in to several heterogeneous systems, completely consistent personnel information and authority information can be obtained. There is no need for managers of each system to switch back and forth between multiple systems for verification, nor is there a need to repeatedly update personnel information and authority information between each system. The effect of inputting into one system and synchronizing all systems is achieved, thereby reducing a lot of repeated manual labor in the management process, saving a lot of time, and improving management efficiency; 2) Refined permission control: By creating roles and assigning specific permissions to each role, managers can ensure that employees can only access information and resources related to their job responsibilities, thereby achieving refined permission control; the flexibility of roles also means that when an employee's responsibilities change, managers can simply change their role instead of reconfiguring all permissions, which can quickly adapt to changes in the organizational structure; 3) Strong security and compliance: The synchronization logs and interface call logs recorded by the system provide detailed logs for auditing, which helps to track the change history of permissions and ensure that any permission changes are authorized and recorded, thereby enhancing the security of the system; through unified management, it is easier to ensure that the permission settings of all employees comply with company policies and legal and regulatory requirements, and all systems are fully synchronized and updated, which helps to avoid compliance risks and leakage risks caused by improper permission management; 4) Automation can be achieved to reduce human errors: Through the automated service management of the data synchronization module, the update and synchronization of information and permissions are automatically performed, reducing problems caused by human operation errors; the automated process can also ensure that the permissions of all employees are updated in a timely manner when needed. For example, when an employee is promoted or transferred, the system can automatically adjust his information and permissions to ensure that the employee always has the correct access rights; 5) Improve employee satisfaction and productivity: Employees can quickly obtain permissions related to their job positions without having to wait for tedious manual processing, thus improving employee satisfaction and work efficiency; as a unified permission management system, this system can also reduce the time wasted by employees in searching for resources and information, helping them complete their work faster, thereby improving overall productivity.

[0021] The features and advantages of the present invention will be described in detail through embodiments in conjunction with the accompanying drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0022] Figure 1 It is a structural diagram of the administrative human resources management data middle platform system of the present invention. DETAILED DESCRIPTION

[0023] See also Figure 1 The present invention proposes an administrative human resource management data middle-end system, including: at least two heterogeneous systems: all heterogeneous systems involve personnel information and personnel permissions; application management module: ensure that heterogeneous systems registered and authorized in this system can access and synchronize employee data; and only registered and authorized heterogeneous systems can access and synchronize employee data; role management association setting module: unified maintenance and allocation of roles and permissions of heterogeneous systems; data synchronization module: automatically ensure real-time update and consistency of data through standardized interfaces; human resources audit module: record all data access and change activities, support audit and problem tracking.

[0024] The application management module includes an application registration module, a data authorization module, and a synchronization configuration module. The application registration module is an external heterogeneous system that first registers to obtain employee data. System information, server information and IP address must be provided during application registration. After successful registration, the system will generate a unique APP code for identification and authorization of data access; the data authorization module grants different levels of data access rights to different applications based on system requirements; the synchronization configuration module receives updated personnel data based on the interface address provided by the system to ensure information synchronization. The data access rights include general information and sensitive information. The sensitive information includes mobile phone numbers, ID card numbers, etc. The application management module implements system access and permission management, and introduces a fine-grained permission control mechanism to ensure that only authenticated and authorized systems can access the data platform. Before accessing the data platform, the accessed system needs to be registered. Only systems registered in the data platform have access to the data platform, and different personnel information reading permissions can be set for different applications in the data platform, as well as accessible interfaces or callback interfaces.

[0025] The role management association setting module includes a role management module, a personnel role association module, and a management scope setting module. The role management module uniformly manages the roles of all heterogeneous systems to ensure the consistency of role data; the personnel role association module sets the roles of personnel in all heterogeneous systems in the data middle-office system; the management scope setting module grants corresponding management scope permissions based on the responsibilities of personnel in different heterogeneous systems. The role management module assigns system roles to all personnel without entering the heterogeneous system to assign role permissions; process roles are assigned to all personnel, and the role information can be directly read in the process engine to find the corresponding personnel and perform process flow; the management scope permissions set by the management scope setting module are applied to system roles and process roles. The role management association setting module realizes centralized management of roles and permissions, introduces role inheritance and delegation mechanisms, allows the creation of a hierarchical role structure, simplifies permission management, and supports custom roles and permission templates to meet the specific needs of different organizations and departments.

[0026] The information synchronization log module and the interface call log module. After the data is changed, the system notifies all heterogeneous systems through the message queue to complete the information synchronization and record the synchronization log. The interface call log module records the call log information for all data interface calls, and the call log information includes application information, server information, access parameters and return results.

[0027] The data synchronization module includes a synchronization registration module, a synchronization update module, and an access acquisition module. The synchronization registration module opens user accounts and user access rights for new employees, and synchronizes the information of user accounts and user access rights to all heterogeneous systems; when the synchronization update module monitors changes in personnel information, it automatically triggers the synchronization mechanism to update the latest personnel information to all heterogeneous systems; the access acquisition module allows other heterogeneous systems registered with this system to access and obtain employee data through standardized interfaces. The data personnel information includes employee basic information, role information, role association and personnel management scope. The standardized interface adopts a RESTFUL API interface.

[0028] The data synchronization module involves processes such as automated monitoring, periodic data synchronization, message queue integration and external command response. Automated monitoring ensures that the system can detect data changes or status updates in a timely manner, thereby triggering corresponding synchronization operations. Regular data synchronization automatically executes data synchronization tasks at preset time intervals to ensure data consistency and accuracy. Message queue integration uses message queue technology, and the system can asynchronously process external messages to achieve message delivery and load balancing; message queue service is used to asynchronously receive and respond to commands or data updates from the external environment. The external command response process is to receive and execute commands from the outside, supporting dynamic adjustment and flexible configuration.

