Data access control method and device, equipment and storage medium

Abstract

The invention discloses a data access control method and device, equipment and a storage medium, and relates to the field of data security, and the method comprises the steps: sending a preset execution logic to an execution end, and then obtaining a post-packaging execution logic and post-packaging parameter information returned from the execution end; converting the packaged execution logic into a target expression, and determining target function data based on the generated target expression and the obtained packaged parameter information by using a preset engine tool; determining a target time range corresponding to the target function data, caching the target function data to a preset ordered queue according to the target time range, and obtaining a target time range execution result based on the preset ordered queue, the target function data and the target time range; and performing a preset result encapsulation operation on the target time range execution result to obtain a target encapsulation result, and sending the target encapsulation result to an execution end to complete data access control. According to the invention, the security of the data can be improved, and the security and integrity of the data are ensured.

Description

Technical Field

[0001] The present invention relates to the field of data security, and particularly to a data access control method, apparatus, device, and storage medium. Background Art

[0002] With the rapid development of information technology, data security has become an important issue that enterprises and individuals are concerned about. In various information systems, the access, processing, and storage of data require strict time control to ensure data security and compliance. Traditional data security measures often rely on static access control and security policies, making it difficult to adapt to changing business requirements and security threats. Therefore, a more flexible and intelligent time range judgment method is needed to enhance the data security protection ability.

[0003] In summary, how to improve data security and the overall protection ability of the system, and ensure the security and integrity of data in different time periods is an urgent problem to be solved at present. Summary of the Invention

[0004] In view of this, the purpose of the present invention is to provide a data access control method, apparatus, device, and storage medium, which can improve data security and the overall protection ability of the system, and ensure the security and integrity of data in different time periods. The specific solutions are as follows:

[0005] In a first aspect, the present application provides a data access control method, which is applied to a control end pre-installed with a preset software development kit. The control end executes the data access control method through the preset software development kit; wherein, the method includes:

[0006] Send a preset execution logic to an execution end, and then obtain the encapsulated execution logic and encapsulated parameter information returned from the execution end;

[0007] Convert the encapsulated execution logic into a target expression, and use a preset engine tool to determine target function data based on the generated target expression and the obtained encapsulated parameter information;

[0008] Determine the target time range corresponding to the target function data, cache the target function data into a preset ordered queue according to the target time range, and obtain a target time range execution result based on the preset ordered queue, the target function data, and the target time range;

[0009] Perform a preset result encapsulation operation on the target time range execution result to obtain a target encapsulation result, and send the target encapsulation result to the execution end to complete data access control.

[0010] Optionally, sending the preset execution logic to the execution end and then obtaining the encapsulated execution logic and encapsulated parameter information returned from the execution end includes:

[0011] Sending the preset execution logic to the execution end so that the execution end determines the target execution logic according to the preset execution logic, obtains the corresponding parameter information in the target execution logic, and performs a preset encapsulation operation on the target execution logic and the parameter information to obtain the encapsulated execution logic and the encapsulated parameter information.

[0012] Optionally, the target time range includes any one or several of a preset time period, a preset sliding window, a preset arbitrary time point, and a preset unit time.

[0013] Optionally, obtaining the execution result of the target time range based on the preset ordered queue, the target function data, and the target time range includes:

[0014] Parsing the target time range based on the preset engine tool to generate an executable time rule including time constraint conditions;

[0015] Judging whether the target function data in the preset ordered queue satisfies the time constraint conditions in the executable time rule;

[0016] If the time constraint conditions in the executable time rule are satisfied, obtaining the execution result of the target time range corresponding to the target function data.

[0017] Optionally, caching the target function data to the preset ordered queue according to the target time range includes:

[0018] Caching the target function data to the preset ordered queue and recording the target time range corresponding to the target function data;

[0019] Generating a target index between the target function data and the target time range;

[0020] Determining the preset expiration time in the target time range corresponding to the target function data;

[0021] Performing a preset memory control operation on the target function data in the preset ordered queue based on the target index and the preset expiration time to obtain a preset ordered queue after memory control, so as to cache the target function data to the preset ordered queue after memory control;

[0022] Wherein, the preset memory control operation includes any one or several of a preset trigger deletion operation, a preset timed deletion operation, and a preset selective deletion operation.

