Management system for access control and charging based on Token

Abstract

The invention relates to the field of educational resource management, and discloses a Token-based access control and charging management system, which comprises a user management module, a Token management module, a License management module, a unified charging module and a resource management distribution module, the user management module is used for carrying out identity verification and authority control on a user; the Token management module is responsible for dynamically distributing, controlling and recycling Token; the License management module is used for controlling a software license through a License fragmentation technology; the unified charging module records and calculates Token and License consumption conditions of the user in the resource use process; the resource management and distribution module manages various resources in a centralized mode and distributes the resources according to user requirements and concurrency conditions of the system. According to the invention, the utilization rate of educational resources is improved, the operation cost of an educational institution is reduced, the multi-user high-concurrency resource access requirement is supported, a flexible on-demand charging mode is provided, and diversified teaching requirements in an educational scene are met.

Description

Technical Field

[0001] The present invention relates to the technical field of educational resource management, and in particular to a management system for access control and billing based on Token. Background Art

[0002] In the current education field, with the continuous enrichment of digital teaching resources and the growth of online learning needs, educational institutions are faced with the challenge of how to efficiently manage and distribute various teaching software and digital resources. The traditional way of teaching resource management mainly relies on purchasing independent software licenses and assigning each educational software to specific students or teachers. However, with the increase in teaching content and resource types, this method has gradually shown obvious limitations.

[0003] First, the traditional licensing management model requires the purchase of a license for each software independently, which causes educational institutions to invest a lot of costs in resource procurement, and these resources are prone to being idle during non-peak usage periods, resulting in a waste of resources. Secondly, students need to use different software tools during the learning process, and the login and access interfaces of each software are different. This multi-platform and multi-interface switching increases the student's usage burden, is not conducive to the continuity of the learning process, and reduces learning efficiency. In addition, in the face of high concurrent demands for simultaneous online access, the traditional resource management model is difficult to effectively support concurrent access by a large number of users, which can easily lead to resource conflicts or access delays, affecting the user experience of teachers and students.

[0004] Existing educational resource management methods also have shortcomings in billing methods. Many systems use fixed fees or time-based billing methods, which fail to accurately reflect the actual consumption of resources by each user, making it difficult for educational institutions to conduct accurate cost control and budget management. This billing method also cannot effectively support flexible teaching needs, such as changes in course content and usage requirements over the semester, which increases the complexity of management and the difficulty of cost control.

[0005] To sum up, the existing educational resource management system has obvious defects in terms of cost, ease of use, concurrency control and billing model. Summary of the invention

[0006] In view of the shortcomings of the prior art, the present invention provides a management system for access control and billing based on Token, which realizes efficient management and cost optimization of educational resources through dynamic allocation and refined billing mechanism to meet the high concurrent access and diversified teaching needs of multiple users.

[0007] To achieve the above objectives, the present invention is implemented through the following technical solutions: a management system for access control and billing based on Token, comprising:

[0008] User management module, used for user identity authentication and authority control;

[0009] Token management module, used to allocate, control and recycle tokens to users;

[0010] The license management module is used to manage software licenses in segments, allocate license segments according to user access requests, and recycle license segments after resource use ends;

[0011] Unified billing module, used to record the user's token and license consumption, and generate corresponding expense reports based on the user's actual resource usage;

[0012] The resource management and allocation module is used to centrally manage various courses and software resources and allocate resources.

[0013] Preferably, the Token management module dynamically determines the required number of Tokens based on the resource type selected by the user when allocating Tokens, and the allocated number of Tokens is deducted from the total Token pool of the system and is recycled to the Token pool when the user finishes using the resources.

[0014] Preferably, the Token management module supports a concurrency control mode, which manages the allocation of Tokens based on concurrent access restrictions of resources. By setting the maximum concurrency number of each resource, when the current concurrent access number of a resource is less than or equal to its preset maximum concurrency number, new users are allowed to occupy Tokens to access the resource, otherwise, Token allocation is refused and user access is blocked.

[0015] Preferably, the Token management module supports an on-demand consumption mode, which dynamically allocates and charges Tokens based on the user's actual usage requirements for specific resources. When a user requests access to a resource, the system calculates the user's estimated Token consumption and deducts a corresponding number of Tokens from the Token pool. When the user completes the use of the resource or reaches the preset maximum usage time, settlement is made based on the actual number of Tokens consumed.

[0016] Preferably, the license management module allocates the software usage license in detail through the license fragmentation technology, and divides each software license into multiple license fragments, each license fragment corresponding to the usage right of a user.

[0017] Preferably, when a user requests access to a specific software resource, the license management module allocates one or more license fragments according to the number of currently available license fragments to meet the user's usage requirements, and releases the license fragments and recycles them into the license pool after the user completes using the software resource.

[0018] Preferably, the unified billing module generates corresponding expense reports according to the user's token consumption and license fragment usage, and supports hierarchical billing based on token usage and license usage frequency.

[0019] Preferably, the Token billing of the unified billing module calculates the user's fee based on the unit price of each Token, and the License billing calculates the fee based on the single-use price of the License fragment.