[0029] The data synchronization module can perform data checking and synchronization tasks according to a predetermined schedule. An efficient scheduler is integrated into the system to ensure that each task can be started and executed on time. The data synchronization module not only improves the flexibility and response speed of data processing, but also enhances the stability and scalability of the system. This design pattern enables the system to maintain high performance and high reliability when processing large-scale data and high-concurrency requests. It is suitable for complex application scenarios that require real-time data processing and rapid response.

[0030] The data synchronization module realizes automation and intelligent triggering. The data middle platform has a complete data communication mechanism and uses an event-driven architecture to ensure that any changes in personnel data can be captured in real time and trigger the corresponding callback interface. Heterogeneous systems can obtain all personnel-related data by actively accessing the interface. When there is a change in personnel data, the callback interface will be triggered immediately to notify the system connected to the data middle platform to update the personnel data. Personnel data changes include transfers, role changes, and changes in personnel management scope.

[0031] This system is a centralized data management and synchronization platform. It ensures that only authorized heterogeneous systems can access it through registration and permission control. The platform uniformly manages employee data and role permissions, and simplifies permission allocation and process management across systems. In addition, the data center has an efficient data communication mechanism that can synchronize and update personnel information through interfaces in real time to ensure data consistency and timeliness of all access systems. It uniformly manages employee data. All personnel data is based on the human data center system to ensure that all input data is accurate and consistent. A data synchronization mechanism is established to ensure that any updates in the human system can be reflected in the data center in real time. The administrative human resources management data center system is an efficient data management and synchronization system that provides data access services for authorized heterogeneous systems. It ensures data security through sophisticated permission control, simplifies permission allocation and process management across systems, ensures data consistency, security and real-time performance, and provides enterprises with a reliable and efficient data management solution. In addition, the architecture design of the data center system has good scalability, can easily integrate new systems and applications, provides API documentation and developer guides, and supports third-party developers to quickly integrate and develop.

[0032] The above embodiments are intended to illustrate the present invention, not to limit the present invention. Any solution that is a simple transformation of the present invention belongs to the protection scope of the present invention.

Claims

1. Administrative human resources management data center system, characterized by: include At least two heterogeneous systems: Heterogeneous systems involve personnel information and personnel permissions; Application management module: ensures that heterogeneous systems registered and authorized in this system can access and synchronize employee data; and only registered and authorized heterogeneous systems can access and synchronize employee data; Role management association setting module: unified maintenance and allocation of roles and permissions for heterogeneous systems; Data synchronization module: automatically ensures real-time update and consistency of data through standardized interfaces; HR Audit Module: records all data access and change activities to support auditing and problem tracking.

2. The administrative human resources management data middle platform system according to claim 1, characterized in that: The application management module includes an application registration module, a data authorization module, and a synchronization configuration module. The application registration module is used to register with an external heterogeneous system to obtain employee data. When registering an application, system information, server information, and IP address must be provided. After successful registration, the system will generate a unique APP code for identification and authorization of data access. The data authorization module grants different levels of data access rights to different applications based on system requirements. The synchronization configuration module receives updated personnel data based on the interface address provided by the system to ensure information synchronization.

3. The administrative human resources management data middle platform system according to claim 2, characterized in that: The data access rights include general information and sensitive information, and the sensitive information includes mobile phone number and ID card number.

4. The administrative human resources management data middle platform system according to claim 1, characterized in that: The role management association setting module includes a role management module, a personnel role association module, and a management scope setting module. The role management module uniformly manages the roles of all heterogeneous systems to ensure the consistency of role data; The personnel role association module sets the roles of personnel in all heterogeneous systems in the data middle-office system; the management scope setting module grants corresponding management scope permissions based on the responsibilities of personnel in different heterogeneous systems.

5. The administrative human resources management data middle platform system according to claim 4, characterized in that: The role management module assigns system roles to all personnel without having to enter heterogeneous systems to assign role permissions; assigns process roles to all personnel, and the process engine can directly read role information to find the corresponding personnel and perform process flow; the management scope permissions set by the management scope setting module are applied to system roles and process roles.

6. The administrative human resources management data middle platform system according to claim 1, characterized in that: The data synchronization module includes a synchronization registration module, a synchronization update module, and an access acquisition module. The synchronization registration module opens user accounts and user access rights for new employees and synchronizes user account and user access rights information to all heterogeneous systems. When the synchronization update module detects changes in personnel information, it automatically triggers the synchronization mechanism to update the latest personnel information to all heterogeneous systems; the access and acquisition module allows other heterogeneous systems registered with this system to access and obtain employee data through standardized interfaces.

7. The administrative human resources management data middle platform system according to claim 6, characterized in that: The data personnel information includes employee basic information, role information, role association and personnel management scope.

8. The administrative human resources management data middle platform system according to claim 6, characterized in that: The standardized interface adopts a RESTFUL API interface.

9. The administrative human resources management data middle platform system according to any one of claims 1 to 8, characterized in that: The human resources audit module includes an information synchronization log module and an interface call log module. The information synchronization log module is used by the system to notify all heterogeneous systems through the message queue after the data is changed, complete information synchronization, and record the synchronization log; the interface call log module is used to record call log information for all data interface calls.

10. The administrative human resources management data middle platform system according to claim 9, characterized in that: The call log information includes application information, server information, access parameters and return results.

Images