[0023] Optionally, performing a preset memory control operation on the target function data in the preset ordered queue based on the target index and the preset overdue time to obtain a preset ordered queue after memory control includes:

[0024] If new target function data is obtained in the preset ordered queue, perform the preset trigger deletion operation on the target function data that meets the preset old data condition to obtain a preset ordered queue after memory control;

[0025] If the current cache time corresponding to the target function data in the preset ordered queue is greater than the preset cache time in the target time range, perform the preset timed deletion operation on the target function data in the preset ordered queue to obtain a preset ordered queue after memory control;

[0026] If the total memory of the target function data in the preset ordered queue is greater than the preset memory threshold, perform a preset selection deletion operation on the target function data that meets the preset old data condition in the preset ordered queue to obtain a preset ordered queue after memory control.

[0027] Optionally, caching the target function data into the preset ordered queue according to the target time range includes:

[0028] Adding timestamp metadata to the target function data based on the obtained timing constraint mechanism, and removing the data that meets the invalid data condition in the target function data, so as to cache the target function data into the preset ordered queue;

[0029] Changing the corresponding symbols in the target expression of the target function data to function determination, and managing the preset ordered queue by using a preset thread local variable, so as to cache the target function data into the preset ordered queue;

[0030] Increasing the storage duration of the target function data cached into the preset ordered queue in the target time range based on a preset duration increasing rule to obtain a target storage duration, so as to cache the target function data into the preset ordered queue according to the target storage duration.

[0031] In a second aspect, the present application provides a data access control device, which is applied to a control end pre-installed with a preset software development kit, and the control end executes a data access control method through the preset software development kit; wherein, the device includes:

[0032] An information acquisition module, configured to send a preset execution logic to an execution end, and then acquire the encapsulated execution logic and encapsulated parameter information returned from the execution end;

[0033] A data determination module, configured to convert the encapsulated execution logic into a target expression, and determine target function data based on the generated target expression and the obtained encapsulated parameter information by using a preset engine tool;

[0034] A result acquisition module, configured to determine a target time range corresponding to the target function data, cache the target function data into a preset ordered queue according to the target time range, and obtain an execution result of the target time range based on the preset ordered queue, the target function data, and the target time range;

[0035] A result return module, configured to perform a preset result encapsulation operation on the execution result of the target time range to obtain a target encapsulation result, and send the target encapsulation result to the execution end to complete data access control.

[0036] In a third aspect, the present application provides an electronic device, including:

[0037] A memory, configured to store a computer program;

[0038] A processor, configured to execute the computer program to implement the data access control method as described above.

[0039] In a fourth aspect, the present application provides a computer-readable storage medium, configured to store a computer program; wherein, when the computer program is executed by a processor, the data access control method as described above is implemented.

[0040] In summary, in this application, the preset execution logic is first sent to the execution end, and then the encapsulated execution logic and encapsulated parameter information returned from the execution end are obtained; the encapsulated execution logic is converted into a target expression, and the preset engine tool is used to determine the target function data based on the generated target expression and the obtained encapsulated parameter information; the target time range corresponding to the target function data is determined, the target function data is cached into a preset ordered queue according to the target time range, and the execution result of the target time range is obtained based on the preset ordered queue, the target function data, and the target time range; the execution result of the target time range is subjected to a preset result encapsulation operation to obtain a target encapsulation result, and the target encapsulation result is sent to the execution end to complete data access control. As can be seen from the above, in this application, the preset execution logic is first sent to the execution end and the encapsulated execution logic and encapsulated parameter information returned from the execution end are obtained, then the encapsulated execution logic is converted into a target expression, and the preset engine tool is used to determine the target function data according to the generated target expression and the obtained encapsulated parameter information, then the target time range corresponding to the target function data is determined, the target function data is cached into a preset ordered queue according to the target time range, the execution result of the target time range is obtained based on the preset ordered queue, the target function data, and the target time range, then the execution result of the target time range is subjected to a preset result encapsulation operation to obtain a target encapsulation result, and finally the target encapsulation result is sent to the execution end to complete data access control. In this way, this application realizes precise control and dynamic adjustment of the time range, and can perform time-sensitive access control, data encryption and decryption, logging within the time range, data backup and recovery, security policy execution, and security event response. In this way, the security of data and the overall protection ability of the system can be significantly improved, and the security and integrity of data in different time periods can be ensured. Description of the Drawings

[0041] In order to more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the following will briefly introduce the drawings required for use in the description of the embodiments or the prior art. Obviously, the drawings in the following description are only the embodiments of the present invention. For those of ordinary skill in the art, other drawings can be obtained according to the provided drawings without creative efforts.