[0020] Preferably, the resource management allocation module is configured with a resource pool for storing and managing various courses and software resources; the system allocates resources according to the user's permissions and the availability of the current resource pool, and ensures reasonable allocation of resources under high concurrency conditions.

[0021] The present invention also provides a management method for access control and billing based on Token, comprising the following steps:

[0022] Authenticate users and allow them to access specified resources based on their permission levels;

[0023] When a user requests access to a specific resource, tokens are dynamically allocated based on the type and demand of the resource, and the corresponding number of tokens are deducted from the system's token pool;

[0024] According to the concurrency of resource usage or on-demand consumption, real-time monitoring and control of token allocation can be carried out to ensure the rationality of resource access;

[0025] Allocate the corresponding license fragment to the user to allow the user to use specific software resources, and recycle the license fragment to the license pool after the user finishes using the resource;

[0026] Record the consumption of tokens and license fragments when users access resources, calculate fees based on actual usage, and generate fee reports;

[0027] After the user completes the use of resources, the unconsumed tokens are recycled to the token pool and the number of available tokens in the token pool is updated.

[0028] The present invention provides a management system for access control and billing based on Token. It has the following beneficial effects:

[0029] 1. Through the dynamic allocation of tokens and license sharding management, the present invention can achieve efficient deployment of educational resources. Course software, teaching tools and other resources can be immediately recycled after use by students and teachers, so that limited resources can serve more users, reduce the idleness of educational resources, thereby maximizing the efficiency of resource use and improving the investment benefits of educational institutions.

[0030] 2. The present invention records the consumption of tokens and licenses of each user through a sophisticated billing system, so that educational institutions can understand the specific usage costs of each type of resources in real time. This clear cost control can help schools optimize resource allocation strategies and reduce repeated purchases of expensive licenses, thereby effectively reducing the operating costs of software and hardware, which meets the cost control needs of educational institutions.

[0031] 3. The present invention authenticates and allocates permissions to users of different identities (such as students, teachers, and administrators) through the user management module, ensuring that students can only access resources required for learning, while teachers and administrators have more extensive permissions. This strict access control ensures the safe use of teaching resources, avoids the abuse or misuse of resources, and provides strong security for resource management in educational environments.

[0032] 4. The present invention introduces a concurrency control mechanism through a resource management allocation module to set the maximum concurrency for various course software and teaching tools. Even during peak hours or when multiple people use a resource at the same time, the system can reasonably allocate resources to ensure smooth operation. This high concurrency support is particularly suitable for schools' concurrent access needs for a large number of resources during concentrated classes or experiments, which helps to avoid resource conflicts and ensure the smooth progress of teaching activities.

[0033] 5. The billing model of the present invention can dynamically adjust the fees according to the actual usage of users, so that students and teachers only need to pay for the resources actually used. This on-demand billing model allows schools to flexibly allocate budgets according to different course requirements, which not only meets the diversity of teaching, but also effectively reduces unnecessary expenses, providing an economical and efficient solution for educational institutions. BRIEF DESCRIPTION OF THE DRAWINGS

[0034] Figure 1 It is a schematic diagram of the system structure of the present invention;

[0035] Figure 2 It is a schematic diagram of the process of the system of the present invention;

[0036] Figure 3 It is a schematic diagram of the process of the present invention;

[0037] Figure 4 This is a schematic diagram of the system structure of Example 1 of the present invention;

[0038] Figure 5 Schematic diagram of the process of the system of Example 2 of the present invention. DETAILED DESCRIPTION

[0039] The following will be combined with the drawings in the specification of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0040] Please refer to the attached Figure 1 -Attached Figure 2 The present invention provides a management system for access control and billing based on Token, aiming to solve the problems of high cost, low utilization and complex management faced by educational institutions when providing a variety of software and course content. The present invention realizes intensive management of resources through the synergy of modules such as Token management, License sharding and unified billing, thereby improving resource utilization, reducing management costs and optimizing user experience. The following is a detailed description of the various components of the system.

[0041] User Management Module

[0042] The user management module is responsible for identity authentication when a user first accesses the system, and limits the resources and functions that the user can access according to the user's permission level to improve the overall security of the system and the efficiency of resource allocation. Based on the basic functions of the user management module, the system also implements the user's single sign-on (SSO) function to ensure seamless switching between different resources and modules, simplify the login process and optimize the user experience.

[0043] In this embodiment, the user management module first performs an identity authentication procedure when the user accesses the system. In general, the legitimacy of the user's identity is confirmed by verification based on the username and password. The system compares the username and password with the user database and allows the user to enter the system after the authentication is passed. As an option, in an environment where higher security is required, this module can use two-factor authentication, that is, on the basis of entering the username and password, the user is required to provide additional verification information, such as a dynamic verification code received through a mobile device, thereby improving the security of user identity authentication.