[0042] Figure 1 Flowchart of a data access control method disclosed in this application;

[0043] Figure 2 Sequence diagram of a specific data access control method disclosed in this application;

[0044] Figure 3 Structural schematic diagram of a data access control device disclosed in this application;

[0045] Figure 4 This is a structural diagram of an electronic device disclosed in the present application. Detailed implementation manners

[0046] Next, the technical solutions in the embodiments of the present invention will be clearly and completely described in conjunction with the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only a part of the embodiments of the present invention, rather than all the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present invention.

[0047] Currently, with the rapid development of information technology, data security has become an important issue that enterprises and individuals are concerned about. In various information systems, the access, processing, and storage of data require strict time control to ensure data security and compliance. Traditional data security measures often rely on static access control and security policies, and it is difficult to adapt to changing business requirements and security threats. Therefore, a more flexible and intelligent time range judgment method is needed to enhance the data security protection ability. To solve the above technical problems, the present application discloses a data access control method, device, equipment, and storage medium, which can improve data security and the overall protection ability of the system, and ensure the security and integrity of data in different time periods.

[0048] See Figure 1 As shown, an embodiment of the present invention discloses a data access control method, which is applied to a control end pre-installed with a preset software development kit. The control end executes the data access control method through the preset software development kit; wherein, the method includes:

[0049] Step S11: Send a preset execution logic to an execution end, and then obtain the encapsulated execution logic and encapsulated parameter information returned from the execution end.

[0050] In this embodiment, the preset execution logic provided by the control end pre-installed with SDK (Software Development Kit) is determined, and then the preset execution logic is sent to the execution end, so that the execution end determines the target execution logic according to the preset execution logic, obtains the corresponding parameter information in the target execution logic, and performs the preset encapsulation operation on the target execution logic and parameter information to obtain the encapsulated execution logic and encapsulated parameter information. Specifically, the obtained preset execution logic is sent to the execution end, and after receiving the preset execution logic, the user of the execution end determines the required execution logic from the preset execution logic, and passes the parameter data into the required execution logic, and then encapsulates the required execution logic and parameter data to obtain the encapsulated execution logic and encapsulated parameter information. Finally, the encapsulated execution logic and encapsulated parameter information are sent from the execution end to the functional interface of the SDK.

[0051] Step S12: convert the post-encapsulation execution logic into a target expression, and use a preset engine tool to determine the target function data based on the generated target expression and the acquired post-encapsulation parameter information.

[0052] In this embodiment, after the SDK function interface receives the post-encapsulation execution logic and post-encapsulation parameter information, the post-encapsulation execution logic and post-encapsulation parameter information are parsed and compiled using the expression factory, and the post-encapsulation execution logic can be converted into a target expression in the form of an executable expression. Then, the generated target expression and post-encapsulation parameter information are cross-processed and calculated using the preset engine tool to obtain the specific functional results of each execution logic, and the overall execution results, i.e., the target functional data, are generated.

[0053] Step S13, determine the target time range corresponding to the target function data, cache the target function data to a preset ordered queue according to the target time range, and obtain the target time range execution result based on the preset ordered queue, the target function data and the target time range.

[0054] In this embodiment, the time capability is extended through the extended functions of Aviator. Different time ranges are determined based on different functional data. In this embodiment, a target time range corresponding to the target functional data is determined, where the target time range includes any one or several of a preset time period, a preset sliding window, a preset arbitrary time point, and a preset unit time. Subsequently, the preset engine tool is used to parse the target time range to generate an executable time rule including time constraint conditions; it is determined whether the target functional data in the preset ordered queue satisfies the time constraint conditions in the executable time rule; if the time constraint conditions in the executable time rule are satisfied, the execution result of the target time range corresponding to the target functional data is obtained. Specifically, a preset engine tool is used to parse the target time range. For example, a common format such as "start time - end time" is converted into a time type in a specific programming language. Then, the target functional data in the preset ordered queue is checked. It is checked whether the time recorded in the target functional data is between the start time and the end time specified by the executable time rule in the target time range. If the target functional data satisfies the time constraint conditions in the executable time rule, the execution result of the target time range corresponding to the target functional data can be obtained.

[0055] Furthermore, the target functional data is cached in a preset ordered queue, and the target time range corresponding to the target functional data is recorded; a target index between the target functional data and the target time range is generated; a preset expiration time in the target time range corresponding to the target functional data is determined; based on the target index and the preset expiration time, a preset memory control operation is performed on the target functional data in the preset ordered queue to obtain a preset ordered queue after memory control, so as to cache the target functional data in the preset ordered queue after memory control; where the preset memory control operation includes any one or several of a preset trigger deletion operation, a preset timed deletion operation, and a preset selective deletion operation. Specifically, first, a basic ordered queue is determined, the target functional data is stored in the preset ordered queue, and it is ensured that the data in the preset ordered queue is time-series data. The same-index data is stored separately in the index (time-series data) of each queue. Then, access to the target functional data in the preset ordered queue is restricted according to the target time range corresponding to each data. For example, if the target functional data is to control access to website A and the target time range is half an hour, then half an hour after the target functional data is stored in the preset ordered queue, the target functional data is deleted from the preset ordered queue, that is, the access permission to website A is closed after half an hour.

[0056] In this embodiment, if new target function data is obtained from the preset ordered queue, the preset trigger deletion operation is performed on the target function data that meets the preset old data condition to obtain the preset ordered queue after memory control; if the current cache time of the target function data in the preset ordered queue is greater than the preset cache time in the target time range, the preset timed deletion operation is performed on the target function data in the preset ordered queue to obtain the preset ordered queue after memory control; if the total memory of the target function data in the preset ordered queue is greater than the preset memory threshold, the preset selective deletion operation is performed on the target function data in the preset ordered queue that meets the preset old data condition to obtain the preset ordered queue after memory control. Specifically, data management can be achieved through three methods: the preset trigger deletion operation, the preset timed deletion operation, and the preset selective deletion operation. When the preset trigger deletion operation is triggered, when new target function data that conforms to the time rule enters, the SDK will trigger this mechanism and determine whether it is necessary to delete the target function data that meets the preset old data condition according to the target time rule. When the preset timed deletion operation is triggered, the cache time of each piece of target function data will be recorded, and it will be determined whether the data has expired based on its cache time. If the target function data has expired, the corresponding target function data will be automatically deleted. In the case where both the trigger deletion and the timed deletion have been executed, if the memory occupancy is still high, the preset selective deletion operation will be triggered to delete the earlier target function data in the preset ordered queue.

[0057] In this embodiment, based on the obtained timing constraint mechanism, timestamp metadata is added to the target function data, and the data that meets the invalid data conditions in the target function data is excluded, so as to cache the target function data into a preset ordered queue; the corresponding symbols in the target expression in the target function data are changed to function determination, and the preset ordered queue is managed by using a preset thread local variable, so as to cache the target function data into the preset ordered queue; based on the preset duration increase rule, the storage duration of the target function data cached in the target time range into the preset ordered queue is increased to obtain a target storage duration, so as to cache the target function data into the preset ordered queue according to the target storage duration. Specifically, data validation optimization can be performed on the target function data, that is, by reconstructing the data serialization process, introducing a timing constraint mechanism, and excluding the invalid data generated by the engine serialization during the dynamic verification stage, to ensure the time range validity of the output result. At the same time, cache fault tolerance optimization can also be performed on the target function data, that is, by using continuous memory to optimize the storage method, thereby improving the addressing speed. When the expression engine caches the unified expression, the basic symbol judgment is changed to function determination to reduce the parsing cost brought by the symbol. For the temporary cache when data is passed in, local variables are used for caching to ensure that there is only one copy of the data and it is recycled after use, providing reliable execution assistance for multi-threading. Time fault tolerance optimization can also be performed on the target function data, that is, to solve the problem of invalid time judgment caused by the transmission delay of data in the actual environment, by lengthening the data stored in the time queue, thereby ensuring the validity of the time range judgment.

[0058] Step S14, perform a preset result encapsulation operation on the execution result of the target time range to obtain a target encapsulation result, and send the target encapsulation result to the execution end to complete data access control.

[0059] In this embodiment, when the execution result corresponding to the target function data is successfully obtained according to the time constraint condition, an encapsulation operation will be performed on the execution result according to the preset rule to generate a target encapsulation result. Subsequently, the target encapsulation result is sent to the execution end. Through such a series of operations, effective control of data access is achieved, ensuring that data flow complies with established specifications and security requirements.