[0044] Specifically, after the user management module completes identity authentication, the system will grant different permission levels based on the user's identity type (such as student, teacher, or administrator). This permission level directly affects the range of resources that the user can access in the system. For example, a user with a student identity can only access course resources and related auxiliary tools, while a teacher user can use teaching auxiliary tools and management functions for student resources. In one possible implementation, the permission level setting is stored in the form of a role permission table. The system retrieves the permission level corresponding to the user identity and compares it with the permission table in each access request to determine whether to grant resource access rights.

[0045] In actual applications, in order to ensure that the user identity remains valid throughout the entire access process, the user management module adopts a session management mechanism. Specifically, after the user logs in successfully, the system generates a unique session ID and binds it to the user's identity information. The validity period of the session ID is continuously updated during the user's activity. If the system detects a long period of inactivity, it will automatically log out the session to ensure system security. As an option, before the user's logged-in session expires, the system will send a prompt to the user in advance, asking whether to continue to log in, thereby avoiding the situation where the user is forced to log out during long-term use.

[0046] In this embodiment, the user management module also provides a single sign-on (SSO) function. The implementation of the SSO function eliminates the need for users to log in repeatedly when switching between different resources and platforms within the system, greatly improving the convenience of user operations. Specifically, the SSO mechanism is implemented through session sharing, that is, after the user logs in once, the generated session ID can be used universally among various resource modules, thereby eliminating the need for multiple identity authentication processes. In one possible implementation, SSO session sharing is implemented through a central authentication server (CAS). The central authentication server is responsible for processing the user's initial login request and generating a global session ID. When each resource module receives a user access request, it verifies the validity of the session ID with the central authentication server. If the session is valid, the user is allowed to access the resource.

[0047] In addition, the permission control of the user management module in this embodiment is also integrated with the system's Token management and License management modules, further improving the accuracy and control capabilities of resource allocation. Specifically, the user's permission level will be verified during the Token allocation process, and the system will allocate the corresponding number of Tokens based on the permission level and resource requirements. For example, when a teacher user performs a specific teaching task, he or she can obtain additional Token allocations based on the requirements of the task, while student users are subject to restrictions on the Token consumption quota. This permission verification process combines the retrieval permission level with the allocation algorithm of the Token management module to ensure that the allocation of Tokens meets the policy requirements for the use of system resources.

[0048] To achieve the above permission control, the system performs the following calculations during the token allocation process:

[0049] set up For users The permission level, Indicates the maximum number of tokens allocated under this permission level. The token management module calculates the token allocation for users when accessing resources based on the following formula:

[0050]

[0051] in, Indicates the number of tokens allocated to the user. The number of tokens required for the user's current task. Generally, the system will give priority to satisfying the user's token needs, so the minimum value between the maximum allocation amount allowed by the authority level and the task requirements is taken to ensure reasonable allocation of resources.

[0052] In some implementations, the user management module can also set specific access time periods and frequency restrictions for users of different identities, such as student users have limited access during non-teaching periods, while teacher users have higher access priority during specific time periods. The system automatically adjusts user permissions during specific time periods based on the time scheduling strategy to ensure that resources prioritize teaching needs.

[0053] Through the above-mentioned multi-level permission control and session management, the user management module of the present invention can effectively protect the legitimacy of user access, ensure the rationality of Token and License allocation, and realize unified identity management within the system.

[0054] Token Management Module

[0055] The Token Management Module is responsible for allocating, controlling, and recycling Tokens to users to ensure efficient and rational use of system resources. Tokens are virtual resources. Users need to consume a corresponding number of Tokens when accessing specific resources or software. The Token Management Module allocates an appropriate number of Tokens based on resource types and user needs, and recycles Tokens to the system's Token pool after users have completed resource use for use by other users. In general, the Token Management Module allocates and controls Token consumption in two modes: concurrent control mode and on-demand consumption mode, to adapt to different resource access requirements and optimize resource allocation efficiency.

[0056] In this embodiment, when a user accesses a resource, the Token management module first allocates the required number of Tokens from the system's Token pool according to the resource type and the user's permission level. and resource requirements The system will set the basic token consumption for each resource. , which is configured based on resource complexity and resource consumption. The Token management module calculates the user's Token allocation according to the following formula:

[0057]

[0058] in, Indicates the adjustment coefficient of the number of tokens according to the user's authority level. For example, the adjustment coefficient of the token allocation of a teacher user is higher than that of a student user, so he can obtain more tokens to support specific teaching tasks. In some embodiments, the system can further refine the adjustment coefficient according to the user identity category to ensure that users of different identities can obtain token allocations that match their authority levels.

[0059] During the allocation process, the Token management module supports concurrency control mode and on-demand consumption mode to meet the access requirements of different resources. As an option, the concurrency control mode is mainly used to limit the resource consumption of high concurrent access to ensure that system resources can be reasonably scheduled during peak hours.