[0060] As can be seen from the above, in the embodiment of the present application, the preset execution logic is first sent to the execution end, and the encapsulated execution logic and the encapsulated parameter information returned from the execution end are obtained. Then, the encapsulated execution logic is converted into a target expression, and the preset engine tool is used to determine the target function data based on the generated target expression and the obtained encapsulated parameter information. Next, the target time range corresponding to the target function data is determined, and the target function data is cached into a preset ordered queue according to the target time range. The execution result of the target time range is obtained based on the preset ordered queue, the target function data, and the target time range. Then, the execution result of the target time range is subjected to a preset result encapsulation operation to obtain a target encapsulation result. Finally, the target encapsulation result is sent to the execution end to complete the data access control. In this way, the present application realizes the precise control and dynamic adjustment of the time range, and can perform time-sensitive access control, data encryption and decryption, logging within the time range, data backup and recovery, security policy execution, and security event response. In this way, the security of the data and the overall protection ability of the system can be significantly improved, and the security and integrity of the data in different time periods can be ensured.

[0061] Based on the previous embodiment, it can be known that the present application discloses a data access control method, which can improve the security of the data and the overall protection ability of the system, and ensure the security and integrity of the data in different time periods. Next, the data access control method as Figure 2 shown will be described in detail.

[0062] The present application first determines the preset execution logic provided by the control end with the SDK pre-installed. Then, the obtained preset execution logic is sent to the execution end. After receiving the preset execution logic, the user at the execution end determines the required execution logic from the preset execution logic, and passes in the parameter data in the required execution logic. Then, the required execution logic and the parameter data are encapsulated to obtain the encapsulated execution logic and the encapsulated parameter information. Finally, the encapsulated execution logic and the encapsulated parameter information are sent from the execution end to the function interface of the SDK.

[0063] Next, after the function interface of the SDK receives the encapsulated execution logic and the encapsulated parameter information, the expression factory is used to convert the encapsulated execution logic and the encapsulated parameter information into a target expression in an executable expression form, and the preset engine tool is used to perform cross-processing and calculation on the generated target expression and the encapsulated parameter information to obtain the target function data.

[0064] Then, determine the corresponding target time range for the target function data, where the target time range includes a preset time period, a preset sliding window, a preset arbitrary time point, a preset unit time, etc. Store the target function data in a preset ordered queue, and parse the target time range with the aid of a preset engine tool. Use the obtained parsing result to impose access restrictions on the target function data in the preset ordered queue.

[0065] Finally, obtain the execution result of the target time range for the target function data, and encapsulate the execution result of the target time range to obtain a target encapsulation result. Subsequently, send the target encapsulation result to the execution end.

[0066] In this way, access control over the target function data is achieved through the target time range, ensuring the security of sensitive data within a specific time period.

[0067] See Figure 3 As shown, an embodiment of the present invention discloses a data access control device, which is applied to a control end pre-installed with a preset software development kit. The control end executes a data access control method through the preset software development kit. Among them, the device includes:

[0068] An information acquisition module 11, configured to send a preset execution logic to the execution end, and then obtain the encapsulated execution logic and encapsulated parameter information returned from the execution end;

[0069] A data determination module 12, configured to convert the encapsulated execution logic into a target expression, and use a preset engine tool to determine target function data based on the generated target expression and the obtained encapsulated parameter information;

[0070] A result acquisition module 13, configured to determine the target time range corresponding to the target function data, cache the target function data in a preset ordered queue according to the target time range, and obtain an execution result of the target time range based on the preset ordered queue, the target function data, and the target time range;

[0071] A result return module 14, configured to perform a preset result encapsulation operation on the execution result of the target time range to obtain a target encapsulation result, and send the target encapsulation result to the execution end to complete data access control.

[0072] As can be seen from the above, in this application, the preset execution logic is first sent to the execution end, and the encapsulated execution logic and encapsulated parameter information returned from the execution end are obtained. Then, the encapsulated execution logic is converted into a target expression. With the aid of a preset engine tool, the target function data is determined based on the generated target expression and the obtained encapsulated parameter information. Next, the target time range corresponding to the target function data is determined, and the target function data is cached in a preset ordered queue according to the target time range. Based on the preset ordered queue, the target function data, and the target time range, the execution result of the target time range is obtained. Then, a preset result encapsulation operation is performed on the execution result of the target time range to obtain a target encapsulation result. Finally, the target encapsulation result is sent to the execution end to complete the data access control. In this way, this application realizes the precise control and dynamic adjustment of the time range, and can perform time-sensitive access control, data encryption and decryption, logging within the time range, data backup and recovery, security policy execution, and security event response. In this way, the security of the data and the overall protection ability of the system can be significantly improved, ensuring the security and integrity of the data at different time periods.