[0060] In one possible implementation, the concurrency control mode controls the allocation of tokens by setting the maximum number of concurrent resources. Specifically, the system will allocate tokens for specific resources. Set the maximum number of concurrent connections When the current concurrent usage of the resource reaches the upper limit, the Token management module will reject new Token allocation requests to ensure the stability of the resource. This allocation control process is implemented through the following conditional judgments:

[0061]

[0062] in, Representation Resources The number of tokens currently allocated. If access is allowed, that is, the judgment value is 1, the Token Management Module deducts the corresponding number of tokens from the Token Pool and updates the system's concurrent count, and the user can then access the resource; if the judgment value is 0, the system rejects the Token allocation and returns a prompt to the user that resource access is restricted.

[0063] The on-demand consumption mode is used for the dynamic allocation of tokens and is suitable for resource types with uneven access frequencies or unpredictable demands. Specifically, in the on-demand consumption mode, the token management module dynamically deducts tokens based on the user's actual demand for resources, according to the duration or access frequency. In general, the system sets the basic consumption standard for resource usage. , which indicates the number of tokens consumed by the user per unit time. The system calculates the user's total token consumption according to the following formula:

[0064]

[0065] in, Indicates user About Resources As an option, the system can set a token consumption limit for resource access to avoid excessive token consumption in a single resource access. In one possible implementation, when a user reaches the preset token limit, the system will suspend the user's access to the resource and prompt the user that there are insufficient tokens left.

[0066] In this embodiment, the Token Management Module is also responsible for recovering the tokens that have been used by the user for subsequent allocation. Generally, Token recovery is automatically triggered when the user completes resource use or actively exits. The Token Management Module restores the recovered Tokens in real time by updating the number of available Tokens in the Token pool. Specifically, the Token recovery process is performed through the following update formula:

[0067]

[0068] In some implementations, to optimize the resource management of the system, the Token management module may perform statistical analysis on the Token recovery records and generate a Token usage report for each user for reference in the subsequent usage statistics and billing management of the system.

[0069] In summary, the Token management module of the present invention ensures efficient use and reasonable allocation of system resources through Token allocation, concurrency control, on-demand consumption and Token recovery mechanisms.

[0070] License Management Module

[0071] The license management module is used to manage software licenses in segments to achieve flexible allocation and efficient use of license resources. The license management module divides each software license into multiple small segments (license segments), dynamically allocates license segments based on user access requests, and recycles them to the license pool after the resource is used up. In general, the license management module updates the allocation and recycling of license segments in real time to ensure full utilization of license resources and system resource management efficiency.

[0072] In this implementation, the license management module supports multiple users to concurrently access the same software resource by managing the software license in slices. Specifically, the system presets the number of slices for each software license and divides the license into several license segments, each of which can be independently assigned to a user. The system allocates license segments based on resource access requirements, thereby avoiding the problem of idle resources caused by resource occupation in the traditional single license mode.

[0073] During the license allocation process, the license management module dynamically allocates the required license fragments based on the user's access request. In general, the license management module queries the resources that the user requests to access and the number of currently available license fragments. The total number of licenses for each software resource in the system is , the number of licenses in each segment is recorded as Specifically, when a user requests access to a resource When the license management module allocates The license fragments are available for users to use. The available number of the total license fragments in the system is updated by the following formula:

[0074]

[0075] in, Representation Resources The current number of available license fragments. As an option, the license management module can reserve specific license fragments for high-priority users to ensure priority access to critical tasks when resources are scarce.

[0076] In a possible implementation, when a user has a large demand for resource usage, the license management module allows multiple license segments to be allocated to a single user to meet complex tasks or large resource requirements. The system will allocate the corresponding number of license segments based on the complexity and priority of the user's task to ensure flexible scheduling and reasonable allocation of license segments.

[0077] The license management module automatically reclaims the license fragments occupied by the user after the user has finished using the resources and returns them to the license pool. Generally, license reclaim is automatically executed when the user actively exits the resource or the task ends. The system reclaims resources by updating the number of available licenses in the license pool. Specifically, the license fragment reclaim process is based on the following update formula:

[0078]

[0079] As an option, to ensure accurate allocation of license resources, the license management module checks the status of the license fragment when reclaiming it, and updates it to the license pool after ensuring that it is correct. In a possible implementation, the license management module can periodically generate a log file of license allocation and reclaim, recording the usage of each user's license fragment, including user identity, resource type, number of license fragments, usage time, and reclaim time, for system management and resource statistical analysis.

[0080] In some implementations, the license management module works with the token management module to ensure consistency in the allocation of licenses and tokens. For example, when a user requests access to a resource that requires both a token and a license to be authorized, the system will first complete the token allocation in the token management module, and then the license management module will allocate the corresponding license fragment to ensure the authorization integrity of resource access. The system will only allow the user to access the resource after confirming that both the token and the license have been successfully allocated, thereby ensuring the security of resource authorization and allocation.

[0081] Through the above mechanism, the license management module improves the utilization rate of license resources on the basis of realizing flexible slicing allocation of license resources, ensuring effective resource management and user access experience.