[0073] In some specific embodiments, the information acquisition module 11 may specifically include:

[0074] An encapsulated execution logic and encapsulated parameter information acquisition unit, configured to send the preset execution logic to the execution end, so that the execution end determines the target execution logic according to the preset execution logic, and acquires the corresponding parameter information in the target execution logic, and performs a preset encapsulation operation on the target execution logic and the parameter information to obtain the encapsulated execution logic and the encapsulated parameter information.

[0075] In some specific embodiments, the target time range includes any one or more of a preset time period, a preset sliding window, a preset arbitrary time point, and a preset unit time.

[0076] In some specific embodiments, the result acquisition module 13 may specifically include:

[0077] A rule generation unit, configured to parse the target time range based on the preset engine tool to generate an executable time rule including time constraint conditions;

[0078] A condition judgment unit, configured to judge whether the target function data in the preset ordered queue satisfies the time constraint conditions in the executable time rule;

[0079] A result acquisition unit, configured to, if the time constraint conditions in the executable time rule are satisfied, acquire the execution result of the target time range corresponding to the target function data.

[0080] In some specific embodiments, the result acquisition module 13 may specifically include:

[0081] A target time range recording unit, configured to cache the target function data into a preset ordered queue and record the target time range corresponding to the target function data;

[0082] A target index generation unit, configured to generate a target index between the target function data and the target time range;

[0083] A preset expiration time determination unit, configured to determine a preset expiration time in the target time range corresponding to the target function data;

[0084] A post-memory-control preset ordered queue acquisition unit, configured to perform a preset memory control operation on the target function data in the preset ordered queue based on the target index and the preset expiration time to obtain a post-memory-control preset ordered queue, so as to cache the target function data into the post-memory-control preset ordered queue; wherein, the preset memory control operation includes any one or several of a preset trigger deletion operation, a preset timed deletion operation, and a preset selective deletion operation.

[0085] In some specific embodiments, the result acquisition module 13 may specifically include:

[0086] A first operation execution unit, configured to, if new target function data is obtained in the preset ordered queue, perform the preset trigger deletion operation on the target function data that meets the preset old data condition to obtain a post-memory-control preset ordered queue;

[0087] A second operation execution unit, configured to, if the current cache time of the target function data in the preset ordered queue is greater than the preset cache time in the target time range, perform the preset timed deletion operation on the target function data in the preset ordered queue to obtain a post-memory-control preset ordered queue;

[0088] A third operation execution unit, configured to, if the total memory of the target function data in the preset ordered queue is greater than a preset memory threshold, perform a preset selective deletion operation on the target function data that meets the preset old data condition in the preset ordered queue to obtain a post-memory-control preset ordered queue.

[0089] In some specific embodiments, the result acquisition module 13 may specifically include:

[0090] A first data cache unit, configured to add timestamp metadata to the target function data based on the acquired timing constraint mechanism, and remove data satisfying an invalid data condition from the target function data, so as to cache the target function data into a preset ordered queue;

[0091] A second data cache unit is used to change the corresponding symbol in the target expression in the target function data into a function determination, and manage the preset ordered queue by using a preset thread local variable, so as to cache the target function data into the preset ordered queue;

[0092] The third data cache unit is used to increase the storage duration of the target function data cached to the preset ordered queue in the target time range based on a preset duration increase rule to obtain a target storage duration, so as to cache the target function data to the preset ordered queue according to the target storage duration.

[0093] Furthermore, the present application also discloses an electronic device. Figure 4 This is a structural diagram of an electronic device 20 according to an exemplary embodiment. The content in the diagram cannot be regarded as any limitation on the scope of use of the present application.

[0094] Figure 4 A schematic diagram of the structure of an electronic device 20 provided in an embodiment of the present application. The electronic device 20 may specifically include: at least one processor 21, at least one memory 22, a power supply 23, a communication interface 24, an input / output interface 25, and a communication bus 26. The memory 22 is used to store a computer program, which is loaded and executed by the processor 21 to implement the relevant steps in the data access control method disclosed in any of the aforementioned embodiments. In addition, the electronic device 20 in this embodiment may specifically be an electronic computer.