[0082] Unified billing module

[0083] The unified billing module is used to record and bill the user's token and license fragment usage, and generate detailed cost reports to facilitate accurate cost management of system resources. The unified billing module comprehensively considers multiple factors such as the number of tokens actually used by the user, the number of license fragments, and the length of time the resources are used, and provides accurate cost accounting. In general, the unified billing module can support real-time billing and hierarchical billing, providing data support for system operation management and user cost accounting.

[0084] In this implementation, the unified billing module records the resource usage of each user in real time. The billing process is mainly based on the user's token consumption and the frequency of use of the license fragment. When a user accesses a resource, the system automatically records the initial allocation of tokens and the total amount of tokens actually consumed. Specifically, the token fee calculation is based on the preset unit price of each token. , the user's token fee is calculated according to the following formula:

[0085]

[0086] in, For users The actual number of tokens consumed during resource use. Generally, the system will directly calculate the fees based on the user's token consumption to ensure the accuracy and fairness of the fees. As an option, the system can set different fee coefficients based on the token unit price and the identity category or resource type of different users to further refine fee management.

[0087] Specifically, for resources that require license segments, the unified billing module independently calculates the use of license segments. License billing is based on the price of each license segment usage. And the number of license fragments used by the user. The license fee calculation formula is as follows:

[0088]

[0089] in, Indicates user The total number of license segments used during a specific task. Generally, the system adds the number of times a license segment is used and the price of each use to calculate the user's license fee. As a possible implementation method, the system dynamically adjusts the single-use fee rate of a license segment based on the frequency of use of the license segment to ensure fair distribution of license resource costs.

[0090] In this implementation, the unified billing module also supports hierarchical billing and dynamically adjusted fee strategies. Specifically, the system hierarchically processes fee standards based on the user's resource usage. For example, for users who use certain resources for a long time or frequently, the system can automatically apply cumulative discounts to reduce the total cost expenditure of such users. As an option, the hierarchical billing strategy can be graded according to the user's total monthly token consumption or the number of times the license fragment is used. For example, a discount rate is enabled after the consumption reaches a certain threshold to increase the system's support for high-usage users.

[0091] In one possible implementation, the unified billing module can generate detailed expense reports, including information such as user identity, total token consumption, number of license fragment usage, resource usage duration, and expense itemization. After the expense report is generated, it can be viewed and downloaded by the administrator to support the financial management and usage statistics analysis of the system. Generally, the system automatically generates expense reports every month or every usage cycle, so it can provide continuous and accurate resource usage and cost data.

[0092] In some implementations, the unified billing module also provides a real-time fee warning function. Specifically, when the user's token or license fragment consumption is about to reach the set fee cap, the system sends a reminder to the user to ensure that the user is aware of the current fee situation in a timely manner and chooses whether to continue using the resources. As an option, the system administrator can set a fee cap in the background so that when the cap is reached, the user's resource access rights are automatically restricted to avoid exceeding the budget.

[0093] Through the above mechanism, the unified billing module of the present invention can realize accurate billing of Token and License fragments, fee classification adjustment and real-time statistics of fee data, providing reliable support for cost management of system resources and user fee control.

[0094] Resource management allocation module

[0095] The resource management and allocation module is used to centrally manage various courses and software resources in the system and dynamically allocate resources according to user requests. This module achieves efficient allocation and reasonable use of system resources through centralized management of resource pools and usage restrictions and permission settings for each type of resource. In general, the resource management and allocation module allocates resources based on the user's permission level, the current available status of the resource pool, and the system's concurrency requirements, thereby ensuring that users can efficiently switch between different resources.

[0096] In this implementation, the resource management allocation module first builds a resource pool to centrally manage all courses and software resources in the system. Specifically, the system sets a unique resource identifier for each resource. , and record its current available status, concurrency limit and other resource attributes in the resource pool. In general, each resource is associated with a specific token requirement and the number of license fragments. The resource management allocation module searches for matching resources when a user requests based on these attribute parameters.

[0097] As an option, the resource management allocation module allocates resources according to the priority of the user's authority level. The resource management allocation module determines whether to allocate resources immediately based on user permissions and resource availability, and updates the available quantity in the resource pool in real time after resource allocation.

[0098] As a possible implementation method, the resource management allocation module also supports dynamic resource scheduling and load balancing to cope with the concentrated access requirements of resources. For example, when the access volume of a certain type of resource suddenly increases, the system can allocate some access requests to the backup resource pool to alleviate resource pressure. The resources in the backup resource pool are usually high-demand resources reserved by the system. Through scheduling management, the resource service capability of the system under high load can be effectively improved.

[0099] In this implementation, the resource management allocation module is also integrated with the Token management module and the License management module to ensure the consistency of resource allocation with the authorization of Token and License. Specifically, when a user requests to access a resource that requires a Token and License, the resource management allocation module will call the Token management module to allocate the corresponding number of Tokens, and call the License management module to allocate the License fragment. In general, the system allows users to actually access resources only after completing the allocation of Tokens and Licenses, so the integrity and security of authorization can be ensured.

[0100] In some implementations, the resource management allocation module further supports the control of the time period and frequency of resource access. For example, the system can set the time period for resource use and restrict access to some resources during non-teaching time, so as to reasonably allocate resources and control the peak time period for user access. As an option, the system can also set access frequency limits based on the user's daily usage, such as a daily access limit, to avoid excessive consumption of resources by individual users.

[0101] Through the above method, the resource management and allocation module of the present invention realizes centralized management and dynamic allocation of resources in the system, and can effectively balance the use of resources under high concurrency and high load conditions, thereby improving the overall resource utilization efficiency of the system.

[0102] In general, the present invention realizes the intensive management and efficient use of various courses and software resources in educational institutions through the collaborative work of user management, token management, license fragmentation, unified billing and resource management allocation modules. Through dynamic token allocation, license fragment management, real-time billing and centralized resource scheduling, the system allows users to flexibly access resources within the scope of their authority, while improving the efficiency of license and token use, reducing resource costs and optimizing user experience. The system is suitable for environments that require concurrent use of multiple resources and refined billing, which helps to achieve reasonable allocation of resources and precise control of costs.

[0103] Please refer to the attached Figure 3 The present invention also provides a management method for access control and billing based on Token, comprising the following steps:

[0104] S1. User identity authentication and permission allocation

[0105] When a user requests to access the system, the user is first authenticated through the system's authentication mechanism. The system authenticates the user's login credentials through the SSO (single sign-on) mechanism. After the authentication is passed, the scope of resources that the user can access is determined based on the user's permission level. The permission level is used to limit the access rights of different users to ensure the safe use of resources.

[0106] S2. Dynamic allocation of tokens

[0107] When a user requests access to a specific resource, the system dynamically allocates tokens based on the type of resource and the user's permission level. The system deducts the corresponding number of tokens from the token pool and allocates the required number of tokens based on resource consumption requirements. The amount of tokens allocated can be adjusted based on the preset token consumption standards and user needs to ensure the rational use of resources.

[0108] Real-time monitoring and control of S3 and Token allocation

[0109] The system implements concurrency control or on-demand consumption management based on the usage characteristics of resources. For concurrent resources, the system sets the maximum number of concurrent users when allocating tokens to ensure the stability of resources; for on-demand resources, the system consumes tokens based on the actual usage time or access frequency of users. The system monitors the availability of the token pool in real time during the token allocation and consumption process to ensure the rationality and controllability of resource use.

[0110] S4. Allocation and recovery of license segments

[0111] When a user requests to use a specific software resource that requires authorization, the system allocates the corresponding license fragment to the user through license fragment management. Each license fragment represents the right to use the resource once. After the user has finished accessing the resource, the system automatically recycles the license fragment and returns it to the license pool to ensure the recycling of license resources.

[0112] S5. Resource consumption record and cost calculation

[0113] When users use resources, the system records the user's token consumption and license fragment usage in real time. Based on the user's actual usage, the system applies the unit price standard of tokens and licenses to calculate the cost. The cost report generated by the system contains the user's total token consumption, the number of times the license fragment is used, and the corresponding cost information, providing support for the system's cost management.

[0114] S6. Token recovery and update

[0115] After the user has finished using the resources, the system will automatically recycle the unused tokens and update the number of available tokens in the token pool. By updating the status of the token pool in real time, the system ensures efficient reuse of token resources to meet the resource access needs of subsequent users.

[0116] Embodiment 1:

[0117] This embodiment provides a token-based access control and billing management system, which integrates user management, token management, license management, unified billing and resource management allocation modules, aiming to achieve efficient management and flexible control of educational resources and ISV (independent software vendor) software in a SaaS environment. Figure 4As shown in the figure, the system architecture design takes into account the high concurrency and processing capacity bottleneck of the public cloud SaaS system, adopts an intensive software license management method, provides concurrent control of Tokens and Licenses, and can be integrated with a variety of ISV software.

[0118] User Management Module

[0119] The user management module implements user identity authentication and permission management through the user management center and the SSO (single sign-on) authentication management center. Specifically, when a user logs in for the first time, they authenticate their identity through the SSO authentication management center and obtain system access rights. The system assigns different permission levels based on the user's identity category (such as student, teacher, etc.) to determine the scope of resources they can access. In addition, the SSO function supports users to seamlessly switch between multiple resources and software modules without repeated authentication, which improves the user's operational convenience.

[0120] Token Management Module

[0121] The Token Management module is responsible for the management of Token allocation, concurrency control, and on-demand consumption for user resource access requests. When a user requests access to a specific course or software, the system allocates a corresponding number of Tokens from the Token pool and manages them according to the Token usage pattern. In the concurrency control mode, the system sets concurrency limits for high-concurrency resources to ensure that the total Token consumption does not exceed the system's carrying capacity; in the on-demand consumption mode, the system dynamically consumes Tokens based on the actual duration or demand of the user's access to the resource. After the Token consumption is completed, the system recycles the unused Tokens to the Token pool for subsequent user requests.