[0095] In this embodiment, the power supply 23 is used to provide working voltage for each hardware device on the electronic device 20; the communication interface 24 can create a data transmission channel between the electronic device 20 and the external device, and the communication protocol it follows is any communication protocol that can be applied to the technical solution of the present application, and is not specifically limited here; the input and output interface 25 is used to obtain external input data or output data to the outside world, and its specific interface type can be selected according to specific application needs and is not specifically limited here.

[0096] In addition, the memory 22, as a carrier for storing resources, can be a read-only memory, a random access memory, a disk or an optical disk, etc. The resources stored thereon can include an operating system 221, a computer program 222, etc., and the storage method can be temporary storage or permanent storage.

[0097] Among them, the operating system 221 is used to manage and control each hardware device and computer program 222 on the electronic device 20, and it can be Windows Server, Netware, Unix, Linux, etc. In addition to the computer program that can be used to complete the data access control method executed by the electronic device 20 disclosed in any of the foregoing embodiments, the computer program 222 can further include computer programs that can be used to complete other specific tasks.

[0098] Furthermore, the present application also discloses a computer-readable storage medium for storing a computer program; wherein, when the computer program is executed by a processor, the data access control method disclosed above is implemented. For the specific steps of this method, reference can be made to the corresponding content disclosed in the foregoing embodiments, and details will not be repeated here.

[0099] In this specification, the various embodiments are described in a progressive manner. Each embodiment focuses on the differences from other embodiments. For the same or similar parts among the various embodiments, reference can be made to each other. For the devices disclosed in the embodiments, since they correspond to the methods disclosed in the embodiments, the description is relatively simple, and reference can be made to the method part for relevant details.

[0100] Those skilled in the art can further realize that the units and algorithm steps of the examples described in combination with the embodiments disclosed in this article can be implemented by electronic hardware, computer software, or a combination of the two. To clearly illustrate the interchangeability of hardware and software, the components and steps of the examples have been generally described according to their functions in the above description. Whether these functions are executed in a hardware or software manner depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementation should not be considered to exceed the scope of this application.

[0101] The steps of the methods or algorithms described in combination with the embodiments disclosed in this article can be directly implemented by hardware, software modules executed by a processor, or a combination of the two. The software modules can be placed in a random access memory (RAM), internal memory, read-only memory (ROM), electrically programmable ROM, electrically erasable programmable ROM, registers, hard disk, removable disk, CD-ROM, or any other form of storage medium well-known in the technical field.

[0102] Finally, it should also be noted that in this text, relational terms such as first and second are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any actual relationship or order between these entities or operations. Moreover, the term "comprising", "including" or any other variant thereof is intended to cover non-exclusive inclusion, so that a process, method, article or device comprising a series of elements not only includes those elements, but also includes other elements not expressly listed, or further includes elements inherent to such process, method, article or device. Without further limitation, an element defined by the statement "comprising an..." does not exclude the existence of additional identical elements in the process, method, article or device comprising said element.

[0103] The technical solutions provided in this application have been introduced in detail above. Specific examples are used in this text to elaborate on the principles and implementation manners of this application. The description of the above embodiments is only used to help understand the method and its core idea of this application; at the same time, for those of ordinary skill in the art, according to the idea of this application, there will be changes in the specific implementation manners and application scopes. In summary, the content of this specification should not be construed as a limitation to this application.

Claims

1. A data access control method, characterized in that: Applied to a control terminal pre-installed with a preset software development kit, the control terminal executes the data access control method through the preset software development kit; wherein the method comprises: Sending the preset execution logic to the execution end, and then obtaining the encapsulated execution logic and encapsulated parameter information returned from the execution end; Convert the post-encapsulation execution logic into a target expression, and use a preset engine tool to determine target function data based on the generated target expression and the acquired post-encapsulation parameter information; Determine a target time range corresponding to the target function data, cache the target function data into a preset ordered queue according to the target time range, and obtain a target time range execution result based on the preset ordered queue, the target function data and the target time range; The target time range execution result is subjected to a preset result encapsulation operation to obtain a target encapsulation result, and the target encapsulation result is sent to the execution end to complete data access control.