[0122] License Management Module

[0123] The license management module manages the ISV software license in detail through the license fragmentation technology, dividing each license into multiple license fragments for resource sharing and flexible allocation. The license management module allocates the corresponding license fragments according to user requests and recycles the fragments after the resource is used up to improve the utilization rate of license resources. The license authorization of ISV software is managed by the ISV authorization module, and the system interacts with the ISV to implement authorization inspection and usage tracking.

[0124] Unified billing module

[0125] The unified billing module is used to record and calculate the token consumption and license usage of users during resource usage. The system sets corresponding billing standards for each token and license fragment. The token fee calculation is based on the unit price of each token, and the license fee is based on the number of times each license fragment is used. The billing module generates a fee report that includes the user's total token usage, license fragment consumption, and total fees to support cost control and resource usage analysis for educational institutions.

[0126] Resource management allocation module

[0127] The resource management and allocation module centrally manages various courses and software resources through the resource pool, and allocates resources based on the user's permission level, the current available status of resources, and the system's concurrent requirements. The system sets a unique resource identifier and concurrency limit for each resource. When a user accesses a resource, the system determines the available status of the resource in real time and allows resource access under the premise of meeting the concurrency limit. The resource management and allocation module also supports resource scheduling, automatically calling backup resources when the number of visits increases suddenly to balance the system load.

[0128] The system achieves seamless integration with ISV software through ISV user authentication and license authorization interfaces. When users access specific software resources provided by ISV, the system will confirm the user's identity through the ISV user authentication interface and obtain the use license through the ISV-License authorization interface. The software billing and resource usage information on the ISV side will be synchronized to the unified billing module so that the system can accurately record the user's resource consumption and ensure the legitimacy of license authorization and the transparency of resource usage.

[0129] This embodiment provides a process example, as follows:

[0130] When a student user wants to use CAD software for course practice, the system first verifies his identity through the SSO authentication management center. After the verification is passed, the system calls the Token Management Module to allocate the number of tokens required for the user to access the CAD software. If the number of tokens in the Token Pool meets the request requirements, the system approves the user's access request and allocates a token. After the token is allocated, the system will also allocate the license fragment of the CAD software to the user from the License Management Module.

[0131] After the user finishes using the software, the Token and License Management module will automatically recycle the unused Tokens and allocated License fragments and update the available status of the resource pool. Finally, the unified billing module will generate a cost report based on the user's Token consumption and the number of times the License fragments are used for review by the educational institution.

[0132] The system effectively improves resource utilization through centralized token and license management, and realizes efficient sharing and authorization control of various educational resources and ISV software. The system's billing module and resource allocation module realize precise control of resource usage costs, reduce the operating costs of educational institutions, and provide detailed resource usage analysis reports for decision support.

[0133] Embodiment 2:

[0134] This embodiment provides a management system for access control and billing based on Token. The system combines the stand-alone version of ISV software, single sign-on (SSO), EDU SDK, unified billing, and license sharding management to achieve efficient management of educational resources and fine control of ISV software authorization. The specific implementation process is as follows: Figure 5 As shown, the system includes modules such as user end, EDUWEB, EDU SaaS service, ISV end application, EDU SDK, License manager and EDU cloud. The following are the detailed implementation steps.

[0135] The system implementation process of this embodiment includes the following steps:

[0136] 1. User authentication and authorization

[0137] When users access the platform through EDU WEB, they first authenticate their identity through the SSO authentication mechanism. The user enters the credential information on EDUWEB. After the EDU SaaS service receives the user credentials, it calls the EDU authentication interface to complete the user's identity authentication. If the user passes the authentication, the system grants access rights and allows the user to access platform resources. The SSO function automatically maintains the validity of the session after the user's first authentication, and the user does not need to log in again for subsequent resource access.

[0138] 2.Token allocation and resource access request

[0139] After the user is successfully authenticated, he or she can choose to access specific resources or software provided by ISV (such as CAD software) on the EDU WEB. After receiving the user's resource request, the system first allocates tokens to control resource access rights and record user consumption. The token allocation process is managed by the EDU SaaS service. The system deducts the corresponding number of tokens from the token pool and records the number of tokens required for the user's current task in the billing module. After the token allocation is completed, the user is allowed to access the corresponding resources.

[0140] 3. License authorization management

[0141] Since the software provided by ISV requires license authorization, the license management module in this embodiment allocates and controls the license through the fragmentation management technology. The system establishes a connection with the ISV software end through the EDU SDK. When the user requests to access the ISV software resources, the EDU SaaS service will call the license manager to allocate one or more license fragments to the user. Each license fragment represents a single use right of the ISV software. After the license allocation is completed, the system synchronizes the fragmentation information to the EDU SDK to ensure that the user uses the software within the authorized license.

[0142] 4. Resource usage and consumption records

[0143] After obtaining authorization for the Token and License fragments, the user starts using the ISV software through the EDU SDK. EDUSDK maintains communication with the License Manager, monitors the user's License usage in real time, and ensures that the user's resource access behavior is within the authorized scope. The system continuously records the user's Token and License consumption during resource usage, and updates the consumption information in the billing module in real time.