2. The data access control method according to claim 1, characterized in that: The sending of the preset execution logic to the execution end, and then obtaining the encapsulated execution logic and encapsulated parameter information returned from the execution end, includes: The preset execution logic is sent to the execution end so that the execution end determines the target execution logic according to the preset execution logic, obtains the corresponding parameter information in the target execution logic, and performs the preset encapsulation operation on the target execution logic and parameter information to obtain the encapsulated execution logic and encapsulated parameter information.

3. The data access control method according to claim 1, characterized in that: The target time range includes any one or more of a preset time period, a preset sliding window, a preset arbitrary time point, and a preset unit time.

4. The data access control method according to claim 1, characterized in that: The obtaining the target time range execution result based on the preset ordered queue, the target function data and the target time range includes: Parsing the target time range based on the preset engine tool to generate an executable time rule including a time constraint condition; Determining whether the target function data in the preset ordered queue meets the time constraint condition in the executable time rule; If the time constraint condition in the executable time rule is met, the target time range execution result corresponding to the target function data is obtained.

5. The data access control method according to claim 1, characterized in that: The step of caching the target function data into a preset ordered queue according to the target time range includes: Cache the target function data into a preset ordered queue, and record the target time range corresponding to the target function data; generating a target index between the target function data and the target time range; Determine a preset expiration time in a target time range corresponding to the target function data; Based on the target index and the preset expiration time, the preset memory control operation is performed on the target function data in the preset ordered queue to obtain the preset ordered queue after memory control, so as to cache the target function data in the preset ordered queue after memory control; The preset memory control operation includes any one or more of a preset trigger deletion operation, a preset timing deletion operation and a preset selection deletion operation.

6. The data access control method according to claim 5, characterized in that: The step of performing a preset memory control operation on the target function data in the preset ordered queue based on the target index and the preset expiration time to obtain a preset ordered queue after memory control includes: If new target function data is obtained in the preset ordered queue, the preset trigger deletion operation is performed on the target function data that meets the preset old data condition to obtain the preset ordered queue after memory control; If the current cache time corresponding to the target function data in the preset ordered queue is greater than the preset cache time in the target time range, the preset timed deletion operation is performed on the target function data in the preset ordered queue to obtain the preset ordered queue after memory control; If the total memory of the target function data in the preset ordered queue is greater than the preset memory threshold, a preset selection deletion operation is performed on the target function data in the preset ordered queue that meets the preset old data condition to obtain the preset ordered queue after memory control.

7. The data access control method according to any one of claims 1 to 6, characterized in that: The step of caching the target function data into a preset ordered queue according to the target time range includes: Adding timestamp metadata to the target function data based on the acquired timing constraint mechanism, and removing data that meets invalid data conditions from the target function data, so as to cache the target function data into a preset ordered queue; Changing corresponding symbols in the target expression in the target function data into function determinations, and managing the preset ordered queue using preset thread local variables, so as to cache the target function data into the preset ordered queue; Based on the preset duration increase rule, the storage duration of the target function data cached to the preset ordered queue in the target time range is increased to obtain the target storage duration, so that the target function data can be cached to the preset ordered queue according to the target storage duration.

8. A data access control device, characterized in that: Applied to a control terminal pre-installed with a preset software development kit, the control terminal executes a data access control method through the preset software development kit; wherein the device comprises: An information acquisition module, used to send the preset execution logic to the execution end, and then obtain the encapsulated execution logic and encapsulated parameter information returned from the execution end; A data determination module, used to convert the post-encapsulation execution logic into a target expression, and determine the target function data based on the generated target expression and the acquired post-encapsulation parameter information using a preset engine tool; A result acquisition module, used to determine a target time range corresponding to the target function data, cache the target function data into a preset ordered queue according to the target time range, and acquire a target time range execution result based on the preset ordered queue, the target function data and the target time range; The result returning module is used to perform a preset result encapsulation operation on the execution result of the target time range to obtain a target encapsulation result, and send the target encapsulation result to the execution end to complete data access control.

9. An electronic device, characterized in that: include: Memory, used to store computer programs; A processor, configured to execute the computer program to implement the data access control method according to any one of claims 1 to 7.

10. A computer-readable storage medium, characterized in that: Used to store a computer program; wherein, when the computer program is executed by a processor, the data access control method according to any one of claims 1 to 7 is implemented.

Images