[0144] 5. Unified billing

[0145] After the resource usage is completed, the system calculates the fee based on the number of tokens and license fragments actually consumed by the user during the entire access process. The unified billing module applies the unit price of each token and the usage rate of each license fragment to the user's consumption data to calculate the user's total fee. The unified billing module generates a fee report, including detailed consumption data of tokens and licenses, for management personnel to view and download.

[0146] 6. License Revocation and Token Release

[0147] After the user completes resource access, the system immediately reclaims the license fragment occupied by the user and releases the token. The license manager updates the reclaimed license fragment to the license pool for subsequent user access requests. The token management module returns the unused token to the token pool and updates the available number of tokens in the token pool to ensure the recycling of system resources.

[0148] This embodiment builds a flexible and sophisticated resource management and billing system through the collaborative work of ISV software stand-alone version, SSO authentication, EDU SDK, license sharding and unified billing modules. The system can maximize resource utilization and reduce the cost of educational institutions while ensuring the security of resource use and the integrity of authorization. License sharding management ensures the flexible allocation of license resources, the token control mechanism avoids excessive consumption of resources, and the unified billing module provides detailed data support for cost control. The overall process design enables users to seamlessly access multiple resources and the system to comprehensively manage resource usage.

[0149] Although embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions and variations may be made to the embodiments without departing from the principles and spirit of the present invention, and that the scope of the present invention is defined by the appended claims and their equivalents.

Claims

1. A management system for access control and billing based on Token, characterized in that: include: User management module, used for user identity authentication and authority control; Token management module, used to allocate, control and recycle tokens to users; The license management module is used to manage software licenses in segments, allocate license segments according to user access requests, and recycle license segments after resource use ends; Unified billing module, used to record the user's token and license consumption, and generate corresponding expense reports based on the user's actual resource usage; The resource management and allocation module is used to centrally manage various courses and software resources and allocate resources.

2. According to claim 1, a management system for access control and billing based on Token, characterized in that: The Token management module dynamically determines the required number of Tokens based on the resource type selected by the user when allocating Tokens. The allocated number of Tokens is deducted from the total Token pool of the system and is recycled to the Token pool when the user finishes using the resources.

3. A Token-based access control and billing management system according to claim 2, characterized in that: The Token management module supports a concurrency control mode, which manages the allocation of Tokens based on the concurrent access restrictions of resources. By setting the maximum concurrency number of each resource, when the current concurrent access number of a resource is less than or equal to its preset maximum concurrency number, new users are allowed to occupy Tokens to access the resource. Otherwise, the allocation of Tokens is refused and user access is blocked.

4. A Token-based access control and billing management system according to claim 2, characterized in that: The Token management module supports an on-demand consumption mode, which dynamically allocates and charges Tokens based on the user's actual usage needs for courses or software resources. When a user requests access to resources, the system calculates the expected Token consumption and deducts the corresponding number of Tokens from the Token pool. When the user completes the use of resources or reaches the preset maximum usage time, settlement is made based on the actual number of Tokens consumed.

5. A Token-based access control and billing management system according to claim 1, characterized in that: The license management module allocates the software usage license in detail through the license fragmentation technology, and divides each software license into multiple license fragments, each license fragment corresponding to the usage right of a user.

6. A Token-based access control and billing management system according to claim 5, characterized in that: When a user requests to access a software resource, the license management module allocates one or more license fragments according to the number of currently available license fragments to meet the user's usage requirements, and releases the license fragments and recycles them into the license pool after the user completes the use of the software resource.

7. A Token-based access control and billing management system according to claim 1, characterized in that: The unified billing module generates corresponding expense reports based on the user's token consumption and license fragment usage, and supports hierarchical billing based on token usage and license usage frequency.

8. A Token-based access control and billing management system according to claim 7, characterized in that: The Token billing of the unified billing module calculates the user's fee based on the unit price of each Token, and the License billing calculates the fee based on the single-use price of the License fragment.

9. A management system for access control and billing based on Token according to claim 1, characterized in that: The resource management allocation module is configured with a resource pool for storing and managing various courses and software resources; the system allocates resources according to the user's permissions and the availability of the current resource pool, and ensures the reasonable allocation of resources under high concurrency conditions.

10. A method for managing access control and billing based on Token, based on the system according to any one of claims 1 to 9, characterized in that: The following steps are involved: Authenticate users and allow them to access specified resources based on their permission levels; When a user requests to access a course or software resource, tokens are dynamically allocated based on the type and demand of the resource, and the corresponding number of tokens are deducted from the system's token pool; According to the concurrency of resource usage or on-demand consumption, real-time monitoring and control of token allocation can be carried out to ensure the rationality of resource access; Allocate the corresponding license fragment to the user to allow the user to use the software resources, and recycle the license fragment to the license pool after the user finishes using the resources; Record the consumption of tokens and license fragments when users access resources, calculate fees based on actual usage, and generate fee reports; After the user completes the use of resources, the unconsumed tokens are recycled to the token pool and the number of available tokens in the token pool is updated.

Images